Per South African Protection of Personal Information Act (POPIA) 2013 Sections 8-11 + Accountability + Lawfulness conditions: foundation for processing. Requirements include (a) implement Accountability (Section 8) - the responsible party must ensure conditions for lawful processing are complied with + (b) implement Processing Limitation Lawfulness (Section 9) processing must be lawful + done in a manner that does not infringe data subject privacy + (c) implement Minimality (Section 10) - processing must be adequate + relevant + not excessive + (d) implement Consent, Justification, Objection (Section 11) per lawful basis + (e) maintain Codes of Conduct Adherence where industry codes apply + (f) document applicability + lawful basis + (g) align with Information Regulator guidance.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.