CCTV policy and POPIA: does what happens at the camera match what the policy says?
A CCTV policy is usually written once and filed. What POPIA expects of cameras at schools and workplaces, where policy and practice drift apart, and a four-step check of who sees the footage and how long it is kept.
Read more →Is your POPIA privacy notice true? Checking a copied template against what really happens
A privacy notice copied from a template reads well, but does it describe what your organisation really collects and who receives it? What Section 18 expects, and a four-step check for employers, HR and schools.
Read more →POPIA documents your organisation needs, and how to tell if anyone uses them
Eight documents most organisations are expected to have, each with a one-minute test: would staff recognise it, and does it match what really happens? A practical check for employers, HR and schools.
Read more →Personal information stored outside South Africa: what POPIA Section 72 says
Payroll, school apps, survey tools and cloud backups often keep information on servers in another country. Here is what Section 72 says, and a practical way to find out where your data goes.
Read more →What is a PAIA Section 51 Manual — and does your organisation need one?
Every private body in South Africa is required to maintain a PAIA manual — not just government departments. Here's what the obligation actually covers, and what the lapsed small-business exemption means for you now.
Read more →