PROTECTION OF PERSONAL INFORMATION ACT (POPIA) WORKSHOP

Duration:  3 days

Overview

This workshop addresses two closely related topics: Data Privacy and the Protection of Personal Information Act. Data privacy has become a “hot topic” around the world in the light of numerous instances of sensitive data falling into the wrong hands – just look at the storm of comments and coverage since Edward Snowden burst onto the world stage. At the same time new legislation was signed into law in South Africa in late 2013: No. 4 of 2013: Protection of Personal Information Act, 2013 (generally known as POPIA or the POPI Act). This has implications for organisations throughout Africa.

This workshop will help delegates to understand the key issues in the areas of Data Privacy and compliance with the POPI Act, and is highly practical in the content and delivery approach. In particular delegates will work in teams to develop a real-world project plan to tackle key issues associated with managing Data Privacy and preparing for compliance with the POPI Act.

What to expect from the course?

• Learn about Why POPIA matters
• Learn about What you need to do about POPIA
• Learn about Where POPIA rules apply
• Learn about Who needs to take action on POPIA
• Learn about When to take action on POPIA
• Learn about How to manage POPIA operations
• Take-away: A project plan to address POPIA

Who should attend?

• Chief Information Officers
• Company Secretaries
• Compliance Executives
• Compliance Managers
• Information Security Executives
• Information Security Managers
• IT Managers
• Risk Executives
• Risk Managers

Course Content

DAY 1

Introduction

• Welcome, introduction to delegates
• Workshop Objectives & Agenda
• Workshop administrative arrangements & review of delegate materials

Introduction to Data Privacy

• History and evolution of Data Privacy on a global basis
• Overall approach of Data Privacy
• Data Privacy in the context of Corporate Governance

Introduction to the Protection of Personal Information Act (POPIA) 

• History and evolution of POPI Act (POPIA) legislation in South Africa
• Overall approach of POPIA
• POPI in the context of King IV

Why Data Privacy matters 

• Corporate Governance issues
• IT Governance issues
• Stakeholder activism

Why POPI matters 

• Compliance with laws and regulations
• Codes of practice
• Stick & carrot

What you need to do about Data Privacy & POPIA

• What are Data Privacy & POPI?
• What is the scope of impact?
• What action is required?

Where Data Privacy & POPIA rules apply

• Types of organisation
• Global geographic context
• Data and data subjects

Who needs to take action on Data Privacy & POPI A

• Board responsibilities
• Executive management responsibilities
• Other responsibilities

Hands-on session

Learning how to use (or refresh for those familiar with) Project Libre scheduling software. This is needed for the workshop exercises and team presentation.

DAY 2

Morning quiz: revision for the previous day

When to take action on Data Privacy & POPIA

• Privacy impact assessments
• Audit requirements
• Health checks

Special issues re Data Privacy & POPIA

• Cloud computing
• Bring Your Own Device
• Mobile devices

How to manage Data Privacy & POPIA operations

• Routine Data Privacy & POPI compliance
• Handling Data Subject requests
• Handling dynamic stakeholders

Data privacy case studies

• Global
• Regional
• National

Project Management Overview for Data Privacy & POPIA

• Project Management Life Cycle
• Project Management Knowledge Areas
• Role of the Project Office

Initiating your Data Privacy or POPIA compliance project

• The Business Case for DP / POPIA
• Your Project Charter
• Stakeholder engagement

Planning your Data Privacy or POPIA compliance project 

• Building your project plan
• Project plan approval
• Project plan ongoing management

Executing & Closing your Data Privacy or POPIA compliance project 

• Getting your project done
• Closing your project
• Overall project review

DAY 3

• Morning quiz: revision for the previous day
• Team presentations preparation
• Team presentations delivery

Workshop closure activities

• Personal action plan
• Workshop feedback
• Recognition of achievements
• Closing ceremony