TechCentralTechCentral
    Facebook Twitter YouTube LinkedIn
    Facebook Twitter LinkedIn YouTube
    TechCentralTechCentral
    NEWSLETTER
    • News

      Willington Ngwepe to step down as Icasa CEO

      10 August 2022

      Samsung unveils its latest foldable smartphones

      10 August 2022

      Cape Town’s DataProphet expands funding to R165-million

      10 August 2022

      The tech proves it: South African women are better drivers than men

      10 August 2022

      BT, Seacom sign ‘strategic alliance’ for enterprise services

      10 August 2022
    • World

      Jumia says it’s past peak losses, shares jump

      10 August 2022

      Elon Musk sells $6.9-billion of Tesla to avoid Twitter fire sale

      10 August 2022

      Nvidia issues profit warning on slump in demand for graphics cards

      8 August 2022

      Buterin: Mining on Ethereum Classic won’t affect Merge

      8 August 2022

      Musk challenges Twitter CEO to a public debate

      7 August 2022
    • In-depth

      The length of Earth’s days has been increasing – and no one knows why

      7 August 2022

      As Facebook fades, the Mad Men of advertising stage a comeback

      2 August 2022

      Crypto breaks the rules. That’s the point

      27 July 2022

      E-mail scams are getting chillingly personal

      17 July 2022

      Webb telescope’s stunning images of the cosmos

      12 July 2022
    • Podcasts

      e4’s Adri Führi on encouraging more women into tech careers

      10 August 2022

      How South Africa can woo more women into tech

      4 August 2022

      Book and check-in via WhatsApp? FlySafair is on it

      28 July 2022

      Interview: Why Dell’s next-gen PowerEdge servers change the game

      28 July 2022

      Demystifying the complexity of AI – fact vs fiction

      6 July 2022
    • Opinion

      SIU seeks to set aside R215-million IT tender

      19 July 2022

      No reason South Africa should have a shortage of electricity: Ramaphosa

      11 July 2022

      Ntshavheni’s bias against the private sector

      8 July 2022

      South Africa can no longer rely on Eskom alone

      4 July 2022

      Has South Africa’s advertising industry lost its way?

      21 June 2022
    • Company Hubs
      • 1-grid
      • Altron Document Solutions
      • Amplitude
      • Atvance Intellect
      • Axiz
      • BOATech
      • CallMiner
      • Digital Generation
      • E4
      • ESET
      • Euphoria Telecom
      • IBM
      • Kyocera Document Solutions
      • Microsoft
      • Nutanix
      • One Trust
      • Pinnacle
      • Skybox Security
      • SkyWire
      • Tarsus on Demand
      • Videri Digital
      • Zendesk
    • Sections
      • Banking
      • Broadcasting and Media
      • Cloud computing
      • Consumer electronics
      • Cryptocurrencies
      • Education and skills
      • Energy
      • Fintech
      • Information security
      • Internet and connectivity
      • Internet of Things
      • Investment
      • IT services
      • Motoring and transport
      • Public sector
      • Science
      • Social media
      • Talent and leadership
      • Telecoms
    • Advertise
    TechCentralTechCentral
    Home»Opinion»Alison Treadaway»GDPR and Popi: How big will their impact really be?

    GDPR and Popi: How big will their impact really be?

    Alison Treadaway By Alison Treadaway14 January 2019
    Facebook Twitter LinkedIn WhatsApp Telegram Email
    The author, Alison Treadaway

    With the European Union’s General Data Protection Regulation (GDPR) coming up to its first anniversary in May, there is evidence that it’s already having an impact, with organisations and customers reporting breaches more regularly.

    But will this really make for a safer environment? Perhaps more importantly, are authorities ready and equipped to deal with increased levels of reporting?

    The answers to these questions are important, not only in the EU, but also in South Africa, where the Protection of Personal Information Act (Popi) is making progress on its path to implementation. Assessing the impact of GDPR will give us a clearer idea of how effective Popi might be.

    After little activity last year, the Information Regulator in South Africa published the final Popi regulations on 14 December

    In the immediate aftermath of GDPR coming into force, there was a dramatic uptick in the number of data breach complaints received by authorities across Europe. That’s hardly surprising, especially given the attention GDPR was receiving at the time.

    In the UK alone, there were 19 000 complaints from members of the public about privacy breaches in the six months after GDPR came into effect, versus just 9 000 in the same six months the previous year. In that same six months, more than 8 000 data breaches were reported.

    In Ireland, meanwhile, the number of data-breach reports received on a daily basis more than doubled, with similarly dramatic increases in Germany and France.

    Although this increase in reporting certainly gives authorities a clearer idea of how many data breaches occur on a daily basis, as well as how proactively organisations look after their customers’ data, is it making any tangible difference?

    Positive impact

    While GDPR can’t prevent cybercriminals from trying to access organisational data, it is likely that it will have a positive impact in the long term.

    If organisations are serious about being compliant, they’ll ensure that they have the required checks and balances in place, as well as invest in better security and better data governance.

    The uptick in privacy breach complaints also suggests that ordinary people are becoming more aware of how their data is being used. As a consequence, there may be increased awareness around the value of data, and further improvements to accountability driven by consumer demand and activism.

    That will only be the case, however, if authorities in the individual EU countries are stringent in ensuring that organisations are GDPR compliant and respond with material consequences on those who aren’t.

    If early indicators are anything to go by, those looking to flout the regulations may feel emboldened.

    By late December, just three nations had issued public fines under the new regulations. The UK’s first enforcement under the new regime, meanwhile, fell flat, after the Canadian business involved successfully appealed the order.

    That said, authorities across the EU indicated that they would tread softly at first, so we may only see the big sticks come out through the course of 2019.

    If the Information Regulator fails to properly enforce Popi, however, it won’t create the more secure, more accountable environment it’s meant to

    In South Africa, Popi will face similar challenges when it finally comes into effect.

    After little activity last year, the Information Regulator in South Africa published the final Popi regulations on 14 December.

    Although the regulations include very few extra compliance requirements (there will likely be even fewer for companies which are already GDPR compliant), organisations will still have to ensure that they put in the necessary effort by the Popi commencement date.

    If the Information Regulator fails to properly enforce Popi, however, it won’t create the more secure, more accountable environment it’s meant to.

    Given that the regulator is only expected to be fully operational this year (nearly three years after being formed), and is still staffing up, it may be some time before it has the necessary teeth to take on anyone flouting the act.

    Year’s grace period

    Organisations will also a have a year’s grace period to get their houses in order once Popi comes into effect. That means we’ll probably only have an accurate idea of Popi’s efficacy sometime after 2020.

    Finally, it’s important to note that compliance does not always equal security. While being Popi and GDPR compliant can help improve security, organisations need to set their security postures higher than the regulatory requirements if we are to create a safer digital environment.

    Cybercriminals haven’t stopped trying to get their hands on organisational data because of GDPR and they won’t because of the South African legislation.

    Organisations therefore need to go beyond what is required for compliance and do everything possible to prevent breaches from happening, as well as manage them effectively when they do.

    • Alison Treadaway is chief marketing officer at Striata
    Alison Treadaway GDPR Popi Act Striata
    Share. Facebook Twitter LinkedIn WhatsApp Telegram Email
    Previous ArticleNew MD for Microsoft South Africa
    Next Article Vodacom secures rights to live-stream FA Cup matches

    Related Posts

    Willington Ngwepe to step down as Icasa CEO

    10 August 2022

    Samsung unveils its latest foldable smartphones

    10 August 2022

    Cape Town’s DataProphet expands funding to R165-million

    10 August 2022
    Add A Comment

    Comments are closed.

    Promoted

    How secure is your cloud?

    10 August 2022

    5 ways to make attack-path management more manageable

    10 August 2022

    Smart homes need even smarter Wi-Fi

    10 August 2022
    Opinion

    SIU seeks to set aside R215-million IT tender

    19 July 2022

    No reason South Africa should have a shortage of electricity: Ramaphosa

    11 July 2022

    Ntshavheni’s bias against the private sector

    8 July 2022

    Subscribe to Updates

    Get the best South African technology news and analysis delivered to your e-mail inbox every morning.

    © 2009 - 2022 NewsCentral Media

    Type above and press Enter to search. Press Esc to cancel.