Aligned with the Sept 2025 Code of Good Practice: Dismissal•ECTA Sec 13 Compliant Digital Signatures•Instant PayFast Checkout (Capitec Pay & Instant EFT)
Misconduct · Charge Sheet Template
Breach of Confidentiality & POPIA Data Protection Rules Charge Sheet & Hearing Pack
Charge sheet for breaching confidentiality or POPIA data-protection rules — unauthorised disclosure of company, client or employee personal information.
UNPAID DRAFT PREVIEW — Please unlock your dossier at ComplyDossier.com to generate the official printable A4 documents and ECTA audit certificate.
9%CCMA readiness
Step 1 · Offence & Statutory Guardrail Intake
No login needed. Your answers autosave on this device and to a secure draft.
2025 Code Offence Guide & Sanction Rule — Breach of Confidentiality & POPIA Data Protection Rules
What must be proven: Identify exactly what information was disclosed or accessed; Establish whether the disclosure was deliberate or accidental.
First-offence guideline: Sanction depends on sensitivity and intent: an accidental low-sensitivity disclosure may attract a written warning; deliberate disclosure of client data or trade secrets can justify dismissal for a first offence.
Recommended action mode: Direct Warning Pack — corrective discipline is usually appropriate for a first offence; escalate to a hearing for repeat or serious cases.
Example wording: It is alleged that on or about 15 January 2026, you breached confidentiality and/or the Protection of Personal Information Act 4 of 2013 in that you as will be set out in evidence at the hearing, disclosing or accessing Company, client or employee information without authority.
Or pick the closest symptom — we configure the charge, alternative and action mode:
No automatic alternative for this offence. Do not add an unsupported allegation.
Prior warnings on file
None recorded.
Understanding this offence: Breach of Confidentiality & POPIA Data Protection Rules
Protection of Personal Information Act 4 of 2013 (POPIA); the employee's confidentiality obligations; LRA 66 of 1995.
Standard charge formulation
It is alleged that on or about 15 January 2026, you breached confidentiality and/or the Protection of Personal Information Act 4 of 2013 in that you as will be set out in evidence at the hearing, disclosing or accessing Company, client or employee information without authority.
First-offence sanction guideline: Sanction depends on sensitivity and intent: an accidental low-sensitivity disclosure may attract a written warning; deliberate disclosure of client data or trade secrets can justify dismissal for a first offence.
CCMA procedural fairness checklist
Identify exactly what information was disclosed or accessed
Establish whether the disclosure was deliberate or accidental
Show the employee knew the confidentiality/POPIA rules
Assess the harm or risk caused to the company or data subjects
Check IT access logs and obtain the employee's explanation
Guidance only — establish the facts, consider the employee's response, consistency and mitigation. No automatic sanction or guaranteed CCMA outcome.
Standard charge formulation
It is alleged that on or about [DATE], you breached confidentiality and/or the Protection of Personal Information Act 4 of 2013 in that you [CONDUCT], disclosing or accessing Company, client or employee information without authority.
Statutory guidance
Statutory reference
Protection of Personal Information Act 4 of 2013 (POPIA); the employee's confidentiality obligations; LRA 66 of 1995.
First-offence sanction guideline
Sanction depends on sensitivity and intent: an accidental low-sensitivity disclosure may attract a written warning; deliberate disclosure of client data or trade secrets can justify dismissal for a first offence.
Category
Misconduct
CCMA procedural fairness checklist
Identify exactly what information was disclosed or accessed
Establish whether the disclosure was deliberate or accidental
Show the employee knew the confidentiality/POPIA rules
Assess the harm or risk caused to the company or data subjects
Check IT access logs and obtain the employee's explanation
Frequently asked questions
Is a POPIA breach dismissible?
Deliberate disclosure of personal or confidential information can justify dismissal for a first offence; accidental breaches usually warrant a warning and retraining.
Must I report the breach?
Serious POPIA breaches may need to be reported to the Information Regulator and affected data subjects.