POPIA gives data subjects the right to ask what personal information you hold (section 23) and to have it corrected or deleted (section 24). Take in requests through intake forms on your website, verify who is asking, and let automations and workflows move each request to the right people. Every request carries its deadline, and reports show what's open and how long responses take.
Rights · South Africa
Privacy Rights Automation
Take in data subject requests under POPIA, verify the requester, and route each request to the right people with its deadline in view.
- Per month, excl. VAT
- From R1 399
- Capabilities
- 6
- Applied in reviews
- POPIA
Overview
Capabilities
What's included
Intake forms
Publish request forms so people can ask to access, correct, or delete their data, and every request lands in one queue.
Identity verification
Verify the person making the request before any data is shared or deleted.
Automations
Assign the next step and send updates automatically as a request moves forward.
Email templates
Keep the responses you send often as templates, so replies are consistent.
Workflows and assignments
Route each request to the right people and assignment groups.
Deadlines and reports
Each request carries its response deadline. Reports show what's open, what's closed, and how long responses took.
Pricing
Tiers for this module
Prices are in South African rand, billed monthly, and exclude VAT.
Standard
R1 399/moexcl. VAT
- 50 requests a month
Professional
R3 599/moexcl. VAT
- 500 requests a month
Enterprise
Custom
- Unlimited requests
Prices are in South African rand, billed monthly, and exclude VAT.
Privacy Rights FAQ
Intake forms, identity verification, automations, and deadlines.
How do people send a request?
Through an intake form you build in Core GRC and embed on your website. Every request lands in one queue.
How is identity verified?
You set the verification level for each request type, such as email verification, before any data is shared or deleted.
Does it track deadlines?
Yes. Each request carries its response deadline, and reports show response times.
Can requests be routed automatically?
Yes. Automations assign the next step and send updates, and workflows route requests to people and assignment groups.
How many requests are included?
Standard includes 50 requests a month and Professional 500. Enterprise is unlimited.
Other modules
Each module shares the same organisation, permissions, and documents.
Privacy, Risk & Compliance Suite
Operators and vendors, assessments, records of processing, and Core IQ.
Cookie Consent Management
Cookie banners, scans, Consent Mode, and consent records for South African sites.
Privacy Policy & Notice Management
POPIA privacy notices and policies, approvals, versions, and the policy widget.
Website Accessibility
WCAG scans, AutoFix, the accessibility widget, and statements.
Ready to run POPIA and vendor risk in one place?
See the modules that match your programme in a short demo. Plans are billed monthly in rand, excluding VAT.