ovations group - introducing the protection of personal information (popi) act and achieving...
DESCRIPTION
Ovations Group is ideally positioned to help South African companies implement processes and best practices to ensure compliance with the Protection of Personal Information (PoPI) act. This presentation outlines the fundamentals of the act and explains how the Ovations Group can assist companies in avoiding the pitfalls PoPI presents.TRANSCRIPT
![Page 1: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/1.jpg)
![Page 2: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/2.jpg)
OVERVIEW
OUR APPROACH
OUR OFFERINGS
CONCLUSION
![Page 3: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/3.jpg)
DO YOUR POLICIES AND PROCEDURES ENABLE DATA PRIVACY?
![Page 4: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/4.jpg)
THE PROTECTION OF PERSONAL INFORMATION (POPI) ACT WILL HAVE AN IMPACT ON ALMOST EVERY COMPANY OPERATING IN SA?
DID YOU KNOW:
![Page 5: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/5.jpg)
THE POPI ACT WILL
ESTABLISH ACODE OF CONDUCT FOR CONFIDENTIAL HANDLING OF PERSONAL INFORMATION
![Page 6: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/6.jpg)
CONDITIONS FOR LAWFUL PROCESSING OF PERSONAL INFORMATION
Collection of data
Processing limitations
Retention of data
Deletion of information
Data security
Data subject participation
Notification
7
![Page 7: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/7.jpg)
COLLECTION OF DATA
Information must be collected directly from the individualExceptions:– Public records– Consent given to a third party – Law enforcement
![Page 8: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/8.jpg)
COLLECTION OF DATA
The person must be aware of the purpose for collecting their personal information and give consent
There is additional consent needed to store and process data outside of South Africa
![Page 9: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/9.jpg)
PROCESSING LIMITATIONS Businesses are not permitted to processpersonal information of children under 18
![Page 10: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/10.jpg)
Religious or philosophical beliefs
PROCESSING LIMITATIONSUnless specifically permitted, you areNOT ALLOWED to process information about…
![Page 11: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/11.jpg)
Trade union membership
or political opinions
PROCESSING LIMITATIONSUnless specifically permitted, you areNOT ALLOWED to process information about…
![Page 12: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/12.jpg)
PROCESSING LIMITATIONSUnless specifically permitted, you areNOT ALLOWED to process information about…
Health, sexual life or biometric details
![Page 13: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/13.jpg)
Race or ethnic origin
PROCESSING LIMITATIONSUnless specifically permitted, you areNOT ALLOWED to process information about…
![Page 14: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/14.jpg)
PROCESSING LIMITATIONSUnless specifically permitted, you areNOT ALLOWED to process information about…
Criminal Behaviour
![Page 15: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/15.jpg)
RETENTION OF DATA
Information must NOT be kept any
longer than is necessary for
processing
![Page 16: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/16.jpg)
DELETION OF INFORMATION
Data must be destroyed as soon as possible
It must be impossible for data to ever be recovered or reconstructed
![Page 17: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/17.jpg)
DATA SECURITY
Technical and organisational security measures to prevent data loss or damage, or unlawful access to personal information are essential.
![Page 18: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/18.jpg)
DATA SUBJECT PARTICIPATION
A person must be able to:
Find who has their data
Request a copy of all personal information heldby an organisation
Request amendments or deletion of their data, and receive proof this has been done
**********
![Page 19: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/19.jpg)
ENFORCEMENT
Official complaint process
Punishment up to 10 years imprisonment and/or fine up to R10 million
Civil action may also be taken
![Page 20: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/20.jpg)
OVERVIEW
OUR APPROACH
OUR OFFERINGS
CONCLUSION
![Page 21: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/21.jpg)
OUR APPROACH
We can help you define a strategy and roadmap to become compliant with the POPI Act.
We provide a complete and holistic execution that interweaves the key areas of PEOPLE
PROCESSESTECHNOLOGY
![Page 22: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/22.jpg)
PROCESS DIAGRAMOur transformational approach focusing on enablement of people, process and technology.
INSIGHTTRANSFORMATION
ROADMAPENABLEMENT
• People understanding• Skills and capacity• Process capability• Technology availability
and capability
Design the business response to ensure effective and efficient compliance
Prioritised investment route map based on business and IT considerations in support of defined architecture
Currentstate
POPI vision and strategy
People educationProcess compliance
Technology capability
![Page 23: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/23.jpg)
PROCESS DIAGRAMOur transformational approach focusing on enablement of people, process and technology.
INSIGHTTRANSFORMATION
ROADMAPENABLEMENT
• People understanding• Skills and capacity• Process capability• Technology availability
and capability
Design the business response to ensure effective and efficient compliance
Prioritised investment route map based on business and IT considerations in support of defined architecture
Currentstate
POPI vision and strategy
People educationProcess compliance
Technology capability
![Page 24: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/24.jpg)
PROCESS DIAGRAMOur transformational approach focusing on enablement of people, process and technology.
Currentstate
POPI vision and strategy
People educationProcess compliance
Technology capability
Status of Enablement
Business and compliance risks
Business and risk
considerations
Costs and time considerations
Business architecture
Information systems architecture
Technology architecture
People enablement
![Page 25: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/25.jpg)
OVERVIEW
OUR APPROACH
OUR OFFERINGS
CONCLUSION
![Page 26: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/26.jpg)
STRATEGY
POPI Strategy and Implementation Roadmap
Business case development
![Page 27: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/27.jpg)
TRAINING AND EDUCATION
POPI Act and Implications customised for implemented solutions
![Page 28: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/28.jpg)
CHANGE & COMMUNICATION
Strategy & Planning
Development & execution of awareness campaigns
![Page 29: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/29.jpg)
DATA
Data Audits, Security &
Management
![Page 30: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/30.jpg)
PROCESS & CONTENT
Process Solution Design & Automation
Records Management assessment, design & enablement
Security policy enablement
Content archival solutions
Content Governance
Document destruction services
![Page 31: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/31.jpg)
OVERVIEW
OUR APPROACH
OUR OFFERINGS
CONCLUSION
![Page 32: Ovations Group - Introducing the Protection of Personal Information (PoPI) act and achieving compliance](https://reader035.vdocuments.us/reader035/viewer/2022062312/553a1b05550346f02f8b4b1e/html5/thumbnails/32.jpg)
Ovations is equipped to transform your business to comply with the Protection of Personal Information Act.
LET US HELP YOU BECOME COMPLIANT