Connect with us

Entrepreneur Today

Are You Prepared for the Protection of Personal Information Act?

Unprepared organisations may face a costly scramble to meet the legislative requirements of PPI.

Entrepreneur

Published

on

001

The pending Protection of Personal Information legislation will require companies to do more than just secure their data – it will force them to extensively review their business policies and processes. Data privacy in terms of the South African legislation is about information relating to an individual’s personal information being safeguarded. Whether the company concerned operates within the public or private sectors, is big or small, is irrelevant. If you have information about people, you can no longer deal with it as you used to.

From the point where personal information is collected, organisations will have to get a person’s permission to use his or her information. Historically, South African organisations collected data and used it liberally. “The PPI legislation will require that any terms or contract concluded must have a consent element built in,” says Dean Chivers, Director of Deloitte Legal. Information can only be used in terms of the permissions obtained and when information is no longer required for the purposes for which it was collected, it will have to be destroyed.

Scrambling to meet deadlines

This and other requirements will mean that organisations which have so far not planned for the law will have to scramble to meet the deadlines imposed by the legislation, especially given that a sound PPI solution can take approximately three years to implement.

“Information will have to be secured regardless of whether it’s in ‘soft data’ form (electronic information) or ‘hard data’ form (documents) and the security requirements include control of access to information,” adds Chivers. In the case of information being sent across borders and to outsourced service providers, such recipients will need to meet the same security requirements.

Significant changes to systems to make them compliant with the demands of the PPI legislation will have to be accompanied by extensive training of staff across disciplines as new rules will apply to what were previously routine corporate functions.

Access to information

Access to information within a company will have to be controlled on an ‘as needed basis’. This will dictate which of a company’s officers have access to what material. For example, HR data should only be accessed by a small number of employees, this being the HR team. “Policies controlling the use and storage of files within personal offices, access controls and the removal of data from company premises will also have to be written. Sanctions for contravention of legal provisions will therefore have to be included in a company’s HR disciplinary code,” says Chivers.

Processes will  have to be built around the collection, processing, monitoring, distribution and ultimately destruction of all personal information held by an entity. The primary responsibility of safeguarding information will rest with the collector of the data. In this regard, the proposed legislation makes it clear that the safe-guarding cannot be outsourced. In markets like the EU where strong PPI laws already exist, major companies are using the services of independent auditing companies to certify compliance with destruction and other privacy requirements. Industries that are highly reliant on direct marketing or who process significant amounts of personal information will be the first to be impacted by PPI. Companies using marketing tools such as competitions to create data bases will have to operate differently.

A global edge

Some South African companies, especially those with international links to countries with well-developed PPI legislation, are already working towards ensuring their future compliance. Some have made significant investments in establishing a ‘privacy office’ that will take control of meeting PPI requirements.

“The South African PPI legislation is sound legislation. It is modern and aligned with internationally accepted practice. It also meets the needs of a technological age in which information flows easily across the globe.

“The onus will be on South African companies to ensure that security across their operations is effective and can be introduced in the time stipulated,” concludes Chivers. If they can achieve this, they will be more competitive globally.

Entrepreneur Magazine is South Africa's top read business publication with the highest readership per month according to AMPS. The title has won seven major publishing excellence awards since it's launch in 2006. Entrepreneur Magazine is the "how-to" handbook for growing companies. Find us on Google+ here.

Advertisement
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Entrepreneur Today

3 Stealthy Tax Hikes Payroll Managers And Employees Need To Take Note Of

By Rob Cooper, tax expert at Sage, and chairman of the Payroll Authors Group of South Africa

Entrepreneur

Published

on

tax-increase

“Dammed if you do and dammed if you don’t.” 

The adage summarises the difficult decisions government and the Finance Minister faced when balancing the country’s books, rescuing state-owned enterprises, and reviving the growth of our economy. Given the economic pressure that most taxpayers are facing, government ideally needed to achieve all of that without direct increases to personal income tax in the most recent Budget Speech.

Personal income tax has comprised at least a third of South Africa’s total tax revenue in recent tax years, despite growing unemployment. The 2019 Budget, presented in February, forecasts that personal income tax will account for nearly 39% of tax collected during the upcoming (2019/20) tax year. Given that we are in an election year and that the tax base is fragile, it’s not surprising that the Finance Minister and the National Treasury avoided direct increases to the statutory tax tables used to calculate PAYE for employees in the budget.

Nonetheless, government has made inflation work in its favour to impose some tax increases by stealth. Here are three ways government is raising more revenue without direct tax increases:

1. Bracket creep

The statutory tax tables used by payrolls and employers have not been changed for 2019/20, nor have the brackets been adjusted for inflation. This effectively amounts to an indirect tax increase that will yield a revenue saving of approximately R12.8 billion for government’s coffers.

It is not unusual for government to use ‘bracket creep’ to effectively raise more revenue. But unlike previous tax years, even low- and middle-income earners are not getting much relief. Rebates and the tax threshold are being increased by small amounts to allow some relief, but many people this year will feel the pain as inflationary salary increases push them into a higher tax bracket.

2. Medical aid credit not adjusted for inflation 

As proposed in the 2018 Budget, the Finance Minister did not apply an inflationary increase to the Medical Tax Credit, which allowed him to raise an extra R1 billion in revenue for the year. Surprisingly, these funds will be allocated to general tax revenue rather than ring-fenced for healthcare. In previous tax years, revenue generated from below-inflation increases on medical scheme credits was used to fund National Health Insurance (NHI) pilot projects.

There is still no clarity on how the NHI is going to be funded except for a general statement that the funding model is a problem for the National Treasury to solve, and that the principles of cross-subsidisation will apply. One wonders if any real progress will be made soon, given the fiscal constraints government faces.

3. Business travel deduction left untouched

The Budget leaves the per-kilometre cost rates used to determine tax deductions for business travel untouched. By not increasing travel rates to account for inflation, government effectively increases income tax collection at the cost of the taxpayer. This will be a blow for people who need to claim from their employers for business travel in their personal vehicles. This change has slipped through largely unnoticed and the budget does not provide numbers for the expected increase in tax revenue.

Closing words

Amid political turmoil and uncertainty, the Finance Minister presented a balanced budget for 2019/20 that offers hope for the future along with some tough love. With government taking steps to accelerate economic growth and improve revenue collection, we should hopefully see a steady improvement in government finances, which will translate into less pressure on the taxpayer in future years.

Continue Reading

Entrepreneur Today

SMEs: Staying On The Right Side Of The Taxman

Remaining SARS compliant can be a constant challenge for small- to medium-enterprises (SMEs), especially when they are trying to focus on growing their businesses and streamlining their operations.

Entrepreneur

Published

on

tax

EasyBiz Managing Director, Gary Epstein, says submitting taxes can be a seamless process that does not have to take up more time than is necessary. “If business owners understand what is required of them and they put a few processes into place to deal with their tax submissions properly, their lives will be so much easier.”

What are the top three considerations for SMEs when submitting tax returns?

“Firstly,” says Epstein, “SARS returns must be accurate and submitted in terms of the relevant Act. Secondly, returns should be submitted and paid on time to avoid unnecessary penalties and interest, and thirdly, business owners must follow up on queries issued by SARS. “Do not ignore these queries, act on them as soon as possible”.

What are the major SARS submission deadlines for SMEs?

Epstein points out that small business owners need to adhere to various tax deadlines, each with their own particular dates for submission. “It is important that business owners diarise the dates (and set advance reminders for themselves) and/or enlist the services of an accountant or financial adviser to help them keep abreast of requirements.”

Value-added tax (VAT)

VAT payments need to be submitted in the VAT period allocated to the business, according to various categories and ending on the last day of a calendar month. This may mean making payments once a month, once every two months, once every six months or annually, depending on the category.

Provisional taxes

Provisional tax should be submitted at the end of August (first provisional) and at the end of February (second provisional) – for February year-end companies.

Employee taxes

In addition to submitting an annual reconciliation (EMP501) for the period 1 March to end of February for Pay-As-You-Earn (PAYE), Skills Development Levy (SDL) and Unemployment Insurance Fund (UIF), employee tax, in the form of an EMP201 return, needs to be submitted by the seventh of every month.

When can SMEs get extensions and is it worth it?

Epstein says SMEs can apply for various extensions, but these are subject to the Income Tax Act and Tax Administration Act.

“It is best for SMEs to consult their tax professionals to get advice regarding extensions for their businesses.”

What is SARS not flexible about?

SARS is not flexible when it comes to late returns and late payments.

“I cannot stress enough how important it is for SME owners to ensure their tax returns are submitted on time. In this way, they will avoid the inconvenience and expense of additional fines and interest,” notes Epstein.

What skills do SMEs need in their organisations to be able to submit to SARS efficiently?

Business owners often don’t have the time or expertise to deal with tax submissions throughout the year. If the business cannot afford to employ a full-time accountant or financial services expert, it would do well to outsource its tax requirements to a registered tax practitioner.

“I would recommend that even if they are not submitting the tax returns themselves, business owners should have a broad understanding of the tax regulations and what is expected of them. There is a lot of helpful information on the various Acts and tax requirements on SARS’ website,” says Epstein.

How does the right software help SMEs remain SARS compliant?

SME’s (and their accountants’) jobs can be made easier by using reliable accounting software to calculate accurate VAT reports. These reports are only as accurate as the data entered into them, which means care needs to be taken when inputting data into the accounting programme. Epstein says a good accounting software package must be reliable, easy to use and functional.

“SMEs need to check that the software has thorough reporting capabilities and can interface with other software solutions. Of course, it is also important to find out whether the software is locally supported by the vendor or not.”

Continue Reading

Entrepreneur Today

4 Dangers Of Business Under-insurance

A common short-term insurance peril that many SMEs face when submitting a claim following an insured event is the risk of being underinsured.

Entrepreneur

Published

on

business-insurance

Malesela Maupa, Head of Products and Insurer Relationships at FNB Insurance Brokers says, many small business owners mistakenly believe that by merely having a short-term insurance policy in place they are adequately protected against unforeseen events.

“This is technically correct provided that the business is covered for the full replacement value of the items insured. However, in circumstances where the sum insured does not cover the full replacement value or material loss of the item insured, the business is underinsured,” explains Maupa, as he unpacks the dangers of business underinsurance:

1. Financial loss

The most common risk is financial loss on the part of the business. If the business is underinsured or the indemnity period understated, the short-term insurance policy will only pay out the sum insured for the stated indemnity period as stated in the schedule, with the business owner having to provide for the shortfall. This often leads to cash flow challenges, impacting profit margins or rendering it difficult for the business to recover following the financial loss.

2. Reputational damage

Should an underinsured business not have sufficient funds to replace a key business activity or critical component following a loss, this may impact its ability to fulfil its contractual obligations, leading to a loss of business or market share, and irreparable reputational damage in the worst-case scenario.

3. Legal action

A small business also faces the risk of customers or clients taking legal action against it, should it fail to deliver on goods and services following a loss or be unable to honour its financial commitments that they committed to prior to the loss.

4. Survival of the business

A catastrophic event such as fire, which could result in the loss of stock or company equipment and documentation, could threaten the survival of a small business that is not yet fully established, if the business assets are not adequately insured.

Working with an experienced short-term insurance broker or insurer is essential when taking up short-term insurance to ensure that business contents are covered for their full replacement value.

Furthermore, depending on the nature of the business or item insured, the policy should be reviewed on a regular basis to avoid underinsurance as the value of items often change overtime due to fluctuations in economic activity. Where it’s necessary, evaluation certificates need to be kept up to date.

“Lastly, SMEs should ensure that the sum insured does not exceed the replacement value, which would lead to over insurance. Should a business submit a claim following a loss, the insurer would only pay out the replacement value, regardless of the higher sum insured,” concludes Maupa.

Continue Reading
Advertisement

SPOTLIGHT

Advertisement

Recent Posts

Follow Us

Entrepreneur-Newsletters
*
We respect your privacy. 
* indicates required.
Advertisement

Trending