Building A Resilient Data Protection Awareness Framework For Data Privacy: A South African Case Study

Abstract

Due to the proliferation of information technology, individuals are now able to engage globally. This has exponentially increased the risk of personal information being exposed. Consequently, organizations need to implement data protection awareness to safeguard their information. Data protection is vital in all industries, and improving awareness training can potentially enhance the security of sensitive information against loss, corruption, or damage. The aim of this study is to develop a comprehensive framework for data protection awareness, with the goal of enhancing data security and privacy within organisations. The level of data protection awareness among employees of a public organisation was assessed using a quantitative method and survey research strategy. Data were collected from participants before and after they were shown an explanatory poster to gauge their current understanding of data protection. After viewing the poster and participating in a video discussion, participants were given a second questionnaire to assess their improved understanding of data protection. By comparing the results of the two surveys, the study identified areas where participants had misconceptions about data protection. The study recommends organisations to continually promote data protection awareness, especially in hybrid working environments, where an understanding of the eight conditions of POPIA is crucial.