Topics inside this course
Awareness and induction depth — not an accredited occupational qualification.
- What counts as personal and special personal information
- The eight conditions for lawful processing in plain language
- Day-to-day decisions in email, CRM, HR and shared drives
- Data subject requests, complaints and breach escalation
- Short scored assessment with LMS completion tracking
Built for the people who take the training
Every employee who handles personal information in a South African organisation — including contractors and managers who approve processing.
What learners leave able to do
- Recognise personal information and special personal information under POPIA
- Apply the conditions for lawful processing in day-to-day work
- Know when to escalate a request, complaint or suspected breach
- Complete a short assessment that reports score and completion to your LMS
Modules you can expect
Structure may tighten when you localise from your own source pack in Kre8AI — this is the shape of the library title.
- 1Why POPIA exists
Purpose of the Act and who it protects.
- 2Personal information at work
Examples from the systems people actually use.
- 3Lawful processing
Conditions applied to real workplace scenarios.
- 4Rights and requests
How staff should recognise and escalate requests.
- 5Incidents and breaches
What to do first, who to tell, what not to do.
- 6Knowledge check
Scored assessment that reports to your LMS.
Includes a short scored assessment. Completion, score and bookmarking report through the SCORM tracking bridge.
Written for the workplace, not for the statute book alone
Most POPIA training fails because it restates the Act without connecting it to the work people actually do. This course is written from source material, then structured as workplace learning: what counts as personal information in your context, how the eight conditions show up in email, CRM and HR systems, and what to do when something goes wrong.
Learners move from definitions to decisions. They see how a customer complaint, a shared spreadsheet, or a recruitment file creates processing obligations. They practise recognising special personal information, understanding why consent is not always the right basis, and knowing when a request or suspected breach must leave their desk.
It is an awareness and induction course, not legal advice and not a substitute for your organisation’s own policies. Review it against those policies before you make it mandatory — the same way you would with any course you did not write yourself. Operators who need sector-specific rules should add their own modules after this foundation.
Kre8AI packages it as standalone HTML and as SCORM 2004, with completion, score and bookmarking through the tracking bridge. On Growth and Scale plans, an optional AI course coach can answer learner questions grounded in the same approved material. The coach needs a network connection; the course itself still plays offline. The coach stays off quizzes and the final assessment unless you turn those options on.
When you build the same topic from your own privacy pack in Kre8AI, you get the same export formats, the same citation trail for reviewers, and the option to enable the coach for your learners.
What you would upload in Kre8AI
POPIA Act extracts, Information Regulator guidance, privacy policy
- Protection of Personal Information Act 4 of 2013 (selected sections)
- Information Regulator guidance notes relevant to your sector
- Your organisation’s privacy policy and breach procedure
Formats, coach and provenance
- Standalone HTML to play in the browser; SCORM 2004 for your LMS.
- Optional AI course coach on Growth and Scale — grounded in approved material; off on quizzes and final assessment by default. Course plays offline; coach needs a network.
- Built in Kre8AI and reviewed before we published it. Not a substitute for your organisation's own policy — review before you make it mandatory.
Get the SCORM package while you are here.
Same course, SCORM 2004. Load it to settle the tracking question — and keep it as a course your people can take after you review it.
Request the package
SCORM 2004 zip. We ask for an email so we know which LMS you are testing — and so we can send the download.

