POPIA Toolkit - Operator clause for service level agreements

OPERATOR CLAUSE FOR POPIA – SERVICE LEVEL AGREEMENT 1. Privacy and Operator Duties as an Operator (This clause can be considered and adapted to add to the service level agreements or appointments of Operators who process PI on behalf of the ETDP SETA and with its instruction) 1.1 The Protection of Personal Information Act, 4 of 2013 (POPIA) regulates and controls the processing of Personal Information. The ETDP SETA renders the Service of a ______ and for the purposes of carrying out its business and related objectives, does and will from time to time, processes Personal Information belonging to living individuals and legal entities including public and private entities, (hereinafter referred to as “Data Subjects”). 1.2 Such personal information will be pertaining to the following Data Subjects: 1.2.1 Clients; 1.2.2 Employees of the ETDP SETA and 1.2.3 Service providers, Operators, sub-Operators, 1.2.4 Visitors; 1.2.5 other third parties to whom the services are rendered or with whom the ETDP SETA engage from time to time. 1.3 In order for the ETDP SETA to pursue its business interests, to protect its legitimate interests and to manage its risks, the ETDP SETA may from time to time have to