Protection of Personal Information Act
Protection of Personal Information
The Protection of Personal Information Act No.4 of 2013 commonly known as “POPIA” came into full force and effect on 1 July 2021. POPIA seeks to protect natural and juristic persons from harm by protecting their personal information. POPIA sets out eight conditions for the lawful processing of personal information. In that way, the Act seeks to balance the right to privacy against other rights, particularly the right of access to information.
In compliance with the POPIA; we undertakes to process personal information or special personal information as defined by the POPIA as follows:
- Personal information may only be processed in a fair and lawful manner and only with the consent of the data subject or a competent person where the data subject is a minor;
- Personal information may only be processed for specific, explicitly defined and legitimate reasons.
- Personal information may not be processed for a secondary purpose unless that processing is compatible with the original purpose.
- Reasonable steps will be taken to ensure that the personal information collected is complete, accurate, not misleading and updated where necessary.
- The data subject whose information is collected will be made aware that NT is collecting such personal information and for what purpose the information will be used.
- Processing is necessary to carry out actions for the conclusion or performance of a contract to which the data subject is party;
- Personal information will be kept secure against the risk of loss, unlawful access, interference, modification, unauthorized destruction and disclosure.
- Data subjects may request whether their personal information is held, as well as the correction and/or deletion of any personal information held about them.
In terms of POPIA, a data subject has the following rights:
- The right to know what information is being kept, how it is being used, and when it may disclose it;
- The right to correct their details. We will keep information updated or as captured by the data subject.
- The right to revoke consent. Data subjects may revoke the consent that has been given. This should be done in writing and addressed [email protected]
