Protection of Personal Information Act - Section 17
"A responsible party must maintain the documentation of all processing operations under its responsibility as referred to in section 14 or section 51 of the Promotion of Access to Information Act."
The responsible party must take reasonably practicable steps to ensure that the data subject is aware that personal information is being collected and:
where the information is not collected from the data subject, the source from which it is collected
the name and address of the responsible party
the purpose for which the information is being collected
whether or not the supply of the information by that data subject is voluntary or mandatory
the consequences of failure to provide the information
any particular law authorising or requiring the collection of the information.
DO you know which laws allow the collection of personal information?