Protection of personal information Act No 4 of 2013
The Act promotes the protection of personal information processed by public and private bodies; introduces certain conditions so as to establish minimum requirements for the processing of personal information; provides for the establishment of an Information Regulator to exercise certain powers and to perform certain duties and functions in terms of this Act and the Promotion of Access to Information Act, 2000; provides for the issuing of codes of conduct; provides for the rights of persons regarding unsolicited electronic communications and automated decision making; etc.
The Data Protection Act of 2012 establishes a Data Protection Commission, to protect the privacy of the individual and personal data by regulating the processing of personal information, to provide the process to obtain, hold, use or disclose personal information and for related matters.