Aligning POPIA with GDPR

Since 28 May 2018, InSites Consulting has been compliant with the General Data Protection Regulations (GDPR). Having compared POPIA to GDPR, we are confident that POPIA does not add new requirements to our Information Security Management System or our Customer Relationship Management (CRM) and marketing processes.

To clarify our key obligations:

• We follow all the relevant data protection legislations to all individuals, irrespective of location;
• We have a Data Protection Officer based in Belgium who is officially registered with supervisory authorities in the EU;
• We separate direct and indirect Personally Identifiable Information (PII) when processing data for research;
• We have a Data Processing Agreement in place, and we follow all controller and processor regulations;
• We always notify data subjects of any risk of breach within 72 hours (to date we have never had to report a breach to a supervisory authority);
• We ensure that data subjects worldwide benefit from all rights mentioned in the GDPR, which supersedes the demands of the POPIA.

 

Responsible marketing

We currently store and process data in Microsoft Dynamics 365 CRM, and follow guidance from the GDPR and POPIA in this. We will only use your data to carry out our services, unless:

1. There is a legitimate interest in contacting you, such as an issue of business (dis)continuity;
2. You have given prior consent to receive marketing communications.

If you have given consent for us to store and process your data for marketing, you will receive our monthly newsletter, which features our latest inspirational content. You can revoke your consent from such communications at any time.

If you have any questions relating to this article, please get in touch.