Protection of Personal Information Act, 2013 (Act No. 4 of 2013)
Chapter 3 : Conditions for Lawful Processing of Personal Information
Part A : Processing of personal information in general
Condition 7 : Security safeguards
21. Security measures regarding information processed by operator
|(1)||A responsible party must, in terms of a written contract between the responsible party and the operator, ensure that the operator which processes personal information for the responsible party establishes and maintains the security measures referred to in section 19.|
|(2)||The operator must notify the responsible party immediately where there are reasonable grounds to believe that the personal information of a data subject has been accessed or acquired by any unauthorised person.|
Join our mailing list!