POPIA Compliance
Protection of Personal Information Act Compliance Statement
Our Commitment to POPIA
AfroTech Connect is fully committed to complying with the Protection of Personal Information Act (POPIA) of South Africa. We implement robust measures to protect the personal information of our students, staff, and stakeholders.
What is POPIA?
The Protection of Personal Information Act (POPIA) is South Africa's comprehensive data protection legislation that regulates how personal information is processed. POPIA aims to protect individuals from harm by protecting their personal information.
POPIA Conditions for Lawful Processing
We ensure that all personal information processing complies with the eight lawful processing conditions under POPIA:
- Accountability: We are responsible for ensuring compliance with POPIA and have appointed a Information Officer.
- Processing Limitation: We only collect personal information that is directly relevant and necessary for our educational services.
- Purpose Specification: We collect information for specific, explicitly defined, and lawful purposes related to education.
- Further Processing Limitation: We do not process personal information for secondary purposes without your consent.
- Information Quality: We take reasonable steps to ensure that personal information is complete, accurate, and up-to-date.
- Openness: We are transparent about our data processing practices and provide this privacy policy to all users.
- Security Safeguards: We implement appropriate security measures to protect personal information against unauthorized access.
- Data Subject Participation: We respect your rights to access, correct, and delete your personal information.
Your POPIA Rights
As a data subject under POPIA, you have the following rights:
- Right to Access: Request confirmation of whether we hold your personal information and access to that information.
- Right to Correction: Request correction or deletion of inaccurate or irrelevant personal information.
- Right to Destruction: Request destruction or deletion of your personal information if we are no longer authorized to retain it.
- Right to Object: Object to the processing of your personal information in certain circumstances.
- Right to Complain: Lodge a complaint with the Information Regulator if you believe your rights have been violated.
Our Security Measures
We implement comprehensive security measures to protect your personal information:
- Encryption of sensitive data in transit and at rest
- Secure authentication and access controls
- Regular security audits and vulnerability assessments
- Staff training on data protection and privacy
- Incident response procedures for data breaches
- Secure data storage and backup systems
Data Breach Procedures
In the event of a security breach that affects your personal information, we will:
- Assess the nature and scope of the breach
- Take immediate steps to contain and remediate the breach
- Notify affected individuals and the Information Regulator as required by POPIA
- Implement measures to prevent similar breaches in the future
Information Officer
Our Information Officer is responsible for overseeing our compliance with POPIA and can be contacted for any privacy-related concerns:
Email:
Phone:
Address: Johannesburg, South Africa