To encourage compliance, by the body, with the information protection principles; Deal with requests made to the body pursuant to this Act by the data subjects; Work with the Regulator in relation to investigations conducted; and Ensuring compliance by the body with the provisions of this Act. Every organisation must have an Information Protection Officer. Officers may only take up their duties in terms of the POPI Act after the responsible party (Information Protection Officer) has been registered with the Regulator. Personal Information that is processed in a fully or partly automated manner may only be processed if the Responsible Party has notified the Regulator in the prescribed manner, in advance. Failure to notify is an offence. The processing of Personal Information for the purpose of direct marketing by means of automatic calling machines, facsimile machines, SMS’s or electronic mail is prohibited unless the Data Subject has given consent to the processing, or the Data Subject is a customer of the responsible party (subject to conditions). Any communication for the purpose of direct marketing (such as spam mail) must contain details of the identity of the sender or the person on whose behalf the communication has been sent, and an address or other contact details to which the recipient may send a request that such communications cease. Marketing communications may be sent to customers only if their details were obtained in the context of the sale of goods or services. Only the goods or services of the same company may be advertised in this manner in – other words, marketers may not forward personal details to associated companies or sell such databases. Any marketing communication must clearly indicate the identity of the sender and give an “unsubscribe” address. Prior to the publication or use of directories, all those included in the directory should be informed of their inclusion and the intended purpose and use of the directory. Individuals must also be given a reasonable opportunity to object to their inclusion in the directory and request the withdrawal of their information. POPI contains a complaints procedure whereby any person may lodge a complaint with the regulator against any company or organisation relating to unsolicited communications, directories and automated The regulator will have extensive powers of investigation including: The right to apply to a court for a warrant to enter and search premises; The right to bring a claim for damages; The right to issue enforcement notices.
To encourage compliance, by the body, with the information protection principles; Deal with requests made to the body pursuant to this Act by the data subjects; Work with the Regulator in relation to investigations conducted; and Ensuring compliance by the body with the provisions of this Act. Every organisation must have an Information Protection Officer. Officers may only take up their duties in terms of the POPI Act after the responsible party (Information Protection Officer) has been registered with the Regulator. Personal Information that is processed in a fully or partly automated manner may only be processed if the Responsible Party has notified the Regulator in the prescribed manner, in advance. Failure to notify is an offence. The processing of Personal Information for the purpose of direct marketing by means of automatic calling machines, facsimile machines, SMS’s or electronic mail is prohibited unless the Data Subject has given consent to the processing, or the Data Subject is a customer of the responsible party (subject to conditions). Any communication for the purpose of direct marketing (such as spam mail) must contain details of the identity of the sender or the person on whose behalf the communication has been sent, and an address or other contact details to which the recipient may send a request that such communications cease. Marketing communications may be sent to customers only if their details were obtained in the context of the sale of goods or services. Only the goods or services of the same company may be advertised in this manner – in other words, marketers may not forward personal details to associated companies or sell such databases. Any marketing communication must clearly indicate the identity of the sender and give an “unsubscribe” address. Prior to the publication or use of directories, all those included in the directory should be informed of their inclusion and the intended purpose and use of the directory. Individuals must also be given a reasonable opportunity to object to their inclusion in the directory and request the withdrawal of their information. POPI contains a complaints procedure whereby any person may lodge a complaint with the regulator against any company or organisation relating to unsolicited communications, directories and automated The regulator will have extensive powers of investigation including: The right to apply to a court for a warrant to enter and search premises; The right to bring a claim for damages; The right to issue enforcement notices.