POPIA compliance for small businesses
POPIA applies to every business that handles customer or staff information — not only large companies. We deliver a right-sized compliance pack you can actually maintain.
What you receive
- Website privacy notice and consent wording
- Record of processing activities (data register)
- Information Officer registration guidance
- Data breach response process and staff briefing note
Common questions
Does POPIA apply to a business with only two employees?
Yes. POPIA applies to any responsible party that processes personal information in South Africa, regardless of size. The obligations are scaled to the risk of the processing.
Do I have to register an Information Officer?
The head of the business is automatically the Information Officer and should be registered with the Information Regulator. We guide you through the registration.
We do provide legal advice — but only on non-reserved matters. Nkadimeng Danny Legal and Compliance Support provides legal information and legal advice on non-reserved matters, and prepares legal opinions. We are not a firm of admitted attorneys, so we do not undertake work reserved by the Legal Practice Act 28 of 2014 and we do not represent clients in court. See our full scope.
This page is part of our Compliance Services service.
Other things we help with
Contract drafting in Johannesburg
Businesses and individuals in Gauteng searching for a drafter for a specific agreement.
Contract drafting in Cape Town
Western Cape businesses looking for affordable drafting without a law firm retainer.
Help with a CCMA referral
Employees and employers who need to refer or defend a dispute at the CCMA.
Legal advice on non-reserved matters. Nkadimeng Danny is not an admitted attorney. We provide legal information, legal advice on non-reserved matters, legal opinions, paralegal support and compliance services. For reserved matters or court representation we will refer you appropriately. Full disclaimer.