Description of the Complying with the Act Course

OVERVIEW

The Protection of Personal Information Act has been finalised. All public and private bodies are required to record their processing of personal information in their PAIA Information Manual prior to actually processing it.

All public and private bodies are required to ensure that the processing of personal information is lawful and that personal information in their possession is always secure. Failure to do so will have serious consequences and may result in criminal proceedings and civil claims for damages.

The Protection of Personal Information Act specifies eight conditions for the lawful processing of personal information. Regardless of whether the organisation is a large corporate, government department, school or research organisation, it will have to ensure that the processing of personal information is lawful and all personal data in its possession is properly acquired, secured and destroyed when obsolete.

SEMINAR OBJECTIVES

Participants will obtain an understanding of the legislative requirements for the processing of personal Information. On completion of this seminar, participants will be able to:

  • Demonstrate an understanding of the requirements of the Protection of Personal Information Act
  • Be able to communicate the key aspects of the Protection of Personal Information Act
  • Articulate the activities necessary to address the legal requirements for the Protection of Personal Information
  • Clarify the roles and responsibilities of all parties required to be involved in the protection of personal information
  • Develop a compliance framework for the protection of personal information
  • Update the PAIA information manual
  • Perform a privacy impact assessment
  • Manage the privacy initiative in their organisation.

SEMINAR OUTLINE

Participants will learn through discussion and practical examples how to prepare for and address the organisational, procedural, technical and legal requirements of the legislation for the Protection of Personal Information.

This seminar includes topics about:

  • Overview and key components of the Protection of Personal Information Act
  • Accountability for the processing of personal information
  • Conditions for lawful processing of personal information
  • Identifying personal information and the category of special personal information
  • Processing that is subject to prior authorisations
  • Trans-border exchanges of personal data
  • Developing a Privacy Policy and educating staff
  • Conducting a Privacy Impact Assessment
  • Contracting with Operators and verifying compliance
  • Developing a compliance framework
  • Building capability to manage Privacy
  • Privacy by Design
  • Managing information throughout its life-cycle
  • The responsibilities of the CEO, the appointed “responsible parties” and appointed “information officer”
  • Records to be maintained in the PAIA information manuals regarding the processing of personal information
  • Handling requests for information and complaints from data subjects
  • The role and responsibilities of the Information Officer
  • The role of the Information Regulator
  • Assessments undertaken by the Information Regulator
  • Civil remedies, enforcement and criminal offences
  • The information security requirements
  • The need for records management and a legal register
  • Maintaining the information quality of personal data
  • Avoiding secondary use and unlawful processing
  • Developing an Action Plan to address the requirements for the lawful processing of personal information.

King IV Corporate Governance Assessment

King IV assessmentAssess the current level of your organisation's corporate governance using this King IV assessment tool.

Read more...

COBIT Assessment as a Service

COBIT 5 AssessmentConduct a COBIT assessment using this COBIT Assessment-as-a-Service.

Read more...

POPIA Preliminary Assessments

it governance oversightPOPIA preliminary assessments provide an efficient and effective approach to determining the extent to which the requirements of the Protection of Personal Information Act have been addressed.

Read more...

Go to top