Government has published its long-awaited\u00a0Protection of Personal Information (POPI) regulations, detailing how South African residents and businesses can have their personal data removed from company databases.<\/p>\n
The new regulations, now open for public comment, allow a\u00a0“data subject” (you) to object in writing to the processing of personal information, and submit such objection to the responsible party (the company).<\/p>\n
These include requests to delete, correct, and\/or destroy any records that the responsible party has in its possession.<\/p>\n
In addition to regulations dealing with health-related personal information (insurance companies, pensions and medical aids),\u00a0the new regulations seem to target marketers directly,\u00a0said Era Gunning,\u00a0banking and finance director at law firm, ENSAfrica.<\/p>\n
“In terms of draft regulation 6, a responsible party may request a data subject\u2019s written consent, by means of a form, to process their personal information, which corresponds substantially with form 4 to the draft Regulations.<\/p>\n
“This form consists of two pages and will prove to be very onerous for any responsible party that conducts direct marketing by electronic means, such as email and SMS,” said Gunning.<\/p>\n
The regulations also deal with the duties of information officers who will regulate and enforce complaints, and how complainants must be notified when changes are made to their personal data.<\/p>\n
Any person wishing to comment on the draft regulations must do so on or before 7 November 2017.<\/p>\n
You can find the draft regulations and an example<\/strong> of the paperwork required here<\/a><\/strong>.<\/p>\n
\n