AN EXPLORATORY REVIEW ON DATA PRIVACY IN HRM: REVIEW LESSONS FROM SOUTH AFRICA

Data privacy in human resource management (HRM) has become a critical governance concern in the digital era, as organisations increasingly collect and process large volumes of employee and applicant data through advanced technologies such as HR information systems, artificial intelligence, and workplace monitoring tools. This exploratory review examines the conceptual, legal, ethical, and practical aspects of data privacy in HRM, with a specific focus on South Africa and the implications of the Protection of Personal Information Act 4 of 2013 (POPIA). Drawing on 52 peer-reviewed sources published between 2020 and 2025, the study identifies six key themes, including data privacy theory, legal frameworks, employee data practices, recruitment challenges, workplace surveillance, and organisational governance. The findings reveal notable gaps between POPIA requirements and actual HR practices in both public and private sectors. Key issues include weak lawful processing practices, limited enforcement of employee data rights, tensions between surveillance and privacy, and uneven data governance maturity. The review concludes by offering practical recommendations to support HR professionals, legal experts, and policymakers in strengthening ethical, compliant, and effective data privacy practices within South African organisations.