Access and Correction of Personal Information

Understanding Your Right to Access and Correct Personal Data

Access and Correction of Personal Information is an important right under South Africa’s Protection of Personal Information Act (POPIA). This right allows individuals, known as data subjects, to see what personal information organisations hold about them. It also lets them ask for any incorrect or incomplete information to be fixed.

Why is this important? When you know what data companies or government bodies keep about you, you can ensure it is accurate and up to date. This helps protect your privacy and prevents misuse of your information.

How to Access Your Personal Information

If you want to see your personal data held by an organisation, you need to make a request. This request can be verbal or in writing, but it’s better to do it in writing to keep a record. The organisation must respond within a reasonable time, usually within one month under POPIA.

You should receive a copy of the personal information they hold, except if releasing it breaks confidentiality or affects the rights of others.

How to Request Correction of Your Information

If you find that your personal information is wrong, incomplete, or outdated, you can ask the organisation to correct it. This can include fixing spelling errors, updating your contact details, or removing data that no longer applies to you.

The organisation must take your correction request seriously and make the necessary changes. They should also let any third parties who received your incorrect data know about the correction, if possible.

Steps to Take When Requesting Access or Correction

1. Identify the organisation that holds your data, such as a bank, employer, or service provider.
2. Submit a written request either via email, letter, or an online form if available.
3. Include enough details to identify yourself and the specific information you want to access or correct.
4. Keep a copy of your request and any responses for your records.
5. If the organisation denies your request, ask for reasons and check if you can appeal or complain to the Information Regulator.

Remember, organisations must protect your personal information and respect your rights under POPIA. If they fail to comply with access or correction requests, you can report them to the Information Regulator for investigation.

By exercising your right to Access and Correction of Personal Information, you take control of how your data is used and ensure it reflects the truth. This builds trust between you and the organisations that handle your personal information.