Data subject rights
Your information.
Your rights.
A practical guide to asking DoenIT about your personal information, requesting access or correction, objecting to processing and raising a privacy concern.
01 — What POPIA provides
Rights designed to keep you informed and in control.
- Confirmation: ask whether we hold personal information about you, free of charge.
- Access: request a record or understandable description of your personal information and the relevant third-party recipients or recipient categories, subject to PAIA.
- Correction or deletion: ask us to correct information that is inaccurate, irrelevant, excessive, outdated, incomplete, misleading or unlawfully obtained, or delete a record we are no longer authorised to keep.
- Objection: object on reasonable grounds to qualifying processing, or object to direct marketing.
- Withdraw consent: withdraw consent for future processing where consent is the justification. This does not undo lawful processing already completed.
- Complaint: raise a concern with us and, if needed, lodge a complaint with the Information Regulator.
Rights may be limited by lawful grounds of refusal, duties to retain records, another person’s rights, confidentiality, legal privilege or other provisions of POPIA and PAIA.
02 — Start here
Make a request.
- Use the revealed email address with the subject “POPIA request”.
- Tell us your full name, preferred contact details, your relationship with DoenIT and the right you want to exercise.
- Describe the information or interaction clearly enough for us to locate it.
- Do not initially email a copy of your identity document. We will explain an appropriate verification method if needed.
03 — Safe handling
Identity checks and responses.
Before disclosing, changing or deleting information, we must be reasonably satisfied that the requester is entitled to act. The verification level will reflect the sensitivity and risk of the request.
We will acknowledge the request, clarify anything needed, consider applicable POPIA and PAIA requirements, and communicate the outcome within the period required by law. Access fees may apply only where permitted; if so, we will provide the required notice before proceeding.
Where a request results in a material correction and it is reasonably practicable, we will consider informing recipients to whom the earlier information was disclosed.
04 — Prescribed routes
Use the correct official form.
| Request | Route |
|---|---|
| Object to qualifying processing | POPIA Form 1, or a substantially similar request where legally permitted. |
| Correct or delete personal information / destroy or delete a record | POPIA Form 2. |
| Access a record or personal information | PAIA Form 2 under Regulation 7. |
| Complaint to the Information Regulator | The applicable POPIA or PAIA complaint form/service. |
05 — Concerns
Escalate a concern.
Please give our Information Officer an opportunity to investigate first.
If the matter is not resolved, you may approach the Information Regulator.
POPIA complaints: POPIAComplaints@inforegulator.org.za
PAIA complaints: PAIAComplaints@inforegulator.org.za
General: 010 023 5200 / 0800 017 160