Section 72 of the Protection of Personal Information Act (POPIA) provide further rules for the transfer of someone’s personal information to a third party outside of South Africa. It reads as follows: “72. Transfers of personal information outside Republic.— (1) A responsible party in the Republic may not transfer personal […]
Section 71 of the Protection of Personal Information Act (POPIA) further spell out a person’s rights in relation to automated processing of their personal information. It reads as follows: “71. Automated decision making.— (1) Subject to subsection (2), a data subject may not be subject to a decision which results […]
Section 23 of the Protection of Personal Information Act (POPIA) provide for someone to find out what personal information another entity holds about them. It reads as follows: “23. Access to personal information.— (1) A data subject, having provided adequate proof of identity, has the right to— (a) request a […]
Section 18 of the Protection of Personal Information Act (POPIA) provide that a person must generally be notified when their personal information is being collected. It reads as follows: “18. Notification to data subject when collecting personal information— (1) If personal information is collected, the responsible party must take reasonably […]
Section 15 of the Protection of Personal Information Act (POPIA) outlines that any further processing of personal information must be in line with the purpose for its original collection. It reads as follows: “15. Further processing to be compatible with purpose of collection. (1) Further processing of personal information must […]
Section 13 of the Protection of Personal Information Act (POPIA) provide that personal information must be collected for a specific purpose. It reads as follows: “13. Collection for specific purpose.— (1) Personal information must be collected for a specific, explicitly defined and lawful purpose related to a function or activity […]
Section 12 of the Protection of Personal Information Act (POPIA) provides that personal information must generally be collected directly from the person it relates to. The section reads as follows: “12. Collection directly from data subject.— (1) Personal information must be collected directly from the data subject, except as otherwise […]
Section 11 of the Protection of Personal Information Act (POPIA) outlines the need for consent in terms of data protection. It reads as follows: “11. Consent, justification and objection — (1) Personal information may only be processed if— (a) the data subject or a competent person where the data subject […]
