Skip to content
Fourth Generation Technologies
Get started
Menu
Botswana
Sign in

Readiness checklist

How ready are you for the Data Protection Act, 2024?

Twelve questions about how you handle personal information. You get a score and your next steps, most important first. It takes about three minutes.

  1. 1.Do you know what personal information you hold, where it is kept and who can see it?
  2. 2.Has someone been made responsible for data protection in your organisation?
  3. 3.Do you tell people, in a privacy notice, what you collect about them and why?
  4. 4.Where you rely on consent, such as for marketing, do you record who agreed and when?
  5. 5.Is access to personal information limited to the people who need it, with two-step login on every account?
  6. 6.Are laptops and phones that hold personal information protected, updated and able to be wiped if lost?
  7. 7.Is personal information backed up, with a restore tested in the last year?
  8. 8.Do you have a written plan for a data breach, including who tells the regulator and the people affected?
  9. 9.Do your contracts with suppliers who handle personal information, such as IT, payroll and cloud services, cover data protection?
  10. 10.Do you know which personal information is stored outside the country, for example in cloud services?
  11. 11.Do you delete personal information once you no longer need it?
  12. 12.Have your staff been shown how to handle personal information safely in the last year?

This checklist is a guide to help you plan, not legal advice.