POPIA Toolkit - PIIA Report Comprehensive Template

Ø Appointment of deputy IO – (must inform the Regulator). Ø Develop guidelines for IO and deputy IO regarding all 8 conditions, accountability, delegation of authority and implementation. Ø Appoint/chair POPIA compliance committee. (Advised to appoint a POPIA Compliance steercom for implementation purposes, which can later be converted to a compliance committee or sub committee.) Ø Reporting and record keeping oversight - should be delegated to sub-committee dealing with implementation. Reporting structure should be developed/expanded to the IO and the Board. Ø A delegation of authority policy dealing with management of control functions regarding 8 conditions should form part of the Policy or developed separately. Ø Develop reporting templates/minute templates for committee/steercom. Ø Update standard and special approval authorities re POPIA. Ø Oversight over media statements and website statements. Ø Insurance for personal/criminal liability. Ø Oversight and reporting of PIIA and compliance framework to be a standard reporting point on the Board agenda. Member of steercom must have reporting liability to Board or to the MD. Ø Policy training for all employees and develop a maturity model for policy implementation.