[ LEGAL • PRIVACY ]

POPIA Compliance

How CyberPulse complies with the Protection of Personal Information Act 4 of 2013 (POPIA) and what your rights are as a data subject.

What is POPIA?

The Protection of Personal Information Act 4 of 2013 is South Africa's primary data protection legislation. It sets conditions for the lawful processing of personal information and grants rights to data subjects — including the right to access, correct, and delete their data.

POPIA applies to any organisation that processes personal information of South African residents, whether the organisation is based in South Africa or abroad.

Why it matters for your business

Businesses that process personal information of South African residents are required to comply with POPIA. Non-compliance can result in administrative fines of up to R10 million and criminal sanctions.

CyberPulse helps you understand your current security posture — a key element of demonstrating that you have implemented appropriate security safeguards as required by Section 19 of POPIA.

[ HOW WE COMPLY ]

The 8 conditions for lawful processing

POPIA sets eight conditions that responsible parties must satisfy when processing personal information.

1

Accountability

CyberPulse has designated an Information Officer responsible for ensuring POPIA compliance across the organisation. Our Information Officer's details are registered with the Information Regulator.

2

Processing Limitation

We collect only the minimum personal information necessary to deliver our services. Data collected for scanning purposes is not used for unrelated processing activities.

3

Purpose Specification

All personal information is collected for a specific, explicitly defined, and lawful purpose. We communicate this purpose clearly at the point of collection.

4

Further Processing Limitation

We do not process your personal information for purposes incompatible with those for which it was originally collected.

5

Information Quality

We take reasonable steps to ensure that personal information is complete, accurate, not misleading, and updated where necessary.

6

Openness

We maintain this POPIA notice and our Privacy Policy to inform you of our processing activities. We do not process personal information in a secretive or undisclosed manner.

7

Security Safeguards

All scan results are encrypted using AES-256-GCM. We apply technical and organisational measures appropriate to the sensitivity of the information processed.

8

Data Subject Participation

You may access, correct, or request the deletion of your personal information at any time by contacting privacy@cyberpulse.co.za. We respond within 30 days.

[ YOUR RIGHTS ]

Your rights as a data subject

  • Request access to the personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal information
  • Object to the processing of your personal information
  • Request restriction of processing in certain circumstances
  • Lodge a complaint with the Information Regulator of South Africa
  • Be notified within 72 hours if your personal information is compromised in a security breach

To exercise any of these rights, contact us at privacy@cyberpulse.co.za — we respond within 30 days.

You may also lodge a complaint with the Information Regulator of South Africa at inforeg.org.za or call 010 023 5207.