1. The Protection of Personal Information Act, No 4 of 2013 promotes the protection of personal information by public and private bodies. The following provisions were considered in the decision not to commercialise the use of decryption keys in the short to medium term.
- Section 2 – purpose of the act
- Section 4 – lawful processing of personal information
- Section 5 – rights of data subjects
- Section 8 – responsible party to ensure conditions for lawful processing
- Section 9 – lawfulness of processing
- Section 10 – minimality
- Section 11 – consent, justification and objection
- Section 12 – collection directly from data subject
- Section 13 – collection for specific purpose
- Section 16 – quality of information
- Section 19 – security measures on integrity and confidentiality of personal information.
- Section 20 – information processed b operator or persons acting under authority.
- Section 21 – security measures regarding information processed by operator.
2. I am informed that the decryption key is only legally available from the Department of Transport. The Department of
Transport is currently looking into the changing the configuration of the key to ensure that a public
portion of the key can be made available to relevant stakeholders.