Regulations governing data privacy and information security are expanding and top of mind in the business world. You may be aware of the following requirements that recent legislative developments have placed on businesses in this regard:

According to the Promotion of Access to Information Act 2 of 2000 (PAIA), all businesses must have a PAIA manual in place by January 1, 2022;

All enterprises must abide by the terms of the Protection of Personal Information Act No. 4 of 2013 (“POPIA”) beginning on July 1, 2022;

Given the different POPIA rules that the PAIA handbook must address, older PAIA manuals often no longer adhere to standards. This comprises the elements of personal information processed by the company and its goals;

As part of their compliance obligations, all firms are required to designate and register their information officers with the Information Regulator of South Africa.