While GDPR and the POPI Act provide guidelines for protecting you data, there are plenty of ways that your business can go about securing the personal information in your possession. Best practices for the protection of Personally Identifiable Information include:
Putting data collection, identification and deletion policies in place
Ensuring that your data is securely backed up
Managing access and permissions