Close Menu
TechCentralTechCentral

    Subscribe to the newsletter

    Get the best South African technology news and analysis delivered to your e-mail inbox every morning.

    Facebook X (Twitter) YouTube LinkedIn
    WhatsApp Facebook X (Twitter) LinkedIn YouTube
    TechCentralTechCentral
    • News

      Vodacom’s Maziv deal gets makeover ahead of crucial hearing

      18 July 2025

      Cut electricity prices for data centres: Andile Ngcaba

      18 July 2025

      Takealot taps Mr D to deliver toys, pet food and future growth

      18 July 2025

      ‘Oh, Ani!’: Elon’s edgy bot stirs ethical storm

      18 July 2025

      Trump U-turn on Nvidia spurs talk of grand bargain with China

      18 July 2025
    • World

      Grok 4 arrives with bold claims and fresh controversy

      10 July 2025

      Samsung’s bet on folding phones faces major test

      10 July 2025

      Bitcoin pushes higher into record territory

      10 July 2025

      OpenAI to launch web browser in direct challenge to Google Chrome

      10 July 2025

      Cupertino vs Brussels: Apple challenges Big Tech crackdown

      7 July 2025
    • In-depth

      The 1940s visionary who imagined the Information Age

      14 July 2025

      MultiChoice is working on a wholesale overhaul of DStv

      10 July 2025

      Siemens is battling Big Tech for AI supremacy in factories

      24 June 2025

      The algorithm will sing now: why musicians should be worried about AI

      20 June 2025

      Meta bets $72-billion on AI – and investors love it

      17 June 2025
    • TCS

      TCS+ | Samsung unveils significant new safety feature for Galaxy A-series phones

      16 July 2025

      TCS+ | MVNX on the opportunities in South Africa’s booming MVNO market

      11 July 2025

      TCS | Connecting Saffas – Renier Lombard on The Lekker Network

      7 July 2025

      TechCentral Nexus S0E4: Takealot’s big Post Office jobs plan

      4 July 2025

      TCS | Tech, townships and tenacity: Spar’s plan to win with Spar2U

      3 July 2025
    • Opinion

      A smarter approach to digital transformation in ICT distribution

      15 July 2025

      In defence of equity alternatives for BEE

      30 June 2025

      E-commerce in ICT distribution: enabler or disruptor?

      30 June 2025

      South Africa pioneered drone laws a decade ago – now it must catch up

      17 June 2025

      AI and the future of ICT distribution

      16 June 2025
    • Company Hubs
      • Africa Data Centres
      • AfriGIS
      • Altron Digital Business
      • Altron Document Solutions
      • Altron Group
      • Arctic Wolf
      • AvertITD
      • Braintree
      • CallMiner
      • CambriLearn
      • CYBER1 Solutions
      • Digicloud Africa
      • Digimune
      • Domains.co.za
      • ESET
      • Euphoria Telecom
      • Incredible Business
      • iONLINE
      • Iris Network Systems
      • LSD Open
      • NEC XON
      • Network Platforms
      • Next DLP
      • Ovations
      • Paracon
      • Paratus
      • Q-KON
      • SevenC
      • SkyWire
      • Solid8 Technologies
      • Telit Cinterion
      • Tenable
      • Vertiv
      • Videri Digital
      • Wipro
      • Workday
    • Sections
      • AI and machine learning
      • Banking
      • Broadcasting and Media
      • Cloud services
      • Contact centres and CX
      • Cryptocurrencies
      • Education and skills
      • Electronics and hardware
      • Energy and sustainability
      • Enterprise software
      • Fintech
      • Information security
      • Internet and connectivity
      • Internet of Things
      • Investment
      • IT services
      • Lifestyle
      • Motoring
      • Public sector
      • Retail and e-commerce
      • Science
      • SMEs and start-ups
      • Social media
      • Talent and leadership
      • Telecoms
    • Events
    • Advertise
    TechCentralTechCentral
    Home » Alison Treadaway » GDPR and Popi: How big will their impact really be?

    GDPR and Popi: How big will their impact really be?

    By Alison Treadaway14 January 2019
    Twitter LinkedIn Facebook WhatsApp Email Telegram Copy Link
    News Alerts
    WhatsApp
    The author, Alison Treadaway

    With the European Union’s General Data Protection Regulation (GDPR) coming up to its first anniversary in May, there is evidence that it’s already having an impact, with organisations and customers reporting breaches more regularly.

    But will this really make for a safer environment? Perhaps more importantly, are authorities ready and equipped to deal with increased levels of reporting?

    The answers to these questions are important, not only in the EU, but also in South Africa, where the Protection of Personal Information Act (Popi) is making progress on its path to implementation. Assessing the impact of GDPR will give us a clearer idea of how effective Popi might be.

    After little activity last year, the Information Regulator in South Africa published the final Popi regulations on 14 December

    In the immediate aftermath of GDPR coming into force, there was a dramatic uptick in the number of data breach complaints received by authorities across Europe. That’s hardly surprising, especially given the attention GDPR was receiving at the time.

    In the UK alone, there were 19 000 complaints from members of the public about privacy breaches in the six months after GDPR came into effect, versus just 9 000 in the same six months the previous year. In that same six months, more than 8 000 data breaches were reported.

    In Ireland, meanwhile, the number of data-breach reports received on a daily basis more than doubled, with similarly dramatic increases in Germany and France.

    Although this increase in reporting certainly gives authorities a clearer idea of how many data breaches occur on a daily basis, as well as how proactively organisations look after their customers’ data, is it making any tangible difference?

    Positive impact

    While GDPR can’t prevent cybercriminals from trying to access organisational data, it is likely that it will have a positive impact in the long term.

    If organisations are serious about being compliant, they’ll ensure that they have the required checks and balances in place, as well as invest in better security and better data governance.

    The uptick in privacy breach complaints also suggests that ordinary people are becoming more aware of how their data is being used. As a consequence, there may be increased awareness around the value of data, and further improvements to accountability driven by consumer demand and activism.

    That will only be the case, however, if authorities in the individual EU countries are stringent in ensuring that organisations are GDPR compliant and respond with material consequences on those who aren’t.

    If early indicators are anything to go by, those looking to flout the regulations may feel emboldened.

    By late December, just three nations had issued public fines under the new regulations. The UK’s first enforcement under the new regime, meanwhile, fell flat, after the Canadian business involved successfully appealed the order.

    That said, authorities across the EU indicated that they would tread softly at first, so we may only see the big sticks come out through the course of 2019.

    If the Information Regulator fails to properly enforce Popi, however, it won’t create the more secure, more accountable environment it’s meant to

    In South Africa, Popi will face similar challenges when it finally comes into effect.

    After little activity last year, the Information Regulator in South Africa published the final Popi regulations on 14 December.

    Although the regulations include very few extra compliance requirements (there will likely be even fewer for companies which are already GDPR compliant), organisations will still have to ensure that they put in the necessary effort by the Popi commencement date.

    If the Information Regulator fails to properly enforce Popi, however, it won’t create the more secure, more accountable environment it’s meant to.

    Given that the regulator is only expected to be fully operational this year (nearly three years after being formed), and is still staffing up, it may be some time before it has the necessary teeth to take on anyone flouting the act.

    Year’s grace period

    Organisations will also a have a year’s grace period to get their houses in order once Popi comes into effect. That means we’ll probably only have an accurate idea of Popi’s efficacy sometime after 2020.

    Finally, it’s important to note that compliance does not always equal security. While being Popi and GDPR compliant can help improve security, organisations need to set their security postures higher than the regulatory requirements if we are to create a safer digital environment.

    Cybercriminals haven’t stopped trying to get their hands on organisational data because of GDPR and they won’t because of the South African legislation.

    Organisations therefore need to go beyond what is required for compliance and do everything possible to prevent breaches from happening, as well as manage them effectively when they do.

    • Alison Treadaway is chief marketing officer at Striata


    Alison Treadaway GDPR Popi Act Striata
    Subscribe to TechCentral Subscribe to TechCentral
    Share. Facebook Twitter LinkedIn WhatsApp Telegram Email Copy Link
    Previous ArticleNew MD for Microsoft South Africa
    Next Article Vodacom secures rights to live-stream FA Cup matches

    Related Posts

    Truecaller may face Popia probe by Information Regulator

    27 November 2024

    Europe’s GDPR is broken, departing privacy chief warns

    25 June 2021

    Mimecast’s Brian Pinnock on the Popi Act and what happens next

    14 December 2020
    Company News

    Vertiv to acquire custom rack solutions manufacturer

    18 July 2025

    SA businesses embrace gen AI – but strategy and skills are lagging

    17 July 2025

    Ransomware in South Africa: the human factor behind the growing crisis

    16 July 2025
    Opinion

    A smarter approach to digital transformation in ICT distribution

    15 July 2025

    In defence of equity alternatives for BEE

    30 June 2025

    E-commerce in ICT distribution: enabler or disruptor?

    30 June 2025

    Subscribe to Updates

    Get the best South African technology news and analysis delivered to your e-mail inbox every morning.

    © 2009 - 2025 NewsCentral Media

    Type above and press Enter to search. Press Esc to cancel.