The Protection of Personal Information Act, 4 of 2013 (‘POPIA’) requires of a company to inform data subjects as to how their personal information is used, disclosed and destroyed. A company is obliged to comply with POPIA and other applicable legislation, protecting the privacy of data subjects and ensuring that their personal information is used appropriately, transparently and securely.