Responsible parties are required to ensure that data subjects are aware that their personal information is being collected and what is the purpose for this collection. Where the information is not collected from the data subject, the data subject must be informed of the source from which it is collected. Should data subjects be surprised about the collection of their personal information they may lodge an objection with the responsible party and/or complain to the Information Regulator.
If responsible parties are unsure about the level of awareness by data subjects of the purpose and collection of personal information, responsible parties should provide data subjects with this information. The POPIA platform provides a convenient mechanism to notify the data subjects of the purpose and collection of their personal information.