Reproduced by Sabinet Online in terms of Government Printer’s Copyright Authority No. 10505 dated 02 February 1998
74
No. 37067
GOVERNMENT GAZETTE, 26 November 2013
Act No. 4 of 2013
Protection of Personal Information Act, 2013
74
(3) The review may inform a decision by the Regulator under section 64 to revoke the
approved code of conduct with immediate effect or at a future date to be determined by
the Regulator.
Effect of failure to comply with code of conduct
68. If a code issued under section 60 is in force, failure to comply with the code is
deemed to be a breach of the conditions for the lawful processing of personal
information referred to in Chapter 3 and is dealt with in terms of Chapter 10.
5
CHAPTER 8
RIGHTS OF DATA SUBJECTS REGARDING DIRECT MARKETING
BY MEANS OF UNSOLICITED ELECTRONIC COMMUNICATIONS,
DIRECTORIES AND AUTOMATED DECISION MAKING
10
Direct marketing by means of unsolicited electronic communications
69. (1) The processing of personal information of a data subject for the purpose of
direct marketing by means of any form of electronic communication, including
automatic calling machines, facsimile machines, SMSs or e-mail is prohibited unless the
data subject—
(a) has given his, her or its consent to the processing; or
(b) is, subject to subsection (3), a customer of the responsible party.
(2) (a) A responsible party may approach a data subject—
(i) whose consent is required in terms of subsection (1)(a); and
(ii) who has not previously withheld such consent,
only once in order to request the consent of that data subject.
(b) The data subject’s consent must be requested in the prescribed manner and form.
(3) A responsible party may only process the personal information of a data subject
who is a customer of the responsible party in terms of subsection (1)(b)—
(a) if the responsible party has obtained the contact details of the data subject in
the context of the sale of a product or service;
(b) for the purpose of direct marketing of the responsible party’s own similar
products or services; and
(c) if the data subject has been given a reasonable opportunity to object, free of
charge and in a manner free of unnecessary formality, to such use of his, her
or its electronic details—
(i) at the time when the information was collected; and
(ii) on the occasion of each communication with the data subject for the
purpose of marketing if the data subject has not initially refused such use.
(4) Any communication for the purpose of direct marketing must contain—
(a) details of the identity of the sender or the person on whose behalf the
communication has been sent; and
(b) an address or other contact details to which the recipient may send a request
that such communications cease.
(5) ‘‘Automatic calling machine’’, for purposes of subsection (1), means a machine
that is able to do automated calls without human intervention.
15
20
25
30
35
40
Directories
70. (1) A data subject who is a subscriber to a printed or electronic directory of
subscribers available to the public or obtainable through directory enquiry services, in 45
which his, her or its personal information is included, must be informed, free of charge
and before the information is included in the directory—
(a) about the purpose of the directory; and