POPI Condition 2 - Processing Limitation

Please respond to the POPI Condition 2 assessment questions below.

Q2. Lawfulness of processing

What checks do you have for the lawfulness of what you plan to do with the information?

Q3. Minimality

How do you know the information is: Adequate; relevant; not excessive?

Q4. Consent, justification and objection

"• Has consent been obtained? • Is this really necessary? • Is there a legal reason we need to do this? • Does this protect the data subject (e.g. rights under a contract) • You have or 3rd party has a legitimate interest? • Do you have proof of consent? • Do you explain how data subject can object? • Do you have direct marketing opt out (not unsolicited?) • Proof that objection has been auctioned? "

Q5. Collection directly from data subject

"• Is the data direct from the data subject? • If from a public record, can you show source? • If made public by subject can you show source? • If other source used, has consent been obtained? • If other source, can we show no prejudice? "

This Form cannot be submitted until the missing fields (labelled below in red) have been filled in

Please note that all fields followed by an asterisk must be filled in.

E-Mail Address*

Business Phone

Q2. As-Is

Unassessed Not achieved Partially achieved Largely achieved Fully achieved

Q2. To-Be

Unassessed Not achieved Partially achieved Largely achieved Fully achieved

Q3. As-Is

Unassessed Not achieved Partially achieved Largely achieved Fully achieved

Q3. To-Be

Unassessed Not achieved Partially achieved Largely achieved Fully achieved

Q4. As-Is

Unassessed Not achieved Partially achieved Largely achieved Fully achieved

Q4. To Be

Unassessed Not achieved Partially achieved Largely achieved Fully achieved

Q5. As-Is

Unassessed Not achieved Partially achieved Largely achieved Fully achieved

Q5. To-Be

Unassessed Not achieved Partially achieved Largely achieved Fully achieved