The POPI Act Explained - Pdf

The Protection of Personal Information Act No. 4 of 2013 (“POPI”) An Employment Law Perspective CONTENTS 1. AN INTRODUCTION TO POPI: AN OVERVIEW 1.1 Data protection – An international trend 1.2 POPI – The assent and proclamation 1.3 Purpose of the Act 1.4 Definitions 1.5 A summary of the act 2. APPLICATION OF POPI 3. RIGHTS OF DATA SUBJECTS 4. CONDITIONS OF LAWFUL PROCESSING 4.1 Condition 1: Accountability 4.2 Condition 2: Processing limitations 4.3 Condition 3: Purpose specification 4.4 Condition 4: Further process limitation 4.5 Condition 5: Information quality 4.6 Condition 6: Openness 4.7 Condition 7: Security safeguards 4.8 Condition 8: Data subject participation 5. PROCESSING ‘SPECIAL’ PERSONAL INFORMATION 5.1 What is “special” PI? 5.2 Specific exclusions Section 28 – 33 of POPI: 5.2.1 Authorisation concerning data subject’s religious or philosophical beliefs 5.2.2 Authorisation concerning data subject’s race or ethnic origin 5.2.3 Authorisation concerning data subject’s trade union membership 5.2.4 Authorisation concerning data subject’s political persuasion 5.2.5 Authorisation concerning data subject’s health or sex life 5.2.6 Authorisation concerning data subject’s criminal behaviour or biometric information