POPIA 18: Condition 6, openness: notification to the data subject when collecting

When collecting personal information the responsible party must take reasonably practicable steps to make the data subject aware of the information being collected and, if not collected from the data subject, its source; the responsible party's name and address; the purpose; whether supply is voluntary or mandatory; the consequences of not providing it; any law authorising or requiring the collection; any intended transfer to a third country or international organisation and the level of protection there; and further information necessary for reasonable processing such as recipients, the nature of the information, the rights of access, rectification and objection, and the right to complain to the Regulator with its contact details. The steps must be taken before collection from the data subject, or otherwise before or as soon as reasonably practicable after collection; they need not be repeated for the same kind of information for the same purpose, and are excused where the data subject consented to non-compliance, non-compliance would not prejudice the data subject, it is necessary for the law, legal obligations, court proceedings or national security, compliance would prejudice a lawful purpose or is not reasonably practicable, or the information will not be used in identifiable form or is for research.