South Africa: Adopted guidance note on the processing of special personal information requiring data governance regulation

The guidance note on the processing of special personal information is adopted by the Information Regulator of South Africa, establishing a guideline for responsible parties who are required to obtain authorisation from the Regulator to process special personal information, as provided for in section 27(2) of the Protection of Personal Information Act ('POPIA'). Referring to the POPIA, the guidance note gives a short overview about the requirements, which have to be met in order to get an authorization to process special personal information. Additionally, the authorization application procedure is described.