首页> 外文会议>International Conference on Information Security for South Africa >PoPI Act - opt-in and opt-out compliance from a data value chain perspective: A South African insurance industry experiment
【24h】

PoPI Act - opt-in and opt-out compliance from a data value chain perspective: A South African insurance industry experiment

机译:POPI采取行动 - 从数据价值链视角下选择退出和退出遵守:南非保险业实验

获取原文

摘要

Personal information is collected and processed by various companies when individuals buy products and services, share their information on social media or enter their details in competitions and so on. This personal information, which could potentially also be shared with third party companies, is analyzed to tailor services and products to consumer's preferences and online behavior, with the objective of creating a data value chain. When the Protection of Personal Information (PoPI) Act (2013) comes into effect in South Africa, companies will have to comply with the conditions of PoPI and protect individuals' personal information accordingly. Companies will only be allowed to use personal information for the agreed purpose it was collected for and must obtain individuals' consent to share or further process their information. This research sets out to monitor the flow of personal information through an experiment to establish if data value chains are shaped within the South African insurance industry, and to establish whether the consumer's personal information, which is part of the data value chain, is processed in line with certain conditions of PoPI. The experiment highlighted that some of the insurance companies in the selected sample did not comply with the opt-in or opt-out preferences of the researcher. In addition some did not meet with the condition to obtain consent before sharing personal information with third parties for marketing purposes. No formal data value chains could be identified during the time frame of this experiment as it was found that the researcher was contacted randomly about generic marketing and communication offerings.
机译:当个人购买产品和服务时,各公司收集和处理个人信息,分享他们关于社交媒体的信息或在竞争中输入他们的细节等。这种个人信息可能还与第三方公司共享,分析为消费者的偏好和在线行为定制服务和产品,目标是创建数据价值链。当个人信息保护(POPI)法案(2013)生效时,公司将不得不遵守POPI的条件并相应地保护个人个人信息。公司只允许使用个人信息,以便收集其商定的目的,并必须获得个人同意分享或进一步处理其信息。这项研究提出了通过实验来监控个人信息的流程,以确定是否数据的价值链正在南非保险行业内的成型,以确定是否将消费者的个人信息,这是数据价值链的一部分,在被处理与某些popi条件的线条。该实验强调,所选样品中的一些保险公司并未遵守研究人员的选择或选择退出偏好。此外,在分享与第三方进行营销目的之前,有些人没有达到同意的情况。没有正式的数据价值链可以在该实验的时间范围内识别,因为它发现研究人员随机联系了通用营销和通信产品。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号