Kevin BishopConsulting
Independent Compliance Consulting · Johannesburg
Independent POPIA and PAIA consulting for mid-market organisations — practical, structured frameworks grounded in 15 years of real-world compliance, quality, and risk management experience.
Approach
Frameworks that are documented, auditable, and traceable — from the first assessment through to ongoing reviews.
Specifically-tailored deliverables, designed to function as part of day-to-day operations — not templates that sit in a drawer.
Genuinely robust data protection controls that reduce real risk — with the added reassurance that they'd hold up under scrutiny.
Services
A structured gap analysis against POPIA and PAIA requirements — a clear, honest picture of where you stand and where corrective action is needed.
Fully standalone — no obligation to go further.
End-to-end build-out of your compliance framework — Information Officer registration, PAIA Manual, Privacy Policy, Processing Register, operator agreements, and staff training.
Continued support once the framework is live — keeping it current as your operations, tools, and vendors change, and as POPIA, PAIA, and related regulatory requirements evolve.
A fast, fixed-scope look at your POPIA and PAIA exposure — scored against the core requirements and delivered as a short, prioritised report. A lower-commitment starting point before the structured process above.
Read about the Readiness Snapshot →
Sign up for the Comprehensive Gap Assessment within 30 days of your report delivery and the Snapshot fee is credited in full.
About Kevin
Fifteen years building compliance and risk frameworks across a wide range of operational environments — different enough in each case to demand a genuinely tailored approach, not a repeated template. That range now underpins an independent POPIA and PAIA practice.
Working with Kevin Bishop Consulting is personal. You deal directly with the owner, from the first conversation to handover. The person who scopes your work is the person who does it, and is available to you throughout.
The approach is practical. A policy only protects people when the organisation understands and uses it, so the work is built around how you actually operate.
Get in touch
A 30-minute discovery call, no obligation — an honest picture of your exposure and what it would take to close it.