SMALL ENTERPRISE FINANCE AGENCY (SEFA) PREPAREDNESS TO IMPLEMENT THE PROTECTION OF PERSONAL INFORMATION (PoPI) ACT, No. 4 of 2013

Abstract

This is a qualitative study on the preparedness of the Small Enterprise Finance Agency to implement the Protection of Personal Information Act (PoPI), No. 4 of 2013. The impetus for this study originated in the realisation that, after the promulgation of the Protection of Personal Information Act, No.4 of 2013 (PoPI) on 19 November 2013 to date, little done has been by public and private bodies to establish reliable controls for the processing and protection of personal information. Other factors were also considered, such as Section 13 of the National Archives and Record Service of South Africa Act (No. 43 of 1996 as amended), which requires government departments to develop, implement and maintain proper information management systems. This study intends to investigate the attitudes and opinions of those individuals involved in the management of personal information, who may contribute to the readiness to implement the PoPI Act at SEFA Head Office. The current gaps associated with the implementation of the Protection of Personal Information (PoPI) Act in SEFA are explored. The researcher also investigates the processes and procedures that are in place for the implementation of the PoPI Act and SEFA capabilities, as well as the current state of compliance to the implementation of the PoPI Act. The observation of SEFA Records Management Policy and Procedures, SEFA Records Retention Schedule, SEFA Records Classification Schedule and SEFA records storerooms compliance with ISO 11799-2003 (International Standard on Document Storage Requirements for Archives and Libraries) was the primary technique of data collection, followed by interviews based on a questionnaire. The sample involved in the questionnaire was drawn from a population of 173 staff members at the internal departments at SEFA Head Office, who manage personal information. Interviews were conducted with 10% (sample of 17 employees) of staff members from each of the 11 departments. The officials varied from Head of Departments, Managers and Administrators responsible for managing their departmental personal information.Information Scienc

    Similar works