What is considered ‘personal information’ in terms of PoPI?

  • Popi states that personal information means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including, but not limited to:
    • Information relating to the race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language and birth of the person;
    • Information relating to the education or the medical, financial, criminal or employment history of the person;
    • Any identifying number, symbol, e-mail address, physical address, telephone number, location information, online identifier or other particular assignment to the person;
    • The biometric information of the person;
    • The personal opinions, views or preferences of the person;
    • Correspondence sent by the person that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence;
    • The views or opinions of another individual about the person;
    • The name of the person if it appears with other personal information relating to the person or if the disclosure of the name itself would reveal information about the person; and
    • Consumer or purchasing preferences or patterns.
Subject: 
Cyber Risk