Legal advisory services for smart business

POPIA obligations apply to employees working remotely

 The global pandemic extends the range of the workplace from the employer’s offices to working from home to working remotely from anywhere. Technology is the enabler, monetizing mobility and continued productivity.


The obligations imposed by the Protection of Personal Information Act (POPIA) still apply but the implementation of suitable controls intensifies when employees work remotely. Employers must shift away from the view that networks outside of the workplace are not their responsibility. POPIA compels employers as responsible parties to secure the integrity  and confidentiality of the personal information in their possession or under their control. POPIA also compels responsible parties to identify foreseeable internal and external risks and to establish and maintain appropriate safeguards. The standards are high and without exception.


The exercise begins with assessing each employee’s personal circumstances before rolling out tech solutions. The solutions for successful remote working practices include encrypting laptops and other mobile devices like iPads and cell phones. Also effective is the use of privacy filters on the screens of laptops and cell phones, especially if employees work in confined spaces, like public transport and coffee shops. Strong passwords, two-factor identification and email encryption are obvious controls, as is keeping the business operating system up to date. Biometrics (ie face, voice and finger prints) make strong controls.


Complying with POPIA is mandatory, but POPIA also presents an opportunity to improve business operations and governance. With the right support, the impact of this change will benefit everyone.