Media works recognises that its first priority under the popi act is to avoid. In terms of section 10 of proatia, the south african human rights. In the context of south africa, the popi act is the applicable south african legislation and any company operating within south africa is mandated to comply with this law. South africa s information regulator released draft protection of personal information act regulations on friday september 8 2017. Popia will commence on an unknown date the president will proclaim in the future. Pdf south africa has received its own data protection legislation the.
The protection of personal information popia act has been signed into law by the president on 19 november and published in the government gazette notice 37067 on 26 november 20. The protection of personal information act 4 of 20 aims. Promotion of access to information manual volkswagen financial. The purpose of this manual is to facilitate requests for access to information of. Experienced data protection professionals, who participated in drafting the popi bill and have extensive legal, business and data processing experience, will explain how to translate legal obligations into operational practices.
There is no doubt that this act will have serious implications for a great number of businesses and how the data in their possession is handled and processed. In this installment, russell nel, cippus, cipt, compares south africa s protection of personal information act with the gdpr. Just when we thought the year of 2018 was over and done with, the information regulator published the final regulations to the protection of personal information act popi on 14 december 2018, following the first draft of the regulations which were published for public comment on 8 september 2017. Rendering services according to instructions given by clients. As a result, all organisations in south africa are faced with the need to comply with the popi act. Protection of personal information popi isnt new in south africa. Popi commencement date or popi effective date starts the clock. If you are using etorque, our cloudbased payroll and hra database, you are already compliant from a software security and data storage perspective, with regard to the system. These regulations are called the regulations relating to the protection of personal information, 2017. The protection of personal information popi act special features. Sep 11, 2017 south africas information regulator released draft protection of personal information act regulations on friday september 8 2017. The protection of personal information act, no 4 of 20 promotes the protection of personal information by public and private bodies.
The south african information regulator regulator has indicated that the effective date for full promulgation of popia will likely be early 2018, following which all organisations will have one year to become compliant. The protection of personal information act and south african schools the protection of personal information popi act was signed into law on 19 november 20. Oct 05, 2016 in simple terms, the purpose of the popi act is to ensure that all south african institutions conduct themselves in a responsible manner when collecting, processing, storing and sharing another entitys personal information by holding them accountable should they abuse or compromise your personal information in any way. Popi act for small business popi act training for small. Iactafrica popiapopi act and paia update august 2017. Popi or popia, provides for the protection of personal. Rendering service according to instructions given by clients. The effects of the popi act on small and medium enterprises in south africa conference paper pdf available august 2015 with 573 reads how we measure reads.
South africa, the popi act is the applicable south african legislation and any. This free course offers the same information that you can purchase at an average price of r3000 if you attend training at a physical venue like an hotel. The protection of personal information popia act has been signed into law by the president on 19 november and published in the government gazette notice 37067 on 26. Protection of personal information act 4 of 20 south african. According to workpool 2017, the purpose of the popi act is to ensure. We are now awaiting a commencement date for the act. May 02, 2017 what does popi really say about data sovereignty. The protection of personal information act is technical and complex. The popi act will be implemented on a more serious note from 2018, but for now, we would like to stipulate the importance of becoming popi compliant in the future. Welcome to the latest of our updates on whats happening in terms of developments with the popi act aka popia and paia. Popi will become a reality, and while south africa s public and private. This handy checklist provides a proven stepbystep fortyactionpoint approach to compliance. Y triedandtested in various south african organisations.
Protection of personal information act popi it is critical for organisations that process personal information of employees, customers or other juristic persons companies, trusts and so on to implement organisationwide privacy initiatives in order to comply with the conditions of the act. While full commencement of the popi act has yet to take place, sections of the act have commenced which make the information regulator a fomalised body. It is a complex law that is difficult to summarise. As the information regulator develops the popi regulations further, so the dates and requirments will become clearer. In just 60 minutes you will learn what you need to do to comply with this legislation. Almost all organisations are faced with the challenge of achieving and maintaining compliance with the protection of personal information act no. Pdf the effects of the popi act on small and medium. Ignorance of the law is no excuse not to adhere to popi legislation and a business will therefore not be able to bypass compliance solely on the basis that they were not aware of the act. Popi compliance officer social surveys africa certificate of appointment bev russell as head of social surveys africa confirm i will act as the popi compliance officer. See the latest status from the information regulator. Popi will become a reality, and while south africas public and private. One step closer to the implementation date of the popi act.
Many people want to know what the popi commencement date or popi effective date will be. Protection of personal information a short guide for the employer on popi from a payroll hra perspective. Once the act is made effective, companies will be given a years grace period to comply with the act, unless this grace period is extended as allowed by the act. Enforcement of the protection of personal information popi. Specifically to implement and maintain the provisions of the popi act including but not limited to the following. May 2, 2017 companies are confused about whether they can lawfully store personal data outside south africa under the provisions of the protection of personal information popi act. The protection of personal information popi act will fundamentally alter how data must be managed in south africa. Compliance to the protection of personal information act popia, also known as the popi act, will be mandatory for most organisations in south africa. He is assisted by skye hartog who will function as the mpanys deputy information co officer. Popi legislation is not unique to south africa but rather borrowed from other countries. We hope this update will be of value to you and the stakeholders in your protection of personal information and access to information management activities.
With the popi act explained this should help you in understand the process of implementing popi compliance within your company. Popi act compliance why should i comply with the act. Whereas it is agreed that all parties agree that they will comply with popi regulations and process all the information. Many organisations are wondering about popi act compliance, what it is and what they should be doing about it. Are you looking for a popi act summary to help you on your journey to popi compliance. Y the a to z of popi are covered comprehensively y a highly knowledgeable and prominent course facilitator y crossborder transfer of personal information is tackled. The protection of personal information bill was around in 2009, which meant that the discussion had been going on for years before that. Y the a to z of popi are covered comprehensively y a highly knowledgeable and prominent course facilitator y crossborder transfer of personal information is tackled y oneofakind programme the. Regulations relating to the protection of personal information, 2017 the information regulator has under section 1122 of the protection of personal information. The act was signed into law in november of 20 according to the south african constitutional right to privacy as seen in section 14 of our constitution. We became used to talking about popi, and the information regulator is now prefering to use the term popia, or popi act. Privacy policy in terms of the protection of personal.
Pdf icon 370672611act4of20protectionofpersonalinforcorrect. At this stage no notices hashave been published on the categories of records that are. Popi act compliance protection of personal information. The information regulator was setup in december 2016 and formally introduced in february 2017. Your popi training guide and compliance manual is only your, introduction to popi. How exposed are business owners really to long jail terms and large fines. Guide of the south african human rights commission. The information contained in this document is current as at june 2017 introduction to the protection of personal information act popi act background south africa sa became a democracy in 1994. Protection of personal information act 4 of 20 south. Protection of personal information act, 20 5 act no. South african organisations and citizens have until 7 november 2017 to provide comment. This development led to the new constitution and the bill of rights which expressly provides for the protection of the right to privacy of individuals. Access to information and the protection of certain types of information in south africa are mainly regulated by the promotion of access to information act paia and the protection of personal information act popi the popi act is south africa s equivalent to the european union general data protection regulation eu gdpr. We deliver this information online because it is infinitely cheaper for you to attend.
After the commencement date, a compliance grace period of 1 year will exist, which may be extended to a maximum 3 years. Iactafrica popia popi act and paia update august 2017. The purpose of the popi act is to ensure all south african institutions conduct themselves in a responsible manner when collecting, processing, storing and sharing another entitys personal. The protection of personal information popi act rw africa. To give effect to the constitutional right to privacy by safeguarding personal information when processed by a. Protection of personal information act popi pwc south africa.
Paia and popi act certification services south africa. Iact africa s approach to adopting the popi act and privacy best practices is outlined here. It is anticipated that popi regulations will be promulgated in 2018, commencing the application of the popi act. The protection of personal information act and south african. There has been a buzz around the protection of personal information act 4 of 20 popi, which was promulgated in 20, but it has not been in full effect, the buzz may seem to be white noise.
1148 346 1407 1435 1243 861 786 385 1321 900 317 918 1470 116 152 1451 9 1085 174 612 1274 528 339 947 1672 773 1661 649 938 402 680 122 1384 258 1084 982 470 506 975 1234 653 1491