POPIA & PAIA Compliance

Effective Date: June 2025

MzansiDoctors is committed to protecting your right to privacy and access to information. This policy outlines our compliance with:

• Protection of Personal Information Act No. 4 of 2013 ("POPIA")
• Promotion of Access to Information Act No. 2 of 2000 ("PAIA")

🔒 Protection of Personal Information Act (POPIA)

1. Purpose of POPIA

POPIA ensures that personal information is processed lawfully, transparently, and securely to protect individuals’ constitutional right to privacy.

2. Scope of Application

This policy applies to all MzansiDoctors users, including patients, healthcare professionals, employees, and third-party service providers.

3. Types of Information Collected

• Names, contact details, and physical addresses
• Identification numbers (ID or Passport)
• Medical and health information
• Device information, location, and IP addresses
• Consultation history, communication records, and billing

4. Lawful Basis for Processing

• Voluntary and informed consent
• Necessity for medical consultation or treatment
• Compliance with South African legal obligations
• Legitimate interest in improving service and ensuring platform security

5. Your Rights Under POPIA

• Right to access your personal information
• Right to correct or update your information
• Right to request deletion or restriction of processing
• Right to object to processing
• Right to withdraw consent at any time

6. Data Security

MzansiDoctors implements encryption, access controls, password protection, firewalls, and secure data storage. Our team and partners are trained to handle personal information responsibly and in accordance with POPIA.

7. Retention and Disposal

Personal data is retained only for as long as legally or medically necessary. When no longer needed, data is permanently deleted or anonymized in accordance with best practices.

8. Data Breach Notification Protocol

In the event of a data breach, MzansiDoctors will:

• Promptly identify and contain the breach
• Assess the extent of compromised data
• Notify the Information Regulator of South Africa as required by Section 22 of POPIA
• Inform all affected individuals in writing
• Implement corrective action and log all events

Our appointed Information Officer is responsible for leading all breach response procedures and ensuring compliance with legal obligations.

9. Information Officer Appointment

MzansiDoctors has officially appointed an Information Officer in accordance with Section 55 of POPIA. The Information Officer is responsible for ensuring compliance with POPIA and PAIA, handling access to information requests, managing breach responses, and maintaining all relevant documentation.

• Name: Peter Makofane
• Email: legal@mzansidoctors.com
• Phone: 071 389 3258

📄 Promotion of Access to Information Act (PAIA)

10. Purpose of PAIA

PAIA promotes transparency by allowing individuals to request information from public and private bodies that is necessary to exercise or protect their rights.

11. Accessing Your Information

You may formally request access to information held by MzansiDoctors (such as consultation history, certificates, or billing records) by submitting a written request to our Information Officer.

12. PAIA Manual

MzansiDoctors maintains a PAIA Manual in line with Section 51 of the Act. The manual outlines available records and how to request them. You may request a copy by contacting the Information Officer.

13. Contact Details

• Information Officer: [Peter Makofane]
• Email: legal@mzansidoctors.com
• Phone: 071 389 3258

14. Regulator Contact

• Information Regulator of South Africa
• Website: justice.gov.za/inforeg
• Email: complaints.IR@justice.gov.za
• Phone: 010 023 5200

This POPIA & PAIA Compliance Policy is reviewed annually and updated to reflect legal or operational changes.