On a picturesque farm in Fochville in western Gauteng, André Badenhorst the owner of Animal Farm is taking steps to implement the Protection of Personal Information Act (POPIA). Badenhorst is doing this not just as a legal obligation, but as a way to build trust and run his business responsibly.
His farm’s publicly available POPIA Compliance Manual shows exactly how even a small agricultural operation can put in place practical, effective data‑protection systems.
Badenhorst appointed himself as the Information Officer, as stated in their manual. Rather than overcomplicate things, he rolled out a straightforward system: personal data of clients, visitors, or suppliers (names, contact numbers, banking details) are collected only when necessary and only with explicit consent.
“I ensure that every person whose data is collected is informed of why their information is needed, how long it will be kept, and what rights they have under POPIA,” he said.
He also explained that physical records are stored behind locked doors, and electronic data is protected with passwords.
“For sensitive information, like bank account details, the farm only processes them with specific consent,” he added.
Moreover, Badenhorst and his team undergo regular POPIA training so they understand how to handle data securely — from collection through to deletion or de-identification.
The Easiest POPIA Steps for Micro‑Businesses:
- Appoint an Information Officer (e.g. André does this himself)
- Be transparent: clearly explain why you’re collecting. data, how you’ll use it, and what rights people have.
- Secure data: store physical files securely; password-protect electronic data; limit access.
- Get explicit consent before processing sensitive information, such as banking details.
- Set a retention and deletion policy: keep data only as long as needed, then destroy or de‑identify it.
- Train your staff regularly on POPIA duties and breach response.
Animal Farm Fochville shows that POPIA compliance doesn’t have to mean complicated systems for a small business — even a farm. With a clear manual, sensible consent practices, and secure storage, André has built a trustworthy, low-risk data‑management system rooted in transparency. Micro‑businesses can adapt this model easily: appoint someone, keep forms simple, get explicit consent, and protect data responsibly.
For more information on POPIA compliance, see this guide from NBI Law.
