WHAT’S INSIDE?

The checklist covers key areas of employee and candidate data compliance, including:

• Governance: Information Officer registration, Deputy Information Officers where required, POPIA policies and records.
• Collection and lawful processing: Documented purposes, lawful justifications and privacy notices.
• Recruitment and screening: Candidate CV retention, background checks and third-party screening providers.
• Data security: Access controls, secure storage, safeguards and breach-response procedures.
• Retention and individual rights: Employee record retention, destruction processes and requests to access or correct personal information.
• Cross-border transfers: Employee and candidate data transferred outside South Africa, including through group companies and cloud services.
• Contracts, policies and training: Employment contract clauses, employee privacy notices, workplace monitoring policies and staff training.

HOW TO USE THE CHECKLIST

Work through each item and mark Yes, No or Unsure according to your business’s current practices.

Use your answers to identify areas that may require further investigation or corrective action.