Complying to the Protection of Personal Information (PoPI) Act is a multi-layered exercise, that includes governance compliance to new processes, closing gaps and securing personal information. Paul Raath from Bizmod says that it is not a quick-fix and the most important fundamental for all organisations is to ensure the adoption of a privacy culture by all employees is achieved.
Despite organisations jumping through hoops and ticking all the boxes, if employees don’t embrace the change and adopt a strong privacy culture, the company’s s privacy programmes will fail. Implementing new policies and procedures are an unavoidable part of the process and employees will be required to adopt the new ways of working within the parameters of the PoPI Act.