PoPI Act also impacts on disposal of digital devices

22nd January 2016

By: Schalk Burger

Creamer Media Senior Deputy Editor

  

Font size: - +

The manner and rigour with which businesses destroy obsolete devices and data will become more robust to meet the exacting specifications of the Protection of Personal Information (PoPI) Act, but the requirements are best practice that will benefit South African businesses, says information technology (IT) asset disposal firm Xperien CEO Wale Arewa.

Under the PoPI Act, for which an implementation date has yet to be set, organisations will be liable for the safety of the information they hold. Companies could face significant fines, civil claims and reputational damage if they fail to upgrade IT security systems ahead of the implementation of the Act.

Successful adaptation will depend on a comprehensive understanding of the digital aspect of the new laws. Companies will be forced to change their processes to ensure that the personal information and data they collect is protected, he notes.

Further, many organisations have not considered the disposal of digital devices, which could contain personal information, in terms of the PoPI Act’s requirements.

However, during its work with specialist business consultancy IACT-Africa on PoPI compliance for IT asset disposal, Xperien realised that, instead of it being regarded as a burden by most organisations, the Act actually presented opportunities, says Arewa.

“Over the past 18 months, our clients have repeatedly seen compliance with the PoPI Act as support and not a hindrance to business growth through realising how the PoPI Act philosophy of respecting data privacy in South Africa, in much the same way as in other parts of the world, is enabling new products and services,” says IACT-Africa founder and CEO John Cato.

These new services range from advanced document- and device-shredding capabilities that more effectively destroy paper and electronic documents to new online education offerings focused on PoPI Act compliance.

Further, organisations are being prompted to reconsider how they approach the reuse, recycle or recover their electronic waste (e-waste) to prevent sensitive information loss, enabling them to implement best practice requirements for the disposal and recycling of e-waste.

“Something as innocent as the office copier, fax or printer has the potential to sink your compliance efforts unless properly managed,” says IACT-Africa PoPI compliance division PTC consultant and CEO Dr Peter Tobin.

“When talking to our clients about compliance with the PoPI Act, we look at the life cycle of all the digital devices and the risks those items represent in terms of noncompliance if not handled correctly,” he adds.

Edited by Martin Zhuwakinyu
Creamer Media Senior Deputy Editor

Comments

The content you are trying to access is only available to subscribers.

If you are already a subscriber, you can Login Here.

If you are not a subscriber, you can subscribe now, by selecting one of the below options.

For more information or assistance, please contact us at subscriptions@creamermedia.co.za.

Option 1 (equivalent of R125 a month):

Receive a weekly copy of Creamer Media's Engineering News & Mining Weekly magazine
(print copy for those in South Africa and e-magazine for those outside of South Africa)
Receive daily email newsletters
Access to full search results
Access archive of magazine back copies
Access to Projects in Progress
Access to ONE Research Report of your choice in PDF format

Option 2 (equivalent of R375 a month):

All benefits from Option 1
PLUS
Access to Creamer Media's Research Channel Africa for ALL Research Reports, in PDF format, on various industrial and mining sectors including Electricity; Water; Energy Transition; Hydrogen; Roads, Rail and Ports; Coal; Gold; Platinum; Battery Metals; etc.

Already a subscriber?

Forgotten your password?

MAGAZINE & ONLINE

SUBSCRIBE

RESEARCH CHANNEL AFRICA

SUBSCRIBE

CORPORATE PACKAGES

CLICK FOR A QUOTATION