Popi and your business

2016-01-20 06:00
CANDICE REYNDERS, associate, Phatshoane Henney Attorneys.

CANDICE REYNDERS, associate, Phatshoane Henney Attorneys.

Multimedia   ·   User Galleries   ·   News in Pictures Send us your pictures  ·  Send us your stories


I HAVE a small insurance brokerage firm with a number of private clients. To service my clients I have to obtain and keep personal information of them on file. Is Popi going to affect me and will I have to change the way I am currently dealing with my client information?


The promulgation and phased implementation of the Protection of Personal Information Act 4 of 2013 (Popi), has many businesses wondering, as in your case, whether its commencement will affect the manner in which their business collects and stores the information of clients.

This concern is well-founded as Popi makes it clear that a failure to comply with it when fully operational, could result in hefty administrative fines as well as reputational risk due to non-compliance.

Popi has its roots in the Constitution and aims to promote the protection of the right to privacy with regard to the processing of personal information, and to balance this right against other rights, such as the right of access to information.

This includes the collection of personal information and the manner in which such information is used, processed and stored.

Popi applies to the processing of personal information by or on behalf of a responsible party by automated or non-automated means.

A “responsible party” is widely defined as “a public or private body or any other person who determines the purpose of and means for processing personal information”.

Popi goes even further by also including persons, termed “operators”, who process information on behalf of a responsible party in terms of a contract or mandate.

As a consequence, Popi therefore demands that, not only the responsible party, but also the operator which it mandates, must ensure that any personal information acquired is adequately secured and that there are strict measures that meet the requirements of Popi in place for the processing thereof.

From the broad definition of a responsible party as well as personal information, it is clear that your business will most likely be subject to Popi and you would need to ensure that how you deal with such personal information, is Popi compliant.

Fortunately, all of the provisions of Popi are not yet operational, and once they become operational, businesses will be granted a 12-month grace period to address their compliance.

But time flies quickly, and it would be advisable to use the available time wisely and not delay in obtaining help to conduct an audit of your business and establish whether you are Popi compliant or not, then determine what steps you can take to address any compliance issues and ensure that your reputation remains sound with clients by being fully compliant.

Join the conversation!

24.com encourages commentary submitted via MyNews24. Contributions of 200 words or more will be considered for publication.

We reserve editorial discretion to decide what will be published.
Read our comments policy for guidelines on contributions.

Inside News24

Traffic Alerts
There are new stories on the homepage. Click here to see them.


Create Profile

Creating your profile will enable you to submit photos and stories to get published on News24.

Please provide a username for your profile page:

This username must be unique, cannot be edited and will be used in the URL to your profile page across the entire 24.com network.


Location Settings

News24 allows you to edit the display of certain components based on a location. If you wish to personalise the page based on your preferences, please select a location for each component and click "Submit" in order for the changes to take affect.

Facebook Sign-In

Hi News addict,

Join the News24 Community to be involved in breaking the news.

Log in with Facebook to comment and personalise news, weather and listings.