Ready for Customization
These compliance frameworks are custom solutions, even though they are finished and prepared for use. Every document is specifically designed to fit the unique operational structure of your practice in order to assist you with legal accuracy.
POPIA & PAIA Compliance:
Compliance with these two Acts is essential for all Medical Health Care Practices, as we do not only work with Personal Information, but Special Personal Information.
We assist and provide all the Industry Specific Mandatory Documents:
- A Section 51 PAIA Information Manual.
- A Compliance Management Framework.
- A Compliance Toolkit.
- Appointment Letters of the IO and DIO/DIO’s.
We assist and provide all:
- Power Point Training Material.
- Training Rosters & Future Training Planning.
- All Policies, Registers and Forms with regards to these Acts.
We do this remotely and complete all the above on your behalf.
Step-by-step instructions and assistance through-out the process.
Every Registered Practice must be able to prove their compliance with regards to POPIA & PAIA.
All Companies, as responsible, forward-looking businesses, must recognise the need to comply with POPIA and ensure that effective measures are in place to protect the personal information of their Patients, Clients, Employees, Colleagues and other Stakeholders.
It is a Legal Requirement that all Information- and Deputy Officers have official Appointment Letters with set duties, responsibilities and accountabilities.
POPIA & PAIA never stops. The training never stops.
It is an ongoing process. We provide ongoing assistance.
It is a Legal Requirement to give regular training, of which you must be able to provide evidence.
It is a Legal Requirement to develop, implement, monitor and maintain your Compliance Management Framework. You must consider the 6 lawful bases and the 8 principles regarding the processing of personal information.
It is a Legal Requirement to do regular security risk assessments on your hardware, operating systems, software and shared databases.
At any moment in time, you should be able to declare, definitively, the number of Individual Personal Information Records in your control and where they are located.
It should also be possible for you – or your Legal Representative in case you are not able to – to locate and produce valid copies of all Records critical to running your Practice.
The most vulnerable component of any information system is the people who work with it – we highly recommend a proper ACCESS AND CONFIDENTIAL AGREEMENT WITH EMPLOYEES. We assist and provide this.
It is a Legal Requirement to keep all relevant Registers up to date.
It is a yearly Legal Requirement to action your retention and disposal of Records, and to submit your PAIA Report.
It is mandatory to have Operators Agreement in place. In terms of Section 21 of the Act a Responsible Party must, in terms of a written agreement/contract between the Responsible Party and the Operator, ensure that the Operator which processes Personal Information for the Responsible Party, establishes and maintains the security measures referred to in Section 19.
All Practices must be registered at the Information Regulator of South-Africa.
If you have a website, there are 8 mandatory Documents that need to be displayed there.
We provide and assist with all the above.
Policies customised to ensure your Practice’s specific compliance with POPIA and PAIA are available upon request. To procure these Policies please proceed with the ordering process, and our Compliance Manager will engage with you directly to facilitate further arrangements.
