| Condition | Meaning |
|---|---|
| Accountability | The responsible party must comply, not just intend to |
| Processing limitation | Collect only what is necessary, with a lawful basis |
| Purpose specification | Collect for a stated purpose |
| Further processing limitation | Do not reuse it for something unrelated |
| Information quality | Keep it accurate and current |
| Openness | Tell the person what you hold and why |
| Security safeguards | Protect it, and report breaches |
| Data subject participation | Let the person see and correct it |
| Right | How to use it |
|---|---|
| Be told what is held | Request access from the information officer |
| Correct or delete | Request correction of inaccurate data |
| Object to processing | Where the basis is legitimate interest |
| Opt out of direct marketing | At any time, free of charge |
| Complain | To the Information Regulator |
| Compensation | Through a civil claim |
| Situation | Which applies |
|---|---|
| A broker must keep your ID for five years | FICA requires it, POPIA permits it |
| A broker wants to market to you | POPIA, consent required |
| You ask for your data to be deleted | FICA retention overrides during the period |
| A breach exposes client records | POPIA, report to the Regulator and the people affected |
| Sharing data with a group company abroad | POPIA, cross-border transfer rules apply |
Data maintained by TradeAnswers · updated as the figures change