Checklist

POPIA basics

The minimum a small business does to look after personal information.

  1. 1

    Register your information officer (by default the owner or CEO).

    Information Regulator ↗
  2. 2

    Publish a privacy notice (use our template).

  3. 3

    Only collect what you need, and know where it is stored.

  4. 4

    Get consent before sending direct marketing, and make opting out easy.

  5. 5

    Protect information: passwords, access only for those who need it, backups.

  6. 6

    If information is lost or stolen, notify the Regulator and the people affected.

    Information Regulator ↗