fax 0 ridgeworth, bellville · fax 0 15 zinia road ridgeworth, bellville [email protected] gp...

of 65

Go Pixel (Pty) Ltd Tel 021 910 2229 Fax 0

15 Zinia Road Ridgeworth, Bellville

www.gopixel.co.za [email protected]

GP

GOPIXEL’S POPI / PAIA COMPLIANCE DOCUMENTATION TOOLKIT

LIST OF DOCUMENTS

with

Document template features

Individual document price

Format

Number of pages

Benefits

Prices indicated are for individual documents

Package prices can be access here

http://gopixel.co.za/learning-centre/protection-of-personal-information-

act/popi-documentation-toolkit/

ASAIPA Members qualify for discounted prices

http://gopixel.co.za/learning-centre/protection-of-personal-information-act/popi-documentation-toolkit/


of 65

CONTENTS

Terms_of_ Use_for_Documentation ............................................................................................................ 5

Please_read_this_first .................................................................................................................................. 6

00_Document Management ........................................................................................................................ 7

Form 00.0_Procedure_for_Document_and_Record_Control .................................................................. 7

01_Preparations for the Project .................................................................................................................. 8

Form 01.1_POPI_Compliance_Project_Plan R 280.00 .............................................................................. 8

Form 01.2_POPI_Readiness_Assessment R 735.00 .................................................................................. 9

Form 01.3_POPI_Security_Risk Assessment_Administrative_Security_Safeguard ................................ 10

R 2,500.00 ............................................................................................................................................... 10

Form 01.4_POPI_Security_Risk Assessment_Physical_Security_Safeguard........................................... 12

R 2,500.00 ............................................................................................................................................... 12

Form 01.5_POPI_Security_Risk Assessment_Technical_Security_Safeguard ........................................ 14

R 2,500.00 ............................................................................................................................................... 14

02_Implement & Maintain a Governance & Leadership Structure .......................................................... 16

Form 02.1_Personal_Information_Protection_Policy R 475.00 ............................................................. 16

Form 02.2_Employee_Personal_Information_Protection_Policy R 170.00 ........................................... 17

Form 02.3_Privacy_Notice R 910.00 ....................................................................................................... 18

Form 02.4_ Document_Retention_and_Destruction_Policy R 910.00 ................................................... 21

Form 02.5_Appointment_Letter_Information_Officer R 315.00 ........................................................... 22

Form 02.6_Access_and_Confidentiality_Agreement_with Employees R 245.00 ................................... 23

Form 02.7_Privacy_Management_Accountability_Framework_R 2,065.00 .......................................... 24

03_Implement & Maintain Training and Awareness Program ................................................................. 25

Form 03.1_Employee_Training_Log_Free .............................................................................................. 25

04_Create & Maintain Personal Information Inventory ........................................................................... 26

Form 04.1_Personal_Information_Assets R 70.00 ............................................................................... 26

Form 04.2_Information_Classification_Matrix_and_Handling_Guide R 1,645.00 ............................... 28

Form 04.3_Inventory_of_Records_and_Personal_Information_Bank R 490.00 ................................... 29

Form 04.4_Personal_Information_Assets_Personal_Information_Bank_Free ...................................... 30

Form 04.5_Personal_Information_Assets_Hardware_Free ................................................................... 31

Form 04.6_ Personal_Information_Assets_Shared_Databases Free .................................................... 32

Form 04.7_Personal_Information Assets_Operating_Systems_&_Software Free ................................ 33

05_Create & Maintain Policies & Procedures ........................................................................................... 34

of 65

Form 05.1_Policy_Statement_and_Manual_for_the_POPI_Act R 665.00 ........................................... 34

Form 05.2_Collection_and_Use_of_Personal_and_Special_Personal_Information_Policy R 245.00 .. 35

Form 05.3_Collection_and_Use_of_Children_and_Minors’_Personal_Information R 315.00 .............. 36

Form 05.4_Information_Quality_Policy R190.00 .................................................................................. 37

Form 05.05_Social_Media_Policy R 210.00 ........................................................................................... 38

Form 05.6_Bring_Your_Own_Device_Guidelines R 210.00 ................................................................... 39

Form 05.7_Clear_Screen_and_Desktop_Policy R 210.00 ...................................................................... 40

Form 05.8_Guidelines_for_Password_Management R 280.00 ............................................................. 41

Form 05.9_Shred_it_all_Policy R 280.00 ............................................................................................... 42

Form 05.10_Use_of_Transportable_Media_Policy R 140.00 ................................................................ 43

06_Managing Data Subject Rights ............................................................................................................. 44

Form 06.1_Consent_to_use_Patient_Personal_Information_Policy R 210.00 ...................................... 44

Form 06.2_Authorisation_for_Release_of_Personal_Information_Third_Parties R 115.00 ................ 45

Form 06.3_Practice_Payment_Policy R 115.00 ...................................................................................... 46

Form 06.4_Practice_Privacy_Policy_Patient_Handout R 185.00 ........................................................... 47

Form 06.5_Patient_Identification_Policy R 185.00 ................................................................................ 48

07_ Manage Information Security Risk during Communication and Transmission ................................. 49

Form 07.1_Guidelines_for_Use_of_Emails_by_Employees R 190.00 ................................................... 49

Form 07.2_Instant_Messaging_Security_and_Usage_Guidelines R 140.00 ......................................... 50

Form 07.3_Guidelines_for_Use_of_Faxes_by_Employees R 170.00 .................................................... 51

Form 07.4_Patient_Consent_for_E-mail_sms_Communication R 190.00 ............................................ 52

Form 07.5_Fax_Cover_Letter_Confidentiality_Notice_and Disclaimer R 190.00 .................................. 53

Form 07.6_Consent_to_Use_Electronic_Communication R 210.00 ...................................................... 54

08_ Managing Third Party Compliance...................................................................................................... 55

Form 08.2_Authorisation_for_Release_of_Personal_Information_Third_Parties R 190.00 ................ 56

Form 08.3_Sample_Confidentiality_Provisions_for_Supplier_Agreements R 190.00 .......................... 57

Form 08.4_List_of_Approved_Vendors Free ......................................................................................... 58

09_Security of Personal Information ......................................................................................................... 59

Form 09.1_IT_Security_Policy R 350.00 ................................................................................................. 59

Form 09.2_Policy_on_the_Use_of_Encryption R 350.00 ...................................................................... 60

10_Respond to Requests and Complaints from Individuals ..................................................................... 61

10.1. Information_Breach_Response_and_Notification_Procedure ..................................................... 61

10.2. Data_Breach_Register ................................................................................................................... 62

of 65

10.3. Data_Breach_Notification_Form_to_the_Information_Regulator ............................................... 63

10.4. Data_Breach_Notification_Form_to_Data_Subjects..................................................................... 64

11_Monitor Information Handling Practices ............................................................................................. 65

List_of_documents_EU_GDPR_Documentation_Toolkit_EN.pdf ........................................................... 65

Terms_of_Use_for_Documentation_EN.pdf .......................................................................................... 65

READ_THIS_FIRST_FREE_PREVIEW_EN.pdf ............................................................................................ 65

of 65

Terms of Use for Documentation

Document/documentation sold via Go Pixel (Pty) Ltd is protected by copyright held by Go

Pixel (Pty) Ltd.

Upon payment, Go Pixel (Pty) Ltd grants you a non-exclusive, permanent, limited right to

use the document/documentation worldwide, exclusively in the manner expressly specified

here. All rights which are not expressly granted here are reserved.

You are authorised to use the document/documentation for any purpose, but exclusively

for the needs of your company, in any way that is in accordance with the granted rights, to

copy the document/documentation, in whole or in part, directly or indirectly, temporary or

permanently, by any means and in any form, as well as to translate it into other languages,

to adapt, edit or in any other way modify the document/documentation.

It is expressly prohibited to remove the copyright owner notice and to use the document/

documentation commercially for any purpose or for any need not directly related to your

internal business. It is particularly prohibited to lease or distribute the original or copies of

the document/ documentation by selling or otherwise, or offering them with the intention

of selling, as well as to print, publish, and make available to the public, through wired or

wireless systems, by enabling unauthorised third persons to access the documents from

places and at times of their own choosing (e.g. internet publishing), without previously

obtaining written consent from Go Pixel (Pty) Ltd.

You are not authorised to transfer your rights to associated or non associated legal or

natural third persons, including your affiliate companies, or to grant any such third persons

any right to use the document/documentation without written consent previously granted

by Go Pixel (Pty) Ltd.

of 65

Please read this first

Thank you for downloading / ordering our POPI Documentation Toolkit! For an easier start, please read these few instructions: 1) The documents in the Toolkit are sorted in a sequence that should follow your

implementation – in folder 01 you will find the POPI Readiness Assessment and the Project Plan for Complying with POPI; the next folder is Implement & Maintain a Governance & Leadership Structure.

2) In the root folder of the Toolkit you'll find the file named “List of documents”,.

3) To see the official text of POPI arranged by chapters, sections, and articles, go to our webpage.

4) If you receive an error opening certain files, this is probably because the file name is too long – please copy the file to your Desktop and it should open normally there.

5) Soon, you will start receiving tips and tricks on how to fill in the templates via e-mail – if you don’t start receiving these emails, please check your Spam folder.

6) Please read the Terms of Use for Documentation located in this folder.

7) Click here to see Pricing & Options. If you need any support, please contact us using this email address: [email protected]


of 65

00_Document Management

Form 00.0_Procedure for Document and Record Control R 280.00

Document template features:

Price – R 280.00

Format – MS Word

Number of pages – 8

Document language – English.

Can document be edited? – Yes. The document is fully editable – just enter information specific

to your company.

Clear guidelines – Averaging 20 comments per document, templates provide clear direction on

what to fill in – and how to do so.

Instant delivery – Templates are downloadable immediately upon purchase, or a CD package

delivered to you.

Created for your business – Templates are optimized for small and medium-sized organizations.

Benefits:

Lower cost – Buy only the template you need right now, instead of buying the full toolkit. (But

don’t worry – if you decide in the future that you need the whole toolkit after all, we’ll deduct

the cost of this template, so you’ll only pay the difference.)

Easy to understand – Find out just how simple and intuitive our templates are. They can be fully

edited to meet your needs, and they contain complete instructions. Even better, we’ve filled in

90% of the information already, so the rest will be a snap!

No need for a consultant – You won’t have to hire a pricy consultant. Our do-it-yourself method

(with Go Pixel’s help) was developed specifically for small and mid-size companies.

No stress, no headaches – Each of the GO PIXEL’S POPI DOCUMENT TOOLKIT document

templates includes detailed instructions and guidance. Still, if you get stuck, you can always

drop in on our POPI JOURNAL BLOG, where you can ask for advice – for free! We promise

someone will get back to you in 24 hours or less.

of 65

01_Preparations for the Project

Form 01.1_POPI_Compliance_Project_Plan R 280.00

This project plan will help you prepare an effective plan for your POPI implementation, enabling

you to manage all aspects of the project. This easy-to-use template offers a simple solution to

allow you to:

Plan your project milestones

Devise individual roles and responsibilities

Oversee and organise your entire POPI / PAIA implementation


Price – R 280.00

Format – MS Word



Can document be edited? – Yes. The document is fully editable – just enter information

specific to your company.

Clear guidelines – Averaging 20 comments per document, templates provide clear

direction on what to fill in – and how to do so.

Instant delivery – Templates are downloadable immediately upon purchase, or a CD

package delivered to you.

Created for your business – Templates are optimized for small and medium-sized

organizations.

Benefits:

Lower cost – Buy only the template you need right now, instead of buying the full

toolkit. (But don’t worry – if you decide in the future that you need the whole toolkit

after all, we’ll deduct the cost of this template, so you’ll only pay the difference.)

Easy to understand – Find out just how simple and intuitive our templates are. They can

be fully edited to meet your needs, and they contain complete instructions. Even better,

we’ve filled in 90% of the information already, so the rest will be a snap!

No need for a consultant – You won’t have to hire a pricy consultant. Our do-it-yourself

method (with Go Pixel’s help) was developed specifically for small and mid-size

companies.


templates includes detailed instructions and guidance. Still, if you get stuck, you can

always drop in on our POPI JOURNAL BLOG, where you can ask for advice – for free! We

promise someone will get back to you in 24 hours or less.

of 65

Form 01.2_POPI Readiness Assessment R 735.00

The purpose of this questionnaire is for the company to do a self-check of the status of

compliance with the main requirements of POPI. If the answer to all of the questions is Yes, you

might be already compliant with the provisions of POPI.

The document is optimized for small and medium-sized organizations – we believe that overly

complex and lengthy documents are just overkill for you.


Price – R 735.00

Format – MS Word




to your company.




delivered to you.


Benefits:













of 65

Form 01.3_POPI_Security_Risk Assessment_Administrative_Security_Safeguard

R 2,500.00

The purpose of this questionnaire is for the company to do a self-check of the status of compliance with the main requirements of POPI. In terms of section 19(1) of POPI aA responsible party must secure the integrity and confidentiality of personal information in its possession or under its control by taking appropriate, reasonable technical and organisational measures to prevent— (a) loss of, damage to or unauthorised destruction of personal information; and (b) unlawful access to or processing of personal information. In terms of section 109(3) of POPI (3) , the Regulator must consider the following factors when determining an appropriate fine: (a) The nature of the personal information involved; (b) the duration and extent of the contravention; (c) the number of data subjects affected or potentially affected by the contravention; (d) whether or not the contravention raises an issue of public importance; (e) the likelihood of substantial damage or distress, including injury to feelings or anxiety

suffered by data subjects; (f) whether the responsible party or a third party could have prevented the contravention

from occurring; (g) any failure to carry out a risk assessment or a failure to operate good policies,

procedures and practices to protect personal information; and (h) whether the responsible party has previously committed an offence in terms of this Act. The document is optimized for small and medium-sized organizations – we believe that overly complex and lengthy documents are just overkill for you.


Price – R 2,500.00

Format – MS Word

Number of pages –136



to your company.




delivered to you.


of 65

Benefits:













of 65

Form 01.4_POPI_Security_Risk Assessment_Physical_Security_Safeguard

R 2,500.00






Price – R 2,500.00

Format – MS Word




to your company.




delivered to you.


of 65

Benefits:













of 65

Form 01.5_POPI_Security_Risk Assessment_Technical_Security_Safeguard

R 2,500.00






Price – R 2.500.00

Format – MS Word

Number of pages –81



to your company.




delivered to you.


of 65

Benefits:













of 65

02_Implement & Maintain a Governance & Leadership Structure

Form 02.1_Personal Information Protection Policy R 475.00

This Policy sets forth the basic principles by which the company processes the personal

information of consumers, customers, suppliers, business partners, employees and other

individuals, and indicates the responsibilities its business departments and employees while

processing personal information.

The document is optimized for small and medium-sized organisations – we believe that overly



Price – R 475.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 02.2_Employee Personal Information Protection Policy R 170.00

This policy provides rules and procedures which apply to all departments and individuals within

the company, aimed at ensuring that employee Personal Information is processed and

protected properly.




Price – R 170.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 02.3_Privacy_Notice R 910.00

A notice to set out the conditions under which the company processes personal information of

its clients/website visitors.

Section 18(1) of the Protection of Personal Information Act stipulates:

If personal information is collected, the responsible party must take reasonably practicable

steps to ensure that the data subject is aware of –

(a) the information being collected and where the information is not collected from the data

subject, the source from which it is collected;

(b) the name and address of the responsible party;

(c) the purpose for which the information is being collected;

(d) whether or not the supply of the information by that data subject is voluntary or

mandatory;

(e) the consequences of failure to provide the information;

(f) any particular law authorising or requiring the collection of the information;

(g) the fact that, where applicable, the responsible party intends to transfer the information

to a third country or international organisation and the level of protection afforded to the

information by that third country or international organisation;

(h) any further information such as the -

(i) recipient or category of recipients of the information;

(ii) nature or category of the information;

(iii) existence of the right of access to and the right to rectify the information collected;

(iv) existence of the right to object to the processing of personal information as referred

to in section 11(3); and

(v) right to lodge a complaint to the Information Regulator and the contact details of the

Information Regulator, which is necessary, having regard to the specific

circumstances in which the information is or is not to be processed, to enable

processing in respect of the data subject to be reasonable.

(2) The steps referred to in subsection (1) must be taken -

of 65

(a) if the personal information is collected directly from the data subject, before the

information is collected, unless the data subject is already aware of the information

referred to in that subsection; or

(b) in any other case, before the information is collected or as soon as reasonably

practicable after it has been collected.

(3) A responsible party that has previously taken the steps referred to in subsection (1)

complies with subsection (1) in relation to the subsequent collection from the data

subject of the same information or information of the same kind if the purpose of

collection of the information remains the same.

(4) It is not necessary for a responsible party to comply with subsection (1) if -

(a) the data subject or a competent person where the data subject is a child has

provided consent for the non-compliance;

(b) non-compliance would not prejudice the legitimate interests of the data subject as

set out in terms of this Act;

(c) non-compliance is necessary -

(i) to avoid prejudice to the maintenance of the law by any public body, including

the prevention, detection, investigation, prosecution and punishment of

offences;

(ii) to comply with an obligation imposed by law or to enforce legislation

concerning the collection of revenue as defined in section 1 of the South

African Revenue Service Act, 1997 (Act No. 34 of 1997);

(iii) for the conduct of proceedings in any court or tribunal that have been

commenced or are reasonably contemplated; or

(iv) in the interests of national security;

(d) compliance would prejudice a lawful purpose of the collection;

(e) compliance is not reasonably practicable in the circumstances of the particular case;

or

(f) the information will -

(i) not be used in a form in which the data subject may be identified; or

of 65

(ii) be used for historical, statistical or research purposes.




Price – R 910.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 02.4_ Document Retention and Destruction Policy R 910.00

This policy sets the required retention periods for specified categories of personal information

and set out the minimum standards to be applied when destroying certain information within a

company.

This document contains 1 appendix: Data Retention Schedule.




Price – R 910.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 02.5_Appointment Letter Information Officer R 315.00

A document that specifies the roles and responsibilities of this key person for complying with

POPI and PAIA.




Price – R 315.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 02.6_Access and Confidentiality Agreement with Employees R 245.00

A document that specifies the roles and responsibilities of all staff for complying with POPI and

PAIA.




Price – R 245.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 02.7_Privacy_Management_Accountability_Framework R 2,065.00

In terms of paragraph 4 of the Regulations published in erms of the POPI Act an information

officer must ensure that a compliance framework is developed, implemented and monitored.




Price – R 2,065.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

03_Implement & Maintain Training and Awareness Program

Form 03.1_Employee Training Log Free

The Training Register is a database which enables you to keep accurate records of scheduled

and completed training for all of your staff. You will be able to enter third party training such as

about your organisation’s privacy policy and will have reminders for refresher training.

You will also be able to record scanned copies of training certificates as proof of competent

training.


Price – Fee

Format – MS Word










organizations.

Benefits:









companies.





of 65

04_Create & Maintain Personal Information Inventory

Form 04.1_Personal Information Assets R 70.00

"personal information" shall mean any information relating to an identified or identifiable natural person ('Data Subject'); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity.

The definition is – deliberately - a very broad one. In principle, it covers any information that relates to an identifiable, living individual. However, it needs to be borne in mind that data may become personal from information that could likely come into the possession of a data controller.

There are different ways in which an individual can be considered 'identifiable'. A person's full name is an obvious likely identifier. But a person can also be identifiable from other information, including a combination of identification elements such as physical characteristics, pseudonyms occupation, address etc.

The definition is also technology neutral. It does not matter how the personal data is stored – on paper, on an IT system, on a CCTV system etc.


Price – R 70.00

Format – MS Word










organizations.

Benefits:




of 65






companies.





of 65

Form 04.2_Information Classification Matrix and Handling Guide R 1,645.00

Sharing information can have considerable benefits including, but not limited to, better service

delivery, reduced duplication and subsequent costs, increased productivity and efficiency, and

better control of information. Implementing consistent methods of classification and labelling

allows sensitive information to be securely shared across jurisdictions, with confidence that the

information will be handled and protected according to its sensitivity.


Price – R 1,645.00

Format – MS Word










organizations.

Benefits:









companies.


templates includes detailed instructions and guidance. Still, if you get stuck, you can always drop

in on our POPI JOURNAL BLOG, where you can ask for advice – for free! We promise someone

will get back to you in 24 hours or less.

of 65

Form 04.3_Inventory of Records and Personal Information Bank R 490.00

Inventory of Records and Personal Information Bank has three key components:

It contains “personal information.”

It takes the form of “a collection.”

It is “organized or retrievable by the name or an identifying number, symbol or other

particular assigned to an individual.”


Price – R 490.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 04.4_Personal Information Assets Personal Information Bank Free

There are two reasons why managing assets is important:

1) Assets are usually used to perform the risk assessment, assets are usually the key element of

identifying risks, together with threats and vulnerabilities.

2) If the organization doesn’t know who is responsible for which asset, chaos would ensue –

defining asset owners and assigning them the responsibility to protect the confidentiality,

integrity and availability of the information is one of the fundamental concepts in data

protection.


Price – Free

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 04.5_Personal Information Assets_Hardware Free

An Information Asset Inventory is one of the most crucial information assurance

principles. Every single asset in the business or organization’s data processing infrastructure

must be accounted for and listed. Included in the listing should be document serial numbers,

version, location, format, description, value and any another other data set that enhances

understanding. Also, each class of document should contain a security classification. It

determines the level of protection the document(s) should received within the security plan.

The activity is time-consuming and very detailed. Maintaining a listing of assets is a security

best practice.


Price – Free

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 04.6_ Personal Information Assets_Shared Databases Free








best practice.


Price – Free

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 04.7_ Personal Information Assets_Operating Systems & Software Free








best practice.


Price – Free

Format – MS Word










organizations.

Benefits:









companies.





of 65

05_Create & Maintain Policies & Procedures

Form 05.1_Policy Statement and Manual for the POPI Act R 665.00

Manual as background for implementation of the POPI principles.


Price – R 665.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 05.2_Collection and Use of Personal and Special Personal Information

Policy R 245.00 The following is a sample Collection and Use of Personal and Special Personal Information

Policy. It includes topics typically included in Collection and Use of Personal and Special

Personal Information Policies. Use this sample as a guide for creating a Collection and Use of

Personal and Special Personal Information Policy for your own practice or use it to verify that

your existing policy covers these topics. The sample policy will need to be tailored to your

practice.


Price – R 245.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 05.3_Collection and Use of Children and Minors’ Personal Information R

315.00 The following is a sample Collection and Use of Children and Minors’ Personal Information

Policy. It includes topics typically included in Collection and Use of Children and Minors’

Personal Information Policy Policies. Use this sample as a guide for creating a Collection and

Use of Children and Minors’ Personal Information Policy for your own organisation or use it to

verify that your existing policy covers these topics. The sample policy will need to be tailored to

your organisation.


Price – R 315.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 05.4_Information Quality Policy R190.00

The following is a sample Information Quality Policy. It includes topics typically included in

Information Quality Policy. Use this sample as a guide for creating an Information Quality Policy

for your own organisation or use it to verify that your existing policy covers these topics. The

sample policy will need to be tailored to your organisation.


Price – R 190.00

Format – MS Word










organizations.

Benefits:









companies.




promise someone will get back to you in 24 hours or less

of 65

Form 05.05_Social Media Policy R 210.00 The following is a sample Social Internet Policy. The policy provides the guidelines to the employees of

[insert practice name] present in all office locations to help you do your job, [insert practice name] may

give you access to computers, computer files, the email system, and software. [Insert practice name]

may provide you with Internet access to help you do your job. This policy explains our guidelines for

using the Computer on the social media.


Price – R 210.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 05.6_Bring Your Own Device Guidelines R 210.00

This document provides guidelines for the use of personally owned notebooks, smart phones,

tablets and other types of mobile devices for business purposes. All employees, assistants and

locums who use or access our technology equipment and/or services are bound by the

conditions of this Policy.


Price – R 210.00

Format – MS Word










organizations.

Benefits:









companies.




someone will get back to you in 24 hours or less

of 65

Form 05.7_Clear Screen and Desktop Policy R 210.00

The following is a sample Clear Screen and Desktop Policy. The policy provides the guidelines to the employees of [insert practice name] present in all office locations to clear their desks at the end of each working day and file everything properly. Desk shall be clear of all documents and papers, including the contents of the “In” and “Out” trays. The purpose of this policy is to ensure that sensitive papers and documents are not exposed to unauthorised persons during and after office hours.

The policy also provides the guidelines to the [insert practice name] users of workstations and terminals

to ensure that the contents of the screens are protected from prying eyes and opportunistic breach of

confidentiality.


Price – R 210.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 05.8_Guidelines for Password Management R 280.00 The following is a sample Password Management Guidelines. Use this sample as a guide for

creating a Password Management Guidelines for your own organisation or use it to verify that

your existing guidelines covers these topics. The sample guidelines will need to be tailored to

your organisation.


Price – R 280.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 05.9_Shred_it_all_Policy R 280.00 The following is a sample Password Management Guidelines. Use this sample as a guide for

creating a Password Management Guidelines for your own organisation or use it to verify that


your organisation.


Price – R 280.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 05.10_Use_of_Transportable_Media_Policy R 140.00 The following is a sample Use of Transportable Media Policy. Use this sample as a guide for

creating a Use of Transportable Media Policy for your own organisation or use it to verify that


your organisation.


Price – R 140.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

06_Managing Data Subject Rights

Form 06.1_Consent to use Patient Personal Information Policy R 210.00 The following is a sample Consent to use Patient Personal Information Policy. It includes topics

typically included in Consent to use Patient Personal Information Policy. Use this sample as a

guide for creating a Consent to use Patient Personal Information Policy for your own [Insert

organisation name] or use it to verify that your existing policy covers these topics. The sample

policy will need to be tailored to your [Insert organisation name].


Price – R 210.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 06.2_Authorisation for Release of Personal Information Third Parties R

115.00 The following is a sample Authorisation for Release of Personal Information Third Parties . It

includes topics typically included in Authorisation for Release of Personal Information Third

Parties. Use this sample as a guide for creating a Authorisation for Release of Personal

Information Third Parties for your own [Insert organisation name] or use it to verify that your

existing policy covers these topics. The sample policy will need to be tailored to your [Insert

organisation name].


Price – R 115.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 06.3_Practice Payment Policy R 115.00 The following is a sample Practice Payment Policy. It includes topics typically included in

Practice Payment Policy. Use this sample as a guide for creating a Practice Payment Policy for

your own [Insert organisation name] or use it to verify that your existing policy covers these

topics. The sample policy will need to be tailored to your [Insert organisation name].


Price – R 115.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 06.4_Practice_Privacy_Policy_Patient_Handout R 185.00 The following is a sample Practice Privacy Policy Patient Handout. It includes topics typically

included in Practice Privacy Policy Patient Handout. Use this sample as a guide for creating a

Practice Privacy Policy Patient Handout for your own [Insert organisation name] or use it to

verify that your existing policy covers these topics. The sample policy will need to be tailored to

your [Insert organisation name].


Price – R 185.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 06.5_Patient_Identification_Policy R 185.00

The following is a sample Patient Identification Policy. It includes topics typically included in

Patient Identification Policy. Use this sample as a guide for creating a Patient Identification

Policy for your own [Insert organisation name] or use it to verify that your existing policy covers

these topics. The sample policy will need to be tailored to your [Insert organisation name].


Price – R 185.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

07_ Manage Information Security Risk during Communication and Transmission

Form 07.1_Guidelines for Use of Emails by Employees R 190.00 The following is a sample Guidelines for Use of Email by Employees. Use this sample as a guide for

creating a Guidelines for Use of Email by Employees for your own practice or use it to verify that your

existing policy covers these topics. The sample guidelines will need to be tailored to your practice.


Price – R 190.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 07.2_Instant Messaging Security and Usage Guidelines R 140.00 The following is a sample Instant Messaging Security and Usage Guidelines. Use this sample

as a guide for creating a Instant Messaging Security and Usage Guidelines for your own

practice or use it to verify that your existing guidelines covers these topics. The sample

guidelines will need to be tailored to your practice.


Price – R 140.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 07.3_Guidelines for Use of Faxes by Employees R 170.00 The following is a sample Guidelines for Use of Facsimile by Employees. Use this sample as a guide for

creating a Guidelines for Use of Facsimile by Employees for your own practice or use it to verify that

your existing guidelines covers these topics. The sample guidelines will need to be tailored to your

practice.


Price – R 170.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 07.4_Patient Consent for E-mail_sms Communication R 190.00 The following is a sample Patient Consent for E-Mail_sms Communication. It includes topics typically

included in Patient Consent for E-Mail_sms Communication. Use this sample as a guide for creating a

Patient Consent for E-mail_sms Communication for your own practice or use it to verify that your

existing policy covers these topics. The sample policy will need to be tailored to your practice.


Price – R 190.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 07.5_Fax Cover Letter, Confidentiality Notice and Disclaimer R 190.00 The following is a sample Fax Cover Letter, Confidentiality Notice and Disclaimer. It includes topics

typically included in Fax Cover Letter, Confidentiality Notice and Disclaimer. Use this sample as a guide

for creating a Fax Cover Letter, Confidentiality Notice and Disclaimer for your own practice or use it to

verify that your existing policy covers these topics. The sample policy will need to be tailored to your

practice.


Price – R 190.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 07.6_ Consent to Use Electronic Communication R 210.00 The following is a sample Consent to Use Electronic Communication. It includes topics typically included

in Consent to Use Electronic Communication. Use this sample as a guide for creating a Consent to Use

Electronic Communication for your own practice or use it to verify that your existing policy covers these

topics. The sample policy will need to be tailored to your practice.


Price – R 210.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

08_ Managing Third Party Compliance

Form 08.1_Operator_POPI_Compliance_Questionnaire R 350.00 The following is a sample Operator_POPI_Compliance_Questionnaire . It includes topics typically

included in Operator_POPI_Compliance_Questionnaire . Use this sample as a guide for creating a

Operator_POPI_Compliance_Questionnaire for your own practice or use it to verify that your existing

policy covers these topics. The sample policy will need to be tailored to your practice.


Price – R 190.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 08.2_Authorisation for Release of Personal Information Third Parties R

190.00 The following is a sample Authorisation for Release of Personal Information Third Parties. It

includes topics typically included in Authorisation for Release of Personal Information Third

Parties. Use this sample as a guide for creating a Authorisation for Release of Personal

Information Third Parties for your own [Insert organisation name] or use it to verify that your

existing forms covers these topics. The sample form will need to be tailored to your [Insert

organisation name].


Price – R 190.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 08.3_Sample Confidentiality Provisions for Supplier Agreements R 190.00 Sample Confidentiality Provisions for Supplier Agreements


Price – R 190.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 08.4_List of Approved Vendors Free

List of Approved Vendors / sub contractors


Price – Free

Format – MS Word










organizations.

Benefits:









companies.





of 65

09_Security of Personal Information

Form 09.1_IT_Security_Policy R 350.00 IT Security policy


Price – R 190.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

Form 09.2_Policy_on_the_Use_of_Encryption R 350.00

Policy_on_the_Use_of_Encryption


Price – R 190.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

10_Respond to Requests and Complaints from Individuals

10.1. Information Breach Response and Notification Procedure


Price – R 190.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

10.2. Data Breach Register


Price – R 190.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

10.3. Data Breach Notification Form to the Information Regulator


Price – R 190.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

10.4. Data Breach Notification Form to Data Subjects


Price – R 190.00

Format – MS Word










organizations.

Benefits:









companies.





of 65

11_Monitor Information Handling Practices

List_of_documents_EU_GDPR_Documentation_Toolkit_EN.pdf

Terms_of_Use_for_Documentation_EN.pdf

READ_THIS_FIRST_FREE_PREVIEW_EN.pdf

fax 0 ridgeworth, bellville · fax 0 15 zinia road ridgeworth, bellville [email protected] gp...

Documents