Skip to content

POPIA and Information Governance

Personal information has become one of the most heavily regulated assets an organisation holds. The Protection of Personal Information Act 4 of 2013 is worked through in operational detail here, from lawful processing and data subject requests to breach response and the clauses you need in vendor contracts.

What you will be able to do

  • Interpret the conditions for lawful processing set out in the Protection of Personal Information Act.
  • Compile a record of processing activities and a defensible data inventory.
  • Determine an appropriate lawful basis for each processing activity your organisation performs.
  • Establish a workable process for handling data subject requests within statutory timeframes.
  • Assess and document security safeguards for personal information across systems and paper records.
  • Respond to a security compromise, including notification obligations and remedial action.

Course outline

  1. 01Scope, definitions and the conditions for lawful processing
  2. 02Roles of responsible party and operator
  3. 03Data mapping and records of processing activities
  4. 04Consent, legitimate interest and other lawful bases
  5. 05Special personal information and children's data
  6. 06Data subject rights and request handling
  7. 07Security safeguards, retention and destruction
  8. 08Breach response, notification and vendor contracting

Who should attend

Information officers and deputy information officers, compliance and legal practitioners, IT and information security managers, records managers and marketing leads responsible for customer data.

Dates, venues and fees

DatesVenueDaysFeeCalendar
17 to 19 Aug 2026Lagos3US$1,500
24 to 26 Aug 2026Harare3US$1,500
31 Aug to 2 Sep 2026Kampala3US$1,500
7 to 9 Sep 2026Dar es Salaam3US$1,500
14 to 16 Sep 2026Pretoria3R13,000
21 to 23 Sep 2026Cape Town3R13,000
5 to 7 Oct 2026Online3US$900
12 to 14 Oct 2026Mozambique3US$1,500
19 to 21 Oct 2026Cairo3US$1,500
26 to 28 Oct 2026Accra3US$1,500
2 to 4 Nov 2026Lusaka3US$1,500
9 to 11 Nov 2026Kigali3US$1,500
16 to 18 Nov 2026Nairobi3US$1,500
23 to 25 Nov 2026Durban3R13,000
30 Nov to 2 Dec 2026Johannesburg3R13,000
14 to 16 Dec 2026Mauritius3US$1,500
21 to 23 Dec 2026Dubai3US$1,500

Fees are per delegate. South African venues are priced in rand; other locations and online in US dollars. Fees exclude 15% VAT where applicable. Group bookings of three or more delegates from the same organisation qualify for a reduced rate; contact us for a quotation.

Related courses in Governance, Risk and Compliance

Governance, Risk and Compliance

Corporate Governance and Board Effectiveness

Good governance is judged by outcomes, not by the length of the board pack. Director duties under the Companies Act 71 of 2008 and the...

Next session
31 Aug to 2 Sep 2026
Venue
Lusaka
3 day programme
FromUS$900
Governance, Risk and Compliance

Enterprise Risk Management in Practice

Enterprise risk management goes wrong when it stays a policy document. Delegates define risk appetite, build registers that management...

Next session
31 Aug to 4 Sep 2026
Venue
Mozambique
5 day programme
FromUS$900
Governance, Risk and Compliance

Compliance, Ethics and Anti-Corruption

Compliance programmes fail when they exist only on paper. Building a compliance universe, embedding an ethical culture, running a credible...

Next session
31 Aug to 2 Sep 2026
Venue
Cape Town
3 day programme
FromUS$900
See all Governance, Risk and Compliance courses