People have rights
Individuals can ask what you hold about them, ask you to correct it, or ask you to delete it. Have a way to handle those requests.
If data leaks, act
A breach (data lost, hacked or leaked) must be reported to the Information Regulator and affected people. Knowing this in advance keeps you calm and compliant.
Appoint an Information Officer
Every business has one by default — usually the owner. You can register and brief them. Our paid Toolkit walks you through it.
Key takeaway
Collect only what you need, say why, keep it safe, and respect people's rights — that's POPIA.