Policy drafting · Group 04

Information, data and records policies

The suite the Information Regulator asks for — and which, for an organisation that sells compliance, is the first thing a sceptical buyer checks.

Book a scoping call All of policy drafting

In this group

6 instruments.

Every page sets out what the instrument does, how it is drafted, and the defect that most often makes it worthless on the day it matters.

Information governance and POPIA policy

Records how the organisation processes personal information, and by what lawful…

Open the brief 02

PAIA manual and access to information procedure

The public document section 51 of PAIA requires, plus the internal procedure that makes it…

Open the brief 03

Records management and retention policy

Says how long each class of record is kept, where, and how it is…

Open the brief 04

Information security and acceptable use policy

Describes the technical and organisational measures that make the POPIA security condition real, and what staff may and may not do with the organisation’s…

Open the brief 05

Security compromise and data breach response procedure

The operational procedure for the day personal information is…

Open the brief 06

Communications, media and social media policy

Governs who may speak for the organisation, and what everyone else may…

Open the brief

Tools, documents and services for this group

Test what you already have, read the reference library, or have the instruments in this group drafted to your own framework.

DownloadThe POPIA readiness checklistOpen Worked exampleOur own section 51 manualOpen ServicePOPIA and PAIA programmesOpen

← Back to Policy drafting

Start here

Tell us the decision your organisation needs to make.

The first conversation is thirty minutes, confidential and free. You will leave it knowing which of our services you need and which you do not.

Book a scoping call Other ways to reach us