Solutions
The Protection of Personal Information Act (POPIA) places clear duties on every organisation that collects, stores, or uses personal information. Several other SADC countries have enacted data protection laws built on similar principles, and clients, partners, and regulators increasingly expect demonstrable compliance.
Osheza helps organisations meet their data protection obligations through practical privacy frameworks, policies, and governance, so that personal information is handled lawfully, securely, and defensibly.
“Whether you need a POPIA gap assessment, support for your Information Officer, privacy policies and consent notices, or a plan for responding to a data breach, we make data protection manageable and defensible.”
What's Included
A structured review of how your organisation collects, uses, stores, and shares personal information against POPIA's conditions for lawful processing, with a prioritised remediation plan.
Drafting and review of privacy policies, privacy notices, consent wording, and website and form disclosures that are clear, lawful, and fit for your operations.
Guidance for Information Officers and deputies, including registration with the Information Regulator, role responsibilities, and ongoing compliance oversight.
Mapping of personal information flows and processing records, together with privacy impact assessments for new systems, products, and projects.
Review and preparation of operator and service-provider agreements, in coordination with legal practitioners where required, and due diligence on third parties that process personal information on your behalf.
Incident response and breach notification procedures, plus governance oversight of information-security policies and responsibilities. We focus on governance and readiness rather than technical security testing.
Data protection is both a legal obligation and a matter of trust. Non-compliance can lead to regulatory action and reputational damage, while strong privacy practices build confidence with clients, partners, and regulators.
Understand your data protection obligations and put practical, defensible measures in place.
Get in touch