Three rules for visitor data privacy and protection

Residential Security Handbook 2022: SMART Living Access Control & Identity Management, Residential Estate (Industry), Products & Solutions

Since Covid-19 hit our shores in early 2020, it brought a sea of data breaches, one crashing wave after another. From Experian to Lightstone and now TransUnion, personal data is under siege from all sides.

What can your business do to protect visitors’ information? ATG Digital gives insight into the triad of visitor data protection.

“When people do business with your company, they trust you with their information,” says ATG’s Ariel Flax. “Your responsibility for their privacy should extend to anyone who submits their personal information when they check in at the gate or reception.”

According to Flax, visitor data can be targeted by criminals or competitors. Good privacy practices aren’t just a courtesy but a legal requirement since POPIA came into effect in July last year.

Rule 1: Only collect what you need

Collecting critical data only at check-in saves visitors time and mitigates risks. “Your guests love the swift experience and feel safer on your premises,” says Flax. Visitors immediately get annoyed when they have to answer too many questions.

As per POPI Act regulations, Flax advises businesses to only collect what is necessary for the purpose of access control security on-site.

Rule 2: Encrypt personal information at reception

“If you’re still using handwritten registration books, ditch it,” cautions Flax. “Our most recent survey revealed that over 60% of visitors peep at who’s checked in ahead of them – that’s 60% too many.”

Names, cellphone numbers and ID numbers should not be exposed at any time. Electronic devices can be locked, encrypted and wiped remotely in the event of theft.

Rule 3: Write data protection into your company DNA

Security and governance go hand in hand, yet many companies fall short by assigning the responsibility of visitor data to either physical security or IT.

Firewalls, IPS and IDS go a long way, but Flax says, “It’s everyone’s responsibility to know and enact the security policy. Employee training against social engineering (phishing), network and physical perimeter protection must be enforced daily.”

These days, a cellphone number and a name are enough for unscrupulous hackers. In line with POPIA, have a policy that defines the process of collecting data, securely storing it, and deleting it as soon as it is no longer necessary. You’ll need a shredder if you have paper records.

Digital visitor management software like ATG Digital’s At the Gate and At Reception immediately encrypts data and uploads it to the cloud. Records are not stored on the device and cannot be accessed by security guards, receptionists or anyone else who may handle the device.

Consider ears too

While most companies are primarily concerned with prying eyes (and long fingers), Flax raises an interesting point about keeping sensitive information out of earshot.

“Discussions in meeting rooms and offices also need protection,” she says. “Assess the acoustics of your offices and meeting rooms. Consider investing in some soundproofing if need be. You can make a policy not to discuss the personal data of visitors/patients/partners in common areas of the office.

“The point of [data] entry can be the very point where sensitive information leaves. If you’re asking visitors for information on arrival, guard it the same way you would any other data on your network,” concludes Flax.



Integration relieves PoPIA pressure

Privacy laws apply to everyone, sectional title and community schemes included. That’s the word from Human Settlements Minister, Mmamoloko Kubayi, following a recent parliamentary Q&A.;

Despite the deadline for compliance on 30 June 2021, Kubayi had to reiterate this year that the regulations of the Protection of Personal Information Act (POPIA) apply to community housing schemes as well.

“Accordingly, all entities need to invest in the resources they have identified to ensure that the principles of POPIA are upheld,” said Kubayi, referring to the eight principles governing the collection, storing and processing of personal information belonging to members of community schemes.

Leading access control and visitor management firm, ATG Digital, has spent considerable time working with the POPIA-expert Michalsons Law Firm to create a fully POPIA-compliant access control solution for complexes and residential estates.

In its latest bid to further alleviate pressures on facilities and security managers, ATG Digital has announced that its flagship product, At The Gate, is available as an add-on to the EstateMate community management app.

The app facilitates secure communication between body corporates, managing agents, as well as owners and residents of community schemes. It acts as a central management hub and, together with At The Gate access control, makes it easier to enforce POPIA policies.

“Only information vital for the purpose set out in the scheme’s POPIA policy is collected at the gate. All the information is encrypted and securely stored, and is only accessible by authorised personnel,” explains ATG Digital’s Arial Flax.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Vivotek partners to enhance retail management
Surveillance Retail (Industry) Products & Solutions AI & Data Analytics
Recognising the growing demand from retail enterprises to boost operational efficiency through cloud security solutions, Vivotek has announced a partnership between its AI-powered cloud surveillance platform, Vortex, and Kabob.

Read more...
Highest capacity ePMR HDDs
Infrastructure Products & Solutions
Western Digital has announced that it is now shipping the world’s highest capacity UltraSMR HDD with up to 32TB leveraging the time-tested, reliable energy-assisted PMR (ePMR) recording technology for hyperscalers, CSPs and enterprises.

Read more...
Scalable, secure user and IoT onboarding and management
Duxbury Networking IoT & Automation Products & Solutions
With growing demands for connected devices across various sectors in South Africa, EasyPass simplifies network management by automating the onboarding of multiple user devices and IoT connections.

Read more...
Protect your assets with Visual Verifier
Secutel Technologies Surveillance Products & Solutions
To ensure your valuable assets and secured areas remain protected during this high-risk time, Secutel offers the Visual Verifier (VV) – a solution delivering comprehensive security and peace of mind.

Read more...
Dallmeier launches new entry-level camera
Dallmeier Electronic Southern Africa Surveillance Products & Solutions
Dallmeier electronic is expanding its product portfolio with the Picoline, an entry-level camera that offers a compact and cost-effective solution for applications that require day and night recording with the highest resolution (IR mode).

Read more...
Unlock data insights and integration
Gallagher Access Control & Identity Management Products & Solutions
Gallagher Security announced the release of its security site management software, Command Centre v9.20, which enables integration with Microsoft Entra ID, a cloud-based identity and access management system that provides seamless synchronisation of cardholders across systems.

Read more...
Gallagher Security opens Cape Town office
Gallagher News & Events Access Control & Identity Management
Acknowledging a significant period of growth for the company in South Africa, opening a second office will enable Gallagher to increase its presence across the region with staff based in Johannesburg and Cape Town.

Read more...
Axis introduces ACS Edge and cloud storage
Axis Communications SA Surveillance Infrastructure Products & Solutions
Axis Communications has launched two new solutions within the AXIS Camera Station ecosystem, AXIS Camera Station Edge (ACS Edge) and AXIS Camera Station Cloud Storage (ACS Cloud Storage).

Read more...
Know who’s spying on you
Kaspersky Information Security Products & Solutions
According to the latest State of Stalkerware report, 40% of the people surveyed worldwide stated they have experienced stalking or suspect they are being spied on. A solution for Android is now available.

Read more...
Securing access against unwanted visitors
Intelliguard Access Control & Identity Management Residential Estate (Industry) Products & Solutions
In today's residential estates and complexes, one of the biggest concerns is preventing unauthorised access, while ensuring a smooth and convenient experience for residents and approved visitors.

Read more...