Privacy and data

Employee POPIA Acknowledgement and Notice

A notice that tells employees what personal information you hold about them and why, plus their acknowledgement of their own duties when handling personal information at work. Useful evidence for POPIA.

Starting point, not legal advice. It is general information and not legal advice. Have it reviewed by a South African attorney before you rely on it. Status: compiled from public sources, not reviewed by a lawyer. Wording last checked 2026-10-31.

1. Fill in your details

Anything beyond the standard list.

2. Download

7 fields still empty. They show highlighted in the document so you can finish them in Word.

Sign up free to download

Already have an account? Log in.

Preview

Employee Privacy Notice and Acknowledgement

Employer: [Employer name], registration number [Registration number] ("we").

Part A: What we do with your personal information

As your employer we process personal information about you in line with the Protection of Personal Information Act 4 of 2013 ("POPIA"). This is what we hold:

  • identity and contact details (name, ID or passport number, address, phone, email, emergency contact);
  • employment records (application, contract, job title, working hours, leave, performance and disciplinary records, training);
  • payroll and tax information (bank details, tax number, remuneration, UIF and other statutory contributions);
  • health and safety records where the law requires them, such as injury reports and medical certificates;
  • work system information, such as access logs for company systems and devices;
  • other: [Other information you hold (optional)]

We use it to manage your employment, pay you, meet our legal duties (for example tax, UIF, COIDA, health and safety and employment equity reporting), protect the business and keep our workplace safe. We share it only with people who need it, such as payroll and benefit providers, auditors and government bodies, and we require them to protect it. We keep it for as long as you work with us and for as long afterwards as the law or our retention schedule requires.

You can ask to see the information we hold about you and to correct it. Contact our Information Officer, [Information Officer name], at [Information Officer email]. You may also complain to the Information Regulator (South Africa).

Part B: Your duties when you handle personal information at work

Personal information of customers, colleagues and suppliers must be treated with care. By signing, you confirm that you will:

  1. use personal information only for the work you are authorised to do;
  2. keep it confidential and not share it with anyone who has no business need or authority;
  3. use strong passwords, lock your screen, and keep devices and paper records secure;
  4. not copy personal information to personal email, personal cloud storage or unapproved devices;
  5. report any loss, theft or suspected misuse straight away to the Information Officer;
  6. pass on any request from a person to see, correct or delete their information to the Information Officer without delay; and
  7. continue to keep personal information confidential after your employment ends.

Acknowledgement

I confirm that I have read and understood this notice, and that I know who our Information Officer is. Date: [Date].

Employee: [Employee name (optional, can be filled in by hand)]

Signature: ____________________

Name: ____________________

Title: ____________________

Date: ____________________

For the employer: [Employer name]

Signature: ____________________

Name: ____________________

Title: ____________________

Date: ____________________

When to use it

  • You hold employee records such as ID numbers, bank details, leave and performance records
  • You want staff to confirm they understand how to handle customer and colleague personal information
  • You are onboarding new staff or rolling out a POPIA policy

Before you use it

  • Check the list of information against what HR and payroll actually hold, and add anything missing (for example medical certificates or biometrics, which are special personal information)
  • This notice is not an employment contract term. Do not use it to take away rights, and do not rely on it as consent for processing the law already allows or requires
  • Give staff a copy, keep the signed acknowledgement and record it in your policy library
  • Have an attorney review before rolling out, particularly if you use monitoring, CCTV or biometrics

Related laws and frameworks

Sources

Keep this policy current and acknowledged

Store it in ComplianceDesk, track versions and collect staff acknowledgements.

Start free trial