DEVELOPMENTS AHEAD OF ENFORCEMENT POWERS COMING INTO EFFECT
With the deadline for ‘responsible parties’ to ensure that they are compliant with the Protection of Personal Information Act (POPI) less than 10 days away, the Information Regulator has, on 22 June 2021, issued a media statement confirming that there will be no deadline for the registration of Information officers (IO) and Deputy Information Officers (DIO). This essentially means that no ‘responsible party’ will be held liable for not registering their respective IOs and DIOs by 30 June 2021. Responsible parties are basically any person (i.e. individual or entity) that determines the purpose of and means for processing personal information. According to the media statement, this decision “ follows technical glitches with the registration portal and numerous concerns raised by responsible parties regarding the registration process ” and that the “ Regulator is currently looking into alternative registration processes and will communicate this in due course ”. Of particular importance is that the enforcement powers as contained in POPI will still be coming into effect as of the 1 July 2021 which means that responsible parties are still required to ensure that they are POPI compliant by 30 June 2021. As of 30 June 2021, the Information Regulator will also be taking over the function of the Promotion of Access to Information Act (PAIA) from the South African Human Rights Commission (SAHRC).
A copy of the Information Regulator’s media statement can be accessed here.
