§ Archive
Notes
-
How long to keep client records
POPIA caps retention at purpose while FICA, tax and company law set minimums. A retention schedule names both numbers for every record type.
-
What your PAIA manual is for
Every private body needs a PAIA manual since the exemptions lapsed in 2021. The Regulator checks it first because it is the easiest thing to check.
-
The R600,000 email
A South African nonprofit paid R600,000 to attackers who imitated a familiar email thread. How business email compromise works, and the one habit that stops it.
-
Your software vendor is a POPIA operator
Every supplier that touches your client data is a POPIA operator, and section 21 requires a written contract. Most supplier files hold only an SLA.
-
Direct marketing after the 2026 CPA amendments
South Africa now has a national opt-out registry for direct marketing, with penalties reaching R1 million or 10% of turnover. What the 2026 CPA amendments ask of any business that markets directly.