Many organisations, customers and suppliers do not yet understand their rights, roles and responsibilities within the framework of the Protection of Personal Information Act (POPIA). Francois Kriel, change management consultant at Kriel & Co, chats with legal expert and attorney Rakhee Dullabh at ENSafrica about what South Africa’s data protection legislation is. Three of the misconceptions around the act that is intended to protect personal information and data of organisations, clients, customers and suppliers is under the spotlight:  

1. No organisation is exempt from compliance; 

2. There are consequences for non-compliance; and  

3. Protecting information is about adapting processes, and not simply a rubber-stamping exercise. 

If your organisation is looking for a readiness plan to help map or revaluate your organisation’s approach to managing personal information, get in touch with our multi-disciplinary consultant and attorney team at Kriel & Co and ENSafrica. Contact hello@krielandco.com for an assessment.