Professional Documents
Culture Documents
Daniella Kafouris
Associate Director
Deloitte Risk Advisory
1997
Constitution
published
2005
Law
Commission
finalised
investigation
2009
PPIB
published
2012
Portfolio
Committee
approved
PPIB
2013
PPIB
became
law
Key Conditions
Accountability
Processing
Limitations
Purpose
Specification
Further
Processing
Information
Quality
Openness
Security Safeguards
Additional
Requirements
Special Personal
Information
Information about
children
Information Regulator
Direct Marketing
Trans-border
Information Flows
5. Information
officer
9. Special
PI religion/
philosophy, race/
ethnicity, union,
politics, health/
sexuality,
biometrics, criminal
allegations, child
6. Regulator
10. Operator
contract
processing,
security &
reporting
7. Reporting
DS and loss
8. Security
self audit
11. Direct
marketing*
12. Cross
border*
Direct Marketing
Approach in person or by mail or by electronic communication
Tunisia
Western Sahara
Algeria
Egypt
Libya
Niger
Mali
Sudan
Chad
Senegal
Nigeria
Ghana
Guinea-Bissau
Ivory Coast
Liberia
Benin
Tonga
Cameroon
Uganda
Democratic
Republic of
Congo
Kenya
Gabon
Congo
Somalia
South Ethiopia
Sudan
Tanzania
Angola
Rwanda
Burundi
Seychelles
Comoros
Zambia
Mozambique
Mayotte
Constitutional coverage
Law in Process
Sectoral Laws
No Data Protection Law
Mauritius
Namibia
Zimbabwe
Reunion
Botswana
Swaziland
South Africa
Lesotho
Information
Regulator
Data Subject
Fines
Imprisonment
Self-reporting
notification
Post
Up to R10 million
12 months to
10 years
Criminal investigation
Complaints
Media
Audit
Website
Privacy Commissioner
of Canada
Bundesbeauftrager fr
den Datenschutz und
die Informationsfreiheit
Office of the
Privacy Commissioner for
Personal Data, Hong Kong
?
South African Information
Regulator
Failure to disclose the means used to collect data, i.e., the use and/
or duration of cookies, web bugs, spyware, tracking technologies
(especially in HR environment)
Disclosing, sharing, or selling personal data to third parties
contrary to the organizations privacy policy or legal/contractual
framework (eg in Cloud environment)
Export of personal data not in compliance with privacy laws of the
originating country
Misrepresenting the security protection and redress possibilities of
personal data
BUT ALSO
Foreign
Jurisdictions
overview &
actions taken to
address
e-commerce
South Africa
Pre-2014 and
post 2014 VAT
Amendments
South Africa
Post Electronic Service VAT Amendments
VAT Treatment of Cross-Border Electronic Services Certain
foreign suppliers will now be required to register in SA
The South African VAT legislation was officially amended in December
2013 to address electronic services supplied by persons from an export
country to a South African resident or where payment for the supply
originates from a SA bank account.
The amendments were due to come into effect 1 April 2014, however, this
was postponed until 1 June 2014.
From 1 June 2014 foreign suppliers supplying services which qualify as
electronically supplied services will be required to register for VAT in SA at
the end of any month where the value of supplies exceeds R50,000.
20
South Africa
Post Electronic Service VAT Amendments
The list includes the following main categories and then each
category includes specific sub-categories:
i.
Educational services
ii.
iii.
iv.
v.
21
Tablets
(BYOD)
Wearable
computing
($3 billion)
E-visits
100 million
globally
Massive Open
Online Courses
(MOOCs)
100%
Contact details
Daniella Kafouris
Deloitte Associate Director Johannesburg
Risk Advisory-Legal
BA LLB
HDIP Cyberlaw
Certified Information Privacy Professional CIPP US / EU
International Association of Privacy Professionals - Certified
Trainer
Member of IAPP Faculty
24
Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee, and its network of member firms, each of
which is a legally separate and independent entity. Please see www.deloitte.com/about for a detailed description of the legal structure of Deloitte Touche
Tohmatsu Limited and its member firms.
Deloitte provides audit, tax, consulting and financial advisory services to public and private clients spanning multiple industries. With a globally connected
network of member firms in more than 150 countries, Deloitte brings world-class capabilities and high-quality service to clients, delivering the insights they
need to address their most complex business challenges. The more than 200 000 professionals of Deloitte are committed to becoming the standard of
excellence.
This communication contains general information only, and none of Deloitte Touche Tohmatsu Limited, its member firms, or their related entities (collectively,
the Deloitte Network) is, by means of this communication, rendering professional advice or services. No entity in the Deloitte Network shall be responsible for
any loss whatsoever sustained by any person who relies on this communication.
2014 Deloitte & Touche. All rights reserved. Member of Deloitte Touche Tohmatsu Limited