POPI defines “Personal Information” as any information that could lead to the identification of a person or entity, their whereabouts or beliefs.
So as a photographer, when you collect information (contact form, email, etc), when you store the content and when you post images and text relating to the shoot, you need to do it with the client’s consent.
A person must have a choice whether to consent or not (it must be voluntary).
It must relate to a specific purpose (e.g. booking a shoot). You must specify your purpose.
The data subject must be aware of the information you collect and the reasons for collecting it.
You must inform the person sufficiently to enable them to make a decision.
There must be an expression of will. For example, tick a tick box, or click on a link or a signature
How are you getting consent for the content you capture?
I have a website where people can buy sports images of themselves in action. To do this they must provide their e-mail address and a password. The system encrypts the password and even I as the admin cant see it.
They have to register with their email address, as the system generates download links that get mailed after successful payment (via Payfast, a 3rd party site).
Other than the mail address I harvest no other data. Do I need to make any special provisions to be POPI compliant?
Hunters of Light is an initiative to help motivate and inspire photographers through the COVID 19 Lockdown and spark ideas so that we can come out of this not only surviving but with renewed passion and fire in our hearts. We welcome photographers of all skill levels and all camera brands, this group is all about creating beautiful images.