The protection of personal information popia act has been signed into law by the president on 19 november and published in the government gazette notice 37067 on 26 november 20. The information regulator was setup in december 2016 and formally introduced in february 2017. Personal information about individuals is stored by. Join other south african schools who have already started their journey to compliance with the popi act popi act update correct as at 14 october 2016 the protection of personal information act, no. Sep 07, 2017 the protection of personal information act popi is due to come into effect in south africa in 2018. The popi act promotes the protection of personal information by south african public and private institutions and specifies the minimum requirements in twelve chapters, which includes eight.
Our blog infographics info graphic for an overview of popi links protection of personal information act 4 of 2103 promotion of access to information act 2 of 2000. There has been a buzz around the protection of personal information act 4 of 20 popi, which was promulgated in 20, but it has not been in full effect, the buzz may seem to be white noise. Popi example clause description this is an example of a popi clause which may be used in an employment contract, this is only an example clause and should be adapted in accordance with your existing employment contract and policies. Protection of personal information act, 20 department of justice. The protection of personal information act and south african. Cronje took the time to explain to the attendees what qualifies as personal and identifiable information, and noted that popi applies to the collection and processing of this data. Latest on popi by paul kruger on 14 april 2016 the protection of personal information act features fairly regularly in the news, and training offers are abundant, but not yet really necessary, in our view, as the act only takes effect one year after the announcement of the commencement date, which is subject to the appointment of the. The popi act applies to the processing of personal information where. If you choose to take an active role in becoming compliant, you will not win any award or receive a gold star on your forehead, but you will gain and. Protection of personal information a short guide for the employer on popi from a payroll hra perspective.
We have published a number of popi act articles over the past 3 years which aim to provide real world insights into the implications of the popi act and protecting personal information. The popi protection of personal information act has not yet commenced, although it was enacted in 20. Popi and estate security residential estate security. It is important to note that popi does not replace the hpcsas existing guidance on safeguarding confidential patient data. According to botha, eloff and grobler 2016, the popi act is something. Protection of personal information hrtorque outsourcing. Member login join programme do impact assessment book. After the commencement date, a compliance grace period of 1 year will exist, which may be extended to a maximum 3 years. Contents of the protection of personal information act. Protection of personal information a short guide on popi.
Understanding the level of compliance by south african. It is a complex law that is difficult to summarise. Understanding the level of compliance by south african institutions. The protection of personal information act, no 4 of 20 promotes the protection of personal information by public and private bodies. Many people want to know what the popi commencement date or popi effective date will be. Protection of personal information act 4 of 20 south. The popi act promotes the protection of personal information by south african public. Selmin nurcan khaled gaaloul rainer schmidt qin ma. On 10 may 2016, the portfolio committee on justice and correctional services shortlisted five candidates for the office of information regulator. It is anticipated that popi regulations will be promulgated in 2018, commencing the application of the popi act. To give effect to the constitutional right to privacy by safeguarding personal information when processed by a responsible. The protection of personal information popi bill soon to be passed as an act has implications for all medical practitioners, and this article looks at what the legislation explicitly means to you. The protection of personal information act popi has. Whereas it is agreed that all parties agree that they will comply with popi regulations and process all the information.
The pending appointment of an information regulator for the protection of personal information popi act, is nearing following the favourable vote for the nomination of advocate pansy tlakula as the chairperson of the information regulator and advocate lebogang stroom and johannes weapond, as full time members of the information regulator, with professor tana pistorius and sizwe snail as parttime members on 7 september 2016. Enforcement of the protection of personal information popi act. Employers statutory vicarious liability in terms of the. Iron mountain is the global leader in storage and information management services. If you are using etorque, our cloudbased payroll and hra database, you are already compliant from a software security and data storage perspective, with regard to the system. Although popi is comparable to the united kingdoms data protection act of 1998 ukdpa, it parts from the ukdpa with respect to the limitation of the accountability of the responsible party. The protection of personal information act 4 of 20 aims. This grace period is an acknowledgement of the practical challenges that complying with popi introduces to businesses in south africa.
The protection of personal information act also referred to as the popi act aims to protect an individuals right to privacy regarding their personal information which may have been collected by a third party during a normal commercial transaction or by their hr department prior to, or during, the course of their employment. These challenges relate to the conditions essential for the lawful processing of information. Annexure a popi checklist this checklist should assist companies to assess their compliance with popi. Information regulator appointment for popi awaiting confirmation. Its implementation hinges on the publication of a commencement date by the president. Popi example clause, document, labour law, south africa, pdf. The popi act explained pdf labour law south africa.
Popi is intended to promote the right to privacy in the constitution, while at the same time protecting the flow of information and advancing the right of access to information. Their core business is it asset disposal which has a strong link with the popi act. The popi act was signed by the president on 19 november 20 and published in the government gazette on 26 november 20. Jun 01, 2014 the popi act has been formally signed into law in november 20 and organisations who store personal information about any individuals will be subjected to the regulations set out in this act and will only have one year from the legal introduction to comply. Popi will apply to all organizations that process personal information. Oct 05, 2016 in simple terms, the purpose of the popi act is to ensure that all south african institutions conduct themselves in a responsible manner when collecting, processing, storing and sharing another entitys personal information by holding them accountable should they abuse or compromise your personal information in any way. Once that date has been published, businesses will have a grace period of one year within which to be fully compliant with popi. Popi establishes the rights and duties that are designed to safeguard personal data. Parliament has now asked for another workshop on popi in 2016. The protection of personal information act popi is a new piece of legislation that will have a major impact on the manner in which organizations handle personal information of both natural and juristic persons. Popia will commence on an unknown date the president will proclaim in the future. The act regulates how anyone who processes personal information must handle, keep and secure that information. Information regulator established under popi corruption.
Journals magazines books proceedings sigs conferences collections people. Guide to navigating popi 3 the introduction of the protection of personal information act popi puts the onus on companies and individuals to respect and protect the personal information they process in the course of routine business, including personal information of customers, prospective customers, employees, and suppliers. The weight of the proposed penalties had organisations scrambling to find out what they needed to do in order to comply with popi as fast as possible. Pdf towards a conceptual framework for protection of personal. Protection of personal information act popi introduction. The protection of personal information act and south.
Protection of personal information act popi it is critical for organisations that process personal information of employees, customers or other juristic persons companies, trusts and so on to implement organisationwide privacy initiatives in order to comply with the conditions of the act. The protection of personal information act and south african schools the protection of personal information popi act was signed into law on 19 november 20. Popi aims to hold entities responsible for the personal information they process and strict adherence to the act by estates should be prioritised to prevent these crimes, thereby avoiding regulatory fines, civil remedies and subsequent reputational harm. In addition to the adoption of the popi act, a more stringent approach is therefore needed in. The ukdpa and other counterpart foreign statutes contains a mechanism for the employer to escape.
Although popi was signed into law on 26 november 20 it is not yet fully operational. Once popi becomes effective organizations will have one year to comply with its provisions. In south africa, the recognition of privacy as a fundamental human right was enshrined in our constitution in 1996. Regrettably, the mechanisms for the protection of this constitutional right would only become a reality 20 years thereafter, with the likely commencement of the protection of personal information act 4 of 20 popi in 2016. Popi commencement date or popi effective date starts the clock. The event was held at the slow in the city hotel in sandton on 27 th may 2016 and was attended by close to 60 delegates from a number of large organisations. Popi and cctv cctv handbook 2016 hitech security solutions. In south africa, the first privacy legislation in the form of the protection of personal information popi act was signed into law on 26 november 20. The exact date that popi will become effective is uncertain, but the general consensus is that it will be in the very near future. Are you looking for a popi act summary to help you on your journey to popi compliance. We are now awaiting a commencement date for the act.
906 1334 540 697 1460 1104 730 1344 1133 902 270 778 139 627 90 1360 1124 1224 1174 1249 745 1457 20 385 1497 1425 1534 1496 421 409 1443 265 938 916 1494 837 1173 510 776 1223 1475 1155 194