Trust Centre › 7. Data protection (POPIA)
Data protection (POPIA)
In short
For the records you keep in DIANO, your business is the responsible party and DIALE Consulting is the operator. DIANO does not sell personal information and does not use your records for marketing.
Who is who
- For the records you keep in DIANO, your business is the responsible party and DIALE Consulting is the operator.
- An operator must have a written contract with the responsible party and must tell it immediately if there are reasonable grounds to believe personal information was accessed by someone without permission. (POPIA, Act 4 of 2013, section 21.) Source
The Information Officer
- DIALE Consulting's Information Officer is Jonathan Diale (Director). Contact: info@diale.co.za, 087 265 3889.
When people ask about their own information
- The draft Operator Agreement says DIANO passes on to you any request from your customers or staff about their personal information, and helps you answer it.
- For DIANO's own records about you, you can ask the Information Officer for access, correction or deletion, and you can complain to the Information Regulator.
You can also contact the Information Regulator: The Information Regulator (South Africa).
If something goes wrong
- If DIANO learns of a security compromise affecting your records, DIANO will tell you, and the Information Regulator as POPIA section 22 requires.
- The draft Operator Agreement proposes that DIANO tells you as soon as it has reasonable grounds to believe your records were reached by someone without permission, and in any case within 24 hours.
- The responsible party must tell the Information Regulator and the people affected as soon as reasonably possible after a security compromise is found. (POPIA section 22.) Source
- Since 1 April 2025 the Information Regulator requires security compromises to be reported through its eServices portal, and the Information Officer must be registered there first. Source
The Operator Agreement
- A draft Operator Agreement is ready for review by DIANO's lawyer. It is not signed or in force yet.
Read the draft on the Downloads page. Please tell us what your own lawyer would change.
Sending data to other countries
- Personal information may be sent to another country only under the conditions of POPIA section 72, for example where the receiver is bound by rules that protect it as well as POPIA does. Source
The places outside South Africa are listed on Where your data lives.
Roadmap: planned, not true yet
- Planned — target November 2026: The Operator Agreement is reviewed by a lawyer and offered to every company.
Targets can move. When an item is done, it moves up into the page with its proof. The whole roadmap.
For your IT team / auditor
Each statement on this page, how it was checked and when. Every check was read-only. The full evidence (commands and their output) is available to auditors on request.
| Statement | How it was checked | Checked |
|---|---|---|
| For the records you keep in DIANO, your business is the responsible party and DIALE Consulting is the operator. | DIANO's published pages (clause 3). | 2026-10-19 |
| DIANO does not sell personal information and does not use your records for marketing. | DIANO's published pages (clause 4). | 2026-10-19 |
| DIALE Consulting's Information Officer is Jonathan Diale (Director). Contact: info@diale.co.za, 087 265 3889. | DIANO's published pages (clause 1); confirmed by Jonathan on 19 Oct 2026 (DIANO's records). | 2026-10-19 |
| The draft Operator Agreement says DIANO passes on to you any request from your customers or staff about their personal information, and helps you answer it. | the draft Operator Agreement (clause 6). | 2026-10-19 |
| For DIANO's own records about you, you can ask the Information Officer for access, correction or deletion, and you can complain to the Information Regulator. | DIANO's published pages (clause 8). | 2026-10-19 |
| If DIANO learns of a security compromise affecting your records, DIANO will tell you, and the Information Regulator as POPIA section 22 requires. | DIANO's published pages (clause 6). | 2026-10-19 |
| The draft Operator Agreement proposes that DIANO tells you as soon as it has reasonable grounds to believe your records were reached by someone without permission, and in any case within 24 hours. | the draft Operator Agreement (clause 8); POPIA section 21(2) ("immediately"). | 2026-10-19 |
| A draft Operator Agreement is ready for review by DIANO's lawyer. It is not signed or in force yet. | the draft Operator Agreement (this build). | 2026-10-19 |