Act also applies to hard-copy format

2017-08-23 06:00
Esmarie Cronjé

Esmarie Cronjé

Multimedia   ·   User Galleries   ·   News in Pictures Send us your pictures  ·  Send us your stories


I am an accountant who works from home.

I do not have a computer and have been doing all my work on only paper for years. My clients have been with me for a long time and I keep physical files for each of them.

I have taken note of POPI, but I am unsure as to whether it will apply to me, as I do not have any client information in electronic form.

Surely I do not need to worry about POPI?


One of the objectives of the Protection of Personal Information Act 4 of 2013 (“POPI”), which has been signed into law, but has not yet fully come into effect, is to regulate the manner in which personal information may be processed.

As a general rule, POPI will apply to any person or organisation who (or which) processes the personal information of others and who is defined under POPI as “responsible parties”.

“Personal information” includes any information relating to an identifiable, living, natural person or an identifiable, existing juristic person and can include, amongst others, any identifying information such as a name, identity number or registration number, contact details or a physical address of a person or business.

Information relating to the educational, medical, financial, criminal or employment history of a person, as well as their personal views and opinions, are also covered in terms of POPI.

“Processing”, according to POPI, refers to any operation or activity, whether or not by automatic means, concerning personal information, including amongst others the collection, use, storage, retrieval, deletion or destruction of personal information.

Therefore, even if a responsible party is only in possession of personal information, they are considered to be processing personal information in terms of POPI.

POPI further applies to the processing of personal information by both automated (electronic) and non-automated (non-electronic) means when such information is entered into a record of a responsible party.

Personal information which is processed by non-automated means, for example through mediums such as paper files or other physical or hard-copy files, will only be subject to the provisions of POPI in the event that such personal information forms, or is intended to form, part of a filing system.

In your situation, the fact that your information is in hard-copy format does not exclude POPI from applying to you.

In addition, the fact that you retain your clients’ information in physical files will qualify as processing personal information and will thereby also fall under POPI.

To comply with the requirements of POPI, we would advise that you enlist the help of a specialist to assist you in identifying the necessary measures to implement to ensure that you are compliant.

Esmarie Cronjé, associate, Phatshoane Henney Attorneys


Inside News24

Traffic Alerts
There are new stories on the homepage. Click here to see them.


Create Profile

Creating your profile will enable you to submit photos and stories to get published on News24.

Please provide a username for your profile page:

This username must be unique, cannot be edited and will be used in the URL to your profile page across the entire network.