POPIA Compliance

EAST RAND WALLING (PTY) LTD (“East Rand Walling”) POPIA COMPLIANCE UPDATE

The Protection of Personal Information Act, 4 of 2013 (“POPIA”) came into effect on 1 July 2020. POPIA regulates how personal information of natural and juristic entities must be processed (“data subjects”) and sets out certain obligations that must be complied with when processing personal information.

POPIA provides for a 1 year grace period during which a responsible party (party responsible for processing the personal information of data subjects) must ensure compliance with the provisions of POPIA.

What is East Rand Walling doing in order to ensure compliance with POPIA?

  1. Accountability
    The responsible party must implement measures to ensure compliance with the lawful processing conditions
  2. Processing Limitation
    The purpose of the processing of personal information must be justifiable and must take place in a lawful, reasonable and non-excessive manner.
  3. Purpose Specification
    Personal information must be collected and processed for a specific and defined purpose
  4. Further Processing Limitation
    Personal information may not be processed for a further purpose where such purpose is not compatible with the original purpose of the collection or where so authorised by the Information Regulator
  5. Information Quality
    The responsible party must ensure the personal information being processed is complete, accurate, not misleading and updated where necessary
  6. Openness
    The responsible party must notify the data subject of its processing activities
  7. Security Safeguards
    The responsible party must implement security safeguards to ensure the integrity and confidentiality of the personal information is protected
  8. Data Subject Participation
    Data subjects have certain rights in terms of their personal information held by a responsible party, which includes requesting access thereto and the correction or deletion thereof.
    East Rand Walling has compiled a robust POPIA Compliance Programme that is currently being rolled out internally which addresses the above mentioned lawful processing conditions as well as all other requirements set out under POPIA.

East Rand Walling POPIA Compliance Programme

Under the POPIA Compliance Programme, East Rand Walling has:

  1. Reviewed its internal processes and created new processes to ensure compliance with the lawful processing conditions, including processes related to the collection, storage and destruction of personal information;
  2. Updated our internal policies to allow for the monitoring of compliance with the provisions of POPIA;
  3. Created a Privacy Policy, which will apply to East Rand Walling, its dealers and any third parties processing personal information on behalf of East Rand Walling, requiring compliance with the provisions of data privacy legislation, including POPIA, when processing personal information;
  4. Reviewed and updated all our agreements to provide for data privacy and protection in accordance with the requirements of POPIA;
  5. Implementing new and updating current security safeguards to ensure the proper protection of personal information processed by East Rand Walling;
  6. Created a process which allows data subjects to request access to, or the correction or deletion of their personal information held by East Rand Walling;
  7. Provided training to the various business areas within East Rand Walling to ensure they remain aware and up to date of their obligations under POPIA;
  8. Created a Privacy Statement to ensure data subjects are notified of all of East Rand Walling processing activities in relation to their personal information;
  9. Improved East Rand Wallings security and data breach processes to meet the requirements of POPIA.

What is the impact of POPIA on East Rand Wallings stakeholders, business partners, customers, dealers, suppliers, service providers and other third parties?

East Rand Walling is committed to protecting individual and corporate personal information. East Rand Walling will only process personal information in accordance with the provisions of POPIA and other applicable data privacy legislation.
In order to ensure compliance, East Rand Walling may contact you to request consent for specific processing activities, require you to sign a new agreement or addendum to provide for data privacy provisions, ask you to complete an additional form or document, request you to verify and/or update your personal information or any other ad-hoc request which relates to complying with the provisions of POPIA.
Please view our Privacy Statement on www.eastrandwalling.co.za for further details on East Rand Walling’s processing activities. If you have any questions, please contact us on info@eastrandwalling.co.za.
Where you are processing East Rand Walling personal information, or processing personal information on behalf of East Rand Walling, such processing must take place in accordance with East Rand Wallings Privacy Policy which will be shared with you by East Rand Walling and will be available upon request.