POPI Compliance Questionnaire 1Basic Information2POPI Questionnaire Are you POPI Compliant? Let's find out... In 2 easy steps we will have all the information we need to assess your POPI Compliance. Let's start with some basic information... Please complete your details belowCompany* First Name* Last Name* Email Address* Contact Number* Time for the compliance questions... Please answer all the questions below.Are you aware of the requirements from a business that the POPI Act has laid out?* Yes No All business are required to become compliant. This requires an extensive gap analysis as well as a plan to make significant policy and operational changes in the way a business manages data and inforamtionDo you understand that all data collected must be collected with the direct or explicit consent from the data subject? Yes No All businesses must collect data from the data subject and a business must have the burden of proof when obtaining such consent. POPI Act of 2013 - Condition 6, subsection 17 and 18Are you aware of the changes within the law regarding marketing practices. Yes No How to market to your clients and customers have stricter restrictions. POPI Act of 2013 - Chapter 8 subsection 69Do you share personal information beyond the borders of South Africa? Yes No The POPI Act provides clear guidelines to which a business can transfer personal information beyond the South African Borders. POPI Act of 2013 - Chapter 9 Subsection 72Did you know that a data subject has the right to know what types of information you have of them, and has the rights to revoke the use of their data. To the extent where they may request you to remove their data from your data bases and provide proof or guarantee of such? Yes No The act is clear that a data subject has rights to keep their inforamtion safe. This does require from a company to be aware of their client lists, their client data base and repositories as well as linking any other process where information may exist within a company to ensure that they can affect a data subjects request to change/delete or update any of their data. POPI Act of 2013 - Condition 8; Subsection 23 - 33Do you know what the penalties are of non compliance? Yes No The penalties for noncompliance is far reaching, this may include a fine or prison sentence or both and civil lawsuits. But even more damaging is the reputational damage a company may face and that may in actual fact be more damaging than the aforementioned consequences. POPI Act of 2013 - Chapter 11 subsection 100-109Are you aware of what the requirements are when referring to the 8 conditions? Yes No The 8 conditions are prescribed guidelines in the act that indicates the various requisits that business must have in place when addressing their compliance inititatives. POPI Act of 2013 - Chapter 3; Part A; Subsection 8 - 25Do you understand that your security safegaurds will need to be improved upon? This includes any electronic or physical data? Yes No Contrary to popular belief, companies assume that if they have password protection and encryption that it is enough to protect the company. However, physical security is just as important and collecting data from the moment you enter a company right through the information lifecycle requires protect or some form of security measure. POPI Act of 2013 - Condition 7 Subsection 19-25Do you want us to call you with more infromation on the POPI Act? Yes No Our team has over 5 years of experience in POPI compliance specialising in the small to medium enterprise.
