The Protection of Personal Information (PoPI) act is about ensuring the personal information of your employees, partners and customers is relevant and managed securely. In essence, you shouldn’t have any information about someone beyond that which you require for your business. Equally, you must take every reasonable measure to secure that information.
No ad to show here.
For IT companies, this means the access to sensitive information in an organisation needs to be managed on an ongoing basis. It isn’t good enough to do a probe of your environment once a year to check if the access assigned to people is appropriate for their job function.
Read more on Ventureburn.
