The Regulations comprise a number of prescribed forms as
annexures. These include forms which may be used by the data
subject to lodge an objection to processing of personal information
to the responsible party; to correct or delete personal information
as held by the responsible party and to submit a complaint to the
Regulator.
There is also a prescribed form setting out an application for
the consent of a data subject for the processing of personal
information for the purpose of direct marketing.
The Regulations also stipulate the obligations of the
information officer, which include:
ensuring a compliance framework and adequate measures to comply
with the conditions for the lawful processing of personal
information and updating the manual published in terms of the
Promotion of Access to Information Act to address various aspects
of processing in terms of POPI.
