Section 18 notice
Customers should know why DataRights collects information, what it is used for, and who may process it. See the Privacy Policy.
POPIA
How DataRights supports POPIA privacy requests
POPIA gives South Africans rights over personal information. DataRights helps customers use those rights in a structured, auditable way.
The practical POPIA rights DataRights supports
POPIA gives data subjects several rights, including rights to know what personal information is held, request correction or deletion where available, object to certain processing, and complain to the Information Regulator. DataRights focuses on the operational steps customers can take with data holders and brokers.
Section 24 requests
DataRights helps prepare and submit deletion or correction requests where POPIA permits and where the request can be supported by the available details.
Section 74 escalation
Where a response is overdue or unreasonable, DataRights can help prepare escalation material for the Information Regulator where appropriate.
Consent and authorisation
DataRights separates service authorisation, POPIA processing consent, and marketing consent. A customer must authorise DataRights before DataRights can submit requests on that customer's behalf.
How a DataRights request moves
- Scan results identify likely exposure categories and covered data holders.
- Authorised requests are prepared and sent only where the workflow supports it.
- Responses are tracked as pending, acknowledged, refused, overdue, escalated, or confirmed.
- Escalation material is prepared where appropriate, but the final decision remains with the data holder or regulator.
What happens after a request is sent
- The request is tracked with a reference and date sent.
- The dashboard shows whether the request is pending, acknowledged, refused, overdue, escalated, or confirmed.
- If a data holder refuses, the reason should be recorded where provided.
- DataRights marks deletion as confirmed only when there is a documented basis for that status.
Important limits
POPIA does not mean every organisation must delete every record in every case. Some records may be retained under a legal duty, contract, fraud-prevention requirement, credit-reporting rule, or another lawful basis. DataRights explains those limits instead of promising outcomes it cannot control.
Information Officer contact for DataRights privacy matters: privacy@datarights.co.za.
Want to see where to start?
Read the guide to POPIA data rights in South Africa, or start with a free scan.