South African Cyber Law
Data-Subject Rights
POPIA gives data subjects a range of rights concerning personal information held or processed about them.
Access
POPIA provides a right of access to personal information in the circumstances and subject to the requirements set out in the Act.
Access rights are not unlimited. Other legal provisions can affect whether and how information must be disclosed.
Correction and deletion
A data subject can request correction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained, subject to the Act’s requirements.
The existence of a right does not mean that every request must automatically be granted in every circumstance.
Objecting to processing
POPIA provides mechanisms through which a data subject may object to certain processing, subject to the grounds and limitations in the Act.
Direct marketing has additional rules under POPIA.
Complaints
A person who believes their rights have been infringed can use the complaint mechanisms provided by POPIA and the Information Regulator.
Keep copies of requests, responses, dates and relevant records when pursuing a privacy complaint.
Official source
Read the official legislation from the South African government:
Protection of Personal Information Act 4 of 2013 — South African Department of JusticeImportant
Cyber Conduct provides general educational information, not legal advice. South African legislation can change, and the application of the law depends on the facts of each situation. For a specific legal matter, consider obtaining advice from a qualified legal professional or the relevant authority.