Main Promo Images
POPIA readiness assessments
Information officer support services
Managing data portability
Tools for the Information Officer
Technical and organisational measures
Contact an information officer
POPIA compliance management solutions
POPIA Foundation course:
The POPIA Foundation course introduces the objectives, principles, concepts and the terminology used in the Protection of Personal Information Act. This course will:
POPIA Professional course:
The POPIA Professional course addresses the requirements of the Protection of Personal Information Act to process personal information lawfully. This course will:
POPIA Practitioner course:
The POPIA Practitioner course will covers the translation of legal obligations into technical and organisational measures that can effectively protect the rights of data subjects. This course includes:
POPIA Lead Auditor course:
The POPIA Lead Auditor course will assist personnel monitor, evaluate and assess the protection of personal information. This course includes:
Certified Personal Information Officer :
The Certified Personal Information Officer (CPIO) certification program is developed specifically for those persons who are responsible for encouraging compliance with the conditions for the lawful processing of personal information, dealing with requests made regarding the processing of personal information and working with the Information Regulator. The Certified Personal Information officer exam enables you to demonstrate your understanding and knowledge. This certification will require candidates to thoroughly understand the Protection of Personal Information Act, be able to establish a compliance framework and other enablers of data subject rights, and to be able to implement the technical and organisational measures necessary to protect the rights of data subjects.
The CPIO certification is for all individuals who design, manage and oversee an enterprise’s use of personal information. While its central focus is the protection of personal information, it will be of value to anyone with responsibility for the processing of information. This certification promotes best practices and provides executive management with assurance that those with the designation CPIO are knowledgeable about the requirements for lawfully processing personal information.
Thinking of engaging a part-time Information Officer? While the legal obligation is to have available an information officer readily accessible by data subjects and the Regulator, many organisations are finding that part-time information officers, who are able to respond immediately to a request or complaint, is a cost effective option. Regardless of whether the information officer is engaged part-time or full-time, the information officer must have professional experience and expertise in protecting data, commensurate with the risks associated with processing personal information.
The role of the information officer is to encourage compliance by the public or private body with the conditions for the lawful processing of personal information and otherwise ensure the body complies with the provisions of the Protection of Personal Information Act. Failure by the information officer to properly encourage compliance will be unlawful in terms of the Protection of Personal Information Act and the Companies Act, and in some instances, can result in personal liability.