The Protection of Personal Information (POPI) Act places many obligations on companies when it comes to dealing with customer information. This workshop will provide a brief overview of POPI and focus on the issues that are likely to be of the most importance to ISPs. Topics covered will include processing conditions for personal information, trans-border data flows, and the requirements for dealing with both incoming and outgoing data flows.