PROCESSING OF PERSONAL INFORMATION IN GENERAL: Accountability: Responsible party to ensure conditions for lawful processing
The responsible party must ensure that the conditions set out in this Chapter...
The responsible party must ensure that the conditions set out in this Chapter...
Personal information must be processed...
Personal information may only be processed if, given the purpose for which it is processed, it is adequate, relevant and not excessive...
Personal information may only be processed if...
Personal information must be collected directly from the data subject, except as otherwise provided for in subsection (2)...
Personal information must be collected for a specific, explicitly defined and lawful purpose related to a function or activity of the responsible party...
Subject to subsections (2) and (3), records of personal information must not be retained any longer than is necessary for achieving the purpose for which the information was collected...
Further processing of personal information must be in accordance or compatible with the purpose for which it was collected in terms of section 13...
A responsible party must take reasonably practicable steps to ensure that the personal information is complete, accurate, not misleading and updated where necessary...
A responsible party must maintain the documentation of all processing operations under its responsibility as referred to in section 14 or 51 of the Promotion of Access to Information Act...
If personal information is collected, the responsible party must take reasonably practicable steps to ensure that the data subject is aware of...
A responsible party must secure the integrity and confidentiality of personal information in its possession or under its control by taking appropriate, reasonable technical and organisational measures to prevent...
An operator or anyone processing personal information on behalf of a responsible party or an operator, must...
A responsible party must, in terms of a written contract between the responsible party and the operator...
Where there are reasonable grounds to believe that the personal information of a data subject has been accessed or acquired by any unauthorised person, the responsible party must notify...
A data subject, having provided adequate proof of identity, has the right to...
A data subject may, in the prescribed manner, request a responsible party to...
The provisions of sections 18 and 53 of the Promotion of Access to Information Act apply to requests made in terms of section 23 of this Act...