Popi In a Box

Welcome to POPI in a Box. This app is an off the shelf solution aimed at facilitating basic compliance to the Protection of Personal Information Act ("POPIA") of South Africa (2013) (the "Act") for South African businesses. The app may also be used to optimise compliance by digitally enhancing processes already in place within small and medium enterprises, as well as large corporations. POPI in a box may also change the way your business generally thinks about its data management and governance processes.

The Act is governed and will be enforced by the Information Regulator of South Africa. Although the Act is not enforceable as yet, proactive compliance to the requirements is encouraged in order to prevent non-compliance with the Act, which could potentially lead to regulatory fines of up to R10 million, imprisonment, civil action, lost profits and a loss of confidence in your business and your brand from customers, employees, suppliers and business partners. Although you will have 12 months within which to comply with the Act once the Act is officially declared effective, in our experience, this is not enough time to ensure compliance. Ensure that you take action NOW!

Small and Medium Enterprises

This app will give SMEs a start to their POPIA compliance journey without having to spend exhorbitant fees upfront on any compliance outsourcing, or the sourcing of expensive tools. POPI in a Box will guide you in a simplistic way, helping you to achieve basic compliance (barring any special circumstances your business may be faced with). The tool is aimed at the owners, directors, partners, CEOs, compliance officers or any head of a small or medium enterprise.

Large Corporates

Large corporates have a much more complex environment. POPI in a Box will give you a good start to your compliance journey, but you may need more than an off the shelf solution. Get in touch with us to assist you with some consulting services to tailor your POPI compliance journey. If you have already implemented some of the POPI compliance requirements, POPI in a Box can improve your current processes by enhancing them through digital means. We have developed some key processes which you may plug and play in your organisation. More specialised offerings, however, can be developed. Should you require more information, please contact us at [email protected].

What POPI in a Box offers you

The app has been designed to take you through a set of detailed questions to determine your current status of compliance to the Act. Once your level of compliance has been determined, we will then recommend next steps to ensure that any compliance gaps relating to your people, processes and technologies are closed. The app offers you a Privacy Policy, a step by step remediation plan, as well as other legal and practical templates that you may use within your business.

In addition, the app may be used to help digitise the following basic processes:

- information breach management

- employee access rights, as well as the correction/deletion of personal information (forthcoming attraction)

- customer access rights, as well as the correction/deletion of personal information (forthcoming attraction)

- privacy impact assessment for external service providers and independent contractors

- privacy impact assessment for external service provider relationship managers

- online training for your employees

- privacy risk assessment (forthcoming attraction)

- a set of key indicators to measure, track and report ongoing compliance (forthcoming attraction)