feature article
Data-breaches: some valuable lessons learned and handy
tips
With the proclamation of the commencement date of the Protection
of Personal Information, 2013 ("POPIA")
expected imminently, the extensive data breach notification
obligations imposed on organisations in terms of POPIA are of
significant importance. On the occurrence of a data breach,
organisations are required to notify the Information Regulator and
the data subject(s) whose information has been breached, at a bare
minimum, of the following:
- the identity of the party who
accessed/acquired the data (if known);
- the possible consequences/effect of
the breach;
- the measures taken (or proposed to be
taken) by an organisation to remedy the breach; and
