Field purpose
For every field and event, record why it exists, who supplies it, whether it is necessary, the notice or choice, validation, and prohibited input.
TEST / reject unnecessary collectionPersonal information control / ZA–PI
Make the approved responsibility observable in the system.
A project-specific POPIA review may distinguish the responsible party, operators, purpose, notices, safeguards, rights, direct marketing, transfers, retention, and incidents. Engineering can implement and test the approved model; it cannot invent that model from a generic checklist.
Role and operator access
Connect staff permissions, vendors, processors or operators, AI tools, exports, support access, and automated decisions to approved tasks and removal procedures.
TEST / revoke a role and verify every routeMovement and safeguards
Inventory hosting, APIs, subprocessors, logs, email, backups, remote access, transfers, secrets, encryption choices, monitoring, and incident evidence.
TEST / trace a record outside the primary databasePerson and incident response
Define access, correction, objection or restriction where applicable, deletion, retention expiry, account closure, security investigation, escalation, communication, and proof.
TEST / complete one request across every copyDirect marketing and analytics
Tracking is product behavior, not a footnote.
A South Africa-specific analytics property separates traffic and captures direct phone or email interactions. That separation does not decide notice, consent, direct-marketing, retention, transfer, or operator duties. Additional advertising or profiling technology is not silently part of the service.
Bring the operator map
List each vendor, purpose, data category, location, access route, subprocessor, contract owner, deletion behavior, incident contact, and evidence. Include unofficial exports and staff workarounds.
Authority starting point
The Information Regulator POPIA material can help frame questions. A qualified owner decides what applies to the actual organisation and processing.
Choose one personal-information record for the control test.
Follow it from first field to final deletion or justified retention.