Contact

POPIA compliance checklist

Back to top

POPIA compliance checklist

The operative provisions of the Protection of Personal Information Act 4 of 2013 (POPIA) came into effect on 1 July 2020, with a grace period of a year in which companies must ensure that they are compliant. Companies must ensure that their business practices and the way they interact with customers, clients or consumers adhere to the requisite privacy laws, as well as confirming that the way they collect, store or process their employees’ information aligns with the protections set out in POPIA.

8 Apr 2021 1 min read TMT Sector Alert Article

At a glance

  • The Protection of Personal Information Act (POPIA) became operative on July 1, 2020, with a grace period for companies to achieve compliance by July 1, 2021.
  • Companies need to ensure that their business practices align with privacy laws and that the collection, storage, and processing of customer and employee information comply with the protections outlined in POPIA.
  • A generic compliance checklist is available to assist businesses in assessing their POPIA compliance levels and identifying areas of risk, but seeking legal advice is recommended to ensure full compliance.

The below table contains a useful generic checklist that businesses can use to ensure that they are POPIA compliant by 1 July 2021.

CDH’s POPIA compliance checklist seeks to assist businesses (noting that POPIA applies to both public and private bodies) with a general heat map to check its compliance levels and areas of risk relating to POPIA compliance and has merely been provided to assist in expediting the POPIA compliance process.

The checklist does not make provision for every eventuality and serves only as a useful guide to assist businesses to start focusing on the most common instances where businesses need to be POPIA compliant. The checklist should in no way to be construed as a substitute for seeking legal advice to ensure that your business is fully compliant with the requirements of POPIA.

Generic POPIA compliance checklist

POPIA_TABLE 1

POPIA_TABLE 2

POPIA_TABLE 3

POPIA_TABLE 4

POPIA_TABLE 5

POPIA_TABLE 6

POPIA_TABLE 7

The information and material published on this website is provided for general purposes only and does not constitute legal advice. We make every effort to ensure that the content is updated regularly and to offer the most current and accurate information. Please consult one of our lawyers on any specific legal problem or matter. We accept no responsibility for any loss or damage, whether direct or consequential, which may arise from reliance on the information contained in these pages. Please refer to our full terms and conditions. Copyright © 2024 Cliffe Dekker Hofmeyr. All rights reserved. For permission to reproduce an article or publication, please contact us cliffedekkerhofmeyr@cdhlegal.com.

You might also be interested in

17 Apr 2024

by Duran Naidoo, Caela Williams-Short and Dane Kruger

Keeping it clean: Using a clean team to unlock M&A transactions and manage competitively sensitive information

The evaluation of a potential merger or acquisition typically necessitates the sharing of confidential information, usually via a formal due diligence investigation. Naturally, the due diligence investigation is usually undertaken at the outset of the process to allow the potential bidder (or both parties, as applicable) to assess the suitability of the transaction and to inform negotiations.

Corporate & Commercial Law

5 min read

30 Aug 2023

by Alex van Greuning

Decanting the challenges: Working group focused on temporary employment services and contract workers within the SA wine industry

On 21 August 2023, Fairtrade Africa, in collaboration with the Wine and Agriculture Ethical Trade Association (WIETA), hosted an event that focused on the challenges associated with temporary employment services (TES) and contract workers within the South African wine industry and the establishment of a working group to address thesechallenges. 

Agriculture, Aquaculture & Fishing

5 min read

15 Sep 2023

by Puleng Mothabeng

Angelo Agrizzi may have won the battle, but has he won the war? A novel judgment on the repatriation of foreign assets to settle SA tax debt

Angelo Agrizzi recently obtained a favourable judgment from the High Court in Pretoria in a unique tax dispute with the South African Revenue Service (SARS).  

Tax & Exchange Control

8 min read

29 May 2023

by Thabang Rapuleng and Kgabi Moeng

Is three years too long for a restraint of trade agreement? The court has answered

Employers can take comfort in knowing that their protectable interests are safeguarded by the courts in the event of a breach of a restraint of trade clause. In Warwick Wealth (Pty) Ltd v Anderson and Others (C178/2023) ZALCCT (18 May 2023), the court had to consider the issue of a breach of restraint of trade clause between Warwick Wealth (Pty) Ltd (the employer) and Ms Julie Anderson.

Employment Law

2 min read

10 Aug 2023

by Vincent Manko and Buhle Duma

The role of shareholders in business rescue proceedings

One of the stated purposes of the Companies Act 71 of 2008 (Companies Act) is to promote innovation and investment in South African markets and provide for the efficient rescue and recovery of financially distressed companies, in a manner that balances the rights and interests of all relevant stakeholders, including shareholders. Business rescue is therefore widely accepted as an alternative to liquidation for financially distressed companies, with the intention of giving such companies the opportunity to reorganise and restructure their affairs for them to regain their solvency. To this end, the definition of “ affected persons ” includes creditors, employees (or their representative), a registered trade union and shareholders. The role played by each “ affected person ” is unique in many ways but can have an impact on the failure or success of any business rescue proceedings.

Business Rescue, Restructuring & Insolvency

3 min read

6 Jun 2023

by Sune Kruger

Authentication of documents: Back to basics

Have you ever had to sign or legalise documents within South Africa for use abroad, or vice versa? If you have, then you have no doubt experienced the frustration of having same signed or executed only to find out later that the documents are not legally valid for use in the relevant country. We live in an era where many South Africans emigrate or conduct business abroad and the necessity for the correct authentication, legalisation or apostille of documents becomes imperative to avoid any delays.

Real Estate Law

6 min read

This website uses cookies to enhance the browsing experience. For more information, please see our Cookie Policy.

Accept Decline