On completion, participants should be able to:

• Explain key POPIA requirements and distinguish between responsible party and operator responsibilities.
• Apply lawful processing principles to investigations and client engagements.
• Identify privacy risks and implement practical compliance and security measures.
• Manage information requests, retention and security compromises appropriately.
  
  

Module 1: POPIA Fundamentals and Lawful Processing

• POPIA’s scope, key definitions and eight conditions for lawful processing.
• Recognising personal and special personal information in client records, devices, logs and investigative evidence.
• Roles and responsibilities of responsible parties, operators, employees and the Information Officer.
• Lawful grounds for processing and why client instructions do not automatically authorise all processing.
• Accountability and consequences of non-compliance.

Module 2: Applying POPIA to Investigations and Cybersecurity

• Establishing the purpose, scope and authority for collecting and analysing information.
• Limiting access to relevant information and managing unrelated third-party material.
• Handling device contents, public-source information, blockchain data and sensitive findings.
• Managing notification requirements, further use and disclosure in investigative reports.
• Recognising when specialist assessment of prior authorisation is required.

Module 3: Practical Compliance Implementation and Data Protection

• Conducting a basic gap assessment, mapping information flows and assessing privacy risks.
• Essential documentation: privacy notices, policies, operator agreements and confidentiality undertakings.
• Access controls, multifactor authentication, encryption and secure information sharing.
• Protecting forensic evidence through controlled repositories, access logs and chain-of-custody records.
• Managing cloud services, subcontractors, cross-border transfers and AI tools.
• Setting retention periods, preserving evidence and securely disposing of information.
• Linking POPIA procedures with the PAIA manual and assigning implementation responsibilities.

Module 4: Information Requests and Security Compromises

• Handling access, correction, deletion and objection requests.
• Verifying identity and considering confidentiality, third-party rights and legal holds.
• Recognising and escalating suspected security compromises.
• Containing incidents and preserving evidence.
• Understanding operator reporting duties and responsible party notification obligations.
• Documenting decisions, communicating appropriately and implementing corrective action.