⚡ Quick answer POPIA compliance for a small business comes down to eight moves: register your information officer, publish privacy notices, sign operator agreements, lock down security, set retention periods, prepare for access requests, plan for breaches, and train your staff. None of it requires lawyers on retainer — it requires doing the basics on paper. POPIA has no small-business exemption: if you hold an employee’s ID number, a customer’s email address or a CV in your inbox, the Act applies to you in full. The good news is that POPIA compliance for a small business is a finite, mostly free checklist rather than an enterprise programme. These are the…