Protection of Personal Information Act, 2013 (Act No. 4 of 2013)

Chapter 3 : Conditions for Lawful Processing of Personal Information

Part A : Processing of personal information in general

Condition 7 : Security safeguards

21. Security measures regarding information processed by operator
Purchase cart Previous page Return to chapter overview Next page

 

(1)A responsible party must, in terms of a written contract between the responsible party and the operator, ensure that the operator which processes personal information for the responsible party establishes and maintains the security measures referred to in section 19.

 

(2)The operator must notify the responsible party immediately where there are reasonable grounds to believe that the personal information of a data subject has been accessed or acquired by any unauthorised person.