Data Protection

Our Approach to Data Protection

Genesis Management Consultants takes data protection seriously. This page explains the technical and organisational measures we take to protect personal information entrusted to us by clients, website visitors, and research participants.

Legal Framework

We operate under multiple data protection frameworks, including the Protection of Personal Information Act (POPIA) of South Africa, the General Data Protection Regulation (GDPR) where European data subjects are involved, and applicable data protection laws in Zimbabwe, Zambia, Kenya, and other jurisdictions where we operate.

Security Measures

• All data in transit is encrypted using TLS 1.3
• Data at rest is encrypted using AES-256
• Access to client data is restricted on a need-to-know basis
• All staff receive regular data protection training
• We conduct regular security assessments and penetration testing
• We have incident response procedures in place

Data Transfers

Where we transfer personal data across borders, we do so only where adequate protection is in place — including through standard contractual clauses or adequacy decisions where applicable.

Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant supervisory authorities in accordance with applicable law.

Information Officer

Our Information Officer is responsible for our POPIA compliance. Contact: privacy@genesisconsult.org or write to us at 01 Corporation Street, City Bowl, Cape Town, 8001, South Africa.