In October 2005 the South African Law Commission finalised its investigation into privacy protections and recommended a whole new law to address the safety of private and personal data. The Bill aims to protect the constitutional right to privacy of personal information and bring South Africa in line with international data protection laws. The recommended Bill is now before Parliament for final approval.
The Protection of Personal Information Bill will regulate every step of data processing relating to personal information from collection to destruction. It will apply to any organisation that stores or processes information on individuals, irrespective of whether the individuals are employees, shareholders, suppliers or customers. This Bill will prohibit organisations from supplying information such as names, addresses, email addresses, ID numbers, employment history, health data and the like to third parties without the person’s consent. Looking at the scope of the Protection of Personal Information Bill, almost all areas in an organisation will be affected. This implies that organisations will have to review their internal structures in order to determine how compliant they are with the new Bill. Noncompliance may result in criminal fines, civil liability and complaints to the Regulator.
In order to comply with the provisions of the Bill, organisations will have to implement new policies, procedures and controls. Deloitte Legal has developed a solution to assist in this regard, which ensures an organisation will not only be compliant, but will derive tangible business benefits as a result of the compliance process. Click here to learn more about PPI and the Deloitte PPI offering.
Protection of Personal Information or Data Privacy are terms that many South African organisations are only beginning to encounter. With the promulgation of the Protection of Personal Information law imminent and the need for organisations to undergo privacy compliance journeys, does your organization understand the basic principles of protecting personal information according to the forthcoming law?
Deloitte Risk Advisory has produced a tutorial video on the key principles contained in the Protection of Personal Information law to assist your organization in creating data privacy awareness in preparation for the new compliance processes that organisations will be soon facing. The tutorial video has the Deloitte subject matter experts on data privacy discussing the key principles of this new law whilst providing you with a practical, easy to understand tutorial.
Download now- An overview of the Protection of Personal Information Bill - By Daniella Kafouris