This course covers a comprehensive guide to South Africa’s Protection of Personal Information Act (POPIA) for any organisation that collects, stores, or processes personal information — from small businesses and sole traders to large corporations and public entities. It is an ideal practical introduction to the legal obligations, compliance responsibilities, and operational standards required of every responsible party under POPIA.

This course includes all of the resources required to build and maintain a compliant data protection environment, including lesson-by-lesson assessments and compliance documentation.

KEY CONCEPTS COVERED INCLUDE:

• The Legal Framework: A complete overview of POPIA, its purpose, implementation date, and how it operates alongside the Promotion of Access to Information Act (PAIA).
• Scope of Compliance: Who must comply, what constitutes personal and special personal information, and which exemptions apply.
• Processing & Consent: Lawful grounds for collecting and processing personal information, and the strict requirements for obtaining valid consent.
• 8 Conditions for Lawful Processing: The core conditions every Information Officer must uphold — from Accountability and Purpose Specification to Security Safeguards and Data Subject Participation.
• The Information Officer: Registration obligations, statutory duties under Section 55, additional duties under Regulation 4, and the consequences of non-compliance.
• Compliance Framework & PIIA: How to develop and implement a compliance framework, conduct a Personal Information Impact Assessment, and establish internal policies and guidelines.

Any employee, manager, or Information Officer can complete this training at their own pace. Have peace of mind that your organisation’s data handling practices, compliance policies, and information security procedures are fully aligned with POPIA’s requirements.