Sooner or later, someone in your organisation is going to say: “We need to be compliant.”

The first question to ask is: “Compliant with what?” The ECT Act is a typical answer but the Protection of Personal Information Bill will soon be another good one. PPI’s goal is “to promote the protection of personal information processed by public and private bodies and to introduce information protection principles so as to establish minimum requirements for the processing of personal information”, according to the preamble.