South Africa's privacy framework. Connected to your programme.

• Governance1 control to evidence
• Principles3 controls to evidence
• Lawfulness1 control to evidence
• Retention1 control to evidence
• Records1 control to evidence
• Transparency1 control to evidence
• Security1 control to evidence
• Third parties1 control to evidence
• Incidents1 control to evidence
• Rights1 control to evidence
• Special categories2 controls to evidence
• Risk2 controls to evidence
• Marketing1 control to evidence
• Transfers1 control to evidence

• ZA-001 · Sections 55 and 56

  Register the Information Officer

  The head of the responsible party is its Information Officer unless the duty is delegated. Register the Information Officer, and any deputies, with the Information Regulator before they take up their duties.

• ZA-002 · Section 8

  Assign accountability for the conditions of lawful processing

  The responsible party must ensure the conditions for lawful processing are complied with, from deciding the purpose through to the processing itself.

• ZA-003 · Sections 9 to 11

  Process lawfully, minimally and on a justification

  Process personal information lawfully and only where it is adequate, relevant and not excessive, on consent or another justification in Section 11, respecting objections.

Three are shown here; the full set, with tasks and evidence guidance, is in hlola.Pending review by counsel.