Protection of Personal Information Act, 2013 (Act No. 4 of 2013)

Chapter 3 : Conditions for Lawful Processing of Personal Information

Purchase

(1)	A responsible party must, in terms of a written contract between the responsible party and the operator, ensure that the operator which processes personal information for the responsible party establishes and maintains the security measures referred to in section 19.

(2)	The operator must notify the responsible party immediately where there are reasonable grounds to believe that the personal information of a data subject has been accessed or acquired by any unauthorised person.