Data Privacy Day: reminder to start a POPIA compliance journey

0
163

Regulators are no longer afraid to protect peoples’ rights to privacy against tech giants. In recent years, we have seen the likes of Google and Facebook receive large amounts of General Data Protection Regulation (GDPR) fines.

With the 28th of January being Global Data Privacy day, it is time to look thoroughly at South African business and how far they are with their Protection of Personal Information Act (POPIA) compliance journey.

POPIA in South Africa came into effect on 1 July 2020, and if you have not started with your compliance journey, you need to act fast as the one-year grace implementation period draws closer to the end.

It is never too late to start, and several quick wins can assist you in kicking off your POPIA compliance journey. The discussed steps below can help cover some of the large gaps in your POPIA compliance journey.

Committing

It is time to commit to a POPIA compliance journey. You can start by inculcating POPIA compliance in the day to day management of your business, so that it becomes second nature, just like a sales or other process.

Training your staff

Many sources offer POPIA training, some of them even free, but often you get what you pay for. Before deciding on a training provider, make sure to read reviews and feedback from other businesses that have undergone this training.

Finding your data

Many companies believe that this requires a massive data mapping exercise and the purchase of expensive data mapping tools. This is not the case.

The best way to find out how personal information flows through your business is to look at how it interacts with your current business processes. Think of how you onboard new employees into your business or how you deal with new customers for example.

Securing your data

This is much easier than you think. Most installations of Windows and Mac OS have disk encryption tools built-in.

By just making sure that you encrypt the desktop and laptop computers in your business you have already gone a long way to protecting personal information, even if there will be further steps you need to take.

In conclusion

POPIA Compliance is good for your business because customers deserve it. You will soon find that it comes with added benefits for your own business such as structuring your data and being able to provide prospective customers with the assurance that protecting their personal information is something you take seriously.


Rian Schoeman | Head | Legal and Chief Privacy Officer | LAWtrust | mail me


 



LEAVE A REPLY

Please enter your comment!
Please enter your name here