+ HEALTHCARE PROVIDERS +
POPIA COMPLIANCE - IT'S THE LAW
WHAT HEALTHCARE PRACTITIONERS NEED TO KNOW
WHAT IS POPIA?
Protection of Personal Information Act
- The POPI Act is effective from 1st July 2021
- POPIA regulates every aspect in the gathering, processing and safekeeping of personal information
- POPIA impacts on the collection, capture, storage, destruction, amendment and update of data
- POPIA applies to every person or entity that handles personal information of another
- POPIA means you are obligated to respond to your patients and other parties.
LEGAL ISSUE
- Patients have the right to know that you will protect their personal data and respect their right to privacy
- Patients have the right to request you furnish them with whatever data you have of theirs
- Patients have the right to request that you amend or update any data of them you may hold
- Patients have the right to request that you delete any data of theirs you might hold
- You may be held responsible for any data breaches through negligence, or wilful acts
- Non-compliance with POPIA could lead to dire consequences: a fine of up to R10 million or 10 years imprisonment
- All it takes is for one patient to cause trouble
COMPLYING WITH POPIA
A step-by-step approach to getting there
- Practice readiness check
- Patient flow assessment
- IT secure-access assessment
- IT security prepared/hardiness
- Patient forms, files and consent paperwork assessment
- File storage/archive and destruction assessment
- Sharing Act requirements and deficiencies
- Specifying a working path forward with steps to take
- We provide a working report within 24hrs
- We provide you with a letter to confirm that you've had a POPI readiness assessment
- Optional - staff video training (a practical orientation)
SELF-HELP
- POPIA & Healthcare Practices
- Practice walkthrough like a patient
- Surviving The Regulator's scrutiny
- Actioning checklist
- Handling adverse events
- Covering your ass
- POPIA resources
- FREE
VIRTUAL ONSITE ASSESSMENT
- Conducted virtually - no travel
- Non-compliance assessment
- Patient exposure assessment
- Document exposure assessment
- Compliance recommendations
- Training recommendation
- What to do next
- Duly completed written assessment
- Letter of completion
- R 975
PHYSICAL ONSITE ASSESSMENT
- Physical visit to site
- Non-compliance assessment
- Patient exposure assessment
- Document exposure assessment
- Compliance recommendations
- Training recommendation
- What to do next
- Duly completed written assessment
- Letter of completion
- R 1200