Protection of Personal Information Act, 2013
R 385.00
"operator"
means a person who processes personal information for a responsible party in terms of a contract or mandate, without coming under the direct authority of that party;