Contact

POPIA compliance checklist

Back to top

POPIA compliance checklist

The operative provisions of the Protection of Personal Information Act 4 of 2013 (POPIA) came into effect on 1 July 2020, with a grace period of a year in which companies must ensure that they are compliant. Companies must ensure that their business practices and the way they interact with customers, clients or consumers adhere to the requisite privacy laws, as well as confirming that the way they collect, store or process their employees’ information aligns with the protections set out in POPIA.

8 Apr 2021 1 min read TMT Sector Alert Article

At a glance

  • The Protection of Personal Information Act (POPIA) became operative on July 1, 2020, with a grace period for companies to achieve compliance by July 1, 2021.
  • Companies need to ensure that their business practices align with privacy laws and that the collection, storage, and processing of customer and employee information comply with the protections outlined in POPIA.
  • A generic compliance checklist is available to assist businesses in assessing their POPIA compliance levels and identifying areas of risk, but seeking legal advice is recommended to ensure full compliance.

The below table contains a useful generic checklist that businesses can use to ensure that they are POPIA compliant by 1 July 2021.

CDH’s POPIA compliance checklist seeks to assist businesses (noting that POPIA applies to both public and private bodies) with a general heat map to check its compliance levels and areas of risk relating to POPIA compliance and has merely been provided to assist in expediting the POPIA compliance process.

The checklist does not make provision for every eventuality and serves only as a useful guide to assist businesses to start focusing on the most common instances where businesses need to be POPIA compliant. The checklist should in no way to be construed as a substitute for seeking legal advice to ensure that your business is fully compliant with the requirements of POPIA.

Generic POPIA compliance checklist

POPIA_TABLE 1

POPIA_TABLE 2

POPIA_TABLE 3

POPIA_TABLE 4

POPIA_TABLE 5

POPIA_TABLE 6

POPIA_TABLE 7

The information and material published on this website is provided for general purposes only and does not constitute legal advice. We make every effort to ensure that the content is updated regularly and to offer the most current and accurate information. Please consult one of our lawyers on any specific legal problem or matter. We accept no responsibility for any loss or damage, whether direct or consequential, which may arise from reliance on the information contained in these pages. Please refer to our full terms and conditions. Copyright © 2024 Cliffe Dekker Hofmeyr. All rights reserved. For permission to reproduce an article or publication, please contact us cliffedekkerhofmeyr@cdhlegal.com.

You might also be interested in

3 Oct 2024

by Njeri Wagacha, Alex Kanyi, Charity Muindi and David Kimani

Implementation of the Social Health Insurance Fund on track: Court of Appeal rules

The Social Health Insurance Fund (SHIF) was established by the Social Health Insurance Act, 2023 (Act). This, alongside the Primary Health Care Act, 2023 and the Digital Health Act, 2023 (the acts), were established to promote the right to affordable healthcare under the Constitution of Kenya, 2010 (Constitution). On 12 July 2024 the High Court declared some of the sections of the Act unconstitutional and gave Parliament 120 days to adhere to its orders, as discussed in our alert here .

Employment Law

4 min read

4 Jul 2024

by Jackwell Feris and Priscilla Brandt

Implementation of South Africa’s clean hydrogen ambition

Jackwell Feris, Director and the Sector Head for Industrials, Manufacturing & Trade, and Priscilla Brandt, Candidate Attorney, were featured in Engineering News where they discussed the Implementation of South Africa’s clean hydrogen ambition.

Industrials, Manufacturing & Trade

1 min read

17 Apr 2024

by Duran Naidoo, Caela Williams-Short and Dane Kruger

Keeping it clean: Using a clean team to unlock M&A transactions and manage competitively sensitive information

The evaluation of a potential merger or acquisition typically necessitates the sharing of confidential information, usually via a formal due diligence investigation. Naturally, the due diligence investigation is usually undertaken at the outset of the process to allow the potential bidder (or both parties, as applicable) to assess the suitability of the transaction and to inform negotiations.

Corporate & Commercial Law

5 min read

19 Sep 2024

by Jerome Brink and Puleng Mothabeng

Listen to Jerome Brink and Puleng Mothabeng as they discuss mentorship and sponsorship

In this insightful interview, Puleng Mothabeng, Associate in our Tax & Exchange Control practice, sits down with Director, Jerome Brink to discuss the evolving gender dynamics within tax careers in South Africa.

Tax & Exchange Control

20:11 Minutes

20 May 2024

National politics at work: Avoiding conflict and managing reputation in the workplace

The issue of political affairs in the workplace is perennial and, given the imminent elections on 29 May 2024, which has been declared a public holiday, the appearance of politically motivated conduct in the workplace or on workplace platforms as well as on social media may be morelikely. 

Employment Law

4 min read

14 May 2024

by Alex Kanyi, Lena Onyango and Mike Ogutu

Highlights of the Finance Bill, 2024

In the recent past, Kenya's economy has seen slow and steady growth, with the International Monetary Fund's review projecting a growth of about 5,5% in 2024. However, global shocks such as the geopolitical tensions in Europe and the Middle East, coupled with domestic challenges such as high public debt, have made it a challenge for the country to meet its financial target, which stands at KES 3,435 billion for the 2024/25 financial year.

Tax & Exchange Control

72 min read

This website uses cookies to enhance the browsing experience. For more information, please see our Cookie Policy.

Accept Decline