POPIA 23: Condition 8, data subject participation: access to personal information

What does 23 require?

A data subject who provides adequate proof of identity may request confirmation, free of charge, whether the responsible party holds personal information about them, and request the record or a description of it including the identity of all third parties or categories of third parties that have or had access, within a reasonable time, at a prescribed fee if any, in a reasonable manner and format and in a generally understandable form; a data subject given information must be told of the section 24 right to correction; a fee requires a written estimate and may need a deposit; access may or must be refused on the grounds of refusal in the Promotion of Access to Information Act, with health records subject to its sections 30 and 61, and every part not refused must be disclosed.