Every property transaction in South Africa involves the collection and sharing of significant personal information. ID documents, bank statements, income details, residential addresses - these all pass through the hands of multiple professionals during a sale. Understanding how this information must be handled - and your rights when it isn't - is increasingly important.
What Is POPIA?
POPIA is the Protection of Personal Information Act, South Africa's comprehensive data protection legislation. It came into full effect in July 2021 and places obligations on any organisation or individual that collects, processes, stores, or shares personal information.
In the property sector, POPIA applies directly to estate agents, conveyancing attorneys, bond originators, and property platforms like Homely.
What Personal Information Is Collected in a Property Transaction?
The list is extensive:
- Identity documents and ID numbers
- Income information and payslips
- Bank statements
- Credit history
- Residential addresses
- Contact details (phone, email)
- Financial commitments and debts
- Employment details
This information is shared between the seller, buyer, estate agent, transferring attorney, bond registration attorney, and bank. Each party that handles your information must comply with POPIA.
Key POPIA Obligations on Property Professionals
Lawful purpose. Personal information can only be collected and used for a specific, lawful purpose related to the transaction. It cannot be used for other purposes without consent.
Minimal collection. Only the information actually needed for the transaction can be collected. Asking for more than necessary is non-compliant.
Security. Personal information must be stored securely. Agents and attorneys must have appropriate systems to prevent unauthorised access, loss, or theft.
Retention limits. Information must not be kept longer than necessary. Once a transaction is complete and the retention period expires, data should be destroyed.
Third-party restrictions. Personal information cannot be shared with third parties (including marketing companies) without consent.
Your Rights Under POPIA
As a party to a property transaction, you have the following rights:
Right to access. You can ask any party holding your personal information what information they have about you.
Right to correction. You can require that incorrect information be corrected.
Right to object. You can object to the processing of your personal information in certain circumstances.
Right to complain. If you believe your personal information has been mishandled, you can complain to the Information Regulator (South Africa's data protection authority).
Practical Tips
- Ask estate agents and attorneys for their POPIA privacy policy before providing personal information
- Be wary of agents who want more information than the transaction requires
- If you're on an agent's mailing list and don't want to be, you have the right to opt out
- If a property platform asks for information that doesn't seem relevant, ask why it's needed