Has POPIA Finally Been Given A Set Of Teeth?

SI
SchoemanLaw Inc.

Contributor

SchoemanLaw Inc. logo
SchoemanLaw Inc Attorneys, Conveyancers and Notaries Public, based in Cape Town, is a boutique law firm offering its clients access to high quality online legal documents and agreements, together with a wide range of legal services. The firm has an innovative and entrepreneurial mind-set that distinguishes it from other law firms. We apply our first-hand understanding of the challenges facing entrepreneurs (regardless of their business size) to develop proven, practical solutions incorporating legal compliance, risk aversion and business sense. We achieve this by offering clients tailored, yet holistic support comprising of legal gap analysis, the construction of tailored legal solutions and the practical implementation thereof through training and automation.
Many critics have noticed a trend in court decisions not to invoke POPIA, or the Protection of Personal Information Act 4 of 2013, as amended, in its reasoning toward judgments.
South Africa Privacy
To print this article, all you need is to be registered or login on Mondaq.com.

Many critics have noticed a trend in court decisions not to invoke POPIA, or the Protection of Personal Information Act 4 of 2013, as amended, in its reasoning toward judgments. For example, even the recent order to publish Matric results in the media lacked judgment and could have been an opportunity to apply POPIA. Instead, the courts have relied on the constitutional right to privacy, weighing them against other rights as the context requires.

What Does This Mean For Us?

Individuals and companies, as either data subjects or responsible parties, have yet to see how the Act will be interpreted in South Africa. It appears that judgments making use of POPIA are likely to follow from complaints brought to the Information Regulator using the Act's own complaints procedure. The Information Regulator published a set of rules a complainant ought to follow in October 2021. This makes it possible to lodge complaints with the official data protection government body, and this year will likely see a POPIA driven judgment.

The Law

Section 74 of POPIA under Chapter 10 Enforcement, allows for two circumstances under which a complaint may be brought;

  1. Any party may allege interference with the protection of a data subject's personal information, or
  2. Either a data subject or responsible party may report their grievance with an adjudicator's decision.

Whilst the Act seems to invite all complaints, the Regulator's rules detail who may complain, how they should do so, and where to submit their complaint.

Conclusion

If you or someone you care about has had their personal information dealt with carelessly, you may have grounds to lodge a complaint with the Information Regulator.

Similarly, if you are a data subject or a responsible party processing personal information and you disagree with the decision made by an adjudicator, you have the right to contact the Information Regulator.

Originally published 12 April 2022

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See More Popular Content From

Mondaq uses cookies on this website. By using our website you agree to our use of cookies as set out in our Privacy Policy.

Learn More