Personnel having permanent or regular access to personal information are required to understand the provisions of POPIA, regulations made in terms of the Act, applicable codes of conduct, and information obtained from the Regulator.

Course content

The Protection of Personal Information Act (POPIA) Regulation 4(1)(e) requires responsible parties to ensure all personnel having permanent or regular access to personal information understand the provisions of the POPIA, regulations made in terms of the Act, applicable codes of conduct, and information obtained from the Regulator. POPIA also requires all personnel are to be trained to perform their data protection responsibilities and know how to respond promptly to a personal information breach in their respective business activities. This course is designed to assist responsible parties fulfill this obligation.

Course objectives

Participants will obtain an understanding of the provisions of POPIA, related regulations and information provided by the Regulator. More specifically, on completion of this course participants will be able to demonstrate:

• an understanding of the provisions of POPIA
• knowledge of the conditions for the lawful processing of personal information
• an appreciation for the rights of data subjects.

Course outline

Participants will learn about:

• Applicability of the Protection of Personal Information Act
• Accountability for the lawful processing of personal information
• Importance to respect data subject rights
• Necessity for a valid legal basis to process personal information
• Obligation to minimise the collection, processing and retention of personal information
• Requirement to take all the measures necessary to prevent harm to data subjects
• Necessity to be transparent about all the purposes for processing personal information
• Processing beyond the initial purpose to be prohibited
• Need for safeguards to protect the processing of personal information
• Importance of information quality and necessity to rectify incorrect information
• Data subjects being given the opportunity to intervene.