This article seeks to outline the key compliance considerations which organisations need take into account with respect to the roles and obligations of an information officer under POPIA.

This article is the first in a series looking at the reach, and the limits, of various data protection regimes.

Upon inspection of POPIA and the GDPR, it becomes evident that the term “transfer” is not defined. In the absence of a definition, some uncertainty is created as regards what constitutes a “transfer” of personal information.

The Western Cape Government is in the process of developing a provincial legislative framework that will govern the use of CCTV cameras both on private properties and in public areas.

In this discussion we will draw your attention to the main points that employers will need to know and do, to be well on their way to full compliance come July 2021.

Significance that a recent European Union Court of Justice decision may have on the way in which POPIA is applied in South African courts, specifically in relation to cross-border transfers of personal information.

Can an employer be held liable for the actions of one of their employees should the employee infringe upon a person’s privacy rights in terms of POPIA?

The CRS imposes obligations on financial institutions to exchange tax and financial information on a global level with other countries - this cross-border transfer of sensitive financial data between jurisdiction raises data privacy and protection concerns.