Middelburg was not immune to the global cyber attack on digital data, and it highlighted how vigilant business has to be to ensure the data they use to do business with is safe, obtained legally and kept secure. The Middelburg Chamber workshop sponsored by Nashua unpacked some of the requirements members need to follow to comply with the Protection of Private Information Act (POPIA) on 3 May 2017.
There are approximately seventeen months before companies will be held accountable to POPIA. Members should view the POPIA as the catalyst to implement an Information Governance process to safeguard their information. Companies should have a policy and procedure in place for example on how and where the organization and staff store the backups. If a public servant takes the backup home, is it allowable according to POPIA or not? Our interpretation is not unless a particular policy allows for off-site storage and what rules will apply.
POPIA provide for the protection of personal information processed by public and private bodies, and the minimum requirements for processing personal information. A person’s information must be obtained fairly and lawfully, used for only the original specified purpose, adequate and relevant and up to date information. The information must be kept secure and destroyed after it served its purpose.
MCCI urges our members, especially in light of the recent attacks to start implementing the Information Governance processes. Members interested in more information is welcome to contact the office at 013 243 2253 or Nashua Mpumalanga for a quote on their Managed Document Services or visit https://corconcepts.co.za/newsroom/presentations for a copy of Paul Mullon’s presentation.