DevMan, as an Operator, has put the following in place to meet compliance requirements: We endeavour to follow industry standard best practice for security (See our Technical and security document). The DevMan team has been made aware of POPIA requirements, and all are bound by confidentiality agreements. We regularly carry out assessments of technical and organizational safeguards. As a POPIA specialist, Gregg Abrahams has been appointed as the Information Officer for DevMan. The following are key areas that you as the responsible party could give attention to: Confirm who your information officer is and make your team aware of POPIA requirements. POPIA covers structured (i.e. DevMan database) and unstructured (i.e. spreadsheets, etc.) data. Unstructured data is very difficult to manage and secure, however DevMan provides the means to have accurate data stored in one structured place. Begin the process of storing relevant unstructured data in DevMan. Identify groups of people on your database (e.g. Donor, Alumni etc) including: The reason for each group; The information you can legally keep per group. You must allow data subjects to actively opt in to direct marketing communication. This should not be pre-selected and should allow for a simple opt-out. Give attention to information quality and data processes. In the year ahead, we will implement further DevMan tools to help you to be compliant and will communicate these to you on a regular basis. Read what the act entails here. Download document