Proper now, there’s a phrase that’s preserving many South African enterprise executives awake at evening — and it’s not Covid-19. Whereas few had been wanting, POPIA, the Safety of Private Data Act, got here into impact on July 1 2020, and it’s going to basically change the way in which South African companies cope with shoppers’ private data.
POPIA establishes numerous minimal necessities that companies and different organisations should adjust to when coping with private data: how they collect it, use it and defend it. This consists of having to implement measures and procedures to safe that data.
These new necessities apply to each single entity within the nation that processes any private data, together with all companies. Companies have 12 months to get their home so as, with fines of as much as R10-million for non-compliance.
How will POPIA have an effect on my enterprise?
In fact, POPIA shouldn’t come as a shock to any enterprise: knowledge safety and compliance is a dialogue we’re having with most of our clients anyway. It impacts each enterprise, and each a part of the enterprise, even to the extent of guaranteeing your suppliers and your employees are compliant as effectively.
POPIA will have an effect on totally different organisations in numerous methods. Usually talking, you’ll have to assessment your knowledge assortment and storage insurance policies, and embark on a journey of constructing your whole firm extra data-savvy.
Your enterprise might have to alter its strategy to buyer data, and this can be a dialog that must be pushed from the highest downwards. If ever there was a time to spring-clean your data, that is it. Ask your self: what private data can we maintain? How can we get it, and why do we’ve it? Is the consent we’ve legitimate beneath POPIA?
From a advertising standpoint, you’ll should rethink the way you attain new clients. The times of shopping for a database after which bombarding these in it along with your advertisements and advertising messages are gone. Legally, your T&Cs paperwork should change. You may’t simply have catch-all clauses: you truly should get individuals’s specific consent to collect and use their knowledge. And in the event that they need to be forgotten, you must allow them to go.
What’s the profit for my enterprise?
POPIA is a good alternative for native companies to overtake not solely their knowledge insurance policies, however their whole strategy to knowledge safety, and transcend mere compliance to create a supply of belief and benefit with their clients.
A part of the problem is that many corporations nonetheless see knowledge safety and compliance as a price, a grudge buy or a box-ticking train. To us, it’s the precise reverse: it’s a saving, when you think about the staggering influence and value of information breaches for corporations.
Corporations that get proactive about compliance are creating large strategic benefits for themselves. Performed correctly, compliance makes what you are promoting extra danger conscious, extra clear to regulators and you’ll be able to scale back operational prices.
So what do I do subsequent?
Discover out what’s legally required to maintain your clients protected and maintain their private knowledge out of hurt’s approach. On the similar time, you’ve bought to guard what you are promoting data, which is your supply of aggressive benefit.
However to make it work, you must realise that knowledge compliance and safety is a steady course of, not a once-off occasion. You’ve bought to plan forward, and ship a transparent message all through your organisation that you just take knowledge compliance and safety critically. It’s not only a query of putting in a couple of firewalls and a few bells and whistles: it’s a tradition that must be embedded and bolstered.
In the end, it’s a good suggestion to talk to an skilled, or your managed enterprise providers supplier, to evaluate the influence of POPIA on what you are promoting. That approach, you may flip compliance to your benefit.
To be taught extra in regards to the POPI Act an the way it impacts you, click on right here.
Daniel Lotter is Head of Innovation at Itec
About Itec Group South Africa
Itec is southern Africa’s fastest-growing workplace automation, manufacturing printing and tele- communications options supplier. By means of its 47 southern African branches, the corporate implements whole workplace options primarily based on imported, industry-leading, and award-winning merchandise.
Itec serves medium-sized and huge companies in sectors as various as monetary providers and retail, supporting its progressive options with proactive service supply. A few of its 18 000 clients embrace Worth Logistics, Implats, Division of Housing, Enterprise Connexion, ADT, Rand Refinery, First Nationwide Financial institution, Anglogold Ashanti, Nationwide Well being Laboratory Companies and ADvTECH.
Itec administration rebranded the corporate in 2004 following a merger of the separate copier, printer, and fax enterprise items initially established in 1987.
For extra data, please go to www.itecgroup.co.za