Assessment of a South Africa national consultative workshop on the Protection of Personal Information Act (POPIA)

Abstract

PurposeThis paper aims to assess the Protection of Personal Information Act (No. 4 of 2013) (POPIA) in South African (SA) universities sector with the objective to formulate code of conduct to improve compliance.Design/methodology/approachThe case study approach was used in this study. Data were collected using interviews with the SA universities’ representatives during the POPIA consultative workshop.FindingsThe results showed that most of the participants were not aware of the POPIA, lack of collaboration between the legal practitioners, records managers and archivist. Internal control systems with Information Communication Technology (ICT) need to be in in place to provide information integrity and the value of international integrity with regard to the international students and staff.Research limitations/implicationsThis paper is based on the first phase of the national consultative workshop with 25 SA public universities held between January and November 2018. The findings of the study are transferable to other sectors like health and infrastructure.Practical implicationsThe findings are expected to be instrumental to the formulation of universities’ code of conduct in line with POPIA.Social implicationsThe POPIA, if not properly implemented, can contribute to the violation of information integrity of the international students with regard to research and cultural exchange programme. Furthermore, it can affect SA trade relations with the European countries as it is a requirement for non- European countries to comply with the European Union General Data Protection Regulations (GDPR).Originality/valueThis study is useful to ensure consultation of the POPIA. Is also essential for the POPIA to be aligned with the international norms and standards such as GDPR.