South African organisations now have one year to comply with the long-awaited Protection of Personal Information (POPI) Act (POPIA).
This after the Presidency recently announced the commencement of certain sections of the 2013 data privacy law.
The Act, which gives effect to section 14 of the Constitution, provides that everyone has the right to privacy.
Since 2013, the Act has been put into operation incrementally, with a number of sections of the Act having been implemented in April 2014.
The sections that will commence on 1 July 2020 are:
- Sections 2-38 dealing with exclusions and the conditions for lawful processing of personal information;
- Sections 55-109 dealing with the responsibilities of information officers, direct marketing (unsolicited electronic communications), relevant Codes of Conduct and enforcement mechanisms (offences, penalties and administrative fines); and
- Section 114(1), (2) and (3) which deals with transitional arrangements.
The sections that will commence on 30 June 2021 are:
Sections 110 and 114(4), which deal with the amendment of laws and the transfer of functions from the South African Human Rights Commission to the Information Regulator regarding the Promotion of Access to Information Act (PAIA).
Responsible conduct
Francis Cronje, an information governance specialist and contributor to the POPI Act, comments: “What all of the above entails is that the Act as a whole will commence on the 1st of July 2020, apart from those sections that have already commenced, and those that will commence on the 30th of June 2021.”
The purpose of the law is to ensure all South African institutions conduct themselves in a responsible manner when collecting, processing, storing and sharing another entity’s personal information by holding them accountable should they abuse or compromise personal information in any way.
Businesses that don’t comply with the POPI Act, regardless of whether it’s intentional or accidental, can face severe penalties.
The Act makes provision for fines of up to R10 million and a jail sentence of up to 10 years, depending on the seriousness of the breach.
Cronje explains that Section 114(1) states that all processing of personal information must within one year after the commencement of this section be made to conform to this Act.
“In essence, from the 1st of July 2020, organisations will have 12 months, or one year, to comply with the conditions for the lawful processing of personal information. No more delays, no more excuses, no more hiding,” he says.
Organisations, public and private, big and small, and anyone processing personal information, will have to align their processing activities to the Act, Cronje notes.
“Whether such processing involves personal information of your employees, prospective employees, part-time workers, contractors, clients, members, consumers, customers or third-parties or anybody else whose personal information you collect, use, share, retain, store, archive, delete or destroy – you, as a processing entity, will have to ensure that you, or anybody that processes personal information on your behalf, complies with the Act.”
Rights of data subjects
Pria Chetty, director at law firm EndCode, points out that up until 22 June 2020, limited sections in the POPI Act were in force.
She notes these were aimed at enabling the Information Regulator to set up operations and for regulations to be issued.
“The announcement from the Presidency confirms that the critical sections of POPIA will now take effect. These are substantive sections that create rights, duties, obligations, procedures and penalties.”
According to Chetty, the rights of data subjects to personal data protection safeguards finally have legal force, bringing South Africa closer to harmonisation with international and continental instruments on privacy and data protection.
“Of further significance, particularly in the context of digital innovation and advances in healthtech and edtech, is the regulation of the processing of special personal information – that will balance the need for access to information with the need to protect sensitive health and children’s information.”
She says organisations will need to address with intent now the provisions regulating the responsibilities of information officers, sectoral Codes of Conduct and provisions regulating direct marketing.
“The regulator will be pleased to see the procedures for dealing with complaints, and other enforcement mechanisms taking effect,” says Chetty.
“Ultimately, it marks the entry of non-negotiable obligations and duties for organisations regarding information privacy practices.”
Chetty believes compliance with the substantive provisions of the POPI Act will be a significant effort for many South African organisations, some of which have been preparing for the law’s enactment for years.
“Taking account of the ways in which digital technologies have altered every element of our work and society at large, embedding information privacy practices at all levels of the organisation is what is needed,” she says.
Strict deadline
Livia Dyer, partner at Bowmans, says the Information Regulator was established to implement and enforce POPIA, and its powers include the ability to levy administrative fines (of up to R10 million).
“POPIA provides for a transitional period of one year,” she notes. “This means that both private businesses and organisations and public bodies that process personal information must, at this stage, ensure they comply with POPIA by 1 July 2021.”
According to Dyer, the transitional period can be extended by a further three years for specific classes of information and certain data controllers (referred to as “responsible parties” in the Act), but there is no guarantee that an extension will be given.
“A year may seem like long time, but business leaders need to initiate the compliance process as soon as possible because, in many cases, compliance will require the implementation of fundamental changes to their organisations,” says Louella Tindale, data protection specialist at Caveat Legal.
Meanwhile, Rohan Isaacs and Tatum Govender from Herbert Smith Freehills SA, say consumers will benefit from POPI’s requirements that their personal information must be protected and that it can only be collected or handled where there is a lawful justification for doing so.
“POPI gives consumers specific rights in respect of organisations handling their personal information and it gives consumers greater control over their personal information. Consumers are informed about what personal information is collected, by who and why so that consumers are able to make informed decisions,” they conclude.
To find out more about the POPI Act, click here.
For information as to how Relocation Africa can help you with your Mobility, Immigration, Research, Remuneration, and Expat Tax needs, email info@relocationafrica.com, or call us on +27 21 763 4240.
Sources: [1], [2]. Image sources: [1], [2].
India Has Moved to COVID Phase Unlock 2.0 As Of 1 July 2020
Lynn Mackenzie, J.D., LLM.
(Courtesy of Shradha Mithal, Resettle).
The Ministry of Home Affairs, Government of India, announced further relaxations in Unlock 2.0 that begins on 1st July 2020.
However, states and union territories have been given the power to further prohibit certain activities outside of containment zones within their respective states.
Macroeconomic indicators such as consumption of fuel and electricity, mobility, and retail financial transactions have seen an uptick.
The broad guidelines of Unlock 2.0 include:
• Domestic flights will be further expanded while international air travel will continue in a limited manner under the Vande Bharat repatriation mission.
• Night curfew timings are being further relaxed and will be now in force from 10 pm to 5 am. The exception being essential activities.
• Apart from curbs in containment zones, there will be no restriction on “inter-state and intra-state movement of persons and goods”.
• Metro rail, cinema halls, gymnasiums, swimming pools, entertainment parks, theatres, bars, auditoriums, assembly halls, and similar places to remain shut
• Ban remains on social, political, sports, entertainment, academic, cultural, religious functions, and other large congregations.
• Schools and colleges remain shut till 31st July 2020
• The number of persons allowed inside a shop at a time had been limited to five.
Wearing of masks, social distancing (6 feet), and maintaining general hygiene is encouraged. Work from home as far as possible is to be followed.
For more information about the above, please see this PDF document.
The content of this article is provided for general information purposes. The provision of this article does not constitute legal advice or opinion of any kind; no advisory or fiduciary relationship is created between Relocation Africa and any other person accessing or using this article. Relocation Africa will not be liable for any damages or loss arising from using any part of this article.
For information as to how Relocation Africa can help you with your Mobility, Immigration, Research, Remuneration, and Expat Tax needs, email info@relocationafrica.com, or call us on +27 21 763 4240.
Sources: [1], [2]. Image sources: [1], [2].
Wits University Begins COVID-19 Vaccine Trial
The trial subjects will come from hotspots where the risk of the coronavirus was the highest.
Two thousand South African volunteers are set to be given the Wits and Oxford Universities vaccine for COVID-19 over the next two months. And by the end of the year, scientists will know if it works.
Wits University is expected to launch the clinical trials on Wednesday while 7,000 more people in the UK and 10,000 in the US would also take part in the trial.
Of the 2,000 participants, 1,950 are HIV negative and 50 people are living with HIV and all are between 18 to 65.
Professor of Vaccinology at Wits University Shabir Madhi is leading the South African Ox1Cov-19 Vaccine VIDA-Trial.
“We are trying to see whether there is at least 60% protection against COVID-19, it might be higher or lower. If it is lower, our study would not have the power to conclusively say whether the vaccine works or not,” Madhi said.
The trial subjects will come from hotspots where the risk of the coronavirus was the highest.
“As the world rallies to find health solutions, a South African endeavour for the development of an effective COVID-19 vaccine is testament to our commitment of supporting healthcare innovation to save lives,” said Professor Glenda Gray.
The study will cost $150 million and is funded by the South African Medical Research Council (SAMRC) and the Bill Gates Foundation.
Watch the announcement of the vaccine trial below.
For information as to how Relocation Africa can help you with your Mobility, Immigration, Research, Remuneration, and Expat Tax needs, email info@relocationafrica.com, or call us on +27 21 763 4240.
Sources: [1], [2]. Image sources: [1], [2].
Mauritius Immigration Update: Occupational Permits
Lynn Mackenzie, J.D., LLM.
There has been a recent buzz regarding the recent budget announcement made June 4th, 2020, which detailed the Mauritian government’s intent to reduce the minimum investment required to attain an Occupational (OP) as a non-citizen, from $100,000 to $50,000. In addition, the OP’s validity would be extended from 3 to 10 years. These new measures may make allowances for OP holders to do the following;
Furthermore, it may cost less for foreigners to attain Permanent Residence in Mauritius by investing in the aforementioned schemes, as the purchase price required would be reduced from $500, 000 to $375, 000.
Moreover, the Mauritian government announced that the work and residence permits would be combined into one document; therefore those who possess a residence permit for 3 years may be allowed to apply for Permanent Residence. Thereupon, the validity of the permit could be extended to 20 years, as opposed to 10 years.
We have been advised that when a Budget proposal such as the aforementioned is announced, it has yet to be enacted into law. Following an announcement, the proposal is debated at the level of Parliament. Should the proposal be approved, the budget is enacted into Mauritian Law. The approval process takes 2-3 months. We have been cautioned by local Mauritian Relocation experts that such announcement, rarely receive parliamentary approval and therefore its is imperative to seek professional assistance prior to making the decision to relocate within these proposed parameters.
The content of this document is provided for general information purposes. The provision of this document does not constitute legal
advice or opinion of any kind; no advisory or fiduciary relationship is created between Relocation Africa and any other person
accessing or using this document. Relocation Africa will not be liable for any damages or loss arising from using any part of
this document.
For information as to how Relocation Africa can help you with your Mobility, Immigration, Research, Remuneration, and Expat Tax needs, email info@relocationafrica.com, or call us on +27 21 763 4240.
Sources: [1], [2]. Image sources: [1], [2].
Protection of Personal Information (POPI) Act In Effect From Today
South African organisations now have one year to comply with the long-awaited Protection of Personal Information (POPI) Act (POPIA).
This after the Presidency recently announced the commencement of certain sections of the 2013 data privacy law.
The Act, which gives effect to section 14 of the Constitution, provides that everyone has the right to privacy.
Since 2013, the Act has been put into operation incrementally, with a number of sections of the Act having been implemented in April 2014.
The sections that will commence on 1 July 2020 are:
The sections that will commence on 30 June 2021 are:
Sections 110 and 114(4), which deal with the amendment of laws and the transfer of functions from the South African Human Rights Commission to the Information Regulator regarding the Promotion of Access to Information Act (PAIA).
Responsible conduct
Francis Cronje, an information governance specialist and contributor to the POPI Act, comments: “What all of the above entails is that the Act as a whole will commence on the 1st of July 2020, apart from those sections that have already commenced, and those that will commence on the 30th of June 2021.”
The purpose of the law is to ensure all South African institutions conduct themselves in a responsible manner when collecting, processing, storing and sharing another entity’s personal information by holding them accountable should they abuse or compromise personal information in any way.
Businesses that don’t comply with the POPI Act, regardless of whether it’s intentional or accidental, can face severe penalties.
The Act makes provision for fines of up to R10 million and a jail sentence of up to 10 years, depending on the seriousness of the breach.
Cronje explains that Section 114(1) states that all processing of personal information must within one year after the commencement of this section be made to conform to this Act.
“In essence, from the 1st of July 2020, organisations will have 12 months, or one year, to comply with the conditions for the lawful processing of personal information. No more delays, no more excuses, no more hiding,” he says.
Organisations, public and private, big and small, and anyone processing personal information, will have to align their processing activities to the Act, Cronje notes.
“Whether such processing involves personal information of your employees, prospective employees, part-time workers, contractors, clients, members, consumers, customers or third-parties or anybody else whose personal information you collect, use, share, retain, store, archive, delete or destroy – you, as a processing entity, will have to ensure that you, or anybody that processes personal information on your behalf, complies with the Act.”
Rights of data subjects
Pria Chetty, director at law firm EndCode, points out that up until 22 June 2020, limited sections in the POPI Act were in force.
She notes these were aimed at enabling the Information Regulator to set up operations and for regulations to be issued.
“The announcement from the Presidency confirms that the critical sections of POPIA will now take effect. These are substantive sections that create rights, duties, obligations, procedures and penalties.”
According to Chetty, the rights of data subjects to personal data protection safeguards finally have legal force, bringing South Africa closer to harmonisation with international and continental instruments on privacy and data protection.
“Of further significance, particularly in the context of digital innovation and advances in healthtech and edtech, is the regulation of the processing of special personal information – that will balance the need for access to information with the need to protect sensitive health and children’s information.”
She says organisations will need to address with intent now the provisions regulating the responsibilities of information officers, sectoral Codes of Conduct and provisions regulating direct marketing.
“The regulator will be pleased to see the procedures for dealing with complaints, and other enforcement mechanisms taking effect,” says Chetty.
“Ultimately, it marks the entry of non-negotiable obligations and duties for organisations regarding information privacy practices.”
Chetty believes compliance with the substantive provisions of the POPI Act will be a significant effort for many South African organisations, some of which have been preparing for the law’s enactment for years.
“Taking account of the ways in which digital technologies have altered every element of our work and society at large, embedding information privacy practices at all levels of the organisation is what is needed,” she says.
Strict deadline
Livia Dyer, partner at Bowmans, says the Information Regulator was established to implement and enforce POPIA, and its powers include the ability to levy administrative fines (of up to R10 million).
“POPIA provides for a transitional period of one year,” she notes. “This means that both private businesses and organisations and public bodies that process personal information must, at this stage, ensure they comply with POPIA by 1 July 2021.”
According to Dyer, the transitional period can be extended by a further three years for specific classes of information and certain data controllers (referred to as “responsible parties” in the Act), but there is no guarantee that an extension will be given.
“A year may seem like long time, but business leaders need to initiate the compliance process as soon as possible because, in many cases, compliance will require the implementation of fundamental changes to their organisations,” says Louella Tindale, data protection specialist at Caveat Legal.
Meanwhile, Rohan Isaacs and Tatum Govender from Herbert Smith Freehills SA, say consumers will benefit from POPI’s requirements that their personal information must be protected and that it can only be collected or handled where there is a lawful justification for doing so.
“POPI gives consumers specific rights in respect of organisations handling their personal information and it gives consumers greater control over their personal information. Consumers are informed about what personal information is collected, by who and why so that consumers are able to make informed decisions,” they conclude.
To find out more about the POPI Act, click here.
For information as to how Relocation Africa can help you with your Mobility, Immigration, Research, Remuneration, and Expat Tax needs, email info@relocationafrica.com, or call us on +27 21 763 4240.
Sources: [1], [2]. Image sources: [1], [2].