Key starting points for organisations building a practical privacy compliance programme under POPIA.
The Protection of Personal Information Act sets conditions for the lawful processing of personal information.
Organisations should start by understanding what personal information they process, why they process it, where it is stored and who has access to it.
From there, key actions include registering the Information Officer, reviewing privacy notices, putting operator agreements in place and preparing a breach response procedure.
This article is general information and not legal advice. [Placeholder — update in admin]