Protecting personal information (POPIA, GDPR and similar)

Looking after personal information

Applies to: everyone at [company] who sees or handles information about people, such as customers, staff, learners, patients or suppliers.

What you must do
1. Only look at, use or share personal information if you need it to do your job.
2. Do not take it off site, copy it to personal devices, or send it by personal email or messaging apps unless [rule].
3. Lock your screen when you leave your desk and put paper records away.
4. Share information only with people who are allowed to have it. Check who you are talking to first.
5. Report a lost device, a wrong email, a lost file or anything that looks like a leak to [name or role] immediately. Do not wait.
6. If someone asks to see, correct or delete their information, pass the request to [name or role] and do not answer it yourself.

Why: a mistake with personal information can harm people and the business.

The data protection law that applies to us is [for example POPIA, GDPR, UK GDPR]. Our information officer or data protection contact is [name], [contact].

By ticking you confirm that you have read and understood this notice.