The Protection of Personal Information Act (POPIA) requires employers to protect the personal information of employees, clients, applicants, service providers and other individuals whose information they process. Employers should have appropriate measures in place to ensure that personal information is collected, used, stored, shared and disposed of lawfully, securely and only for appropriate purposes.

Essential POPIA measures include a POPIA/privacy policy, appointment of an Information Officer, personal information and processing records, appropriate consent and/or privacy notices where required, access controls and security measures, procedures for dealing with data breaches, retention and secure destruction procedures, and appropriate agreements with third parties that process personal information on the employer’s behalf. Employees should also receive appropriate POPIA awareness and training.

Labour Quest assists businesses with understanding and implementing their POPIA and PAIA compliance obligations. Services include Information Officer registration, assistance with the required annual Information Officer submission, development and review of POPIA and privacy policies, compliance documentation and records, implementation of practical POPIA processes, and guidance on ongoing compliance requirements.