BASA Annual Report to the Information Regulator 2025

Publication Date: 12/12/2025

The purpose of the Code is to:

  1. Promote appropriate privacy practices by members of BASA governing the processing of personal information in terms of POPIA.
  2. Encourage the establishment of appropriate processing practices between members of BASA and operators, regulating the processing of personal information as required by POPIA and dictated by good business practice.
  3. To articulate the interpretation of POPIA by members of BASA.
  4. Allow for complaints against members of BASA to be considered and remedial action, where appropriate, to be taken.
  5. The Code governs:
    1. The processing of personal information by members of BASA in compliance with POPIA.
    2. The monitoring by BASA of the provisions of the Code.
    3. Complaint management procedures.

Herewith an excerpt from Section 25 outlining the IR’s Guidelines on the annual report (in italics below).

25 Reporting on compliance with a code of conduct 

25.1 The relevant bodies should submit an annual report to the Regulator which should also be made available on the relevant body’s website. 

25.2 The annual report must be submitted one (1) year after a code has been issued by the Regulator. 

25.3 The report should include the following: 

25.3.1 accurate, up to date and sufficient information on how a body has monitored compliance with a code. This includes information received in reports from bodies bound by a code and from assessments or investigations; 

25.3.2 aggregate information about systemic issues or serious or repeated interference with the conditions for the lawful processing of personal information that occurred during the reporting period;

25.3.3 if information regarding the effectiveness of a code in achieving compliance has significantly changed from the last report, a description of the change and any proposed process or practice to address the change; 

25.3.4 the number of complaints in relation to a code received annually; 

25.3.5 the average time taken to resolve the complaints;

25.3.6 statistical information about the nature of the complaints; 

25.3.7 statistical information about the outcomes of the complaints;

25.3.8 and information about the remedies awarded in resolving the complaints

 

Cover Letter BASA Annual Report to the Information Regulator 2025

Annexure A – Annual Report to the Information Regulator 2025 – Code of Conduct for POPI by the Banking Industry

Annexure B – Annual Report to the Information Regulator 2025- Complaints Management Stats From the NFO 2025

Annexure-C – Annual Report to the Information Regulator 2025 – Signed Confirmations of Member Compliance With the Code