POPI ACT
BY JESSIE TAYLOR
POPI ACT:
CEO’S REGISTRATION AS INFORMATION OFFICERS Information Officers – a vital cog in the wheel of protecting personal information. With only three months left to fully comply with the Protection of Personal Information (POPI) Act, many companies need to ensure they register their Information Officers this month. This position is key to managing the requirements of the new regulations and South African companies should not neglect this critical area. Registrations for Information Officers will close on 31 March 2021. Protecting information The POPI Act came into effect on 1 July 2020, with South African businesses given a year to comply. The POPI Act aims to protect personal information
processed by both public and private bodies. The Act introduces certain minimum requirements for companies in the processing of personal information and establishes rights for individuals around unsolicited electronic communications and automated decision making. The Act also provides for the establishment of the Information Regulator. Simply put, the privacy law ensures that companies will no longer be allowed to keep your personal information on their databases indefinitely. But along with the necessary systems companies need to implement under POPI, is the appointment of an Information Officer – a vital role in complying with the legislation. Under POPI, the Information Officer is
56 | Public Sector Leaders • March 2021
automatically the head of the organisation. The Information Officer’s role is governed by both POPI and PAIA and will require balancing the public’s right to access information with the right of a person to have their personal information protected. Every organisation is required to have an Information Officer, regardless of size or whether it is a public or private body. The responsibility of the Information Officer is to encourage compliance with POPI and working with the Information Regulator where necessary, such as in the event of any investigation. The Information officer will also need to deal with any requests made to the company regarding POPI, such as requests to update information.
