Responsible parties have been granted a grace period ending on 30 June 2021, to comply with the provisions of POPI. Non-compliance with POPI is a criminal offence attracting imprisonment not exceeding 10 years with or without a fine and/or an administrative fine not exceeding R10 million which may be imposed by the Information Regulator.
POPI applies to the ‘processing’ or ‘further processing’ of personal and special personal information of employees by an employer. The ‘processing’ of information relates to a comprehensive range of activities. It includes the initial obtaining or collection of personal information, the retention and use thereof, access and disclosure and finally the disposal of the data.
Although, POPI prohibits the processing of special personal information. An employer can process this information if, amongst others; it obtains express consent of the employee; it has a legal duty to do so; the information is available in the public domain or the information is being processed for historical; statistical or research purposes.
While POPI is not limited to employers and employees, there is no doubt that the employment relationship falls within its ambit. Our POPI guide contains a non-exhaustive list of the ways in which POPI applies to the employment life cycle as well as guidance notes on the various stages.
With the deadline for compliance with POPI fast approaching, employers need to, among others, appointment an information officer; conduct an assessment of their internal processes, provide their employees with POPI related training; adopt adequate controls to ensure the safety of personal information; and establish adequate policies and procedures to comply with the eight conditions for lawful processing of information, in order to be compliant on or before 30 June 2021. Our POPI guideline (available at the link below) will assist you in navigating this new terrain. The guideline answers general queries in relation to POPI in the employment environment. For more bespoke advice, please contact one of our practitioners.