Charles Ritchie
Level 1

POPI ACT

Hi

I had a security breach on Sage. Unknown user changed customer info without any legal access. They cannot tell me who and what. Audit report from Sage available to users and accountants does not show any changes to the debtor's master file

 

This was there reply

 

Thank you for your email.
As a software vendor, we only have certain requirements when it comes to POPI ACT.
Ability to delete personal data after the retention period, etc.
We cannot be expected to keep data secure from changes that can happen.
These are the changes we made for the POPIA update last year

 

Don't I have an obligation towards my customers to keep their info secure and inform them about any security breaches especially if it was changed without my consent.

 

What does Quickbooks say about this ?