POPIA Statement (also refer to Data Protection Policy)
Addendum: POPIA Compliance Statement
This addendum forms part of the Prime Investments Data Protection Policy and affirms the organisation’s commitment to complying with the Protection of Personal Information Act (POPIA), Act 4 of 2013.
- Purpose
This addendum outlines the principles and legal basis for processing personal information as required by POPIA, and supplements existing internal controls defined in the organisation’s Data Protection Policy.
- POPIA Compliance
Prime Investments undertakes to ensure that all personal information is processed lawfully and in line with the eight conditions for the lawful processing of personal information as set out in POPIA:
- Accountability: A designated Information Officer is responsible for ensuring compliance.
- Processing Limitation: Personal information is collected directly and with data subject consent.
- Purpose Specification: Information is collected for specific, explicitly defined and lawful purposes.
- Further Processing Limitation: Further processing is compatible with the original purpose.
- Information Quality: Reasonable steps are taken to ensure information is complete, accurate, and up to date.
- Openness: Data subjects are informed when their information is collected and why.
- Security Safeguards: Appropriate, reasonable safeguards are in place to protect data from loss, damage, or unauthorised access.
- Data Subject Participation: Data subjects have the right to access and correct their personal information.
- Contact and Oversight
For any questions related to this addendum or your personal information, you may contact our designated Information Officer at: +27(0)10 594 2100