Often responsible parties rely on their personnel to identify and report personal information breaches. Consequently, individuals processing personal information should be able to identify the personal information breaches that may occur in their working environment.

Course overview

The Protection of Personal Information Act (POPIA) introduced the requirement for certain types of personal information breaches to be notified to the Information Regulator and the data subjects whose personal information have been affected.

Breach notification is an organisational measure (alongside information security and cybersecurity breach management) to protect data subjects and their personal data. Should an interference or breach occur, data subject trust is enhanced when responsible parties act swiftly to provide them with information on:

• the risks presented as a result of the interference with their rights or breach of the protection for their personal data
• the steps the affected data subjects can take to protect themselves from its potential consequences.

Often responsible parties rely on their personnel to identify and report personal information breaches. This course is designed to assist personnel identify personal information breaches.

Course objectives

Participants will obtain an understanding of :

• how to identify, without undue delay, possible incidents of non-compliance with the conditions relating to the processing of personal information that are personal information breaches
• the potential for harm to affected data subjects
• the measures and actions which should be taken immediately after a breach of this nature has occurred.

Course outline

Participants will learn about:

• what is a personal information breach?
• what are relevant data protection policies related to personal information breaches?
• what are the responsibilities of operators?
• how to identify possible incidents of non-compliance that are personal information breaches?
• root causes of personal information breaches
• types of personal information breaches
• categories of data subjects
• types of personal information that may be affected
• potential for harm to affected data subjects
• required reaction to a personal information breach
• notification of the information officer.