Staff and students are urged to familiarise themselves with two new policies that were recently approved by the Executive. These policies govern the processing and protection of institutional information of the University in compliance with information-related legislation such as the Protection of Personal Information Act 4 of 2013 (POPIA) and the Promotion of Access to Information Act 2 of 2000 (PAIA).

The Information Classification Policy provides a classification scheme for the University's information assets and is intended to assist staff and students with the handling of information in a way that is appropriate to its sensitivity and/or confidentiality. The policy is supported by the Information and Data Governance Matrix that identifies the institutional information managed by the University.

The Policy on the Use of Public Cloud Computing Services applies the principles of the Information Classification Policy to ensure the secure and responsible use of public cloud services. The policy defines:

• the concept of sanctioned versus unsanctioned cloud services, the former being cloud services that have been officially approved or contracted by the University, and the latter all other cloud services;
• requirements for the processing of public, private, confidential or personal information in the public cloud; and
• risk factors to be taken into account when considering the transfer of private, confidential or personal information to the public cloud.

The following links may be used to access the documents on the staff or student intranet:

Kind Regards