Protection of Personal Information (POPI) Policy
1. Introduction
1.1. This Protection of Personal Information (POPI) Policy is established to ensure compliance with the Protection of Personal Information Act, 2013 (Act No. 4 of 2013) (“POPIA”) and to uphold the privacy and confidentiality of personal information processed by APCC.
2. Scope
2.1. This policy applies to all personal information processed by APCC in the course of its activities, including but not limited to information related to employees, donors, beneficiaries, and any other stakeholders.
3. Principles of POPIA Compliance
3.1. Accountability
3.1.1. APCC shall designate a Data Protection Officer responsible for overseeing and ensuring compliance with POPIA.
3.2. Processing Limitation
3.2.1. Personal information shall only be processed for legitimate and specified purposes.
3.3. Purpose Specification
3.3.1. APCC shall clearly communicate the purpose of collecting personal information to the data subject.
3.4. Data Minimization
3.4.1. Only the minimum necessary personal information required for the intended purpose shall be collected.
3.5. Integrity and Confidentiality
3.5.1. Measures shall be implemented to ensure the integrity and confidentiality of personal information.
3.6. Data Subject Participation
3.6.1. Data subjects have the right to access, correct, or request the deletion of their personal information.
3.7. Security Safeguards
3.7.1. APCC shall implement appropriate technical and organizational measures to protect personal information from unauthorized access, disclosure, alteration, and destruction.
4. Processing of Personal Information
4.1. Personal information may only be processed with the explicit consent of the data subject or as otherwise permitted by POPIA.
4.2. APCC shall inform data subjects of the purpose and scope of the processing and obtain their consent before processing their personal information.
4.3. Personal information shall not be retained longer than necessary for the purpose for which it was collected.
Promotion of Access to Information Act (PAIA) Policy
5. Introduction
5.1. This Promotion of Access to Information Act (PAIA) Policy is established to facilitate access to information held by APCC in accordance with the Promotion of Access to Information Act, 2000 (Act No. 2 of 2000) (“PAIA”).
5.2. Right of Access to Information
5.2.1. APCC recognizes the public’s right of access to information and is committed to providing access to records in compliance with PAIA.
5.2.2. Requests for access to information must be made in accordance with the procedures outlined in PAIA and shall be directed to the Information Officer appointed by APCC.
5.2.3. APCC may charge a reasonable fee for access to information as allowed by PAIA.
6. Information Officer
6.1. APCC shall appoint an Information Officer responsible for receiving and processing requests for access to information.
6.2. The contact details of the Information Officer shall be made publicly available.
7. Review and Amendments
7.1. This POPI and PAIA Policy shall be reviewed regularly to ensure ongoing compliance with applicable legislation.