I-POPIA Ukuthobela Idatha Yesikweletu | Umhlahlandlela waseNingizimu Afrika
Umhlahlandlela osebenzayo wokuthobela i-POPIA lapho uphatha imininingwane ye-credit bureau eNingizimu Afrika. Qonda izibopho zakho njengengxenye enesibopho noma opharetha.
Ochwepheshe bezikweletu baphatha olunye ulwazi lomuntu siqu olubucayi kakhulu eNingizimu Afrika - imilando yezikweletu, idatha yemali engenayo, ukufakwa ohlwini okungalungile, imininingwane kamazisi. I-POPIA (Umthetho Wokuvikelwa Kolwazi Lomuntu Siqu, uMthetho 4 ka-2013) ubeka imithetho eqinile yokuthi le datha kufanele iqoqwe kanjani, icutshungulwe, igcinwe, futhi yabiwe kanjani. Kubahlinzeki bezikweletu, abeluleki ngezikweletu, kanye nabathengi, ukuthobela i-POPIA akuyona into ehlukile emisebenzini yezikweletu - kushunyekiwe kuwo wonke ama-bureau, konke ukuhlola, kanye nawo wonke amarekhodi agciniwe.
Umthetho uqale ukusebenza ngokugcwele mhla lu-1 kuNtulikazi wezi-2021, futhi Isilawuli Solwazi besilokhu siqinisekisa ukuthi siyalandelwa kusukela lapho. Ochwepheshe bezikweletu abasingatha ulwazi lomuntu siqu kufanele baqonde izibopho zabo njengezinhlangano ezinomthwalo wemfanelo noma opharetha, basebenzise izinyathelo zokuphepha ezifanele, futhi baqinisekise ukuthi izivumelwano zokucubungula idatha ziyasebenza nabahlinzeki besevisi. Ukungathobeli imithetho kunezinhlawulo ezibalulekile: izinhlawulo ezifika ku-R10 million, ukugqunywa ejele iminyaka efika kweyi-10, noma zombili. Okubaluleke nakakhulu, ukwephulwa kwedatha kungalimaza ukwethenjwa kwamaklayenti, kubangele uphenyo lokulawula, futhi kudalule amafemu esikweletini somphakathi.
Ukuthobela kwe-POPIA kuphambana nezinye izibopho zokulawula. I-Umthetho Wezikweletu Kazwelonke idinga abahlinzeki bezikweletu ukuthi benze ukuhlolwa kokukwazi ukukhokhela besebenzisa idatha ye-credit bureau, kuyilapho i-POPIA ibusa ukuthi leyo datha kufanele ivikelwe kanjani. I-Credit Bureau Regulations icacisa izikhathi zokugcinwa, kuyilapho i-POPIA idinga ukuthi idatha ingagcinwa isikhathi eside kunesidingo. Ukuqonda lezi zimpambano-mgwaqo kubalulekile kochwepheshe bezikweletu abafuna ukusebenza ngokusemthethweni futhi bavikele amakhasimende abo kanye namabhizinisi abo.
Okudingwa I-POPIA — Okuyisisekelo
I-POPIA isungula izimo eziyisishiyagalombili zokucutshungulwa okusemthethweni kolwazi lomuntu siqu. Le mibandela isebenza kulo lonke ulwazi lomuntu siqu, kodwa ithatha ukubaluleka okuthile lapho usebenzisana nedatha yekhredithi, ehlanganisa umlando wezezimali, ukuziphatha kokukhokha, ukufakwa ohlwini okungalungile, kanye nolwazi lukamazisi olungase lusetshenziselwe ukukhwabanisa noma ukubandlulula uma kuphathwa kabi.
Umbandela wokuqala ukuziphendulela. Iqembu elinesibopho kufanele liqinisekise ukuthobela yonke imibandela yokucutshungulwa okusemthethweni futhi kufanele likwazi ukukhombisa lokho kuthobela. Lokhu kusho ukuba nezinqubomgomo, izinqubo, nezinhlelo ezibonisa ukuthi izibopho ze-POPIA zihlangatshezwana nazo. Kochwepheshe bezikweletu, ukuziphendulela kudinga izinqubomgomo ezisemthethweni zokuvikela idatha, izinyathelo zokuphepha ezibhaliwe, nezinqubo ezicacile zokusingatha izicelo zezihloko zedatha. Uma kwenzeka ukucwaningwa kwamabhuku noma kuvela izikhalazo, amafemu kufanele akwazi ukukhombisa ukuthi athathe umthwalo wemfanelo wokuthobela umthetho ngokungathi sína.
Umkhawulo wokucubungula udinga ukuthi ulwazi lomuntu siqu luqoqwe kuphela ngenjongo ethile, echazwe ngokucacile, futhi esemthethweni, nokuthi ukucubungula kukhawulelwe kulokho okudingekayo kuleyo njongo. Ochwepheshe bezikweletu abakwazi ukuqoqa idatha eyengeziwe kunaleyo edingekayo ukuze kuhlolwe ikhredithi, abakwazi ukusebenzisa idatha ngezinjongo ezingezona lezo ezidalulwe esihlokweni sedatha, futhi abakwazi ukugcina idatha isikhathi eside kunesidingo. Lesi simo sithinta ngokuqondile indlela imibiko ye-credit bureau esetshenziswa ngayo: ukudonsa umbiko ogcwele lapho kudingeka ulwazi oluthile kuphela kungase kwephule umkhawulo wokucubungula, futhi ukusebenzisa idatha ye-bureau ngezinjongo zokumaketha ngaphandle kwemvume kungaphula lesi simo.
Ukucaciswa kwenhloso kusho ukuthi othintekayo kufanele azise isihloko sedatha ngenjongo yokuqoqwa ngesikhathi sokuqoqwa. Kochwepheshe bezikweletu, lokhu ngokuvamile kwenzeka lapho abathengi befaka izicelo zekhredithi noma izinsizakalo zokwelulekwa ngezikweletu. Inhloso kumele icace: “ukuhlola ukufaneleka kwakho kwekhredithi” kuyamukeleka, kanti “ngezinjongo zebhizinisi” akucacile kakhulu. Abathengi kufanele baqonde ukuthi kungani idatha yabo iqoqwa nokuthi izosetshenziswa kanjani.
Umkhawulo wokucubungula okwengeziwe ukhawulela indlela idatha engasetshenziswa ngayo ngemva kokuqoqwa kokuqala. Uma umhlinzeki wesikweletu eqoqa idatha yokuhlola ukukwazi ukuthengeka, ukusebenzisa leyo datha kamuva ngezinjongo zokumaketha kudinga imvume noma esinye isisekelo esisemthethweni. Ochwepheshe bezikweletu kufanele bacace ngezinjongo lapho idatha iqoqwa khona futhi abakwazi ukunweba lezo zinhloso ngaphandle kwezizathu noma imvume.
Ikhwalithi yolwazi idinga ukuthi ulwazi lomuntu siqu luphelele, lunembile, lungadukisi, futhi lube sesikhathini samanje. Kochwepheshe bezikweletu, lokhu kusho ukuqinisekisa ukuthi imibiko ye-credit bureau ingeyamanje, ukuthi ukuhlola kusekelwe kudatha enembile, nokuthi amarekhodi abonisa isimo sangempela sesimo sesikweletu somthengi. Ukusebenzisa imibiko ye-bureau ephelelwe yisikhathi noma ukwehluleka ukubuyekeza amarekhodi lapho ulwazi olusha lutholakala kwephula lo mbandela.
Ukuvuleleka kudinga obala mayelana nendlela ulwazi lomuntu siqu lucutshungulwa ngayo. Ochwepheshe bezikweletu kufanele bazise izihloko zedatha mayelana nokuthi iyiphi idatha eqoqwayo, itholwa kubani, isetshenziswa kanjani, nokuthi ubani okwaziyo ukuyifinyelela. Izaziso zobumfihlo kanye nemigomo yesevisi kufanele ichaze ngokucacile lezi zinqubo. Lapho abathengi becela ulwazi olumayelana nendlela idatha yabo ecutshungulwa ngayo, amafemu kufanele aphendule ngokushesha nangokunembile.
Izivikelo zokuphepha mhlawumbe ziyisimo esibucayi kakhulu sedatha yekhredithi. I-POPIA idinga izinyathelo ezifanele zobuchwepheshe nezenhlangano ukuze kuvinjelwe ukulahleka, ukulimala, noma ukufinyelela okungagunyaziwe kulwazi lomuntu siqu. Ngedatha yekhredithi, lokhu kusho ukubethela lapho uphumule kusetshenziswa izindinganiso eziqinile ezifana ne-AES-256, ukubethela kwezokuthutha kusetshenziswa i-TLS, izilawuli zokufinyelela ezisekelwe endimeni ukuze kukhawulwe ukuthi ubani ongabuka noma asebenzise idatha, amalogi okuhlola ukuze alandelele ukufinyelela nezinguquko, futhi lapho kufanele khona, ukufakazela ubuqiniso bezinto eziningi ukuze kuvinjelwe ukufinyelela okungagunyaziwe. Izinyathelo zokuphepha kufanele zilingane nokuzwela kwedatha, futhi idatha yekhredithi iphakathi kwezigaba ezibucayi kakhulu.
Ukubamba iqhaza kwesihloko sedatha kunikeza abantu amalungelo okufinyelela ulwazi lwabo lomuntu siqu, bacele ukulungiswa kwedatha engalungile, kanye nokuphikisana nokucutshungulwa ezimeni ezithile. Ochwepheshe bezikweletu kumele babe nezinqubo zokusingatha lezi zicelo ngokushesha. Lapho abathengi becela ukufinyelela kudatha yabo yezikweletu noma izinqumo zenselelo, amafemu kufanele akwazi ukubuyisa futhi anikeze ulwazi olufanele ngendlela efanele. Amasistimu ahlanganisa idatha phakathi futhi anikeze ukufinyelela okuseshekayo asekela lezi zibopho kangcono kunamafayela ahlakazekile.
Iqembu Elinomthwalo Wemfanelo vs Umsebenzisi
Ukuqonda umehluko phakathi kwezindima zezinkampani ezinomthwalo wemfanelo kanye nomsebenzisi kubalulekile kochwepheshe bezikweletu abasebenzisa izinkundla zesofthiwe, izinsiza ze-credit bureau, noma abanye abahlinzeki bezinkampani zangaphandle. Lo mehluko unquma ukuthi ubani onesibopho sokugcina sokuthobela imithetho, yiziphi izinkontileka okufanele zibe khona, nokuthi isikweletu sabiwa kanjani uma ukwephulwa kwemithetho kwenzeka.
Iqembu elinesibopho ngumuntu noma inhlangano enquma inhloso nezindlela zokucubungula ulwazi lomuntu siqu. Esimeni sesikweletu, abahlinzeki bezikweletu, abeluleki ngezikweletu, kanye nabadayisi bezikweletu bangabantu abanomthwalo wemfanelo ngoba banquma ukuthi kungani idatha yezikweletu iqoqwa nokuthi isetshenziswa kanjani. Banquma ukuthi ukuhlolwa kokukwazi ukukhokha kuyadingeka, banquma ukuthi yiluphi ulwazi abazolukhipha kuma-credit bureaux, futhi banqume ukuthi lolo lwazi luzazisa kanjani izinqumo.
Umsebenzisi ucubungula ulwazi lomuntu siqu egameni leqembu elinesibopho ngaphansi kwenkontileka noma igunya. Ama-opharetha awanqumi inhloso noma izindlela zokucubungula — alandela imiyalelo evela eqenjini elibophezelekile. Abathengisi be-software, i-credit bureaux, abahlinzeki bokusingatha amafu, nabanye abahlinzeki besevisi bavame ukusebenza njengabasebenzisi lapho becubungula idatha yekhredithi egameni lochwepheshe bezikweletu.
Umehluko uba bucayi uma kubhekwa ukuthi ubani osebenzisa okhiye be-API ukuze afinyelele idatha ye-credit bureau. Uma umhlinzeki wesikweletu esebenzisa okhiye bakhe be-bureau API ukuze adonse imibiko ngenkundla yesofthiwe, umthengisi wesofthiwe usebenza njengesisebenzisi. Umthengisi ucubungula idatha egameni lomhlinzeki wesikweletu, elandela imiyalelo yomhlinzeki, kodwa umhlinzeki uhlala eyingxenye enesibopho. Umthengisi kufanele athobele i-POPIA njengomsebenzisi, kodwa ukuziphendulela ekugcineni kukumnikezi wesikweletu.
Uma umthengisi wesofthiwe esebenzisa okhiye bakhe be-bureau API futhi ehlinzeka ngemibiko edonswe ngaphambili noma idatha ehlanganisiwe kumakhasimende, ukuhlelwa kungase kube nzima kakhulu. Kwezinye izimo, lokhu kudala ubudlelwano obuhlangene beqembu elibophezelekile lapho zombili izinhlangothi zinquma izici zokucubungula. Umthengisi unquma ukuthi idatha iqoqwa futhi ihlanganiswe kanjani, kuyilapho iklayenti linquma ukuthi isetshenziswa kanjani ekuhloleni. Ukuhlelwa kweqembu elibophezelekile kudinga izivumelwano ezicacile mayelana nezibopho ezifanele, isikweletu, kanye nezibopho zokuthobelana.
Iqembu elinesibopho lihlala liziphendulela ngokuthobela imithetho ngisho nalapho abaqhubi bebandakanyeka. Lokhu kusho ukuthi ochwepheshe bezikweletu kufanele bahlole ngokucophelela abaqhubi, baqinisekise ukuthi kunezinkontileka ezifanele, futhi baqinisekise ukuthi abaqhubi basebenzisa izinyathelo zokuphepha ezanele. Uma u-opharetha ephula i-POPIA, othintekayo angase aphendule uma ehlulekile ukugada okufanele noma uma ubudlelwano bomsebenzisi bungazange bumiswe ngendlela efanele.
Izivumelwano zokucubungula idatha (ama-DPA) zibalulekile ekuchazeni ubudlelwano bomsebenzisi. Lezi zivumelwano kufanele zicacise izibopho zomsebenzisi, izidingo zokuphepha, izibopho zobumfihlo, imikhawulo yokusetshenziswa, izinqubo zesaziso sokuphulwa komthetho, kanye neNCAzelo ecacile yezindima. Ngaphandle kwe-DPA esemthethweni, ubudlelwano bomsebenzisi abucaci, izibopho zokuthobelana azicaci, futhi ukwabiwa kwesikweletu kuba yinkinga.
Imvume kanye Nesisekelo Esisemthethweni Sokudonsa Kwehhovisi Lezikweletu
I-POPIA idinga ukuthi ulwazi lomuntu siqu lucutshungulwe ngokusemthethweni, okusho ukuthi kufanele kube nesisekelo esisemthethweni sokucutshungulwa. Imvume iyisisekelo esisodwa esisemthethweni, kodwa ayidingeki ngaso sonke isikhathi noma yanele iyodwa. Kochwepheshe bezikweletu, ukuqonda ukuthi imvume idingeka nini futhi uma kusebenza ezinye izisekelo ezisemthethweni kubalulekile ekusebenzeni okuthobelayo.
Umthetho Kazwelonke Wezikweletu uhlinzeka ngesisekelo esingokomthetho esiqondile sokudonsa imibiko yezikweletu njengengxenye yokuhlola ukukwazi ukukhokhela. Isigaba sama-81 se-NCA sidinga ukuthi abahlinzeki bezikweletu benze ukuhlola ukukwazi ukukhokhela izikweletu ngaphambi kokwelula isikweletu, futhi lokhu kuhlola kuvame ukudinga idatha ye-credit bureau. Le mfuneko ye-NCA idala isisekelo esisemthethweni sokucubungula idatha yekhredithi ngaphansi kwe-POPIA, ngisho nangaphandle kwemvume ecacile, ngoba ukucubungula kuyadingeka ukuze uthobele isibopho esingokomthetho.
Nokho, lokhu akuzisusi zonke izimfuneko zemvume. Abathengi ngokuvamile bavumela ukuhlolwa kwekhredithi lapho befaka isicelo sezinsizakalo zokwelulekwa ngesikweletu noma izikweletu, futhi le mvume ngokuvamile itholakala ngamafomu ezicelo noma imigomo yesevisi. Imvume kufanele yaziswe: abathengi kufanele baqonde ukuthi idatha yabo yezikweletu izofinyelelwa, yiziphi izikhungo ezizobuzwa, nokuthi ulwazi luzosetshenziswa kanjani. Ulimi lwemvume olungacacile noma olungcwatshiwe ludala ingozi yokuthobela.
Imvume nayo kumele icace. Imvume evamile “yokucubungula ulwazi lomuntu siqu” ayanele - imvume kufanele icacise ukuthi kuzokhishwa imibiko ye-credit bureau, abahlinzeki abazobuzwa, kanye nokuthi ulwazi luzosetshenziselwa ukuhlolwa kokukwazi ukukhokhela noma izinjongo zokwelulekwa ngezikweletu. Uma ochwepheshe bezikweletu basebenzisa ama-bureaux amaningi noma bedonsa imibiko evela kubahlinzeki abafana ne-Experian, Datanamix, noma i-TransUnion, imvume kufanele ibonise lokhu.
Iqembu elinesibopho kufanele liqinisekise ukuthi zonke izimvume ezidingekayo nezisekelo ezisemthethweni ziyatholakala ngaphambi kokuthi ukucubungula kuqale. Lokhu kusho ukuqinisekisa ukuthi amafomu ezicelo ahlanganisa ulimi olufanele lwemvume, ukuthi imigomo yesevisi icacile mayelana nokucutshungulwa kwedatha, nokuthi abasebenzi bayaqonda lapho kudingeka imvume uma kuqhathaniswa nalapho izibopho ze-NCA zinikeza isisekelo esisemthethweni. Ukuncika ekuvumeni okucatshangwayo noma ukwehluleka ukuthola imvume efanele kudala ingozi yokuthobela umthetho.
Ukusebenzisana phakathi kwezibopho ze-NCA kanye nemvume ye-POPIA kusho ukuthi ochwepheshe bezikweletu kufanele balinganisele izidingo eziningi. Kumelwe basebenzise idatha yekhredithi ukuze benze ukuhlolwa kokufinyeleleka okufanele (imfuneko ye-NCA) kuyilapho beqinisekisa ukuthi ukucutshungulwa kusemthethweni nokuthi izihloko zedatha ziyaziswa (imfuneko ye-POPIA). Le bhalansi iyafezeka uma imvume itholwa kahle futhi uma ukucubungula kukhawulelwe kulokho okudingekayo ngezinjongo zokuhlola isikweletu.
Uma idatha yekhredithi isetshenziselwa izinjongo ezingaphezu kokuhlolwa kokuqala - isibonelo, ukuqapha okuqhubekayo, ukumaketha, noma ukwabelana nabantu besithathu - imvume eyengeziwe noma ezinye izisekelo ezisemthethweni zingase zidingeke. Ochwepheshe bezikweletu abakwazi ukucabanga ukuthi imvume yokuqala ihlanganisa konke ukusetshenziswa kwesikhathi esizayo. Inhloso ngayinye entsha idinga ukuthethelelwa ngaphansi kwezimo ze-POPIA zokucutshungulwa okusemthethweni.
Izibopho Zokuvikela Zedatha Yesikweletu
I-POPIA idinga abantu abathintekayo ukuba basebenzise izinyathelo ezifanele zobuchwepheshe nezenhlangano ukuze bavikele ulwazi lomuntu siqu ekulahlekeni, emonakalweni, noma ekufinyeleleni okungagunyaziwe. Ngedatha yekhredithi, ehlanganisa umlando wezezimali, ulwazi lukamazisi, nokuziphatha kokukhokha, lezi zibopho zokuphepha azixoxiswana ngazo. Imiphumela yokuphulwa kwedatha ingaba nzima kakhulu: izinhlawulo ezingokomthetho, isibopho somphakathi, ukulahlekelwa ukwethenjwa kwekhasimende, kanye nokwebiwa kobunikazi obunamandla noma ukukhwabanisa okuthinta abathengi.
Ukubethela ngesikhathi sokuphumula kubalulekile. Idatha yekhredithi egcinwe kusizindalwazi, izinhlelo zamafayela, noma izipele kufanele zibethelwe kusetshenziswa amazinga aqinile njenge-AES-256. Lokhu kuqinisekisa ukuthi uma imidiya yesitoreji ilahleka, yebiwa, noma ifinyelelwa ngaphandle kokugunyazwa, idatha ihlala ivikelekile. Ochwepheshe bezikweletu abagcina imibiko yehhovisi, amarekhodi okuhlola, noma amafayela eklayenti kufanele baqinisekise ukuthi ukubethela kusetshenziswa kungqimba yesitoreji, hhayi nje ezingeni lesicelo.
Ukubethela kwezokuthutha kuvikela idatha njengoba ihamba phakathi kwamasistimu. Lapho imibiko ye-credit bureau idonswa nge-API, lapho idatha idluliswa phakathi kwezicelo zamaklayenti namaseva, noma lapho ulwazi lwabelwa izinkampani zangaphandle, ukubethela kwe-TLS kufanele kusetshenziswe. Amaphrothokholi amadala afana ne-SSL noma uxhumo lwe-HTTP olungabethelwe alwanele futhi lwenza ubungozi bokuphepha obubalulekile.
Imikhawulo yokulawula ukufinyelela okusekelwe kwindima (RBAC) ukuthi ubani ongabuka, alungise, noma asebenzise idatha yekhredithi. Akuwona wonke umsebenzi odinga ukufinyelela kuyo yonke idatha. Abahloli bezikweletu bangase badinge ukufinyelela emibikweni ye-bureau ukuze ihlolwe, kodwa bangase bangadingi ukufinyelela kuwo wonke amafayela amaklayenti. Abasebenzi bokuphatha bangase badinge ukufinyelela kumarekhodi eklayenti kodwa hhayi kudatha ebucayi yezezimali. I-RBAC iqinisekisa ukuthi ukufinyelela kunikezwa kuphela labo abakudingayo ngezindima zabo, kunciphisa ubungozi bokufinyelela okungagunyaziwe noma ukusetshenziswa kabi.
Amarekhodi okucwaninga alandelela ukuthi ubani ofinyelele iyiphi idatha, nini, futhi ngayiphi injongo. Lawa malogi abalulekile kukho kokubili ukuphepha nokuhambisana. Uma kwenzeka ukwephulwa kwemithetho noma lapho izicelo zokufinyelela kusihloko sedatha zenziwa, amalogi okucwaninga asiza ukukhomba ukuthi kwenzekeni nokuthi ubani owayehilelekile. Kochwepheshe bezikweletu, izindlela zokucwaninga eziphelele futhi basekela ukuthobela uMthetho Kazwelonke Wezikweletu ngokubonisa ukuthi izinqumo zenziwe kanjani nokuthi iyiphi idatha eyacatshangelwa.
Ukuqinisekisa okuqinile kuvimbela ukufinyelela okungagunyaziwe kumasistimu aphatha idatha yekhredithi. Ukuqinisekiswa kwezinto eziningi (i-MFA) kuyanconywa, ikakhulukazi kuma-akhawunti okuphatha noma amasistimu aqukethe ulwazi olubucayi. Amaphasiwedi ewodwa awanele — izici ezengeziwe ezifana namakhodi esikhathi esisodwa, ukuqinisekiswa kwe-biometric, noma amathokheni ezingxenyekazi zekhompuyutha anciphisa kakhulu ingcuphe yokufakwa engozini kwe-akhawunti.
Izimo ezihlukanisiwe ziqinisekisa ukuthi idatha yekhredithi ihlukanisiwe kwamanye amasistimu nokuthi ukufinyelela kulawulwa ngezixhumi ezibonakalayo ezichaziwe. Ukuthuthukiswa, ukuhlola, nezimo zokukhiqiza kufanele zihlukaniswe, futhi idatha yokukhiqiza akufanele isetshenziswe ezindaweni ezingezona ezokukhiqiza ngaphandle kokungaziwa ngendlela efanele noma ukufihla amagama. Lokhu kunciphisa ubungozi bokuchayeka ngengozi noma ukusetshenziswa kabi.
Izinhlelo zokuphendula isigameko ziyadingeka ukuze kusingathwe ukwephulwa kwedatha ngempumelelo. Lapho ukuphulwa kwenzeka, isikhathi sibalulekile. Ochwepheshe bezikweletu kufanele babe nezinqubo zokuthola ukwephulwa, okuqukethe umonakalo, ukwazisa abathintekayo, kanye nokubika kuMlawuli Wolwazi. I-POPIA idinga ukuthi ukwephulwa kwedatha kubikwe kumlawuli nasezihlokweni zedatha ngaphandle kokulibaziseka okungadingekile, nokuthi othintekayo athathe izinyathelo ezinengqondo ukuze anciphise ukulimala.
Izinqubo zesaziso zokwephulwa kwedatha kufanele zibhalwe phansi futhi zihlolwe. I-Information Regulator ilindele ukwaziswa ngokwephulwa okubeka engcupheni amalungelo ezihloko zedatha, futhi isaziso kufanele sifake imininingwane yokwephulwa komthetho, izigaba zedatha ethintekayo, imiphumela engase ibe khona, kanye nezinyathelo ezithathiwe noma ezihlongozwayo ukuze kubhekwane nokwephulwa komthetho. Izihloko zedatha kufanele futhi zaziswe ngaphandle kwalapho ukwephulwa kwesivumelwano kungenakwenzeka ukuthi kubangele ukulimala, futhi isaziso kufanele sibazise ngamalungelo abo nezinyathelo abangazithatha ukuze bazivikele.
Lezi zinyathelo zokuphepha azikhethi. Ochwepheshe bezikweletu abasingatha idatha yekhredithi kufanele bayisebenzise njengengxenye yezibopho zabo zokuthobela i-POPIA. Amasistimu aklanywe kucatshangelwa ukuvikeleka kusukela ekuqaleni asebenza kangcono kunezinyathelo zokuphepha ezifakwe kabusha, futhi amafemu aphatha ukuphepha njengemfuneko eyinhloko esikhundleni sokucabanga kamuva anciphisa kokubili ubungozi bokuthobela kanye nobungozi bokusebenza.
Ukugcinwa Kwedatha kanye Nelungelo Lokususa
I-POPIA idinga ukuthi imininingwane yomuntu siqu ingagcinwa isikhathi eside kunesidingo ngenjongo eqoqwe ngayo. Lesi simo sishayisana nezinye izimfuneko zomthetho, ikakhulukazi Imithetho Yehhovisi Lezikweletu, ecacisa izikhathi eziNCAne zokugcinwa kwedatha yekhredithi. Ochwepheshe bezikweletu kufanele balinganisele lezi zidingo: ukugcina idatha isikhathi eside ngokwanele ukuze ihlangabezane nezibopho zokulawula kuyilapho ingagcini isikhathi eside kunesidingo.
I-Credit Bureau Regulations (Regulation 19) icacisa ukuthi idatha yombuzo kufanele igcinwe okungenani unyaka owodwa, kuyilapho idatha yephrofayela yokukhokha kufanele igcinwe okungenani iminyaka emihlanu. Lezi yizikhathi eziNCAne - ochwepheshe bekhredithi kungase kudingeke bagcine idatha isikhathi eside ukuze bahlangabezane nezinye izibopho, ezifana ne-Izidingo zokugcina amarekhodi zeNational Credit Act noma ukuzivikela ezikhalweni ezingaba khona noma izinyathelo zomthetho.
Nokho, ukugcina idatha kwephula unomphela imfuneko ye-POPIA yokuthi idatha ingagcinwa isikhathi eside kunesidingo. Ochwepheshe bezikweletu kufanele basungule izinqubomgomo zokugcinwa ezicacile ezicacisa ukuthi izinhlobo ezahlukene zedatha zizogcinwa isikhathi esingakanani, idatha izosuswa nini, nokuthi yikuphi okuhlukile okusebenzayo. Lezi zinqubomgomo kufanele zibhalwe phansi, zidluliselwe kubasebenzi, futhi zisetshenziswe ngendlela ehlelekile.
Ilungelo lokususa ngaphansi kwe-POPIA aliphelele. Izihloko zedatha zingacela ukususwa kolwazi lwazo lomuntu siqu, kodwa izinhlangothi ezinesibopho zingenqaba uma ukugcinwa kudingwa ngokomthetho, uma idatha idingeka ngezinjongo zebhizinisi ezisemthethweni, noma uma ukususwa kuzophazamisa ukuqulwa kwecala. Kochwepheshe bezikweletu, lokhu kusho ukuthi izicelo zokusula kufanele zihlolwe ngokucophelela: enye idatha ingase idinge ukugcinwa ukuze kuhlangatshezwane nezibopho ze-NCA noma kuvikelwe ezikhalweni ezingaba khona.
Lapho ochwepheshe bezikweletu bethola izicelo zokusula, kufanele baphendule ngokushesha futhi bachaze isinqumo sabo. Uma ukususwa kwenqatshwa, isihloko sedatha kufanele saziswe ngesizathu nangelungelo labo lokukhalaza kuMlawuli Wolwazi. Uma ukususwa kuvunyiwe, idatha kufanele isuswe ngokuphephile kuwo wonke amasistimu, okuhlanganisa nezipele, futhi ukususwa kufanele kubhalwe phansi.
Izinqubomgomo zokugcinwa kufanele zihlukanise phakathi kwezinhlobo ezahlukene zedatha yekhredithi. Imibiko yehhovisi edonselwa ukuhlolwa ingase ibe nezidingo ezihlukile zokugcina kunamarekhodi okuhlola, imibhalo yezinqumo, noma izincwadi zeklayenti. Enye idatha ingase idinge ukugcinwa ukuze kuthotshelwe umthetho, kuyilapho enye idatha ingase isuswe ngokushesha. Izinqubomgomo ezicacile zisiza ukuqinisekisa ukusetshenziswa okungaguquki futhi zinciphise ubungozi bokugcina idatha isikhathi eside kunesidingo noma ukususa idatha ngaphambi kwesikhathi.
Ukuphatha ukugcinwa okuzenzakalelayo kungasiza ochwepheshe bezikweletu ukuthi bathobelane nezidingo zokugcinwa njalo. Amasistimu ahlaba umkhosi ngokuzenzakalelayo idatha ukuze isuswe ngokusekelwe kuzinqubomgomo zokugcinwa, asusa ngokuphephile idatha ephelelwe yisikhathi, futhi agcina amalogi okuhlola emisebenzi yokususwa anciphisa kokubili ubungozi bokuthobelana nomzamo owenziwe mathupha. Ukuphatha ukugcinwa mathupha kujwayele ukuba namaphutha futhi ngokuvamile kuholela ekususweni ngaphambi kwesikhathi noma ekugcinweni okungapheli.
Ukudluliswa Kwedatha Ye-Cross-Border
I-POPIA ivimbela ukudluliswa kolwazi lomuntu siqu ngaphandle kwaseNingizimu Afrika ngaphandle uma kunemibandela ethile. Uma idatha yezikweletu icutshungulwa noma igcinwa ngaphandle kweNingizimu Afrika - isibonelo, kumaseva aphethwe e-European Union, United States, noma kwezinye izindawo - imithetho ye-POPIA yokudlulisa imingcele iyasebenza. Ochwepheshe bezikweletu abasebenzisa izinsiza zamafu, izinkundla zesofthiwe, noma abanye abahlinzeki abacubungula noma abagcina idatha emhlabeni jikelele kumele baqinisekise ukuthobela le mithetho.
Umthetho ovamile uwukuthi ulwazi lomuntu siqu angeke ludluliselwe kumuntu wesithathu ezweni langaphandle ngaphandle uma lelo zwe linemithetho eyanele yokuvikela idatha, isihloko sedatha sivuma ukudluliswa, ukudluliselwa kuyadingeka ekusebenzeni kwenkontileka, noma ukudluliselwa kungokwezintshisekelo zesihloko sedatha. I-Information Regulator igcina uhlu lwamazwe anokuvikelwa okwanele, kodwa lolu hlu lunomkhawulo, futhi izindawo eziningi ezivamile zokusingatha azifakiwe.
Lapho ochwepheshe bezikweletu besebenzisa izinkundla zesofthiwe noma izinsiza zefu ezisingathwa ngaphandle kweNingizimu Afrika, kufanele zazise izihloko zedatha mayelana nokudluliselwa futhi zithole imvume efanele noma zithembele kwesinye isisekelo esisemthethweni. Izaziso zobumfihlo nemigomo yesevisi kufanele isho ngokucacile lapho idatha icutshungulwa futhi igcinwe khona, futhi abathengi kufanele baqonde ukuthi idatha yabo yekhredithi ingase idluliselwe kwamanye amazwe.
Uma indawo etholayo inokuvikela okwanele kwedatha - isibonelo, uma idatha icutshungulwa e-European Union, lapho i-GDPR inikeza ukuvikeleka okuqinile - lokhu kungase kwenelise izimfuneko ze-POPIA. Kodwa-ke, ochwepheshe bezikweletu kusafanele bazise izihloko zedatha mayelana nokudluliselwa futhi baqinisekise ukuthi izivumelwano ezifanele zikhona nabahlinzeki besevisi.
Ububanzi bendawo ye-GDPR (I-athikili 3) ingase futhi isebenze lapho idatha yezikweletu icutshungulwa e-EU, ngisho noma inhlangano enesibopho izinze eNingizimu Afrika. Lokhu kusho ukuthi ochwepheshe bezikweletu abasebenzisa izinsizakalo ezisingathwa yi-EU bangase badinge ukuthobela kokubili izidingo ze-POPIA ne-GDPR. Le mithetho yomibili inokufana kodwa futhi iyahluka, futhi ukuqonda yomibili kubalulekile ukuze kuthotshelwe ngokuphelele.
Izivumelwano zokucubungula idatha zokudluliselwa kwemingcele kufanele zicace ikakhulukazi mayelana nokuthi idatha icutshungulwa kuphi, yiziphi izinyathelo zokuphepha ezikhona, nokuthi amalungelo esihloko sedatha azohlonishwa kanjani. Izivumelwano kufanele zicacise ukuthi isisebenzisi sizothobela imithetho esebenzayo yokuvikela idatha, leyo datha ngeke idluliselwe ezindaweni ezengeziwe ngaphandle kokugunyazwa, nokuthi ukuvikela okufanele kuyasetshenziswa.
Ochwepheshe bezikweletu kufanele bahlole ngokucophelela abahlinzeki besevisi bamazwe ngamazwe ukuze baqinisekise ukuthi bayaziqonda izidingo ze-POPIA, ukuthi basebenzisa izindlela zokuphepha ezanele, nokuthi bangabonisa ukuthobela imithetho. Ukuthembela nje ezitatimendeni ezijwayelekile zomhlinzeki wesevisi mayelana nokuvikeleka akwanele — amafemu kufanele aqinisekise ukuthi izinyathelo ezithile ziyasebenza nokuthi izinkontileka zizichaza ngokucacile izibopho.
Izivumelwano Zokucubungula Idatha (DPAs)
Izivumelwano zokucubungula idatha yizinkontileka ezibalulekile ezichaza ubudlelwano phakathi kwezinhlangano ezinomthwalo wemfanelo kanye nabaqhubi. Kochwepheshe bezikweletu abasebenzisa izinkundla zesofthiwe, izinsiza ze-credit bureau, ukusingathwa kwamafu, noma abanye abahlinzeki bezinkampani zangaphandle, ama-DPA awakhethi - adingwa yi-POPIA futhi abalulekile ekucaciseni izibopho, ukwaba isikweletu, nokuqinisekisa ukuthotshelwa kwemithetho.
I-DPA kufanele ichaze ngokucacile izindima zamaqembu. Ubani obambe iqhaza? Ubani u-opharetha? Yiziphi izibopho ezifanele? Lokhu kucaca kubalulekile ngoba uhlangothi olunesibopho ekugcineni luhlala luziphendulela ngokuhambisana nokuthobela, noma ngabe o-opharetha bayabandakanyeka. Ukungacaci mayelana neqhaza kudala ubungozi bokuthobela imithetho futhi kwenza kube nzima ukwaba isikweletu uma ukwephulwa kwemithetho kwenzeka.
I-DPA kufanele icacise izibopho zomsebenzisi. Umsebenzisi kufanele acubungule ulwazi lomuntu siqu kuphela ngokuhambisana nemiyalelo yenhlangano enesibopho, kufanele asebenzise izinyathelo zokuphepha ezifanele, kufanele agcine imfihlo, futhi kufanele asize uhlangothi olunesibopho ekuhlangabezaneni nezibopho ze-POPIA. Lezi zibopho kufanele zicacise, hhayi ezijwayelekile. Ulimi olungacacile njengokuthi “umsebenzisi uzothobela imithetho esebenzayo” alwanele — i-DPA kufanele icacise ukuthi yiziphi izinyathelo zokuphepha ezizosetshenziswa, yiziphi izilawuli zokufinyelela ezizoba khona, nokuthi isisebenzisi sizosiza kanjani ngezicelo zesihloko sedatha.
Izidingo zokuphepha kufanele zichazwe kabanzi. I-DPA kufanele icacise izindinganiso zokubethela (i-AES-256 lapho iphumule, i-TLS isendleleni), izilawuli zokufinyelela (RBAC, MFA), izimfuneko zokungena kocwaningo, kanye nezinqubo zokuphendula isigameko. Kufanele futhi kudinge ukuthi u-opharetha azise umuntu onesibopho ngokushesha uma kwenzeka ukwephulwa komthetho noma uma izinyathelo zokuphepha zifakwa engcupheni.
Izibopho zokugcinwa kuyimfihlo ziqinisekisa ukuthi o-opharetha abavezi idatha yezikweletu kubantu abangagunyaziwe noma bayisebenzisela izinjongo ngaphandle kwalezo ezishiwo ku-DPA. Lokhu kubaluleke kakhulu uma o-opharetha bekwazi ukufinyelela olwazini lwezezimali olubucayi. I-DPA kufanele ivimbele opharetha ukuthi basebenzise idatha ngokwezinjongo zabo, ekwabelaneni ngedatha nezinkampani zangaphandle ngaphandle kokugunyazwa, nasekugcineni idatha isikhathi eside kunesidingo.
Imikhawulo yokusetshenziswa kufanele icace. Iyiphi idatha ezocutshungulwa ngu-opharetha? Ngaziphi izinjongo? Umsebenzisi uzogcina idatha kuze kube nini? Ingabe u-opharetha angasebenzisa idatha ngezibalo, ukuthuthukisa amasevisi, noma ezinye izinjongo? Le mikhawulo kufanele ibe sobala ukuze kuvinjwe ukukhuphuka kobubanzi nokuqinisekisa ukuthi ukucubungula kuhlala ngaphakathi kwemingcele yalokho okwakuvunyelwene ngakho ekuqaleni.
Izinqubo zesaziso sokwephulwa kufanele zichazwe. I-POPIA idinga ukuthi ukwephulwa kwedatha kubikwe ngaphandle kokubambezeleka okungadingekile, futhi i-DPA kufanele icacise ukuthi umqhubi kufanele asheshe kangakanani ukwazisa othintekayo, yiluphi ulwazi okufanele lunikezwe, nokuthi izinhlangothi zizoyihlanganisa kanjani imizamo yokuphendula. Izikhathi kufanele zicaciswe - “ngokushesha ngangokunokwenzeka” akucacile kakhulu, kuyilapho “phakathi kwamahora angu-24” kucacile futhi kungenzeka.
I-DPA kufanele futhi ibhekane namalungelo esihloko sedatha. Umsebenzisi uzoyisiza kanjani inhlangano enesibopho ekuphenduleni izicelo zokufinyelela, izicelo zokulungisa, noma izicelo zokusula? Yiluphi ulwazi oluzonikezwa umqhubi ukuze asize othintekayo ukuba aphendule? Lezi zinqubo kufanele zibhalwe phansi ukuze kuqinisekiswe ukuthi amalungelo ezihloko zedatha ahlonishwa kahle.
Izinhlinzeko zokunqanyulwa zibalulekile. Lapho i-DPA iphela, kwenzekani kudatha? Umsebenzisi kufanele kudingeke ukuthi abuyisele noma asuse ngokuphephile yonke imininingwane yomuntu, futhi i-DPA kufanele icacise ukuthi lokhu kuzoqinisekiswa kanjani. Ukususa kalula idatha kumasistimu asebenzayo akwanele - izipele nedatha egciniwe kufanele kubhekwe.
Ochwepheshe abaningi bezikweletu basebenza ngaphandle kwama-DPA asemthethweni, bathembele emigomeni yesevisi evamile noma becabanga ukuthi abahlinzeki besevisi bazophatha ukuthotshelwa kwemithetho ngendlela efanele. Lokhu kudala ingozi enkulu. Ngaphandle kwe-DPA ecacile, izibopho aziqondakali, ukwabiwa kwesikweletu akucaci, futhi ukuthobela kuba nzima ukukhombisa. Ochwepheshe bezikweletu kufanele baqinisekise ukuthi ama-DPA akhona nabo bonke abaqhubi abacubungula idatha yekhredithi egameni labo.
Izikhala Ezivamile ze-POPIA Ekusebenzeni Kwezikweletu
Naphezu kwezidingo ezicacile zokulawula, amafemu amaningi ezikweletu akuthola kunzima ukuthobela i-POPIA ngenxa yamagebe avamile ezinqubweni nasezinhlelweni zawo. Ukuqonda lezi zikhala kusiza amafemu ukuthi abone lapho adinga ukuthuthukisa khona nokuthi kungani izindlela ezihlelekile zibalulekile.
Igebe elivame kakhulu ukungabikho kwezivumelwano zokucubungula idatha ezisemthethweni nabathengisi be-software. Ochwepheshe abaningi bezikweletu basebenzisa izinkundla zesofthiwe ukuze badonse imibiko ye-credit bureau, benze ukuhlola, futhi baphathe amafayela amaklayenti, kodwa basebenza ngaphandle kwama-DPA acacile achaza izibopho zomsebenzisi, izidingo zokuphepha, kanye nokwabiwa kwesikweletu. Lokhu kudala ukungaqondakali mayelana nokuthi ubani onesibopho salokho, kwenza kube nzima ukubonisa ukuthobela umthetho, futhi kwandise ubungozi uma ukwephulwa kwemithetho kwenzeka. Ngaphandle kwe-DPA, ubudlelwano bomsebenzisi abucaci, futhi ochwepheshe bezikweletu bangase bathwale kanzima ukukhombisa ukuthi baye bagada ngendlela efanele.
Imibiko yehhovisi egcinwe kumadrayivu abelwe angabhaliwe noma amasistimu e-imeyili ingelinye igebe elivamile. Ochwepheshe bezikweletu bavame ukudonsa imibiko ezingosini zehhovisi, bayigcine njengama-PDF, futhi bayigcine kumafolda okwabelwana ngawo noma imicu ye-imeyili. Lezi zindlela zesitoreji ngokuvamile azikwazi ukubethela lapho uphumula, izilawuli zokufinyelela, noma amalogi okuhlola. Noma ubani okwazi ukufinyelela idrayivu eyabiwayo angabuka idatha yekhredithi ebucayi, futhi alikho irekhodi lokuthi ubani ofinyelele yiluphi ulwazi noma nini. Lokhu kwephula umbandela wezokuphepha we-POPIA futhi kudala ingozi enkulu yokufinyelela okungagunyaziwe noma ukwephulwa kwedatha.
Ukushoda kwezilawuli zokufinyelela kudatha yezikweletu kusabalele. Lapho i-bureau ibika, amarekhodi okuhlola, noma amafayela eklayenti agcinwa ezinhlelweni ezabiwe ngaphandle kwezilawuli zokufinyelela ezisekelwe indima, bonke abasebenzi bangase bakwazi ukufinyelela yonke idatha, kungakhathaliseki ukuthi bayayidinga emisebenzini yabo. Lokhu kwephula isimiso selungelo eliNCAne futhi kwandisa ingcuphe yokufinyelela okungagunyaziwe noma ukusetshenziswa kabi. Abahloli bezikweletu bangase badinge ukufinyelela emibikweni yehhovisi, kodwa izisebenzi zokuphatha zingase zingadingi ukufinyelela kudatha ebucayi yezezimali. Ngaphandle kokulawulwa kokufinyelela okufanele, amafemu awakwazi ukukhombisa ukuthi akhawulela ukufinyelela kulokho okudingekayo.
Amalogi okuhlola angekho adala izinkinga zokuthobela imithetho. Uma ochwepheshe bezikweletu bengakwazi ukukhombisa ukuthi ubani ofinyelele ukuthi iyiphi idatha, nini, noma ngayiphi injongo, bakuthola kunzima ukubonisa ukuthi bathatha ukuphepha njengento ebaluleke kakhulu nokuthi bangaphendula ngempumelelo izicelo zesihloko sedatha noma uphenyo lokwephulwa komthetho. Izindlela zokuhlola eziphelele zibalulekile kukho kokubili ukuthobela kwe-POPIA kanye nokuthobela uMthetho Kazwelonke Wezikweletu, futhi amasistimu aloga ngokuzenzakalelayo konke ukufinyelela nezinguquko adala imikhondo yokucwaninga eqinile kunokugcinwa kwamarekhodi mathupha.
Ayikho inqubo yesaziso sokuphulwa kwedatha eyigebe elibalulekile. Uma kwenzeka ukwephulwa kwemithetho, isikhathi sibalulekile, futhi izimpendulo zesikhashana azanele. Ochwepheshe bezikweletu kumele babe nezinqubo ezibhaliwe zokuthola ukwephulwa, okuqukethe umonakalo, ukwazisa abathintekayo, kanye nokubika kuMlawuli Wolwazi. Ngaphandle kwalezi zinqubo, amafemu angase abambezele izaziso, anikeze ulwazi olungaphelele, noma ahluleke ukuthatha izinyathelo ezifanele zokunciphisa, zandise kokubili ubungozi bokulawula kanye nokulimala kwezihloko zedatha.
Izinqubomgomo ezingacacile zokugcinwa kwedatha zidala izinkinga zokuthobelana. Uma ochwepheshe bezikweletu bengenazo izinqubomgomo ezicacile ezicacisa ukuthi izinhlobo ezahlukene zedatha zizogcinwa isikhathi esingakanani, ukuthi idatha izosuswa nini, nokuthi yikuphi okuhlukile okusebenzayo, basengozini yokugcina idatha isikhathi eside kunesidingo (bephula i-POPIA) noma basuse idatha ngaphambi kwesikhathi (kwephula ezinye izimfuneko zokulawula). Izinqubomgomo zokugcina kufanele zibhalwe phansi, zidluliselwe kubasebenzi, futhi zisetshenziswe ngendlela ehlelekile, kodwa amafemu amaningi ancike ezinqumweni zesikhashana noma acabange ukuthi idatha ingagcinwa unomphela.
Lezi zikhala azinakugwenywa. Avela ekuthembeleni ezinqubweni ezenziwa ngesandla, amathuluzi ajwayelekile, kanye nokugeleza komsebenzi we-ad hoc. Amafemu amukela amasistimu ahlelekile aklanyelwe ukusebenza kwezikweletu kanye nokuhambisana ne-POPIA angavala lezi zikhala futhi aguqule ukuthobelana nomthwalo kube umphumela wemvelo wemisebenzi emihle. Ochwepheshe bezikweletu abafinyelela idatha ye-bureau kufanele futhi bathobele Ikhodi Yokuziphatha ye-CBA, okwengeza izindinganiso eziqondene nomkhakha zokuphatha idatha. Okubalulekile wukuklama izinqubo namasistimu akha ukuvikeleka, izilawuli zokufinyelela, izindlela zokucwaninga, nokuphathwa kokugcinwa kokugeleza komsebenzi kwansuku zonke kunokuzithatha njengezinkinga ezihlukene.
Phatha Idatha Yesikweletu Ngokuzethemba
Ukuthobela i-POPIA kugxilile kuzo zonke izici zemisebenzi yezikweletu - kusukela ekutheni imibiko ye-bureau idonswa futhi igcinwe kanjani kuye ekutheni ukuhlolwa kwenziwa kanjani nokuthi idatha igcinwa kanjani. Ochwepheshe bezikweletu abasingatha idatha yekhredithi kufanele baqonde izibopho zabo njengezinkampani ezinomthwalo wemfanelo noma opharetha, basebenzise izinyathelo zokuphepha ezifanele, baqinisekise ukuthi izivumelwano zokucubungula idatha ziyasebenza, futhi bakhe ukuthobelana nokugeleza komsebenzi wabo kwansuku zonke.
Imiphumela yokungathobeli imithetho mibi kakhulu: izinhlawulo ezilawulayo, isikweletu somphakathi, ukulahlekelwa ukwethenjwa kwekhasimende, kanye nokulimala okungaba khona kubathengi. Kodwa ukuthobelana kuyafezeka uma amafemu ekuphatha njengomgomo wokuklama esikhundleni sokucabanga kamuva. Amasistimu enza idatha yekhredithi ibe phakathi, esebenzisa izilawuli zokufinyelela ezisekelwe endimeni, ebethela idatha lapho uphumule futhi usendleleni, egcina izindlela zokucwaninga eziphelele, futhi ezilawula ukugcinwa zisekela ngokuzenzakalelayo ukuthobela kwe-POPIA ngokuphumelelayo kunezinqubo ezenziwa mathupha noma amathuluzi ajwayelekile.
Xhumana ukubhukha idemo futhi ubone ukuthi izilawuli zokufinyelela ezisekelwe endimeni, isitoreji esibethelwe, nezindlela zokuhlola ezigcwele zisekela kanjani izibopho zakho ze-POPIA lapho usebenza nedatha ye-credit bureau.