Involve them before launch.
Every business under POPIA has an Information Officer, registered with the Information Regulator. AI makes the role more important, not less.
The standing duties
POPIA & Regulations
- Encourage and monitor compliance
- Handle requests from data subjects
- Work with the Regulator on investigations
- Maintain a compliance framework and impact assessments
- Run staff awareness
The AI duties
Add These
- Sign off Medium and High tier uses
- Impact-assess AI that touches personal info
- Decide on notifiable incidents (s22)
- Keep the AI inventory honest
Source: popia.co.za ↗
Involve them before launch, not after.