Reproduced by Sabinet Online in terms of Government Printer’s Copyright Authority No. 10505 dated 02 February 1998 56 No. 37067 GOVERNMENT GAZETTE, 26 November 2013 Act No. 4 of 2013 Protection of Personal Information Act, 2013 56 Powers, duties and functions of Chairperson and other members 43. (1) The Chairperson— (a) must exercise the powers and perform the duties and functions conferred on or assigned to him or her by the Regulator in terms of this Act and the Promotion of Access to Information Act; and 5 (b) is, for the purposes of exercising the powers and performing the duties and functions conferred on or assigned to him or her by the Regulator in terms of this Act and the Promotion of Access to Information Act, accountable to the Regulator. (2) (a) The members referred to in section 41(1)(d)(i) must exercise their powers and 10 perform their duties and functions as follows: (i) One member in terms of this Act; and (ii) one member in terms of the Promotion of Access to Information Act. (b) The members referred to in section 41(1)(d)(ii) must exercise their powers and perform their duties and functions either in terms of this Act or the Promotion of Access 15 to Information Act, or both. (c) The members, referred to in paragraphs (a) and (b), are, for the purposes of exercising their powers and performing their duties and functions, accountable to the Chairperson. Regulator to have regard to certain matters 44. (1) In the performance of its functions, and the exercise of its powers, under this Act the Regulator must— (a) have due regard to the conditions for the lawful processing of personal information as referred to in Chapter 3; (b) have due regard for the protection of all human rights and social interests that compete with privacy, including the general desirability of a free flow of information and the recognition of the legitimate interests of public and private bodies in achieving their objectives in an efficient way; (c) take account of international obligations accepted by South Africa; and (d) consider any developing general international guidelines relevant to the better protection of individual privacy. (2) In performing its functions in terms of section 40(1)(b)(ix)(bb) with regard to information matching programmes, the Regulator must have particular regard to whether or not the— (a) objective of the programme relates to a matter of significant public importance; (b) use of the programme to achieve that objective will result in monetary savings that are both significant and quantifiable or in other comparable benefits to society; (c) use of an alternative means of achieving that objective would give either of the results referred to in paragraph (b); (d) public interest in allowing the programme to proceed outweighs the public interest in adhering to the conditions for the lawful processing of personal information that the programme would otherwise contravene; and (e) programme involves information matching on a scale that is excessive, having regard to— (i) the number of responsible parties or operators that will be involved in the programme; and (ii) the amount of detail about a data subject that will be matched under the programme. (3) In determining whether the processing of personal information for exclusively journalistic purposes by a responsible party who is, by virtue of office, employment or profession, not subject to a code of ethics as referred to in section 7(1), constitutes an interference with the protection of the personal information of the data subject in terms of section 73, the Regulator must have particular regard to the factors referred to in section 7(3)(a) to (d). 20 25 30 35 40 45 50 55