S74(1) of POPIA states that “Any person may submit a complaint to the Regulator in the prescribed manner and form alleging interference with the protection of a data subject.”

S75(1) of POPIA states that “A complaint to the Regulator must be made in writing.”

All complaints to the Information Regulator must be directed or sent to this email address complaints.IR@justice.gov.za 

S23 of POPIA states that:

“A data subject, having provided adequate proof of identity, has the right to—

1. request a responsible party to confirm, free of charge, whether or not the responsible party holds personal information about the data subject; and

2. request from a responsible party the record or a description of the personal information about the data subject held by the responsible party, including information about the identity of all third parties, or categories of third parties, who have, or have had, access to the information.”

S24 of POPIA states that:

“A data subject may, in the prescribed manner, request a responsible party to—

1. correct or delete personal information about the data subject in its possession or under its control that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully; or

2. destroy or delete a record of personal information about the data subject that the responsible party is no longer authorised to retain in terms of section 14 of the Act.”