What Is POPIA?
The Protection of Personal Information Act (POPIA) is South Africa's data-protection law. It governs how organisations — including insurance companies — collect, store, use, and share your personal information.
POPIA came into full enforcement on 1 July 2021 and applies to every organisation that processes personal information in South Africa.
What Information Does Your Insurer Hold?
Your insurer typically holds:
- Your full name, ID number, and date of birth
- Contact details (address, phone, email)
- Banking details for premium collection and claims payment
- Medical information disclosed during the application
- Claims history
- Beneficiary details
This is sensitive information, and POPIA gives you specific rights over it.
Your Rights Under POPIA
Right to Access
You can request a copy of all personal information your insurer holds about you. They must respond within a reasonable time.
Right to Correction
If any information is inaccurate or incomplete, you can request that it be corrected.
Right to Deletion
In certain circumstances, you can request that your information be deleted — for example, if the policy has been cancelled and there are no outstanding claims.
Right to Object
You can object to the processing of your information for direct marketing purposes.
Right to Know
You have the right to know why your information is being collected, how it will be used, and who it will be shared with.
How to Exercise Your Rights
Contact your insurer's Information Officer. Their details should be available on the insurer's website or in the privacy policy attached to your policy documents. Submit your request in writing and keep a copy.
If the insurer does not respond within 30 days or refuses your request without valid grounds, you can lodge a complaint with the Information Regulator at inforegulator.org.za.
Contributed by Socinga Africa Holdings (FSP 46620). This is educational content only and not financial advice.