Page 54 - Q&A

The task team will need to make sure that all aspects of the business is reviewed.
This will also include assessing the involvement of third parties that you share
information with or that may process information on your behalf and that the
necessary agreements or undertakings are put in place with such third parties.
The task team will have a big job on its hands, particularly with a business that is
data intensive. As such the team will need to move fast to have thins in place by
30 June 2021, have a clear mandate and have the necessary expertise in order
to ensure that what is rolled out is appropriate, implementable and compliant.
Commercial If your business has not yet moved aggressively on ensuring its POPIA

compliance, you would be strongly advised to do so without delay, particularly
if you process substantial information, as the scope and complexity of your
obligations can easily be underestimated.

47