Property glossary
POPIA consent
Also known as: data processing consent, consent to process personal information
A data subject's voluntary, specific and informed agreement to the processing of their personal information, one of the lawful bases under POPIA.
Definition
POPIA consent is the free, specific and informed expression of will by which a person (the data subject) agrees that their personal information may be processed. It is one of several justifications for processing under the Protection of Personal Information Act — not always required, but central where no other lawful basis applies. Consent must be capable of being withdrawn, and the responsible party carries the burden of proving it was given.
In the South African context
POPIA (Protection of Personal Information Act 4 of 2013) governs how property practitioners, landlords and managing agents collect and use personal information of tenants, owners and applicants. Processing must satisfy the Act's eight conditions for lawful processing, and special personal information and processing of children's data attract stricter rules. The Information Regulator oversees compliance, and consent obtained must be a genuine, documented agreement rather than a buried tick-box.
Example
A rental application form includes a clear clause by which the applicant consents to the agent obtaining a TPN and credit report; the signed consent is retained as proof that the screening was lawful.
Why it matters
Without a valid lawful basis such as consent, screening, marketing or data-sharing can breach POPIA and expose the firm to complaints, enforcement and reputational harm.
Informational only — not legal advice. Confirm specifics against the current Act and your scheme’s rules.
Sources
- POPIA — Protection of Personal Information Act 4 of 2013 — consent as a justification and the conditions for lawful processing