POPIA Violation

Good Day,

I am writing to formally notify you of my intent to lodge a complaint under the Protection of Personal Information Act, 2013 (“POPIA”), based on what I believe to be a violation of my personal information rights.

On 10 December 2024, at exactly 4:13 PM, I received an unsolicited phone call from your company using the number ***

During the call, I inquired about the source of my personal information. Among the responses I was provided with was “Have you not done any car insurance quotes lately?” To which I rep**** “No”. When I broached the subject of POPIA asking when I consented, I was told it was an “opt-in system” as well as “That’s not how the law works, You don’t have to be like that now, Why go there I will just OPT you out”.

As per Section 11 and Section 69 of POPIA, this explanation is inadequate. The Act explicitly requires that personal information be collected and processed lawfully, reasonably, and transparently, with explicit consent or other legally recognized justifications for its use. The phrase “Have you not done another car insurance quotes lately” does not meet the transparency or consent standards mandated by POPIA.

Please treat this correspondence as a formal notification of my intent to escalate this matter to the Information Regulator if I do not receive, within seven (7) business days, a comprehensive explanation regarding the acquisition and processing of my personal data, as well as confirmation of your compliance with POPIA.

I trust that this matter will be addressed with the seriousness it warrants.

Yours sincerely,

Carri-Ann Bloom