An introduction to the protection of personal information in the healthcare practice
4. Role players - who is who?
4.2. Rights of the Data Subject
Topics
A DS has the right to have his, her or its PI processed in accordance with the 8 conditions for the lawful processing of PI, including the rights of:- Notice
- Access
- Correction / destruction
- Objection against processing (general)
- Objection against direct marketing
- Not to receive unsolicited electronic communication
- Not to be subjected to decisions based on profiling
- Submission of complaints to the IR
- Instituting civil action
1. Notice
- The DS has the right to be notified that
- personal information about him, her or it is being collected as provided for in terms of section 18; or
- his, her or its personal information has been accessed or acquired by an unauthorised person as provided for in terms of section 22 - in other words when a security breach has occured.
- See chapter on Openness.
2. Access
- To establish whether a RP holds PI of that DS and to request access to the PI.
- See chapter on DS Participation.
3. Correction / Destruction
- To request, where necessary, the correction or destruction of his, her or its personal information.
- See chapter on Purpose specification.
4. Objection against processing (general)
- The DS can object, on reasonable grounds relating to his, her or its particular situation to the processing of his, her or its personal information.
- See chapter on the 6 grounds for processing.
5. Objection against direct marketing
- The DS kan object to the processing of his, her or its PI at any time for purposes of direct marketing.
See chapter on additional rights and responsibilities.
- See chapter on additional rights and responsibilities.
6. Not to receive unsolicited electronic communication
- The DS has the right not to have his, her or its PI processed for purposes of direct marketing by means of unsolicited electronic communications.
- See chapter on additional rights & responsibilities.
7. Not to be subjected to decisions based on profiling
- Not to be subjected, under certain circumstances, to a decision which is based solely on the basis of the automated processing of his, her or its PI intended to provide a profile of such person.
- See chapter on additional rights and responsibilities
8.Submission of complaints to the IR
The DS has the right to submit complaints to the IR- if the DS is of the opinion that his or her PI has been unlawfully processed
- regarding the alleged interference with the protection of the PI of any DS
- in respect of a determination of an adjudicator.
9. Instituting civil action
The DS has the right to institute legal action against a RP if the DS is of the opinion that his/her PI has been unlawfully processed. The DS can also request the IR to institute legal action on his/her behalf should the DS not have the financial capability to institute action by him/herself.