This section protects users by ensuring that personal data is only processed lawfully, reasonably, and on a valid legal basis, such as consent, contractual necessity, legal obligation, public interest, or legitimate interest.
Section 1: Legal Basis and Original Legal Text
Related Law: Protection of Personal Information Act, POPIA
Relevant legal provisions:
This section is based on POPIA Section 9, Section 11(1), and Section 11(3).
Original legal text:
βPersonal information must be processed lawfully and in a reasonable manner that does not infringe the privacy of the data subject.β POPIA, Section 9.
βPersonal information may only be processed ifβ (a) the data subject or a competent person where the data subject is a child consents to the processing; (b) processing is necessary to carry out actions for the conclusion or performance of a contract to which the data subject is party; (c) processing complies with an obligation imposed by law on the responsible party; (d) processing protects a legitimate interest of the data subject; (e) processing is necessary for the proper performance of a public law duty by a public body; or (f) processing is necessary for pursuing the legitimate interests of the responsible party or of a third party to whom the information is supplied.β POPIA, Section 11(1).
βA data subject may, on reasonable grounds relating to his, her or its particular situation, object at any time to the processing of personal informationβ(a) in terms of section 11(1)(d) to (f).β POPIA, Section 11(3).
Section 2: Compliance Assessment Checklist
This section explains how Data for Change assesses whether its AI voice survey practices comply with the requirement of having a lawful basis for processing personal data.
Legal Basis for Processing
Personal data is processed on the following legal basis:
β Consent β Contract β Legal obligation β Protection of data subjectβs interests β Public law duty for public bodies β Legitimate interests β Other: [specify]
Consent Mechanism
We obtain consent through:
β Written or digital consent β Checkbox opt-in β Verbal consent β Other: [specify]
Consent is:
β Explicit β Implied β Users can withdraw consent at any time
Right to Object
Users are informed of their right to object to processing: