popi processing limitation

  • Protection of Personal Information Act - Section 9

    "Personal information must be processed

    (a) lawfully, and

    (b) In a reasonable manner that does not infringe the privacy of the data subject ".


    So, what is the purpose?

    Business process descriptions provide the context for processing personal information – i.e. the specific purpose.

    Data collection must be proportionate to the purpose – minimal .

    Data processing must be for a legitimate purpose.

King IV Corporate Governance Assessment

King IV assessmentAssess the current level of your organisation's corporate governance using this King IV assessment tool.


COBIT Assessment as a Service

COBIT 5 AssessmentConduct a COBIT assessment using this COBIT Assessment-as-a-Service.


POPIA Preliminary Assessments

it governance oversightPOPIA preliminary assessments provide an efficient and effective approach to determining the extent to which the requirements of the Protection of Personal Information Act have been addressed.


Go to top