South Africa: Information Regulator announces receipt of banking code of conduct and invites comments
Description
Information Regulator announces receipt of banking code of conduct and invites comments
The Information Regulator, the South African monitoring body for personal information, has opened a consultation period on the Banking Association of South Africa's (BASA) code of conduct regarding the legal processing of personal information. Under section 61 of the Protection of Personal Information Act (POPI) 2013, the Regulator may issue sector-specific codes of conduct on the processing of personal information either on its own initiative or on the application of a sector's representative body. In further accordance with section 61, the Regulator has invited comments from affected parties until 25 June 2021.
Original sourceScope
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
other service provider
Implementation Level
national
Government Branch
executive
Government Body
data protection authority
Complete timeline of this policy change
Hide details
2021-06-11
in consultation
2021-06-25
processing consultation
2022-10-12
adopted
Key regulatory dimensions
Regulated subjects
The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type
Private organisation
Economic activity
other service provider
Category
All
Policy change by business practice
The detailed activities within the scope of this policy or regulatory change.
personal data (all forms): data collection
Regulatory tool
Preventive security requirement
Responsive security requirement
Purpose/processing limitation
Definition of oversight agency jurisdiction
Sanctions
Regulated subjects
1
personal data (all forms): data processing
Regulatory tool
Preventive security requirement
Responsive security requirement
Purpose/processing limitation
Definition of oversight agency jurisdiction
Sanctions
Regulated subjects
1
personal data (all forms): storage (any form)
Regulatory tool
Preventive security requirement
Responsive security requirement
Purpose/processing limitation
Definition of oversight agency jurisdiction
Data storage/retention obligation
Sanctions
Regulated subjects
1