Data generated from smart buildings must be PoPIA-compliant

Issue 4 2021 Security Services & Risk Management

The Covid-19 pandemic has irrevocably changed the way buildings are being designed, constructed and managed.

Architects and building owners are turning to technology to deliver an enhanced user experience as occupants increasingly demand buildings that are not only intelligent and more energy efficient, but also hygienically safe, especially in high-traffic commercial environments such as offices, hotels, shopping malls, airports and hospitals.

“The creation of smart buildings can yield considerable value when it comes to monitoring occupancy rates and supporting a safe and healthy environment, but it must be remembered that digitally engineered buildings generate a substantially large quantity of data,” says Databuild CEO, Morag Evans.

“And while the collection of data can be extremely useful in gaining insights that help improve the overall safety and well-being of building occupants, gathering information on behavioural patterns includes personal data and this must be processed in a manner that does not infringe on building occupants’ rights.”

The Protection of Personal Information Act (PoPIA), which came into effect on 1 July, specifically seeks to protect personal information and prevent it from being misused and abused.

According to the Act, everyone has a right to privacy and protection against the unlawful collection, retention, dissemination and use of personal information.

“The management and protection of personal data is therefore a key consideration for smart building owners and landlords,” says Evans.

Minimise data collection

“One of the best ways to mitigate the risk of non-compliance with PoPIA regulations is to minimise the volume of data that is collected,” she advises. “Only collect what is necessary for immediate usage. For example, temperature and lighting sensors can be used to change settings when persons enter and leave a room. Storing users’ individual preferences significantly increases the volume of data being collected as the system is required to ‘remember’ these preferences. Sensors that function on standard settings, however, are far less data dependent.”

Ensure data security

PoPIA also requires that adequate control measures be put in place to safeguard all the data being collected. “Building owners and landlords are not only required to ensure that the data is secure from a technical perspective, but also that in the event of a data breach, the fallout can be dealt with effectively and speedily. The larger the amount of data collected, the harder this is to do.”

Design with PoPIA in mind

“The Coronavirus has redefined the way people relate to the buildings in which they work, live and meet and technology – and the data it generates – is playing a pivotal role in the development of safe and efficient spaces.

“It is therefore imperative that these smart infrastructures are designed and built with data and personal information protection measures in mind to ensure that this data does not fall into the wrong hands,” Evans concludes.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

The line between locking residents out and restricting their access
News & Events Security Services & Risk Management Residential Estate (Industry)
A June 2026 High Court judgment has clarified one of the most contested issues in modern estate governance: when an HOA's digital access restrictions amount to unlawful self-help or spoliation, and when they do not.

Read more...
Modernise field communications with Push-to-Talk over Cellular
Products & Solutions Security Services & Risk Management
Sentiv is bringing Hytera’s Push-to-Talk over Cellular (PTToC) portfolio to organisations that need a more structured and controlled way to coordinate field teams, without extending a full private radio model to every team, site, or function.

Read more...
SAFPS urges taxpayers to remain alert to fraud
Security Services & Risk Management News & Events
The SAFPS warns taxpayers about evolving SARS scams this tax season, highlighting common fraud tactics, practical prevention tips, and trusted reporting channels to stay protected.

Read more...
Zero-touch automation certificate life cycle management loop
Products & Solutions Information Security Security Services & Risk Management
ManageEngine completes the certificate life cycle management loop with CA-agnostic, zero-touch automation. New post-deployment automation in Key Manager Plus removes the last manual step in certificate renewal as lifespans gradually shrink to 47 days

Read more...
Fire safety in South Africa
Technoswitch Fire Detection & Suppression Technews Publishing SMART Security Solutions Fire & Safety Security Services & Risk Management Editor's Choice
Fire safety is sometimes ignored, sometimes relegated to whatever is cheapest, and sometimes treated with the seriousness it deserves, given that it focuses on protecting life and assets. SMART Security Solutions asked Brett Birch, MD of Technoswitch, for some insights into the realities of fire safety in South Africa.

Read more...
Nimbus remote fire alarm management
Technoswitch Fire Detection & Suppression Security Services & Risk Management Fire & Safety
Nimbus connects key stakeholders to their fire alarm systems, simplifying compliance with fire safety standards and greatly improving visibility into critical events, thereby augmenting first responder processes that save lives and protect assets.

Read more...
Sophos launches AI-native cybersecurity defence system
News & Events Information Security Security Services & Risk Management
Built for a threat landscape reshaped by AI, Sophos Fusion unites security operations, endpoint, network security, identity, email, and cloud into one defence system that prevents, detects, investigates, and responds at AI speed.

Read more...
Stop supplier fraud at the moment of payment
News & Events Security Services & Risk Management
Cape Town-built platform bridges the gap between onboarding and transaction by securing identity inside the live channels where companies exchange invoices and banking details.

Read more...
Ungoverned AI agents and deepfakes pose critical threats
Information Security Security Services & Risk Management
Global study reveals 64% of South African organisations already deploy autonomous AI agents with little to no governance, while 63% of employees admit they are unlikely to be able to spot attacks such as deepfakes

Read more...
A risk-based approach to fire safety
Fire & Safety Security Services & Risk Management Industrial (Industry) Agriculture (Industry)
A report by fire engineering consultancy ASP Fire is challenging blanket assumptions around combustible-core sandwich panels, arguing instead for a rational, risk-based approach that balances fire safety requirements with commercial realities in sectors such as agriculture, manufacturing and industrial processing.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.