Share

Jail threat for company bosses over Popi

Cape Town – Company executives who fail to secure data in South Africa may face jail time, the Protection of Personal Information Act, known as Popi says.

However, while the act specifies prison time for people who fail to keep personal information confidential, SA has not yet fully implemented the legislation.

“Until the Act is implemented it is difficult to know what such conditions could be, particularly in light of the fact that similar laws in the UK and Australia do not prescribe custodial sentences for breaches,” Wayne Mann, director of Group Risk at The Unlimited, told Fin24.

Popi legislation specifies penalties of jail time up to 10 years and R10m for contravening sections related to data protection.

“If one breaches the following sections of the Act, 100, 103(1) and 104(2), 105(1) and 106, which deal, among other things with the powers of the Regulator to enforce compliance with its provisions, obstructing the Regulator in the performance of the Regulator’s duties, the selling, disposing or processing of a person’s account number in a manner not authorised by the Act, a prison sentence of up to 10 years can be imposed,” Mann said.

Outright fraud

The legislation demands that people who “knowingly or recklessly, without the consent of the responsible party” share personal data are guilty of an offence in terms of the act.

Mann, though, argued that outright fraud was more likely to result in jail time than contravening Popi.

“In our view the offences that overlap with our common law crimes such as fraud and theft, for example the unauthorised selling of a person’s account number, are more likely to be frowned upon by society and it is these offences that could result in prison sentences being imposed.”

Popi, which was modelled on European legislation, was intended to give citizens the right to protect their reputations, said an attorney.

"Popi is modelled on Europe’s EUDPD [EU Data Protection Directive]. Popi gives ‘data subjects’ (SA citizens) control over their personal information relating to criminal activity or negative and damaging behaviour they may have committed in the past or are suspected to have committed," specialist technology attorney Russel Luck told Fin24.

“Popi categorises this type of personal information as ‘special personal information’ under S26 of Popi and can only be processed by a “responsible party” in certain circumstances,” he added.

In the UK, the Data Protection Act was passed in 1998, but compliance took more than a decade and SA may face a similar situation.

“The Act does provide for a 12 month compliance period from the date that certain provisions become effective – which is only likely to happen once the office of the Information Regulator is established (which has commenced). Given the length of time that the act has been in the public arena, our view is that it is very unlikely that the 12 month compliance period will be extended, said Mann.


- Follow Duncan on Twitter

We live in a world where facts and fiction get blurred
Who we choose to trust can have a profound impact on our lives. Join thousands of devoted South Africans who look to News24 to bring them news they can trust every day. As we celebrate 25 years, become a News24 subscriber as we strive to keep you informed, inspired and empowered.
Join News24 today
heading
description
username
Show Comments ()
Rand - Dollar
18.97
-0.2%
Rand - Pound
24.09
+0.1%
Rand - Euro
20.61
-0.1%
Rand - Aus dollar
12.37
+0.4%
Rand - Yen
0.13
+0.6%
Platinum
906.50
-1.8%
Palladium
1,010.52
+0.4%
Gold
2,155.30
-0.2%
Silver
24.97
-0.3%
Brent Crude
86.89
+1.8%
Top 40
66,018
-0.4%
All Share
72,192
-0.3%
Resource 10
53,225
-0.2%
Industrial 25
99,730
-0.7%
Financial 15
16,631
+0.1%
All JSE data delayed by at least 15 minutes Iress logo
Company Snapshot
Editorial feedback and complaints

Contact the public editor with feedback for our journalists, complaints, queries or suggestions about articles on News24.

LEARN MORE
Government tenders

Find public sector tender opportunities in South Africa here.

Government tenders
This portal provides access to information on all tenders made by all public sector organisations in all spheres of government.
Browse tenders