AZAPO Logo

Menu

POPIA Compliance

Our commitment to protecting personal information in accordance with the Protection of Personal Information Act (POPIA)

What is POPIA?

The Protection of Personal Information Act (POPIA) is South Africa's data protection law that came into effect on July 1, 2021. POPIA regulates how organizations collect, process, store, and share personal information.

AZAPO is fully committed to compliance with POPIA and ensuring the protection of our members' personal information.

Our POPIA Compliance Framework

We have implemented comprehensive measures to ensure POPIA compliance:

1. Lawful Processing

We only process personal information when we have a lawful basis, such as consent, contractual necessity, or legal obligation.

2. Purpose Limitation

Personal information is collected only for specified, explicit, and legitimate purposes related to membership management and organizational activities.

3. Data Minimization

We collect only the minimum amount of personal information necessary to fulfill the intended purpose.

4. Accuracy

We take reasonable steps to ensure that personal information is accurate, complete, and up-to-date. Members can update their information at any time.

5. Storage Limitation

Personal information is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

6. Security Safeguards

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, loss, or destruction.

7. Accountability

We maintain records of all processing activities and have designated a responsible person to oversee POPIA compliance.

Your Rights Under POPIA

As a data subject, you have the following rights:

  • Right of Access: Request access to your personal information
  • Right to Rectification: Correct inaccurate or incomplete information
  • Right to Erasure: Request deletion of your personal information (subject to legal requirements)
  • Right to Restrict Processing: Request limitation of processing in certain circumstances
  • Right to Object: Object to processing of your personal information
  • Right to Data Portability: Receive your data in a structured, commonly used format
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
  • Right to Lodge a Complaint: File a complaint with the Information Regulator

Consent Management

When you become a member of AZAPO, we obtain your explicit consent for processing your personal information. This consent is:

  • Freely given and specific
  • Informed and unambiguous
  • Recorded and auditable
  • Easily withdrawable

You can withdraw your consent at any time by contacting us at info@azapo.org.za.

Data Breach Procedures

In the unlikely event of a data breach that may compromise your personal information, we will:

  • Immediately investigate and contain the breach
  • Notify the Information Regulator within 72 hours if required
  • Notify affected individuals without undue delay
  • Take remedial action to prevent future breaches

Third-Party Processors

We may engage third-party service providers to assist with our operations. All such providers are:

  • Contractually bound to protect your personal information
  • Required to comply with POPIA
  • Subject to regular security audits
  • Limited to processing data only for specified purposes

Contact Our Information Officer

For any POPIA-related inquiries or to exercise your rights, please contact our Information Officer:

AZAPO Information Officer

Email: info@azapo.org.za

Phone: 060 677 4257 or (065) 899 4566

Address: Johannesburg, South Africa

Information Regulator

If you are not satisfied with how we handle your personal information, you have the right to lodge a complaint with the Information Regulator:

Information Regulator of South Africa

Website: www.justice.gov.za/inforeg/

Email: inforeg@justice.gov.za

Last Updated: March 23, 2026