Individuals have a right to access their personal information, and to request correction of any inaccuracies. They also have a right to lodge a complaint if they believe their rights have been breached.
The Office of the Information Regulator is responsible for enforcing POPIA and can investigate complaints. If it finds that a company or organization has breached POPIA, it can order them to take remedial action and/or impose financial penalties.
Why do you need one in South Africa?
-The contact details of your organisation, including a physical address, email address and telephone number.
-A description of the personal information that you collect and process.
-The purposes for which you collect and process personal information.
-Whether you disclose personal information to any third parties, and if so, the identities of those third parties and the purposes for which the information is disclosed.
-Your policies and procedures for ensuring the security of personal information.
-Your policies and procedures for enabling individuals to access and correct their personal information.
- The types of personal information you collect;
- How you collect personal information;
- Why you collect, use and store personal information;
- How long you store personal information;
- Who has access to personal information;
- How people can access their personal information;
- How people can correct their personal information; and 8. Your contact details.