POPIA Compliance Advisory
POPIA isn’t a once-off — it’s an operating posture.
Privacy by Design.
The Protection of Personal Information Act has matured from a compliance project into an operating discipline that the Information Regulator now enforces with real consequence. We bring 30+ IT auditors and 20+ cybersecurity specialists to POPIA programmes — designing, assessing and operationalising privacy controls across cloud, ERP, customer data platforms and third-party processors. Our approach grounds POPIA in COBIT 2019 and ISO 27001 so the work survives audit, not just attestation.
Our POPIA Services
From eight-condition gap to operating-grade privacy.
POPIA Readiness & Gap Assessment
Eight-condition POPIA assessment plus operator-and-processor inventory, third-party DPA review, and a prioritised remediation roadmap.
- 8-condition gap analysis
- Operator / processor register
- Data-flow mapping
- Cross-border transfer review
- Remediation roadmap
Information Officer-as-a-Service
Outsourced or co-sourced Information Officer support, including Information Regulator registrations, breach-response playbooks and complaints handling.
- IR registrations
- Breach-response playbook
- Data-subject request workflow
- IO governance reporting
- IR liaison
Privacy-by-Design for IT & Cloud
Embed POPIA controls into cloud, ERP and analytics environments — including access, retention, encryption, and audit logging.
- Cloud privacy controls
- Retention scheduling
- Encryption at rest / in transit
- Role-based access review
- DPIA (privacy impact assessments)