Privacy GRC · South Africa

Protect the personal information you hold. Prove it when it matters.

Fennec Alert helps organisations design, implement and run privacy programmes under POPIA and PAIA — with the policies, training and governance support that keep the programme alive after the first pack of documents is signed.

  • POPIA programmes
  • PAIA manuals and access
  • Awareness training
  • Ongoing governance support
Fennec Alert

Services

A privacy programme your leadership can stand behind.

We work with private companies, professional practices, healthcare, education, financial services, retail, manufacturing, hospitality and owner-managed groups. The law is the same. The programme is built around how your organisation actually processes personal information.

POPIA programmes

A complete privacy programme: processing records, notices, policies, operator contracts, request handling and security measures mapped to the eight conditions.

PAIA manuals and access

A manual that matches your organisation, published as the Act requires, with a workable process for access requests and annual reporting.

Awareness training

Practical sessions for staff, managers and leadership so the people who handle personal information know what good looks like in their role.

Policies, notices and contracts

Privacy policies, website notices, consent wording, operator agreements and employment clauses written for your processing — not a generic pack.

Information Officer support

Stand the function up, coach the appointed officer, or retain us to keep the programme current when the organisation does not have spare capacity.

Impact assessments and reviews

Personal information impact assessments for new systems and processes, and independent reviews when you need a clear view of residual risk.

See the full service list

Why organisations call

Compliance that protects the business, not only the filing cabinet.

Customers, employees, patients, learners and suppliers trust you with personal information. A programme that works reduces regulatory risk, strengthens tenders and due diligence, and gives the board a story it can defend.

How an engagement runs

Insights

Clear thinking on South African privacy law.

Your PAIA Manual has to name the right officer

Publication is not the finish line. The names in the manual, on the website and on the Regulator’s register must match.

Read →

A privacy programme starts with what you process

Policies written before you know your processing are expensive decoration.

Read →

Why the Information Officer function needs a cadence

A launch pack is week one. The function is everything that happens after.

Read →