The protection of personal information act 4 of 20 aims. Information regulator appointment for popi awaiting. Many people want to know what the popi commencement date or popi effective date will be. The delay, while frustrating for some, gives others a breathing space to get their companies up to scratch on the law. If an individual or a company processes personal information relating to a person, that individual or company must comply with the act. The checklist manifesto how to get things right, business book. Find out if popi applies to you, by when you need to comply and what that generally means. If you are using etorque, our cloudbased payroll and hra database, you are already compliant from a software security and data storage perspective, with regard to the system. Constitution and the purpose and application of the protection of personal information act, no 4 of 20. It is important because the grace period of one year starts running from the commencement date the clock starts ticking. Popis focus is not privacy, is processed and every aspect of the processing of personal information from its collection to its destruction. This section has more indepth information about popi. The protection of personal information act popi is a new piece of legislation that will have a major impact on the manner in which organizations handle personal information of both natural and juristic persons.
The protection of personal information act 20 popi was signed into act. Journals magazines books proceedings sigs conferences collections people. The popi protection of personal information act has not yet commenced, although it was enacted in 20. On 10 may 2016, the portfolio committee on justice and correctional services. There is no doubt that this act will have serious implications for a great number of businesses and how the data in their possession is handled and processed. We are now awaiting a commencement date for the act. Pdf towards a conceptual framework for protection of personal. Member login join programme do impact assessment book training get. Latest on popi by paul kruger on 14 april 2016 the protection of personal information act features fairly regularly in the news, and training offers are abundant, but not yet really necessary, in our view, as the act only takes effect one year after the announcement of the commencement date, which is subject to the appointment of the.
The act expressly provides that records must be kept in written form, or other form or manner. According to botha, eloff and grobler 2016, the popi act is something. The introduction of the protection of personal information act, no 4 of 20 popi not yet in force will affect you, the employer, when you want to verify candidates credentials. Jun 14, 2016 an article in fais newsletter 20 titled bulk transfers by fsps and insurers contains a section under the subheading. To give effect to the constitutional right to privacy by safeguarding personal information when processed by a. Many people want to know what the popi commencement date or popi. Popi will have significant consequences for all businesses that process the personal. You must comply with the popi act and the information regulator will start enforcing the popi act one year after the commencement. Protection of personal information a short guide on popi.
The biggest risk, after reputational damage, is a fine for failing to protect account numbers. Popi and estate security residential estate security. Popi balances the right to privacy and the right of access to information. This simple tenstep approach gives guidelines on a formal methodology for implementing popi. A background on privacy olmstead case basis of our understanding of privacy important because information has become easily accessible. Popi act for small business owners, cape town, western cape. Their core business is it asset disposal which has a strong link with the popi act. You must be an education provider to purchase this book.
The process perspective consists of the identification of manual and automated business. The protection of personal information act and south african. Popi act compliance why should i comply with the act. Title popi example clause description this is an example of a popi clause which may be used in an employment contract, this is only an example clause and should be adapted in accordance with your existing employment contract and policies. It therefore sets the minimum standards for the protection of personal information. Popi regulations published for comment by kerri gevers za on september 11, 2017 posted in general the information regulator published draft regulations under the protection of personal information act 20 popi for public comment by 7 november 2017. This act became effective on 1 may 2011 and should be read with the companies amendment act, no 3 of 2011, and the companies regulations, 2011.
The event was held at the slow in the city hotel in sandton on 27 th may 2016 and was attended by close to 60 delegates from a number of large organisations. The protection of personal information popi act r6600. We have published a number of popi act articles over the past 3 years which aim to provide real world insights into the implications of the popi act and protecting personal information. Popi act what you need to know 19 june 2014 when will it apply. Personal information about individuals is stored by organisations including government agencies. Protection of personal information act, 20 department of justice. It is important to note though that this right to protection of personal information is not just applicable to a natural person i. Popi regulates the manner in which personal information may be processed and provides rights and.
This is because of the imminent protection of personal information act popi sas data protection law. Popi a short summary posted on may 12, 2014 by bregmans on august 22, 20, the south african parliament passed the first comprehensive data protection legislation in south africa, the protection of personal information popi bill. The spirit of popi is to ensure that all organisations that hold and process personal data do so carefully and with respect for the rights and. Join other south african schools who have already started their journey to compliance with the popi act popi act update correct as at 14 october 2016 the protection of personal information act, no. Popi commencement date or popi effective date starts the clock. Adv lebogang stroom, and johannes weapond were appointed as fulltime members and prof tana pistorius and sizwe snail were appointed as parttime members. The protection of personal information act, no 4 of 20 promotes the protection of personal information by public and private bodies. Member login join programme do impact assessment book. The protection of personal information act is technical and complex. Well the popi act is more than just a catchy name it is a super important thing for all companies to comply to lets find out why. The protection of personal information act popi has. Popi example clause, document, labour law, south africa, pdf. The popi act cannot protect you if you do not take care to protect yourself. How the popi act affects you and your business october 5, 2016 0 comments in popi by workpool the act lists the following eight conditions for the lawful processing of personal information, each containing their own sections.
Guide to the protection of personal information act, a. Protection of information act, 4 of 20 popi adcorp group of companies including adcorp limited and its wholly owned subsidiaries hereinafter referred to as the company introduction in terms of popi, a responsible party in this case being the company has a legal duty to process. Adv pansy tlakula was appointed as the information regulator with effect from 1 december 2016. Here you will find basic information about popi compliance. Regrettably, the mechanisms for the protection of this constitutional right would only become a reality 20 years thereafter, with the likely commencement of the protection of personal information act 4 of 20 popi in 2016. Protection of personal information act furthermore the fsps are required to comply with protection of personal information popi act, which demands identifying personal information and taking reasonable measures to protect the data. Popi and estate security residential estate security handbook 2016 vol 1 residential estate. The protection of personal information act is taking some time to roll out. Here are the dates so far, as well as dates to be announced soon. It took effect on 1 july 2016 and is vietnams first overarching data protection.
Contents of the protection of personal information act. The risks include reputational damage, fines and imprisonment, and paying out damages claims to data subjects. Popi act for small business owners legal service cape. These challenges relate to the conditions essential for the lawful processing of information. May 12, 2014 popi a short summary posted on may 12, 2014 by bregmans on august 22, 20, the south african parliament passed the first comprehensive data protection legislation in south africa, the protection of personal information popi bill. The protection of personal information act is commonly referred to as popi. The protection of personal information act popi is due to come into effect in south africa in 2018. Protection of personal information act 4 of 20 south. Oct 05, 2016 in simple terms, the purpose of the popi act is to ensure that all south african institutions conduct themselves in a responsible manner when collecting, processing, storing and sharing another entitys personal information by holding them accountable should they abuse or compromise your personal information in any way. Enacted by parliament in 20 protection of personal information act, no 4 of 20. Protection of personal information act, no 4 of 20. The protection of personal information popia act has been signed. Once it comes into operation, all organisations will have a period of 12 months to bring their current practices in line with its provisions.
Parliament has now asked for another workshop on popi in 2016. Finally, the bill pursues a balanced approach to the protection of personal information, mandating due regard for the justifiable limitations of the right to privacy, the need to secure the interests of free flow of information and managing the tensions between the rights of access to information and protection of personal information. Protection of personal information a short guide for the employer on popi from a payroll hra perspective. The protection of personal information act and south african schools the protection of personal information popi act was signed into law on 19 november 20. The popi act explained pdf labour law south africa. In south africa, the recognition of privacy as a fundamental human right was enshrined in our constitution in 1996.
Yes, the protection of personal information act popi is out, and yes it is law. The act applies to anyone who keeps any type of records relating to the personal information of anyone, unless those records are subject to other legislation which protects such information more stringently. Experienced data protection professionals, who participated in drafting the popi bill and have extensive legal, business and data processing experience, will explain how to translate legal obligations into operational practices. The easiest and quickest place to start is to try our 20 question popi act compliance health check. The information regulator was setup in december 2016 and formally introduced in february 2017. It is hereby notified that the president has assented to the following act, which is hereby published for general information.
The companies act, no 71 of 2008, consolidates and amends the law that relates to companies. Diagram of the popi acts implications for independent schools. In addition to the adoption of the popi act, a more stringent approach is therefore. Parliament have yet to give us a clear indication of the popi timeline. Pdf icon 370672611act4of20protectionofpersonalinforcorrect. What is it and how you can become compliant you may have heard of the popi act, but dont really know what it stands for or entails. The popi act is important because it protects data subjects from harm, like theft and discrimination. Information, tools and a community to help your organisation comply with privacy legislation, while maximising the benefits of doing so. Once this is set everyone will have a year within which to comply. Whats inside fulllength practice act test, including the optional writing test information about the multiplechoice and writing tests.
Pdf national comprehensive data protectionprivacy laws and. Sep 07, 2017 the protection of personal information act popi is due to come into effect in south africa in 2018. While full commencement of the popi act has yet to take place, sections of the act have commenced which make the information regulator a fomalised body. Privacy law refers to the laws that deal with the regulation, storing, and using of personally. Employment references would include those from past employers and, where appropriate, a background investigation into the applicants criminal and credit history.
Oct 31, 2014 3 reasons why popi is good for south africa by nerushka bowan and kerri gevers za on october 31, 2014 posted in general we often hear complaints about the additional red tape that compliance with the protection of personal information act, 20 popi will impose on business. Enforcement of the protection of personal information popi act. Many organisations are wondering about popi act compliance, what it is and what they should be doing about it. Popi overview protection of personal information act popi assented to by parliament on 19 november 20. The popi act explained description publication explaining the protection of personal information act popi which seeks to regulate the processing of personal information category legislation sub category amendment acts document type publication filename 2015 the popi act explained pub. This book collects the key materials on administrative law in south. Implications of the protection of personal information popi. Direct marketing is defined by the protection of personal information popi act as any means to approach a data subject, either in person or by mail or electronic communication, for the direct or indirect purpose of promoting or offering to supply any goods or services in the ordinary course of business, or alternatively requesting a data subject to make a donation of any kind.
The protection of personal information act also referred to as the popi act aims to protect an individuals right to privacy regarding their personal information which may have been collected by a third party during a normal commercial transaction or by their hr department prior to, or during, the course of their employment. Gdpr commenced on 24 may 2016 and its grace period ended on 24 may 2018. Specifically to implement and maintain the provisions of the popi act including but not limited to the following. The protection of personal information popia act has been signed into law by the president on 19 november and published in the government gazette notice 37067 on 26 november 20. The popi act promotes the protection of personal information by south african public.
The main purpose of the popi act is to protect the processing of personal. Protection of personal information act 4 of 20 south african. Once announced, you must comply with the popi act and the. Find answers 08032019 written by veronique delhaye understand the data protection law in south africa by reading a plain language summary of the the protection of personal information act popia. After the commencement date, a compliance grace period of 1 year will exist, which may be extended to a maximum 3 years. Popi act promotes the protection of personal information by south african institutions and.
A selection of popi act articles from iactafrica food for thought about protecting personal information. Protection of personal information act 4 of 20 ebook 2e. The popi act was signed by the president on 19 november 20 and published in the government gazette on 26 november 20. Banisar, 2016 the popi act presents a set of conditions and principles that prescribe the way in which personal information may be processed. The purpose of the this act is to ensure all south african businesses conduct themselves in a responsible manner when collecting, processing, storing and sharing another entitys personal information by holding them accountable should they abuse or compromise the. The protection of personal information popi act has been signed into law by the president and published in the government gazette notice 37067 in november 20. Popi and cctv cctv handbook 2016 hitech security solutions. Embarking on a popi act implementation project can be daunting for many organisations as it is not a simple law with which to comply. The popi act was signed into law at the end of last year, but the commencement date still needs to be set. Protection of personal information act popi introduction. There is no doubt that this act will have serious implications for a great number of businesses and how the data in. It is anticipated that popi regulations will be promulgated in 2018, commencing the application of the popi act.
1202 71 67 1095 712 474 708 785 430 513 938 662 103 875 1400 641 559 1052 1561 1330 1191 803 797 1345 648 1100 1289 1211 1045 1481 915 1072 570 3 1453 1350 245 300 466 562 143 757 430