The Protection of Personal Information Act (“POPIA”) contains provisions that regulate ‘prior authorisation’, and specifically the circumstances in which a school will be obliged to apply to the Information Regulator (IR) for prior authorisation.
On 11 March 2021, the IR issued a Guidance Note to parties who are currently processing or intend to process personal information which is subject to prior authorisation in terms of POPIA. That Guidance Note also sets out how to complete the application form.
The ISASA Legal and Policy Department has compiled a memorandum that analyses this issue in more detail. A copy of the memo is available for download below. The Guidance Note is also available for download.
