Legal & Compliance
Official Document Effective 28 September 2026 · v2.0

Privacy Policy

How we collect, use, and protect your data

PRIVACY POLICY

Livi Lemphakatsi Citizen Engagement Platform

Effective Date: 28 September 2026
Version: 2.0

1. WHO WE ARE

1.1 Data Controller Identity

This privacy policy governs the collection, use, and protection of your personal information when you use the Livi Lemphakatsi citizen engagement platform ("Platform"). The citizen service is provided through the Livi Lemphakatsi mobile application, available on iOS and Android. Legal documents are available on the legal-document website at https://legal.livilemphakatsi.co.za. Requests for access, correction or deletion of personal information can be sent to support@livilemphakatsi.co.za.

The Platform is operated by:

Mpumalanga Provincial Government
Department of Cooperative Governance, Human Settlements and Traditional Affairs (CoGHSTA)

Contact Details:

1.2 Information Officer

As required by the Protection of Personal Information Act, 2013 ("POPIA"), we have designated an Information Officer. To contact the Information Officer, please reach out via Primary Platform Support:

The Information Officer is responsible for:

  • Ensuring compliance with POPIA
  • Handling data subject requests
  • Managing data protection procedures
  • Liaison with the Information Regulator

2. WHAT PERSONAL INFORMATION WE COLLECT

2.1 Information You Provide Directly

2.1.1 Account and Contact Information

  • Mobile phone number (MSISDN) - Used as your unique identifier
  • First name and surname - For account identification
  • Home address details (address lines, postal code, province, district, municipality, ward)
  • Work address details (optional)
  • Additional contact details - Email addresses and alternative contact numbers that you choose to provide

2.1.2 Issue and Case Reporting Information

  • Issue descriptions - Free-text descriptions of service delivery problems
  • Location information - GPS coordinates and physical addresses where issues occur
  • Photos and videos - Media you upload with reports, cases or disputes, including audio recorded as part of a video
  • Report and case messages - Messages exchanged through the Platform with officials about your reports or cases, including missing-person reports
  • Contact preferences - How you wish to receive updates

2.1.3 Disaster Management Information

  • Missing person reports - Names and details of missing persons
  • Emergency incident reports - Details of disasters or emergencies
  • Help requests - Assistance needed during disasters
  • Volunteer information - Details if you register as a disaster response volunteer

2.1.4 Feedback Information

  • Ratings - Quality ratings for resolved issues
  • Comments - Free-text feedback on service delivery
  • Suggestions - Improvement recommendations
  • Compliments - Positive feedback on government services

2.2 Information Collected Automatically

2.2.1 Location Data

  • GPS coordinates - Precise location when you use location-based features
  • Address data - Reverse geocoded addresses from GPS coordinates
  • Ward/municipality mapping - Administrative boundary assignments

2.2.2 Device and Technical Information

  • Device identifiers - Through Firebase SDK integration
  • App usage data - Last activity timestamps, feature usage
  • Push notification tokens - Firebase Cloud Messaging tokens
  • Session information - Login/logout times, session duration

2.2.3 Operational and Security Records

  • API activity records - Requested endpoints, request methods, response status codes and timestamps, associated with your account where authenticated
  • Security records - Records of authentication and security-related events

These server-side records are separate from the disabled app telemetry described in section 10.

3. WHY WE COLLECT YOUR INFORMATION (LAWFUL BASIS)

We process your personal information to fulfill our constitutional and legal mandate to deliver municipal services:

  • Issue tracking and resolution - To address service delivery problems
  • Geographic assignment - To route issues to correct municipal departments
  • Progress updates - To keep you informed of resolution status
  • Quality assurance - To ensure service delivery standards

3.2 Emergency Services (POPIA Section 11(1)(c) - Vital Interests)

During disasters and emergencies, we process information to protect life and safety:

  • Missing person coordination - To facilitate search and rescue
  • Emergency response - To coordinate disaster relief efforts
  • Public safety alerts - To warn of imminent dangers
  • Resource coordination - To allocate emergency resources effectively

3.3 Public Interest (POPIA Section 11(1)(e) - Public Interest)

We process information for broader public benefit:

  • Service planning - To improve service delivery based on demand patterns
  • Resource allocation - To prioritize infrastructure investments
  • Policy development - To inform government decision-making
  • Transparency reporting - To publish aggregate service delivery statistics

For optional features, we rely on your explicit consent:

  • Marketing communications - Non-essential government announcements
  • Research participation - Voluntary surveys and studies
  • Enhanced notifications - Personalized notification preferences

4. HOW WE USE YOUR INFORMATION

4.1 Core Service Delivery

4.1.1 Issue Management

  • Creating and tracking service delivery issues
  • Routing issues to appropriate municipal departments
  • Providing status updates throughout the resolution process
  • Generating reference numbers for tracking
  • Maintaining complete audit trails

4.1.2 Geographic Services

  • Determining which municipality/ward has jurisdiction
  • Mapping issues to administrative boundaries
  • Providing location-based information (nearest clinic, school, etc.)
  • Emergency service coordination

4.2 Communication and Notifications

4.2.1 Essential Communications

  • Issue status updates and resolution notifications
  • Emergency alerts and public safety warnings
  • Service delivery interruption notices
  • Official government announcements
  • Newsletter subscriptions
  • Event notifications
  • Survey invitations
  • General government updates

4.3 Community Participation (Municipal Systems Act Section 16-19)

4.3.1 Facilitating Democratic Participation

  • Community input mechanisms - Enable citizen participation in municipal governance
  • Petition and complaint processing - Formal channels for community concerns
  • Public consultation - Facilitate community input on municipal policies
  • Ward committee support - Enable communication with ward committees
  • Participatory governance - Support democratic decision-making processes

4.3.2 Municipal Accountability

  • Performance monitoring - Track municipal service delivery performance
  • Transparency reporting - Publish service delivery statistics and outcomes
  • Citizen feedback integration - Incorporate community input into service improvement
  • Public information sharing - Communicate municipal decisions and policies

4.4 Platform Improvement

4.4.1 Service Enhancement

  • Analyzing service delivery patterns to improve response times
  • Identifying common issues for proactive addressing
  • Evaluating user satisfaction to enhance platform features
  • Planning infrastructure improvements based on demand

4.4.2 System Maintenance

  • Troubleshooting technical issues
  • Monitoring system performance and availability
  • Preventing fraud and abuse
  • Ensuring platform security

5. THIRD-PARTY DATA SHARING

5.1 Mapping and Push-Notification Providers

5.1.1 Mapping and Location-Service Providers

Data Shared: GPS coordinates, address queries
Purpose: Location services, reverse geocoding
Legal Basis: Necessary for service delivery
Location: Provider servers worldwide
Protection: Provider security measures

5.1.2 Push-Notification Providers

Data Shared: Push notification tokens
Purpose: Delivery of push notifications
Legal Basis: Legal obligation (emergency notifications)
Location: Provider servers worldwide
Protection: Provider security infrastructure

Firebase Analytics, Crashlytics and Performance Monitoring collection are configured to be disabled, as described in section 10. Push notifications are a separate service.

5.2 Cloud Hosting, Storage and Email-Delivery Providers

5.2.1 Media-Storage Providers

Data Shared: Photos, videos, documents and other media attachments
Purpose: Secure file storage and retrieval
Legal Basis: Necessary for service delivery
Location: United States data centers
Protection: Provider encryption and security controls

5.2.2 Background Processing and Email-Delivery Providers

Data Shared: Background task data, email communications
Purpose: System processing, automated notifications
Legal Basis: Necessary for service delivery
Location: Provider data centers; international processing is described in sections 6 and 15
Protection: Provider security infrastructure

5.3 Municipal and Provincial Departments

Reports, cases and associated information are shared with the municipality or provincial department responsible for handling them, for service delivery, investigation, communication and follow-up.

Data Shared: Reports, cases, user contact information, location data and associated messages and media
Purpose: Service delivery, investigation, communication and follow-up
Legal Basis: Legal obligation (government service delivery)
Recipients: Responsible municipalities and provincial departments, including provincial disaster management
Protection: Government security protocols and access controls

Oversight of delayed provincial cases: When cases reported to provincial departments are delayed, information about those cases is made available through the Office of the Premier's dashboard. The Office of the Premier uses this information to follow up with the relevant heads of department about the delays.

5.4 Emergency Services

Data Shared: Emergency incident data, missing person information, location coordinates
Purpose: Emergency response, search and rescue operations
Legal Basis: Vital interests, legal obligation
Recipients: SAPS, Emergency Medical Services, Fire Services
Protection: Secure government communication channels

6. CROSS-BORDER DATA TRANSFERS

6.1 International Transfers

Some of your personal information may be transferred to and processed in countries outside South Africa:

6.1.1 United States Service Providers

Adequacy Status: No adequacy decision by Information Regulator
Safeguards: Standard contractual clauses, corporate security policies
Data Types: Uploaded photos and videos, location data, push tokens and email communications
Purposes: Media storage, mapping, push notifications, email delivery and cloud infrastructure

6.1.2 Protection Measures

We ensure appropriate safeguards for international transfers:

  • Contractual data protection obligations with service providers
  • Regular security and compliance audits
  • Data minimization (only transfer necessary data)
  • Encryption in transit and at rest
  • Right to request data localization where technically feasible

7. DATA RETENTION AND DELETION

7.1 Retention Principles

We retain personal information for the purposes for which it was collected and for other retention permitted or required by law. Retention depends on the record type, its purpose, applicable record-keeping requirements and any lawful preservation requirement.

Municipal reports and provincial cases. We retain the necessary records of municipal reports and cases with provincial departments for a minimum of three years after final closure, including completion of any dispute or review. Supporting messages and media are retained where needed as part of those records. A longer period may apply where required by law or a lawful preservation requirement. Records are not automatically deleted when three years have passed.

This minimum does not apply to every type of information we hold or justify retaining unnecessary personal information. Other record types are assessed according to their purpose and applicable retention requirements. It does not delay the removal of account identity and contact fields when account deletion is completed, as described in section 7.2.

When retention is no longer authorised, the information must be securely destroyed, deleted or de-identified as soon as reasonably practicable. Closing an account does not determine the retention period for every associated record.

Inactivity alone does not trigger automatic account deletion. Section 7.2 explains the effects of completed account deletion and the information that remains.

7.2 Deletion Procedures

Requesting deletion. To request deletion of your account or personal information, contact support@livilemphakatsi.co.za. If account deletion is available in your app, follow its verification instructions.

What account deletion does. When account deletion is completed, access to the account is disabled. Your name, surname, cellphone number and email/contact details are removed from the account's designated identity and communication fields. Your cellphone number becomes available for a new registration.

What account deletion does not remove. The internal account record and its links to retained records remain. Deletion does not automatically erase your reports, cases, messages, uploaded media, addresses or information identifying you within retained records.

Contact details recorded in disaster incidents, emergency requests, volunteer registrations, missing-person reports and provincial cases remain in those records. Identifying information may also remain in security records, photographs, videos and free-text submissions. Account deletion does not make these retained records anonymous.

Other personal-information requests. You may separately request correction or deletion of personal information. Any decision to retain it must have an applicable lawful basis. Section 8.3 describes how to exercise this right.

Completion records. We keep an audit record when account deletion is completed.

8. YOUR RIGHTS UNDER POPIA

8.1 Right of Access (Section 23)

You have the right to:

  • Know whether we are processing your personal information
  • Request a copy of your personal information
  • Understand how your information is being used

How to exercise: Email support@livilemphakatsi.co.za and describe the information or records you are requesting. Section 8.5 explains the request and identity-verification process.

8.2 Right to Correction (Section 24)

You have the right to:

  • Request correction of inaccurate personal information
  • Request completion of incomplete personal information
  • Request deletion of information unlawfully obtained

How to exercise: Submit correction request through the mobile app or contact Primary Platform Support

8.3 Right to Deletion

You may request correction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully. You may also request destruction or deletion of records that we are no longer authorised to retain under POPIA.

To request account deletion or exercise these personal-information rights, contact support@livilemphakatsi.co.za. If account deletion is available in your app, follow its verification instructions. The effects of account deletion are described in section 7.2; it does not automatically erase all personal information held about you.

Any decision to retain information must have an applicable lawful basis. We will notify you of the action taken on your request and explain any decision to retain the information.

8.4 Right to Object (Section 25)

You may object to processing based on:

  • Direct marketing (we will stop immediately)
  • Legitimate interests (we will stop unless compelling legitimate grounds exist)
  • Automated decision-making (right to human review)

8.5 Submitting Personal-Information Requests

Contact support@livilemphakatsi.co.za to request access to, correction of or deletion of your personal information. Describe the information or records concerned. We will explain the identity verification and any applicable request procedure before disclosing information.

Requests will be handled within the applicable legal timeframes. Where access is restricted or information must be retained, we will explain the decision and available review or complaint procedures.

8.6 Community Participation Rights (Municipal Systems Act)

8.6.1 Democratic Participation Rights

Under the Municipal Systems Act 32 of 2000, you have specific rights regarding your participation data:

  • Access to participation history - View your submissions, petitions, and complaints
  • Correction of participation records - Ensure accurate representation of your community input
  • Anonymization options - Request anonymized inclusion in community participation statistics
  • Withdrawal from participation - Opt out of community participation features while maintaining essential services

8.6.2 Community Input Protection

Your community participation data is protected through:

  • Democratic process integrity - Ensuring genuine community representation
  • Non-retaliation protection - Preventing adverse action based on participation
  • Transparent processing - Clear communication about how community input is used
  • Aggregate reporting - Individual participation data included in statistical reports only with consent

9. CHILDREN'S PERSONAL INFORMATION

9.1 Minors Under 18

Special protections apply to users under 18 years:

  • Consent requirements: Parental/guardian consent required for users under 12
  • Limited data collection: Minimal data collection for educational services (schools)
  • Enhanced protection: Additional security measures for children's data
  • Retention limits: Shorter retention periods for children's information
  • Right to deletion: Enhanced deletion rights upon reaching majority

9.2 School Services

For school-related services (enrollment, information), we:

  • Collect only information necessary for educational administration
  • Require parental consent for children under 12
  • Limit data sharing to educational authorities only
  • Provide enhanced security protections
  • Delete data when children leave the school system

10. ON-DEVICE STORAGE AND APP TELEMETRY

10.1 On-Device Storage

The app stores information on your device, including sign-in credentials or tokens, preferences and cached content, to support its operation.

10.2 App Telemetry

Firebase Analytics, Crashlytics and Performance Monitoring collection are configured to be disabled. The app does not provide controls for enabling these services.

Push notifications are a separate service and use notification tokens to deliver messages to your device.

The Platform also maintains server-side operational records, including API activity and security logs. Disabling app telemetry does not disable these records.

11. DATA SECURITY MEASURES

11.1 Technical Safeguards

We protect your personal information through:

11.1.1 Encryption

  • Data in transit: TLS encryption for all data communications
  • Data at rest: AES encryption for stored data
  • Database encryption: PostgreSQL transparent data encryption
  • File storage: Cloud storage server-side encryption

11.1.2 Access Controls

  • Authentication: Multi-factor authentication for staff access
  • Authorization: Role-based access control with minimal necessary permissions
  • Audit logging: Complete logs of all data access and modifications
  • Regular reviews: Quarterly access permission reviews

11.1.3 Infrastructure Security

  • Network security: Firewalls and intrusion detection systems
  • Server hardening: Regular security updates and patches
  • Monitoring: 24/7 security monitoring and incident response
  • Backup security: Encrypted backups with restricted access

11.2 Organizational Safeguards

11.2.1 Staff Training

  • Regular POPIA compliance training for all staff
  • Data handling procedures and best practices
  • Security awareness and incident reporting
  • Confidentiality agreements for all personnel

11.2.2 Policies and Procedures

  • Data protection impact assessments for new features
  • Regular security audits and vulnerability assessments
  • Incident response procedures for data breaches
  • Vendor due diligence for third-party services

11.3 Data Breach Response

We will promptly investigate suspected security compromises, take appropriate steps to contain them and reduce harm, and document our response.

Where there are reasonable grounds to believe that an unauthorised person has accessed or acquired personal information, we will notify the Information Regulator and affected people as soon as reasonably possible after discovery, in accordance with section 22 of POPIA. Notification to an affected person is not required where their identity cannot be established.

Timing will take account of legitimate law-enforcement needs and measures reasonably necessary to establish the scope of the compromise and restore system integrity. We will not wait for a completed investigation before notifying, and will supplement notifications as further information becomes available.

Notices to affected people will be in writing and explain the possible consequences, our response measures, recommended protective steps, and the identity of the unauthorised person where known.

Notification to affected people may be delayed only where the Information Regulator or the relevant public law-enforcement body determines that notification would impede a criminal investigation.

We will review the incident and take appropriate measures to address identified weaknesses.

12. LAWFUL BASIS FOR PROCESSING

Most data processing is necessary for our legal obligation to deliver municipal services under:

  • Municipal Systems Act 32 of 2000 - Community participation (Section 16-19) and service delivery obligations (Section 73-81)
  • Municipal Structures Act 117 of 1998 - Ward committee functions (Section 72-74)
  • Municipal Finance Management Act, 2003 - Financial and administrative duties
  • Disaster Management Act, 2002 - Emergency response duties
  • Provincial and municipal by-laws - Specific service delivery requirements

Specific Municipal Systems Act Obligations:

  • Section 16: Develop mechanisms for community participation in municipal governance
  • Section 17: Establish processes for community input on municipal matters
  • Section 18: Communicate information to the local community
  • Section 19: Receive, process and consider petitions and complaints from community
  • Section 73: General duty to provide municipal services to local community
  • Section 78: Monitor and review municipal services delivery

12.2 Vital Interests (POPIA Section 11(1)(c))

Emergency and disaster-related processing protects vital interests:

  • Missing person coordination - Life and safety protection
  • Emergency response - Disaster relief coordination
  • Public safety alerts - Warning of imminent dangers
  • Medical emergency assistance - Health and safety protection

12.3 Public Interest (POPIA Section 11(1)(e))

Processing for broader public benefit:

  • Service delivery improvement - Enhancing government services
  • Resource planning - Optimizing infrastructure investments
  • Policy development - Evidence-based governance
  • Transparency reporting - Public accountability

Explicit consent for optional features:

  • Marketing communications - Non-essential announcements
  • Research participation - Voluntary studies and surveys
  • Personalization - Customized user experience

You may withdraw consent at any time by:

13.2 Effects of Withdrawal

When you withdraw consent:

  • We will stop processing data for that purpose immediately
  • Previously collected data may be retained for legal obligations
  • Essential services will continue based on other lawful bases
  • You may lose access to certain optional features

14. SHARING YOUR INFORMATION

14.1 Within Government

We share your information with other government entities when necessary for:

14.1.1 Service Delivery

Reports, cases and associated information are shared with the municipality or provincial department responsible for handling them, for service delivery, investigation, communication and follow-up.

  • Municipal departments - Responsible for municipal matters such as water, electricity, roads and waste management
  • Provincial departments - Responsible for matters within their mandates, including health, education and disaster management
  • Emergency services - Police (SAPS), fire services, medical emergency services

14.1.2 Administrative Coordination

  • Office of the Premier - Information about delayed provincial cases is made available through its dashboard to follow up with the relevant heads of department about delays, as described in section 5.3
  • Statistics South Africa - For national statistical purposes (anonymized)
  • National Treasury - For government performance reporting (anonymized)
  • Provincial Treasury - For budget and planning purposes (anonymized)

14.2 Third-Party Service Providers

We share limited information with trusted service providers:

14.2.1 Technology Partners

  • Cloud hosting and media-storage providers - Process Platform records and uploaded media to host the service and store and retrieve its content
  • Mapping and location-service providers - Process location coordinates and address queries to provide maps and location services
  • Push-notification providers - Process notification tokens and message payloads to deliver notifications
  • Email-delivery providers - Process recipient email addresses and message content to deliver email communications
  • Background-processing providers - Process task data needed to carry out Platform operations

Sections 5, 6 and 15 describe these purposes and international processing. Describing providers by category does not mean that all processing takes place in South Africa.

14.2.2 Data Processing Agreements

All third-party providers must:

  • Sign comprehensive data processing agreements
  • Implement appropriate security measures
  • Process data only for specified purposes
  • Comply with South African data protection requirements
  • Submit to regular compliance audits

We may disclose information when legally required:

  • Court orders - Compliance with judicial proceedings
  • Law enforcement - Cooperation with lawful investigations
  • Regulatory compliance - Information Regulator requests
  • Public safety - Imminent threat prevention

15. INTERNATIONAL DATA TRANSFERS

15.1 Cross-Border Transfers

Some of your personal information is processed outside South Africa by:

15.1.1 Mapping and Notification Providers (United States)

  • Push-notification providers - Notification tokens and message payloads for delivery of push notifications
  • Mapping and location-service providers - Location coordinates and address queries for mapping services

15.1.2 Cloud Storage and Email-Delivery Providers (United States)

  • Media-storage providers - Uploaded photos, videos, documents and other media for storage and retrieval
  • Email-delivery providers - Recipient email addresses and message content for email delivery
  • Background-processing providers - Task data for Platform operations

15.2 Transfer Safeguards

For international transfers, we implement:

  • Standard contractual clauses - EU-approved data transfer mechanisms
  • Corporate security policies - Provider-level protection commitments
  • Regular audits - Verification of security and compliance measures
  • Data minimization - Transfer only essential data
  • Encryption requirements - All data encrypted in transit and storage

15.3 Data Localization Preference

Where technically and economically feasible, we prefer:

  • Local data centers - South African or African hosting
  • Regional providers - African technology partners
  • Government cloud - State-owned infrastructure where available

16. YOUR PRIVACY CONTROLS

16.1 Controls Available to You

  • Device permissions: Manage location and notification permissions through your device settings. Available options depend on your device and operating system.
  • Alert preferences: Use the app's alert settings to choose among the notification categories offered there.
  • Personal-information requests: Contact support@livilemphakatsi.co.za to request access, correction or deletion as described in section 8.

16.2 Requests by Email or in Writing

Requests for access, correction or deletion of personal information can be sent to Primary Platform Support at support@livilemphakatsi.co.za or submitted in writing to our offices. Section 8 describes these rights, and section 7.2 explains the effects of account deletion.

17. COMPLAINTS AND DISPUTES

17.1 Information Regulator

If you are unsatisfied with our handling of your personal information, you may lodge a complaint with the Information Regulator:

Information Regulator (South Africa)
Physical Address:
JD House
27 Stiemens Street
Braamfontein, Johannesburg, 2001

Postal Address:
P.O Box 31533
Braamfontein, Johannesburg, 2017

Contact Details:

17.2 Internal Complaints Process

Before approaching the Information Regulator, please contact us:

  1. Contact Primary Platform Support: support@livilemphakatsi.co.za or +27 76 549 5763
  2. Provide details: Nature of complaint, relevant information, desired resolution
  3. Response timeframe: We will respond within 30 days
  4. Escalation: If unsatisfied, you may escalate to the Information Regulator

18. UPDATES TO THIS POLICY

18.1 Policy Changes

We may update this privacy policy:

  • Legal compliance: To reflect changes in privacy laws
  • Service changes: When we introduce new features or services
  • Best practices: To adopt improved privacy protection measures

18.2 Notification of Changes

We will notify you of significant changes through:

  • Mobile app notifications - Push notifications for major updates
  • Email communications - Direct notification to registered users
  • Website notice - Prominent notice on our legal-document website (https://legal.livilemphakatsi.co.za)
  • Version tracking - Clear version numbers and effective dates

18.3 Acknowledgment of Updates

When an updated Privacy Policy is presented through the app's legal-document process, you will be asked to acknowledge that you have read and understood it. Continuing to use the Platform does not, by itself, constitute that acknowledgment.

Acknowledging this policy does not provide blanket consent to optional processing. Where processing requires your consent, that consent must relate to the specific processing concerned.

If you have concerns about an update, contact support@livilemphakatsi.co.za. You may request account deletion as described in section 8.3.

19. CONTACT INFORMATION

19.1 Primary Platform Support

For questions about this privacy policy, data protection, or general Platform support:

19.2 National Emergency Lines

  • Police: 10111
  • Medical Emergency: 10177
  • General Emergency: 112

19.3 Online Resources

20.1 Governing Law

This privacy policy is governed by:

  • Protection of Personal Information Act 4 of 2013 (POPIA)
  • Municipal Systems Act 32 of 2000 (Community participation and service delivery)
  • Municipal Structures Act 117 of 1998 (Municipal governance structures)
  • Constitution of South Africa, 1996 (Section 14 - Privacy, Section 152-153 - Municipal mandate)
  • Electronic Communications and Transactions Act 25 of 2002 (ECTA)
  • Promotion of Access to Information Act 2 of 2000 (PAIA)
  • Disaster Management Act 57 of 2002 (Emergency response obligations)

20.2 Jurisdiction

Any disputes arising from this privacy policy shall be subject to the exclusive jurisdiction of the South African courts.

20.3 Language

This policy is available in English. Translations may be provided for accessibility, but the English version shall prevail in case of discrepancies.

21. DEFINITIONS

Data Subject: An individual whose personal information is processed
Information Officer: The person designated to ensure POPIA compliance
Information Regulator: The regulatory body established under POPIA
Personal Information: Information that identifies or could identify an individual
Processing: Any operation performed on personal information
Responsible Party: The entity determining the purpose and means of processing

Document Version: 2.0
Effective Date: 28 September 2026
Last Updated: 28 September 2026
Review Date: 28 September 2027

This privacy policy has been prepared to comply with the Protection of Personal Information Act, 2013 and represents the Mpumalanga Provincial Government's commitment to protecting citizen privacy while delivering essential government services.

Back to top
Contents
{{tocItems}}