A simple explainer on the data minimisation principle with reference to the decision of Ireland’s Data Protection Commission on Groupon under the GDPR in December […]
Small Businesses and the Protection of Personal Information Act, 2013
Must small businesses comply with POPIA? Compliance with the Protection of Personal Information Act, 2013 (“POPIA”) is not dependent on turnover or number of employees. […]
POPIA’s Notification Conundrum
Are all data breaches notifiable, or do we follow a risk-based approach?