Protection of personal information
POPIA is South Africa's Protection of Personal Information Act. It regulates how organisations collect, use, share, retain and protect personal information, and gives people rights concerning that information.
What it means for Cyberxperts
Cyberxperts is responsible for handling personal information lawfully in its own activities. When processing information on a client's behalf, our role depends on the agreed work and the client's lawful instructions. Relevant responsibilities include limiting access, using information for authorised purposes and meeting applicable security and notification requirements.
Why it matters when choosing a provider
Appointing a provider does not remove your organisation's own POPIA responsibilities. You need to understand what information the provider will handle, why it needs access and what safeguards and contractual obligations apply. Registration with the Information Regulator does not, by itself, certify compliance.
Review the security measures supporting your compliance
Our complimentary assessment at no cost offers an initial view of your security maturity. It can help identify areas for further review, but does not establish POPIA compliance or replace legal advice.