The right to privacy is a constitutional and common law right in South Africa. The Protection of Personal Information Act (POPIA) Act recognises that right and regulates the processing of personal information. POPIA makes provisions for regulation of direct marketing, automated decision making and processing of cross-border flows of information. It covers eight principles (Michalsons): · Personal information must be obtained in a lawful and fair manner. · Information can only be used for the specified purpose it was originally obtained for. · Further processing of personal information is prohibited except if the subject agrees. · The person who processes the information must ensure the quality of the information. · The person processing personal information should be transparent. · There must be proper security measures to safeguard against loss, damage, destruction, and the unauthorised or unlawful access or processing of the ...