He is assisted by skye hartog who will function as the mpanys deputy information co officer. South african organisations and citizens have until 7 november 2017 to provide comment. To give effect to the constitutional right to privacy by safeguarding personal information when processed by a. With the popi act explained this should help you in understand the process of implementing popi compliance within your company. The information regulator was setup in december 2016 and formally introduced in february 2017. There has been a buzz around the protection of personal information act 4 of 20 popi, which was promulgated in 20, but it has not been in full effect, the buzz may seem to be white noise. Constitution and the purpose and application of the protection of personal information act, no 4 of 20. In this installment, russell nel, cippus, cipt, compares south africa s protection of personal information act with the gdpr. May 2, 2017 companies are confused about whether they can lawfully store personal data outside south africa under the provisions of the protection of personal information popi act. Controlling information is the central component to creating a business, which popi processes and procedures can be effectively executed and its ethics upheld. Many organisations are wondering about popi act compliance, what it is and what they should be doing about it. In the context of south africa, the popi act is the applicable south african legislation and any company operating within south africa is mandated to comply with this law. Privacy policy in terms of the protection of personal.
Popi compliance officer social surveys africa certificate of appointment bev russell as head of social surveys africa confirm i will act as the popi compliance officer. Section 9 of popi states that personal information may only be processed if given. The purpose of the popi act is to ensure all south african institutions conduct themselves in a responsible manner when collecting, processing, storing and sharing another entitys personal. Are you looking for a popi act summary to help you on your journey to popi compliance. The protection of personal information popi act rw africa. Paia and popi act certification services south africa. This free course offers the same information that you can purchase at an average price of r3000 if you attend training at a physical venue like an hotel.
Protection of personal information act, 20 5 act no. The information contained in this document is current as at june 2017 introduction to the protection of personal information act popi act background south africa sa became a democracy in 1994. Your popi training guide and compliance manual is only your, introduction to popi. Whereas it is agreed that all parties agree that they will comply with popi regulations and process all the information. The protection of personal information act and south african. Sep 07, 2017 the protection of personal information act popi is due to come into effect in south africa in 2018. This development led to the new constitution and the bill of rights which expressly provides for the protection of the right to privacy of individuals. South africa, the popi act is the applicable south african legislation and any. The protection of personal information act, no 4 of 20 promotes the protection of personal information by public and private bodies.
Iactafrica popia popi act and paia update august 2017. The protection of personal information act 4 of 20 aims. May 02, 2017 what does popi really say about data sovereignty. Protection of personal information act popi it is critical for organisations that process personal information of employees, customers or other juristic persons companies, trusts and so on to implement organisationwide privacy initiatives in order to comply with the conditions of the act. Enforcement of the protection of personal information popi. We deliver this information online because it is infinitely cheaper for you to attend. In terms of section 10 of proatia, the south african human rights. There is no doubt that this act will have serious implications for a great number of businesses and how the data in their possession is handled and processed. Almost all organisations are faced with the challenge of achieving and maintaining compliance with the protection of personal information act no. Popi act compliance why should i comply with the act.
The act was signed into law in november of 20 according to the south african constitutional right to privacy as seen in section 14 of our constitution. Y the a to z of popi are covered comprehensively y a highly knowledgeable and prominent course facilitator y crossborder transfer of personal information is tackled y oneofakind programme the. Rendering service according to instructions given by clients. Welcome to the latest of our updates on whats happening in terms of developments with the popi act aka popia and paia. Protection of personal information act popi pwc south africa. After the commencement date, a compliance grace period of 1 year will exist, which may be extended to a maximum 3 years. The south african information regulator regulator has indicated that the effective date for full promulgation of popia will likely be early 2018, following which all organisations will have one year to become compliant. Media works recognises that its first priority under the popi act is to avoid. Pdf the effects of the popi act on small and medium. Protection of personal information a short guide for the employer on popi from a payroll hra perspective. If you are using etorque, our cloudbased payroll and hra database, you are already compliant from a software security and data storage perspective, with regard to the system.
Popi legislation is not unique to south africa but rather borrowed from other countries. Popi will become a reality, and while south africa s public and private. Popi commencement date or popi effective date starts the clock. In just 60 minutes you will learn what you need to do to comply with this legislation. How exposed are business owners really to long jail terms and large fines. Pdf icon 370672611act4of20protectionofpersonalinforcorrect. Y triedandtested in various south african organisations. Compliance to the protection of personal information act popia, also known as the popi act, will be mandatory for most organisations in south africa. Promotion of access to information manual volkswagen financial. While full commencement of the popi act has yet to take place, sections of the act have commenced which make the information regulator a fomalised body.
The popi act will be implemented on a more serious note from 2018, but for now, we would like to stipulate the importance of becoming popi compliant in the future. The protection of personal information popia act has been signed into law by the president on 19 november and published in the government gazette notice 37067 on 26 november 20. It is anticipated that popi regulations will be promulgated in 2018, commencing the application of the popi act. Once the act is made effective, companies will be given a years grace period to comply with the act, unless this grace period is extended as allowed by the act. As the information regulator develops the popi regulations further, so the dates and requirments will become clearer. Popi act compliance protection of personal information. Popi will become a reality, and while south africas public and private.
See the latest status from the information regulator. Ignorance of the law is no excuse not to adhere to popi legislation and a business will therefore not be able to bypass compliance solely on the basis that they were not aware of the act. Specifically to implement and maintain the provisions of the popi act including but not limited to the following. We became used to talking about popi, and the information regulator is now prefering to use the term popia, or popi act. This handy checklist provides a proven stepbystep fortyactionpoint approach to compliance. A lot has been made of the maximum penalties in popi. According to workpool 2017, the purpose of the popi act is to ensure.
Protection of personal information act 4 of 20 south african. Iactafrica popiapopi act and paia update august 2017. The protection of personal information popi act special features. We hope this update will be of value to you and the stakeholders in your protection of personal information and access to information management activities. The protection of personal information act is technical and complex. Many people want to know what the popi commencement date or popi effective date will be. Experienced data protection professionals, who participated in drafting the popi bill and have extensive legal, business and data processing experience, will explain how to translate legal obligations into operational practices. Regulations relating to the protection of personal information, 2017 the information regulator has under section 1122 of the protection of personal information. The protection of personal information popia act has been signed into law by the president on 19 november and published in the government gazette notice 37067 on 26. Protection of personal information popi isnt new in south africa. The effects of the popi act on small and medium enterprises in south africa conference paper pdf available august 2015 with 573 reads how we measure reads. The protection of personal information bill was around in 2009, which meant that the discussion had been going on for years before that.
Popi or popia, provides for the protection of personal. As a result, all organisations in south africa are faced with the need to comply with the popi act. It is a complex law that is difficult to summarise. Sep 11, 2017 south africas information regulator released draft protection of personal information act regulations on friday september 8 2017. Oct 05, 2016 in simple terms, the purpose of the popi act is to ensure that all south african institutions conduct themselves in a responsible manner when collecting, processing, storing and sharing another entitys personal information by holding them accountable should they abuse or compromise your personal information in any way. The popi act will impact all responsible parties that collect, store, process. One step closer to the implementation date of the popi act.
Guide of the south african human rights commission. Iact africa s approach to adopting the popi act and privacy best practices is outlined here. The protection of personal information act and south african schools the protection of personal information popi act was signed into law on 19 november 20. Popia will commence on an unknown date the president will proclaim in the future. Just when we thought the year of 2018 was over and done with, the information regulator published the final regulations to the protection of personal information act popi on 14 december 2018, following the first draft of the regulations which were published for public comment on 8 september 2017. Bmw south africa pty ltd paia manual november 2017 1 bmw south africa pty limited registration number. Pdf the protection of personal information popi act impact on.
Pdf south africa has received its own data protection legislation the. At this stage no notices hashave been published on the categories of records that are. Protection of personal information act 4 of 20 south. We are now awaiting a commencement date for the act. The protection of personal information popi act will fundamentally alter how data must be managed in south africa. Access to information and the protection of certain types of information in south africa are mainly regulated by the promotion of access to information act paia and the protection of personal information act popi the popi act is south africa s equivalent to the european union general data protection regulation eu gdpr. Popi act for small business popi act training for small.
1600 1646 820 537 980 1320 1618 217 867 585 439 202 484 1330 332 860 1097 1496 394 1227 1151 800 373 1535 992 42 189 256 1578 534 990 316 1516 530 632 906 1005 659 874 448