Under POPIA, an FSP suffers a security compromise that exposes clients' personal information. What is a core obligation that follows?

RE5 practice question with a worked answer. This is one of hundreds of FSCA RE5 questions in the RegulatoryExams question bank.

1. a) Notify the Information Regulator and the affected data subjects as soon as reasonably possible after becoming aware of the breach.Correct
2. b) Keep the breach secret to protect the FSP’s reputation.
3. c) Notify only the FAIS Ombud and no one else.
4. d) Do nothing unless a client specifically complains.