Skip to content

POPIA and Information Governance

Personal information has become one of the most heavily regulated assets an organisation holds. The Protection of Personal Information Act 4 of 2013 is worked through in operational detail here, from lawful processing and data subject requests to breach response and the clauses you need in vendor contracts.

Ready to book? Secure your place on this programme.

Register for this course

What you will be able to do

  • Interpret the conditions for lawful processing set out in the Protection of Personal Information Act.
  • Compile a record of processing activities and a defensible data inventory.
  • Determine an appropriate lawful basis for each processing activity your organisation performs.
  • Establish a workable process for handling data subject requests within statutory timeframes.
  • Assess and document security safeguards for personal information across systems and paper records.
  • Respond to a security compromise, including notification obligations and remedial action.

Course outline

  1. 01Scope, definitions and the conditions for lawful processing
  2. 02Roles of responsible party and operator
  3. 03Data mapping and records of processing activities
  4. 04Consent, legitimate interest and other lawful bases
  5. 05Special personal information and children's data
  6. 06Data subject rights and request handling
  7. 07Security safeguards, retention and destruction
  8. 08Breach response, notification and vendor contracting

Who should attend

Information officers and deputy information officers, compliance and legal practitioners, IT and information security managers, records managers and marketing leads responsible for customer data.

Dates, venues and fees

DatesVenueDaysFeeCalendarRegister
28 to 30 Sep 2026Cairo3US$1,500Closed
29 Sep to 1 Oct 2026Mauritius3US$1,500Register
30 Sep to 2 Oct 2026Dubai3US$1,500Register
5 to 7 Oct 2026Online3US$900Register
28 to 30 Oct 2026Johannesburg3R13,000Register
2 to 4 Nov 2026Cape Town3R13,000Register
3 to 5 Nov 2026Durban3R13,000Register
4 to 6 Nov 2026Pretoria3R13,000Register
9 to 11 Nov 2026Windhoek3US$1,500Register
10 to 12 Nov 2026Gaborone3US$1,500Register
11 to 13 Nov 2026Maseru3US$1,500Register
16 to 18 Nov 2026Mbabane3US$1,500Register
17 to 19 Nov 2026Lusaka3US$1,500Register
18 to 20 Nov 2026Harare3US$1,500Register
23 to 25 Nov 2026Lilongwe3US$1,500Register
24 to 26 Nov 2026Blantyre3US$1,500Register
25 to 27 Nov 2026Mozambique3US$1,500Register
30 Nov to 2 Dec 2026Nairobi3US$1,500Register
1 to 3 Dec 2026Dar es Salaam3US$1,500Register
2 to 4 Dec 2026Kigali3US$1,500Register
7 to 9 Dec 2026Kampala3US$1,500Register
8 to 10 Dec 2026Accra3US$1,500Register
9 to 11 Dec 2026Lagos3US$1,500Register

Fees are per delegate. South African venues are priced in rand; other locations and online in US dollars. Fees exclude 15% VAT where applicable. Group bookings of three or more delegates from the same organisation qualify for a reduced rate; contact us for a quotation.

Related courses in Governance, Risk and Compliance

Governance, Risk and Compliance

Corporate Governance and Board Effectiveness

Good governance is judged by outcomes, not by the length of the board pack. Director duties under the Companies Act 71 of 2008 and the...

Next session
21 to 23 Oct 2026
Venue
Johannesburg
3 day programme
FromR13,000
Governance, Risk and Compliance

Enterprise Risk Management in Practice

Enterprise risk management goes wrong when it stays a policy document. Delegates define risk appetite...

Next session
5 to 9 Oct 2026
Venue
Johannesburg
5 day programme
FromR18,000
Governance, Risk and Compliance

Compliance, Ethics and Anti-Corruption

Compliance programmes fail when they exist only on paper. Building a compliance universe, embedding an ethical culture...

Next session
29 Sep to 1 Oct 2026
Venue
Dubai
3 day programme
FromR13,000
See all Governance, Risk and Compliance courses