Latest News Archive

Please select Category, Year, and then Month to display items
Previous Archive
01 July 2020 | Story Francois Quintin Cilliers | Photo Supplied
Francois Quintin Cilliers.

With the remainder of the Protection of Personal Information Act 4 of 2013 (POPIA) coming into effect on 1 July, South Africans are finally getting some much-needed protection when it comes to the selling and unauthorised use of their personal information. The purpose of the Act is to protect people from harm by protecting their personal data, protecting their privacy, and to stop their money and identity from being stolen. 

The commencement of the provisions of the Act will affect all South African citizens and must be taken seriously. The Act provides protection to individuals whose personal information is gathered and used in any manner, which essentially includes the vast majority of South African citizens and companies, especially those dealing with the processing and use of personal information, such as banks, medical aids, telecommunication companies, internet service providers, etc.

The objective of the POPIA
POPIA was promulgated in November 2013 after an investigation into privacy and data protection by the South African Law Reform Commission. The objective of the Act is to give effect to the right to privacy, as provided for in section 14 of the Constitution of 1996, and aims to regulate the processing and use of personal information by private and public bodies in line with international standards. 

Initially, only certain sections dealing with administrative matters (such as definitions, the establishment of the Information Regulator and the procedure for making regulations, etc.) came into operation in 2014. The commencement date of the remainder of the Act was scheduled for 1 July 2020, and public and private bodies are provided one year from this date to ensure that their practices comply with the provisions of the Act.

Compliance with the Act is extremely important. Less serious offences, such as obstructing an official in the execution of their duties, could lead to a fine or imprisonment of up to 12 months or both. More serious offences could lead to a fine of up to R10 million, or 10 years’ imprisonment, or a combination of both.  

Personal Information 
‘Personal information’ is defined as information that relates to an identifiable, living, natural person and an identifiable existing legal entity. The Act lists eight specific types of information included in this definition, ranging from your name to your biometric information to your personal opinions. Just as a clarification, though, any information shared on social media is regarded as a publication and will generally not enjoy protection. 

The Act also provides for ‘special personal information’, which can only be processed with the prior consent of the data subject if necessary by law, if it has already been made public by the data subject or if it is done for historical, statistical or research purposes. Section 34 prohibits the processing of the personal information of a child, unless it is required by law, collected with the consent of a competent person (a parent or legal guardian), if it is in the public interest or used for statistical, historic or research purposes without adversely affecting the privacy of the child.

The Act clarifies the rights of the ‘data subject’, which is the being to whom the personal information relates. In this regard, we are afforded the following rights: to have access to personal information that is kept or used by any private or public body; to be informed if someone is collecting or has accessed our personal information; to have any incorrect or obsolete information corrected or destroyed; and to object to any unauthorised use (or ‘processing’) of personal information. The ‘responsible party’ or ‘data controller’ is the public or private body that essentially processes personal information. This includes employers who process the personal information of their employees and clients.

The ‘processing’ of personal information is any operation or activity, whether automated or not, pertaining to the collection, receipt, storage, modification, sharing or destruction of personal information. This may only occur with the consent of the data subject, if required by law, if it protects the legitimate interests of the data subject, or if it is necessary for performance in terms of a contract to which the data subject is a party.

Who is collecting information and why
Section 18 prescribes that the following should be shared with the data subject once any personal information is collected: the source from which the information is being collected, the name and address of the party collecting the information, the purpose of the collection, whether the collection occurs in accordance with any law, who will receive the information, the security measures used to ensure the confidentiality and correctness of the information, that the subject has the right to access and rectify any part of the information gathered, and objection to the processing. Any complaints in this regard may be lodged to the Information Regulator, an independent party who oversees the Act and answers to the National Assembly, and whose contact information must also be shared with the data subject.

The Act determines that the information may only be collected directly from the data subject, unless it is contained in a public record, it is required for a public purpose or to protect the interests of the data subject, it is not reasonably possible to obtain it from the data subject, or does not prejudice the subject if obtained from another source. 

The data controller must comply with prescribed duties, which includes: ensuring that all conditions for lawful processing are met (including obtaining the prescribed consent and ensuring confidentiality); collecting information directly from the data subject; informing the subject about the purpose of the processing; providing the subject with access to the information; keeping the information up to date; correcting the information; deleting incorrect or obsolete records; and complying with any information notice or enforcement order served by the Information Regulator.

No marketing 
It should also be noted that the Act prohibits all forms of direct marketing unless a data subject has given their consent. A data subject may only be approached once for consent and must at all times be afforded the right to ‘opt out’ of any future communications.

It is important to note that the provisions of the Act will not apply to the processing of personal information that is collected in the course of a purely personal or household activity, such as keeping a directory of the addresses and phone numbers of friends and family. It will also not apply to the collection of information for the purpose of national security, for the prevention of unlawful activities, if it is collected by the Cabinet, the Executive Council of a province, or by the courts when exercising its judicial function. 

The processing of information as a matter of ‘public interest’ will also be excluded. This is generally where information is processed for journalistic, artistic, or literary purposes. Ethical consideration will apply in these instances, and there will be a weighing of the data subject’s right to privacy versus the data controller’s freedom of expression. As a general rule of thumb, one should always remember that there is an important distinction to be made between ‘public interest’ and what is interesting to the public – the latter will not be exempted from the provisions of the Act. 

Take care
In summary, a data controller must carefully collect and process the personal information of their clients, employees, and any other party whose information they are processing, in line with the provisions of the Act as summarised above. Consideration should be given to the appointment of an information officer, otherwise the head of the private or public body will be regarded as such. This individual will register with the Information Regulator and ensure that the provisions of the Act are met within the organisation. South African citizens must be aware of the rights provided by the Act and must be mindful of the transactions they enter into – whether in person, automated, or online. Care must be taken when ‘posting’ information on social media, as this will be viewed as publications and consequently enjoy no protection under this Act.

The Act is available online and it is suggested that if anyone wishes to get clarification on any definitions or provisions, to read through the Act and, if necessary, approach a legal specialist for any assistance.

Opinion article  by Francois Quintin Cilliers, lecturer in the Department of Mercantile Law at the University of the Free State and Attorney of the High Court of South Africa.

 


News Archive

Media: ANC can learn a lesson from Moshoeshoe
2006-05-20


27/05/2006 20:32 - (SA) 
ANC can learn a lesson from Moshoeshoe
ON 2004, the University of the Free State turned 100 years old. As part of its centenary celebrations, the idea of the Moshoeshoe Memorial Lecture was mooted as part of another idea: to promote the study of the meaning of Moshoeshoe.

This lecture comes at a critical point in South Africa's still-new democracy. There are indications that the value of public engagement that Moshoeshoe prized highly through his lipitso [community gatherings], and now also a prized feature in our democracy, may be under serious threat. It is for this reason that I would like to dedicate this lecture to all those in our country and elsewhere who daily or weekly, or however frequently, have had the courage to express their considered opinions on pressing matters facing our society. They may be columnists, editors, commentators, artists of all kinds, academics and writers of letters to the editor, non-violent protesters with their placards and cartoonists who put a mirror in front of our eyes.

There is a remarkable story of how Moshoeshoe dealt with Mzilikazi, the aggressor who attacked Thaba Bosiu and failed. So when Mzilikazi retreated from Thaba Bosiu with a bruised ego after failing to take over the mountain, Moshoeshoe, in an unexpected turn of events, sent him cattle to return home bruised but grateful for the generosity of a victorious target of his aggression. At least he would not starve along the way. It was a devastating act of magnanimity which signalled a phenomenal role change.

"If only you had asked," Moshoeshoe seemed to be saying, "I could have given you some cattle. Have them anyway."

It was impossible for Mzilikazi not to have felt ashamed. At the same time, he could still present himself to his people as one who was so feared that even in defeat he was given cattle. At any rate, he never returned.

I look at our situation in South Africa and find that the wisdom of Moshoeshoe's method produced one of the defining moments that led to South Africa's momentous transition to democracy. Part of Nelson Mandela's legacy is precisely this: what I have called counter-intuitive leadership and the immense possibilities it offers for re-imagining whole societies.

A number of events in the past 12 months have made me wonder whether we are faced with a new situation that may have arisen. An increasing number of highly intelligent, sensitive and highly committed South Africans across the class, racial and cultural spectrum confess to feeling uncertain and vulnerable as never before since 1994. When indomitable optimists confess to having a sense of things unhinging, the misery of anxiety spreads. It must have something to do with an accumulation of events that convey the sense of impending implosion. It is the sense that events are spiralling out of control and no one among the leadership of the country seems to have a handle on things.

I should mention the one event that has dominated the national scene continuously for many months now. It is, of course, the trying events around the recent trial and acquittal of Jacob Zuma. The aftermath continues to dominate the news and public discourse. What, really, have we learnt or are learning from it all? It is probably too early to tell. Yet the drama seems far from over, promising to keep us all without relief, and in a state of anguish. It seems poised to reveal more faultlines in our national life than answers and solutions.

We need a mechanism that will affirm the different positions of the contestants validating their honesty in a way that will give the public confidence that real solutions are possible. It is this kind of openness, which never comes easily, that leads to breakthrough solutions, of the kind Moshoeshoe's wisdom symbolises.

Who will take this courageous step? What is clear is that a complex democracy like South Africa's cannot survive a single authority. Only multiple authorities within a constitutional framework have a real chance. I want to press this matter further.

Could it be that part of the problem is that we are unable to deal with the notion of "opposition". We are horrified that any of us could become "the opposition". In reality, it is time we began to anticipate the arrival of a moment when there was no longer a single [overwhelmingly] dominant political force as is currently the case. Such is the course of change. The measure of the maturity of the current political environment will be in how it can create conditions that anticipate that moment rather than ones that seek to prevent it. This is the formidable challenge of a popular post-apartheid political movement.

Can it conceptually anticipate a future when it is no longer overwhelmingly in control, in the form in which it currently is and resist, counter-intuitively, the temptation to prevent such an eventuality? Successfully resisting such an option would enable its current vision and its ultimate legacy to our country to manifest itself in different articulations of itself, which then contend for social influence.

In this way, the vision never really dies, it simply evolves into higher, more complex forms of itself. If the resulting versions are what is called "the opposition" that should not be such a bad thing - unless we want to invent another name for it. The image of flying ants going off to start other similar settlements is not so inappropriate.

I do not wish to suggest that the nuptial flights of the alliance partners are about to occur: only that it is a mark of leadership foresight to anticipate them conceptually. Any political movement that has visions of itself as a perpetual entity should look at the compelling evidence of history. Few have survived those defining moments when they should have been more elastic, and that because they were not, did not live to see the next day.

I believe we may have reached a moment not fundamentally different from the sobering, yet uplifting and vision-making, nation-building realities that led to Kempton Park in the early 1990s. The difference between then and now is that the black majority is not facing white compatriots across the negotiating table. Rather, it is facing itself: perhaps really for the first time since 1994. It is not a time for repeating old platitudes. Could we apply to ourselves the same degree of inventiveness and rigorous negotiation we displayed up to the adoption or our Constitution?

Morena Moshoeshoe faced similarly formative challenges. He seems to have been a great listener. No problem was too insignificant that it could not be addressed. He seems to have networked actively across the spectrum of society. He seems to have kept a close eye on the world beyond Lesotho, forming strong friendships and alliances, weighing his options constantly. He seems to have had patience and forbearance. He had tons of data before him before he could propose the unexpected. He tells us across the years that moments of renewal demand no less.

  • This is an editied version of the inaugural Moshoeshoe Memorial Lecture presented by Univeristy of Cape Town vice-chancellor Professor Ndebele at the University of the Free State on Thursday. Perspectives on Leadership Challenges In South Africa

 

We use cookies to make interactions with our websites and services easy and meaningful. To better understand how they are used, read more about the UFS cookie policy. By continuing to use this site you are giving us your consent to do this.

Accept