Protection of personal information Act No 4 of 2013
The Act promotes the protection of personal information processed by public and private bodies; introduces certain conditions so as to establish minimum requirements for the processing of personal information; provides for the establishment of an Information Regulator to exercise certain powers and to perform certain duties and functions in terms of this Act and the Promotion of Access to Information Act, 2000; provides for the issuing of codes of conduct; provides for the rights of persons regarding unsolicited electronic communications and automated decision making; etc.
The Act establishes the Data Protection Commission, provide for principles for regulation of processing of personal information in order to protect and reconcile the fundamental and competing values of personal information privacy under this Act and sector-specific legislation and other related matters.