Page 53 - Q&A

Next the team would need to assess which policies, agreements and other
documents will have to amended or developed and then implemented within
the business and its operations. Such implementation will have to provide for
training to staff on new practices, procedures and documentation.
The task team will need to make sure that all aspects of the business is reviewed.
This will also include assessing the involvement of third parties that you share
information with or that may process information on your behalf and that the
necessary agreements or undertakings are put in place with such third parties.
Commercial The task team will have a big job on its hands, particularly with a business that is

data intensive. As such the team will need to move fast to have thins in place by
30 June 2021, have a clear mandate and have the necessary expertise in order
to ensure that what is rolled out is appropriate, implementable and compliant.

If your business has not yet moved aggressively on ensuring its POPIA
compliance, you would be strongly advised to do so without delay, particularly
if you process substantial information, as the scope and complexity of your
obligations can easily be underestimated.

47