What personal information you are collecting
It is important to inform the data subject what personal information of theirs you are collecting and processing, and whether you are collecting that information directly from them or from another source. The definition of personal information has a very broad ambit, and in South Africa, personal information includes information of both individuals and juristic persons. Personal information includes, amongst others, name, identity or registration number, contact details, IP addresses and cookies, payment information, views and opinions and children’s or special (such as medical information and fingerprints) personal information.
Why you are collecting and processing the personal information
The data subject must be informed for what purpose you are collecting the information – for example, identifying and contact information to create and manage an account with the data subject, address to deliver the goods that the data subject is ordering, consent records for purposes of sending marketing communications, etc.
The responsible party also needs to inform the data subject whether the information that is being supplied is being provided voluntarily or whether it is mandatory to provide that information, and what the consequences are for not providing the information.
Disclosure of personal information
ALSO READ: Apply for community media funding
Data subject rights
The responsible party will also need to inform the data subject about his/her/its rights in respect of the personal information. These rights include the right to object to or restrict processing, right to erasure of personal information, right to request that information is corrected or updated and to request access to the personal information held by the responsible party.
Written by Jessica Paterson
This article was originally published by Dommisse Attorney’s Inc