Commenting on the SA Protection of Personal Information Act (POPIA)

The Information Regulator has asked for comments on the implementation of the POPIA. Closing date Monday, 31 Aug. EFSA intends to submit a comment on the requirement for companies to have an Information Officer (IO). Each company, no matter what its size, is required to appoint an IO who is legally responsible for the implementation of the Act. In the case of small companies or sole proprietors normally the owner-director would register themselves as the IO. However, the PAIA Act of 2000, which deals with access to information and is partially incorporated within POPIA, also requires that each company appoints a representative. We will be asking the Information Regulator to clarify this and to ensure that for small and medium sized companies both roles can be held by one person. If you wish us to add other clarifications please let me know by this coming Friday, 28 August ([email protected]).