Document background
An External Privacy Notice is a mandatory document under South Africa's Protection of Personal Information Act (POPIA) for organizations that process personal information. This document must be made available to data subjects (including customers, employees, and other stakeholders) before their personal information is collected or processed. The notice should clearly explain how the organization collects, uses, protects, and shares personal information, while informing data subjects of their rights under POPIA. It serves both as a compliance tool and a trust-building mechanism, demonstrating the organization's commitment to data protection and transparency. The document must be written in clear, understandable language and should be easily accessible to all data subjects, typically through the organization's website or physical premises.
