Label it. Then strip what you don't need.
Four simple labels tell staff what can go where. De-identifying data lets you use more of it safely, if you do it properly.
Four labels
Classification
- Public: already published, fine anywhere
- Internal: approved tools only
- Confidential: approved tools, with care
- Restricted: special personal info, ID and account numbers, call recordings. Kept out.
Two ways to de-identify
Know The Difference
- Anonymised: can't be re-identified, so it falls outside POPIA
- Pseudonymised: names swapped for codes, but a key exists, so it's still personal info
- Treat pseudonymised data as personal data
Sources: popia.co.za ↗ · Department of Justice ↗
Label first. Share less.