POPIA 19: Condition 7, security safeguards: integrity and confidentiality

What does 19 require?

The responsible party must secure the integrity and confidentiality of personal information in its possession or under its control by appropriate, reasonable technical and organisational measures preventing loss, damage or unauthorised destruction and unlawful access or processing; it must identify all reasonably foreseeable internal and external risks, establish and maintain safeguards against them, regularly verify the safeguards are effectively implemented, and ensure they are continually updated for new risks or deficiencies, with due regard to generally accepted information security practices and any industry or professional rules.