Section 14 of the Constitution of the Republic of South Africa, 1996, provides that everyone has the right to privacy. POPI further determines that the right to privacy includes a right to protection against the unlawful collection, retention, dissemination and use of personal information.
According to section 18 of the Act, if personal information (“PI”) is collected, the Responsible Party must take reasonably practicable steps to ensure that the Data Subject is made aware of the information being collected and where the information is not collected from the Data Subject, the source from which it is collected, subject to certain exceptions, including those where the collection of information is required for a contractual or legal purpose and/or is required for the purpose of protecting the legitimate interests of the Responsible Party.
Engigo Securitys as a Responsible Party has a legal duty to get permission to use any PI owned by a “Data Subject, unless this PI is required as a result of a legal duty or obligation imposed on the Responsible Party, or such PI is required for a contractual or legal purpose and/or is required for the purpose of protecting the legitimate interests of Engigo Securitys or the Data Subject.
In terms of Section 18 of POPI, Engigo Security is obliged to provide the Data Subject with the following information, when collecting personal information from the Data Subject:
>