Almost one year ago, the Protection of Personal Information Act,
2013 ("POPIA") came into force.
While some organisations appear to be content (and very likely
complacent) about the effort they've invested to date to comply
with POPIA, proactive organisations are now reflecting on the past
year, and are strongly advised to:
- assess whether the compliance measures they've taken to
date meet the minimum requirements for compliance; and
- establish what (if any) improvements can be made.
Many organisations have invested large amounts of time and money
into their POPIA compliance. However, numerous organisations are
still unsure as to what the "must-haves" or mandatory
obligations are when it comes to compliance, and where they should
now be focussing their attention.
