Create awareness within your company by making sure employees understand the basics of the POPI Act and what is required from them.
Important self-assessment of your organisation to understand how personal data of your customers (and staff) is collected, used, stored and processed as well as destroyed.
Create and implement the appropriate policies and procedures that manages the flow of information.
Have a POPI professional or specialist review & audit your company policies and procedures to check if they are in line with the POPI Act.
Policies and procedures need to be properly communicated via training that is provided throughout your company to create awareness and understanding.
Plan or schedule frequent assessments and/or audits of the changes within your company to ensure you stay POPI compliant.