Miway Non Compliance to POPIA

I have a personal issue with a person who claims to work for car insurance. My personal issue with her has led her to access my insurance data from Miway systems. She came to my place and told me that I canceled insurance with Miway was canceled because of nonpayment. The information she has regarding Miway about me is shocking. Now from Miway I would love to know why is client information not protected. I thought Miway is a big company that has to ensure abides with the POPIA. How can someone(I don't care even if she is your employee) use my personal information accessed through Miway for personal benefits?

I am so disappointed Miway who does not control access to clients personal data.