The Protection of Personal Information Act (POPI or POPIA) was signed into law on 19 November 2013. POPIA will come into full effect from 1 July 2021.
The main purpose of POPIA is to:
- give effect to everyone’s right to privacy as enshrined in the Constitution;
- facilitate the balance between the right to privacy with other rights, such as the right to access information;
- safeguard important interests such as the free flow of information within the Republic and across international borders.
The ambit of POPIA includes schools as entities that handle personal information for administrative purposes. The standards set in POPIA for the protection of personal information will significantly impact upon the collection, handling and disposal of data in schools.
The attached policy memorandum outlines the requirements of POPIA and the implications for independent schools. A POPIA infographic is also provided.
ISASA also recommends that schools review the pro forma Confidentiality and Non Disclosure documents.