Free Provisional POPIA Maturity Assessments Form

Step 1 of 3

33%

Name(Required)

First Name Last Name

Email Address(Required)

Contact Number(Required)

Name of Organization(Required)

Does your organization have a Compliance Risk Management Plan (CRMP) which deals with POPIA, specifically?(Required)

Yes

Please attach your organization's POPIA CRMP?(Required)

Drop files here or

Max. file size: 32 MB.

Based on question 1; above, has your organization done any compliance monitoring in respect of POPIA, specifically?(Required)

Yes

Please attach the POPIA compliance monitoring report. If you are not comfortabke attaching the entire report, you may select a section or sections and merely scan those.(Required)

Drop files here or

Max. file size: 32 MB.

Has your organization conducted an independent personal information impact assessment?(Required)

(see Regulation 4(1)(a) of POPIA)). Even if you believe the initial effort to have been lacking in some respects, it is still important that you respond.)

Yes

Please attach your PIIA for analysis purposes. To limit processing, you may attach only a part of that PIIA, for an example, the Human Capital Department’s PIIA instead of the entire organization.(Required)

Drop files here or

Max. file size: 32 MB.

Does your organization have a written compliance framework in terms of Regulation 4(1)(a) of POPIA?(Required)

Yes

Please attach the compliance framework.(Required)

Drop files here or

Max. file size: 32 MB.

Does your organization have a written compliance policy?(Required)

Yes

Please attach the compliance policy.(Required)

Drop files here or

Max. file size: 32 MB.

Does your organization have a Retention Schedule or Policy?(Required)

Alternatively, to the best of your knowledge, is there a rule within your organization which governs how long both physical and electronic documents must be kept for?

Yes

Please attach the Retention Schedule.(Required)

Drop files here or

Max. file size: 32 MB.

Does your organization have a policy or Standard Operating Procedures (SOP) which deal with “Quality of Information”? (see section 16 of POPIA).(Required)

Yes

Please attach the policy of relevant SOP.(Required)

Drop files here or

Max. file size: 32 MB.

Has your organization’s IT function conducted an assessment to internal risks to personal information and an assessment of external risks to personal information?(Required)

Yes

A redacted independent report from the independent service provider which conducted the assessments. If the assessment was conducted internally, the internal report will suffice.(Required)

Drop files here or

Max. file size: 32 MB.

Does your organization have a data breach response plan?(Required)

Yes

Please attach the data breach response plan.(Required)

Drop files here or

Max. file size: 32 MB.

Does your organization have a PAIA Manual in terms of the Promotion of Access to Information Act, 2000?(Required)

Yes

Please attach your PAIA Manual. Please also indicate whether your PAIA manual can be found on your website.(Required)

Drop files here or

Max. file size: 32 MB.

Were your organization’s Information Officer and Deputy Information Officer (if applicable, registered with the Information Regulator)?(Required)

Yes

Please attach the registration certificates as issued by the Information Regulator.(Required)

Drop files here or

Max. file size: 32 MB.

In respect of question 3., above, does your organization’s PIIA have risk assessment section which was considered and completed within the context of the 8 conditions for the lawful processing of personal information?(Required)

Personal Information Risk Assessment in respect of the 8 conditions for the lawful processing of personal information.

Yes

Please attach your organization’s PIIA. It is important that the “risk assessment” section, specifically, appears. In other words, the inherent risk (likelihood multiplied by the impact), must appear. Furthermore, the existing controls, controls effectiveness analysis and residual risks, must appear.(Required)

Drop files here or

Max. file size: 32 MB.

When was the last occasion where your organization conducted training and awareness on POPIA?(Required)

We recently conducted POPIA training.

We have not yet conducted POPIA training.

If training was conducted, please attach a summary of the topics covered. Or, if you are comfortable, please attach the slides for the POPIA training.(Required)

Drop files here or

Max. file size: 32 MB.

Free Provisional POPIA Maturity Assessment – Disclaimer & Consent

By submitting this form and selecting the confirmation checkbox, you acknowledge and agree to the following:

1. Nature of the Assessment

The Free Provisional POPIA Maturity Assessment is provided for informational and preliminary evaluation purposes only. The outcome is a high-level assessment of your organisation’s POPIA maturity level based solely on the information and documentation voluntarily provided by you.

2. Accuracy of Information

You confirm that the information and documents submitted through this platform are accurate, lawful, and provided with appropriate authority. The quality, reliability, and usefulness of the assessment are entirely dependent on the completeness and accuracy of the information you provide.

3. No Professional or Legal Opinion

The provisional assessment does not constitute legal advice, compliance certification, audit opinion, or regulatory approval. It is not a substitute for a comprehensive compliance review, legal consultation, or formal audit. Where a more detailed analysis is required (e.g., for EXCO, Audit and Risk Committees, or Board reporting), such services will be provided separately on a quoted and agreed engagement basis.

4. Processing of Personal Information

Any personal or organisational information submitted through this form will be processed in accordance with the Protection of Personal Information Act, 2013 (POPIA) and applicable data protection principles. Information will only be used for the purpose of conducting the provisional assessment and related communication regarding the assessment.

5. Safeguarding of Information

Appropriate technical and organisational security measures, consistent with section 19 of POPIA, will be implemented to protect information submitted through this platform against loss, damage, unauthorised access, or unlawful processing.

6. Document Submissions

You may upload documents to support your responses. Where documents contain sensitive or confidential information, you may submit redacted extracts or relevant sections only to limit processing.

7. Retention and Disposal of Information

Submitted responses and documents will be retained only for the period reasonably necessary to complete the assessment and communicate the results. Once the assessment process is concluded, information will be securely disposed of using responsible and legally compliant electronic means, unless further engagement is requested or legally required.

8. Limitation of Liability

To the fullest extent permitted by law, the provider of this assessment accepts no liability for decisions, actions, or omissions taken by any organisation based solely on the provisional assessment or summary provided.

Consent(Required)

I confirm that I have read and understood the disclaimer above and consent to the processing of the submitted information for the purposes of conducting the Free Provisional POPIA Maturity Assessment.(Required)

Quick links

Contact us

DBN Branch

JHB Branch

Policies