Data generated from smart buildings must be PoPIA-compliant

Issue 4 2021 Security Services & Risk Management

The Covid-19 pandemic has irrevocably changed the way buildings are being designed, constructed and managed.

Architects and building owners are turning to technology to deliver an enhanced user experience as occupants increasingly demand buildings that are not only intelligent and more energy efficient, but also hygienically safe, especially in high-traffic commercial environments such as offices, hotels, shopping malls, airports and hospitals.

“The creation of smart buildings can yield considerable value when it comes to monitoring occupancy rates and supporting a safe and healthy environment, but it must be remembered that digitally engineered buildings generate a substantially large quantity of data,” says Databuild CEO, Morag Evans.

“And while the collection of data can be extremely useful in gaining insights that help improve the overall safety and well-being of building occupants, gathering information on behavioural patterns includes personal data and this must be processed in a manner that does not infringe on building occupants’ rights.”

The Protection of Personal Information Act (PoPIA), which came into effect on 1 July, specifically seeks to protect personal information and prevent it from being misused and abused.

According to the Act, everyone has a right to privacy and protection against the unlawful collection, retention, dissemination and use of personal information.

“The management and protection of personal data is therefore a key consideration for smart building owners and landlords,” says Evans.

Minimise data collection

“One of the best ways to mitigate the risk of non-compliance with PoPIA regulations is to minimise the volume of data that is collected,” she advises. “Only collect what is necessary for immediate usage. For example, temperature and lighting sensors can be used to change settings when persons enter and leave a room. Storing users’ individual preferences significantly increases the volume of data being collected as the system is required to ‘remember’ these preferences. Sensors that function on standard settings, however, are far less data dependent.”

Ensure data security

PoPIA also requires that adequate control measures be put in place to safeguard all the data being collected. “Building owners and landlords are not only required to ensure that the data is secure from a technical perspective, but also that in the event of a data breach, the fallout can be dealt with effectively and speedily. The larger the amount of data collected, the harder this is to do.”

Design with PoPIA in mind

“The Coronavirus has redefined the way people relate to the buildings in which they work, live and meet and technology – and the data it generates – is playing a pivotal role in the development of safe and efficient spaces.

“It is therefore imperative that these smart infrastructures are designed and built with data and personal information protection measures in mind to ensure that this data does not fall into the wrong hands,” Evans concludes.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Risk management and compliance enforcement
Security Services & Risk Management
Having a risk management and compliance programme (RMCP) is not just a procedural formality; it is a legal requirement under Section 42 of the Financial Intelligence Centre Act (FICA).

Read more...
The dangers of poor-quality solar cables
Security Services & Risk Management Smart Home Automation
Reports indicate that one in six fires attended by South African firefighters is linked to substandard solar installations, often due to faulty wiring or incompatible components.

Read more...
Growing risks for employers
Security Services & Risk Management
With South Africa’s unemployment rate exceeding 32% and expected to rise beyond 33% this year, desperation is fuelling deception in the job market. Trust is no longer a given, it is a gamble.

Read more...
Chubbsafes celebrates 190 years
Gunnebo Safe Storage Africa News & Events Security Services & Risk Management
Chubbsafes marks its 190th anniversary in 2025 and as a highlight of the anniversary celebrations it is launching the Chubbsafes 1835, a limited edition 190th-anniversary collector’s safe.

Read more...
New law enforcement request portal
News & Events Security Services & Risk Management
inDrive launches law enforcement request portal in South Africa to support safety investigations. New portal allows authorised South African law enforcement officials to securely request user data related to safety incidents.

Read more...
Continuous AML risk monitoring
Access Control & Identity Management Security Services & Risk Management Financial (Industry)
AU10TIX, launched continuous risk monitoring as part of its advanced anti-money laundering (AML) solution, empowering businesses to detect behavioural anomalies and emerging threats as they arise.

Read more...
Growing risks for employers
Security Services & Risk Management
With South Africa’s unemployment rate exceeding 32% and expected to rise beyond 33% this year, desperation is fuelling deception in the job market. Trust is no longer a given, it’s a gamble.

Read more...
Managing mining physical security risks
Zulu Consulting Security Services & Risk Management Mining (Industry) Facilities & Building Management
[Sponsored] Risk-IO, a web app from Zulu Consulting, is designed to assist risk managers in automating and streamlining enterprise risk management processes, ensuring no steps are skipped and everything is securely documented.

Read more...
SAFPS issues SAPS impersonation scam warning
News & Events Security Services & Risk Management
The Southern African Fraud Prevention Service (SAFPS) is warning the public against a scam in which scammers pose as members of the South African Police Service (SAPS) and trick and intimidate individuals into handing over personal and financial information.

Read more...
Rewriting the rules of reputation
Technews Publishing Editor's Choice Security Services & Risk Management
Public Relations is more crucial than ever in the generative AI and LLMs age. AI-driven search engines no longer just scan social media or reviews, they prioritise authoritative, editorial content.

Read more...