← Blog

POPIA basics for HRs

Philani Chade Maswanganye · 25 April 2026 · popia · data-protection · compliance

POPIA basics — HR

The Protection of Personal Information Act (POPIA, No. 4 of 2013) is the South African law that governs how organisations handle personal information.

  • Three rules every HR must remember:*
  1. Verify before disclosing. Never read account details over the phone until the customer is authenticated.
  2. Mask in writing. When typing notes that will be shared, use the POPIA Redactor in the Toolkit.
  3. Report incidents within 72 hours. Any suspected breach goes to your Information Officer immediately.

QUALICORE includes a POPIA Redactor in Toolkit that masks SA IDs, phones, emails and PANs locally in your browser.

See QUALICORE on your team's calls.

Book a 15-min demo