POPIA designates the head of the business as the Information
Officer. Depending on the type of business, the Information Officer will be the
sole trader, a partner in a partnership or CEO (or equivalent) in a company or
CC. The head of the business can delegate their responsibilities as Information
Officer to any other duly authorised person. It is important to note that
whoever “determines the purpose of and means for processing personal
information” remains ultimately responsible for ensuring that the processing of
personal information is done in a lawful manner. The Information Officer may
also appoint (in writing) as many Deputy Information Officers as necessary.