The global
pandemic extends the range of the workplace from the employer’s offices to
working from home to working remotely from anywhere. Technology is the enabler,
monetizing mobility and continued productivity.
The obligations
imposed by the Protection of Personal Information Act (POPIA) still apply but
the implementation of suitable controls intensifies when employees work
remotely. Employers must shift away from the view that networks outside of the
workplace are not their responsibility. POPIA compels employers as responsible
parties to secure the integrity and
confidentiality of the personal information in their possession or under their control.
POPIA also compels responsible parties to identify foreseeable internal and
external risks and to establish and maintain appropriate safeguards. The
standards are high and without exception.
The exercise
begins with assessing each employee’s personal circumstances before rolling out
tech solutions. The solutions for successful remote working practices include encrypting
laptops and other mobile devices like iPads and cell phones. Also effective is
the use of privacy filters on the screens of laptops and cell phones,
especially if employees work in confined spaces, like public transport and coffee
shops. Strong passwords, two-factor identification and email encryption are
obvious controls, as is keeping the business operating system up to date.
Biometrics (ie face, voice and finger prints) make strong controls.
Complying with
POPIA is mandatory, but POPIA also presents an opportunity to improve business
operations and governance. With the right support, the impact of this change will
benefit everyone.
