I run a small franchise electronics store.
I collect basic personal information from our customers that we keep on file and use for marketing notifications to them.
The other day an upset customer demanded to know what personal information we have of her and said that the Popi act gave her the right to request a complete copy of the personal information we have of her.
We gave it to her, but I was wondering whether she has the right to ask for this?
The Protection of Personal Information Act 4 of 2013 (“Popi”) was enacted to promote the constitutional right to privacy and align South Africa with the international community regarding information and data protection.
Although Popi has not yet fully come into operation, it has been signed into law and it is only a matter of time before it comes into effect.
Popi places a responsibility on parties who collect, store, use and destroy personal information (“responsible parties”) and also provides rights and remedies to persons whose personal information is being processed (“data subjects”).
Popi authorises data subjects to request access to the personal information held by a responsible party, as well as the amendment and deletion of such information under certain circumstances.
Responsible parties are obliged, if so requested, to provide confirmation free of charge to data subjects that they hold their personal information, to provide a description of the personal information in question and to confirm the identity of all third parties or the categories of third parties who have received the information.
Any such request from a data subject must be complied with – within a reasonable time; at a prescribed fee (may be levied before the actual record or description of the personal information is made available to the data subject); in a reasonable manner and format; and in a form that is generally understandable.
Should a responsible party wish to not provide personal information to a data subject, such refusal must be based on the same grounds for refusal as allowed under the Promotion of Access to Information Act 2 of 2000.
Data subjects may, in terms of Popi, also request that their personal information be corrected or deleted in circumstances where such information has become outdated, is not accurate, is incomplete, misleading, or excessive; also if it has not been obtained by lawful means, or if the responsible party is no longer entitled to retain the information.
In terms of Popi, responsible parties are obliged to provide access to personal information of a data subject only to that data subject, unless the data subject consents otherwise, and may require adequate proof of the identity of the data subject prior to them receiving access to their personal information.
Responsible parties should comply with such a request within a reasonably practicable time frame and tender proof that the request had been complied with.
As Popi will apply to your business, it is correct that you provided access to the personal information.
This does not mean that such access should be blanket, and our advice would be to consider having a clear data privacy and access policy drafted for your business in terms of which you can in future deal with such requests for information.
– Damian Viviers, associate, Phatshoane Henney Attorneys
Stuur jou mening van 300 woorde of minder na MyStem@netwerk24.com en ons sal dit vir publikasie oorweeg. Onthou om jou naam en van, ‘n kop-en-skouers foto en jou dorp of stad in te sluit.
Netwerk24 ondersteun ‘n intelligente, oop gesprek en waardeer sinvolle bydraes deur ons lesers. Lewer hier kommentaar wat relevant is tot die onderwerp van die artikel. Jou mening is vir ons belangrik en kan verdere menings of ondersoeke stimuleer. Geldige kritiek en meningsverskille is aanvaarbaar, maar hierdie is nie ‘n platform vir haatspraak of persoonlike aanvalle nie. Kommentaar wat irrelevant, onnodig aggressief of beledigend is, sal verwyder word. Lees ons volledige kommentaarbeleid
Murray La Vita is 'n bekroonde rubriekskrywer en profielskrywer vir Netwerk24.
Hanlie Retief is 'n bekroonde skrywer en aanbieder van 'n Halfuur met Hanlie op Via.
Blouwillem is 'n voorheen bevoordeelde, tans geseënde middeljarige man.
Waldimar Pelser is redakteur van Rapport en aanbieder van 'In Gesprek' op kykNET.
Henry Jeffreys is 'n politieke kommentator en voormalige redakteur van Die Burger.
Johann Maarman is eindredakteur by Die Burger en 'n bekroonde rubriekskrywer.
Nathan Trantraal is 'n strokiesprentkunstenaar en digter van Kaapstad.
Leopold Scholtz is 'n vryskutjoernalis en politieke kommentator.
Barnard Beukman is die redakteur van Beeld.
Gert Coetzee is redakteur van Volksblad.
Herman Lategan is 'n skrywer wie se rubrieke in 'Binnekring van Spookasems' gebundel is.
Sonja Loots is 'n dosent aan die Universiteit van Kaapstad en bekroonde outeur.
Sarel van der Walt is 'n joernalis vir Netwerk24 en 'n voormalige Londen-korrespondent vir Media24.
Charles Smith is Netwerk24 se nuusredakteur in Bloemfontein.
Hallo, jy moet ingeteken wees of registreer om artikels te lees.