The Protection of Personal Information Bill (or POPI as it has come to be known), applies to the processing of personal information entered into a record by or for a responsible party.

The Act uses the terms “data subject” (we would refer to this as an employee) and “responsible party” (for us this would be an employer).  I shall use the terms “employer” and “employee”.  Both fall within the respective definitions as provided.

While the Bill makes provision for exclusions, none of them apply to the realm of employment. Read more….