Tech Talk

  • The Protection of Personal Information Act (POPI Act or POPIA) is South Africa’s data protection law. It exists to protect people from harm by protecting their personal information. This personal information ranges from banking details, identity numbers, phone numbers, etc. The commencement date for the POPI Act was the 1st of July 2020 and all businesses need to comply to it. It is crucial that all businesses comply with the POPI Act for several reasons.

    1. Legal Obligation & Avoidance of Penalties.

    Non-compliance with the Act can result in a fine up to R10 million and/ or one to ten years in jail.

    2. Protection Against Financial Fraud & Identity Theft.

    Financial data is a prime target for: identity theft and fraudulent loan applications. POPIA enforces safeguards like: access controls, encryption, and breach notification requirements.

    3. Building Customer Trust

    Trust is a crucial role-player in financial services. Organisations need to safeguard their customer’s personal information by: demonstrating responsible data handling, enhancing brand credibility, and improving customer retention.

    4. Governance & Accountability

    POPI Act requires: an appointment of an Information Officer, lawful processing, data subject participation rights, and clear purpose specification.

    5. Cross-Border & Third-Party Data Sharing

    POPI Act restricts cross-border transfers unless there is adequate protection, and third parties meet security standards and requirements.

    6. Alignment with Global Data Protection Standards

    POPI Act aligns with international frameworks like the General Data Protection Regulation (GDPR), for businesses who work or partner with foreign companies, to ensure smoother cross-border operations.

    7. Breach Response & Incident Management

    POPI Act mandates risk assessment, remedial action, and prompt breach notification to ensure that large-scale losses are quickly handled.

    Automated Solutions: Building Compliance by Design (this section will be put into a graphic; to make it less “wordy”)

    AI-driven parsing software and digital extraction tools embed POPI Act compliance into operations: 

    Data Minimisation 

    • Extract only the information needed for decision-making 
    • Avoid collecting unnecessary personal data 
    • Reduce exposure of sensitive details like full account numbers or ID numbers 

    Access Controls 

    • Limit human exposure to original documents 
    • Restrict system access to authorised personnel only 
    • Implement role-based permissions (e.g., fraud reviewers vs. data entry staff) 

    Audit Trails 

    • Create immutable records of who accessed documents and when 
    • Track all data extractions and reviews 
    • Provide evidence of compliance during investigations 

    Encryption & Security 

    • Encrypt data in transit and at rest 
    • Secure document storage with access logging 
    • Implement automatic session timeouts and secure deletion 

    Retention Management 

    • Automate document destruction after compliance periods 
    • Maintain deletion logs as proof of POPI compliance 

    Data Minimisation 

    • Extract only the information needed for decision-making 
    • Avoid collecting unnecessary personal data 
    • Reduce exposure of sensitive details like full account numbers or ID numbers 

    Access Controls 

    • Limit human exposure to original documents 
    • Restrict system access to authorised personnel only 
    • Implement role-based permissions (e.g., fraud reviewers vs. data entry staff) 

    Audit Trails 

    • Create immutable records of who accessed documents and when 
    • Track all data extractions and reviews 
    • Provide evidence of compliance during investigations 

    Encryption & Security 

    • Encrypt data in transit and at rest 
    • Secure document storage with access logging 
    • Implement automatic session timeouts and secure deletion 

    Retention Management 

    • Automate document destruction after compliance periods 
    • Maintain deletion logs as proof of POPI compliance 
    •  Ensure sensitive data isn’t retained longer than necessary

    Best Practices for POPI-Compliant Financial Processing 

    1. Privacy Impact Assessment Conduct a documented assessment of your data processing activities. Identify risks and implement mitigations. 

    2. Clear Privacy Notices Inform applicants exactly how you’ll collect, process, and store their financial documents. Get explicit consent. 

    3. Data Processing Agreements If using third-party vendors (software providers, outsourcing firms), establish formal Data Processing Agreements outlining obligations. 

    4. Staff Training Educate your team on POPI requirements and data handling protocols. Regular refresher training is essential. 

    5. Documentation & Records Maintain records of: 

    • Data collection purposes 
    • Processing activities and timelines 
    • Security measures implemented 
    • Access logs and audit trails 
    • Incident reports and resolutions 

    6. Regular Audits Periodically review your data handling practices. Identify gaps and implement corrections before regulators do. 

    South Africa’s Regulatory Environment 

    The Information Regulator has published guidance emphasising that financial institutions must treat customer data with particular care. Recent enforcement actions show the Regulator takes POPI breaches seriously—especially in lending and recruitment where compliance failures are most common. 

    Organizations processing bank statements for loan applications or pay slips for employment verification face heightened scrutiny. Automation and documented compliance frameworks are your best defense. 

    Moving Forward 

    POPI Act compliance isn’t a one-time project, it’s an ongoing commitment. By automating financial document processing, you simultaneously: 

    • Reduce fraud risk 
    • Improve operational efficiency 
    • Strengthen compliance defensibility 
    • Protect customer privacy 
    • Build trust in your brand 

    Ready to implement POPI-compliant financial processing? Explore modern digital extraction solutions designed specifically for South African compliance requirements. These tools eliminate manual handling risks while creating the audit trails regulators expect. 

    Your compliance posture depends on it.

    Call to action:

    Check out OMS’s Optimised Bank Statement Extractor (OBSE).

  • The introduction of new, improved and advanced technologies has changed the hiring landscape over the years. Recruiters are now looking at candidates through a broader and more technological lens.

    If you are currently job hunting or looking to make a new career move, here is what recruiters are looking for:

    1. AI Fluency

    The implementation of Artificial Intelligence (AI) in everyday sites, such as Google, needs a candidate to show their understanding of AI tools and how to use AI tools for enhanced performance. Recruiters want to make sure that you are able to use AI ethically and responsibly, as well as showing that you are not afraid to use it.

    2. Impact Evidence

      Recruiters no longer want to see your job experience. They want to see the numbers, as the job market is a very competitive market. As someone in sales, they want to see how much sales you have made in your previous jobs.

      3. Soft & Technical Skills over Degrees

        A University qualification is extremely important, but it is no longer the benchmark for job selection. Recruiters want to know how much value you will be adding to the company you are applying to. These skills are what differentiate you from other applicants. Recruiters value “Learning Agility” over many other skills. They want to see your ability to adapt to the rapidly changing world. It is important you show to recruiters what will make their team stronger and effective. They are looking for something new and impactful.

        4. Patterns of Work Experience

          Recruiters tend to stay away from job candidates that are “job hoppers”. They tend to steer away from people who are incapable of keeping a job for a long time. This pattern makes you look untrustworthy and incapable of keeping your job. Recruiters want to employ people who show consistency and reliability.

          5. Make It Easy for Recruiters to see Your Value

            Recruiters want to see how impactful you will be to the team and organisation at large. Recruiters need to easily see how you will contribute to the team.

            6. Relevant Experience

              Excluding entry-level jobs or jobs needing no experience, recruiters want to be certain that you are the right fit for the job by showing how well versed you are for the team. Recruiters want to see how well you know the job specifications and how well you understand the work you will need to complete.

              7. Achievements

              Achievements are an acknowledgement of how well you do your job and how impactful you are. You need to give recruiters assurance that you are the best suited candidate for this job.

              8. A Well-Presented CV

              Presentation matters. Your CV is what will give recruiters the go-ahead to the next round in the process. It is important you have a CV that is easily drafted, succinct, legible, and neat. Avoid having different fonts and font sizes, different colours, multi-column design and unnecessary icons for your phone number, email address, etc., and images.

              Owethu Managed Services PTY (LTD) has CVEvolve, which is an Ai-powered CV Builder & Recruitment Platform tool used by job applicants to create ATS-compatible CVs. CVEvolve has a variety of CV templates to choose from, to help job seekers make ATS-compliant CVs.

            1. Because the hiring landscape has become so fast-paced and many job-seekers are looking for jobs; recruiters are often overwhelmed with the volume of job applications. The evolving technological world has made the application process for jobseekers much easier; however, recruiters face the problem of screening and going through large amounts of applications. This brings up the question of: should recruiters adapt to the use of Artificial Intelligence (AI) in the screening process or stick with manual screening?

              What Is CV Parsing?

              CV parsing is an automated process that extracts structured information from CVs/ resumes using AI-driven software, using Smart Search. The parsing technology is used to identify candidate data like: name and contact information, work experience, education, skills and certifications, as well as keywords relevant to job descriptions.

              What Is Manual Screening?

              Manual screening involves recruiters personally reviewing each CV to evaluate a candidate’s qualifications, experience, and overall fit. Manual screening heavily relies on human judgement. Recruiters look at career progression, communication style, cultural alignment, and red flags.

              Key Differences at a Glance:

              FactorCV ParsingManual Screening
              SpeedExtremely fastTime-consuming
              ScalabilityHandles high volume easilyDifficult at scale
              ConsistencyStandardized criteriaCan vary per reviewer
              Bias RiskAlgorithmic bias possibleHuman bias possible
              CostLower long-term costHigher labor cost

              Advantages of CV Parsing

              1. Speed & Efficiency – CV Parsing can analyse hundreds or even thousands of CVs in minutes.
              2. Improved Searchability – Parsed CVs become structured data, allowing recruiters to quickly search for specific skills or experiences
              3. Reduced Administrative Burden – Automation frees recruiters from repetitive tasks, allowing them to focus on interviews and candidate engagement.
              4. Standardization – Every CV is assessed against the same predefined criteria, which can improve fairness – if the system is well designed.

              The tragedy of the modern job search is when a highly qualified candidate gets rejected not because they lack the skills, but because the manual process skipped them because the CV got lost in the pool of high job applications.  When your CV passes the parser, you finally reach the manual shortlisting stage.

              STATISTICS:

              Resume/ CV Parsing Software Market size was valued at USD 16.3 Billion in 2023 & is projected to reach USD 43.7 Billion by 2031.

              50 – 70% higher application completion rates.

              60% reduction in time-to-shortlist for higher-volume roles.

              To succeed in the now & the future, you have to write for the machine first so that you can get the chance to speak to the human second.

              For recruiters that want to automate & switch to a faster, efficient & lower long-term cost tool, check out OMS’s CVEvolve.