POPIA Act Compliance

1. Introduction

Champs Group is fully committed to compliance with the Protection of Personal Information Act (POPIA) of South Africa. This document outlines our approach to protecting personal information in accordance with POPIA requirements.

2. What is POPIA?

The Protection of Personal Information Act (POPIA) is South Africa's data protection law that regulates how personal information must be processed. The Act establishes eight conditions for lawful processing of personal information:

1. Accountability
2. Processing limitation
3. Purpose specification
4. Further processing limitation
5. Information quality
6. Openness
7. Security safeguards
8. Data subject participation

3. Our POPIA Compliance Framework

Champs Group has implemented a comprehensive compliance framework that includes:

• Information Officer: Appointment of a designated Information Officer responsible for POPIA compliance.
• Data Mapping: Comprehensive documentation of all personal information processing activities.
• Privacy Policies: Clear policies outlining how we collect, use, and protect personal information.
• Security Measures: Technical and organizational measures to protect personal information from unauthorized access, loss, or destruction.
• Training: Regular POPIA compliance training for all employees handling personal information.

4. Processing of Personal Information

We process personal information only for specific, explicitly defined, and legitimate purposes. We collect personal information directly from data subjects where possible and inform them of:

• The information being collected
• The purpose for collection
• Whether the collection is voluntary or mandatory
• The consequences of not providing the information

5. Data Subject Rights

Under POPIA, you have the right to:

• Be notified that your personal information is being collected
• Access your personal information in our possession
• Request correction or deletion of your personal information
• Object to the processing of your personal information
• Lodge a complaint with the Information Regulator

6. Security Measures

We implement appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of personal information, including:

• Encryption of sensitive data
• Access controls and authentication mechanisms
• Regular security audits and vulnerability assessments
• Incident response plan for data breaches
• Secure disposal of information when no longer needed

7. Data Breach Notification

In the event of a data breach involving personal information, we will notify the Information Regulator and affected data subjects as required by POPIA, providing details of the breach and steps being taken to mitigate potential harm.

8. Contact Information

For any POPIA-related inquiries or to exercise your rights under POPIA, please contact our Information Officer:

Champs Group Information Officer
Email: info@champsafrica.com
Phone: 021 879 3035
Postal Address: Van Riebeeck Rd, Kuilsiriver, Cape Town, 8000, South Africa