| (1) | The National Commissioner must secure the integrity of information on the database provided for in this Chapter by taking appropriate, reasonable technical and organisational measures to prevent— |
| (a) | loss of, damage to or unauthorised destruction of information on the database; and |
| (b) | unlawful access to or processing of information on the database. |
| (2) | In order to give effect to subsection (1), the National Commissioner must take reasonable measures to— |
| (a) | identify all reasonable foreseeable internal and external risks to information on the database under his or her control; |
| (b) | establish and maintain appropriate safeguards against the risks identified; |
| (c) | regularly verify that the safeguards are effectively implemented; and |
| (d) | ensure that the safeguards are continually updated in response to new risks or deficiencies in previously implemented safeguards. |
| (3) | The National Commissioner must have due regard to generally accepted information security practices and procedures which may apply to the Service generally or be required in terms of specific laws and regulations relating to security of information applicable to the Service. |
| (4) | The National Commissioner and the Directors-General of the Departments of Transport, Home Affairs and Correctional Services must, under the chairpersonship of the National Commissioner, within six months of the commencement of this section develop standard operating procedures regarding— |
| (a) | access to the databases; and |
| (b) | the implementation of safety measures to protect the integrity of information contained on the relevant databases. |
| (5) | Other databases may only be accessed in terms of standard operating procedures referred to in subsection (4). |
[Section 15D inserted by section 6 of Act No. 6 of 2010]
