Fasken Associates in the Johannesburg office Dispute Resolution & Litigation practice group Emma Alimohammadi and Andricia Hinckemann examine the damages as a result of a breach in terms of the Protection of Personal Information Act 4 of 2013 (otherwise known as POPI or POPIA).
Section 22 of POPI, deals with a responsible parties obligation to notify data subjects of security compromises and may also result in civil action to be taken against the responsible party. An example of non-compliance with this section may include instances where an unauthorised person accesses or acquires the personal information of a data subject and the responsible party fails to notify the data subject and Information Regulator. Emma and Andricia discuss this specific section of POPIA in this episode of Fasken Perspectives.
Access the podcast transcript