The Banking Association of South Africa - Code of Banking Practice

We collect and process your personal information to enable us to provide you with banking products and services, among other things.

What you can do

You can:

ask for access to your personal information that we hold;
object to the processing of your personal information that we hold;
ask to correct personal information that we hold;
ask us to delete personal information that we hold; and
challenge an automated adverse decision based on the personal information that we hold about you;

if you can provide information to us to support your view.

Take note

These rights may be limited in law.

What we do

We:

will process your personal information lawfully and in a reasonable manner that does not infringe your right to privacy, and only if, given the purpose for which it is processed, it is:
adequate (in other words sufficient to fulfil our stated purpose properly),
relevant (in other words the personal information has a rational link to that purpose), and
not excessive (in other words ensuring we do not hold more personal information than we need for the purpose);
will use your personal information in a manner that is consistent with our privacy notice and/or Promotion of Access to Information Act (PAIA) Manuals (available on our website or at our bank branches);
will respond, within a reasonable time; and at a prescribed fee, if any, to your request for the record or a description of your personal information held, including information about the identity of third parties, or categories of third parties, who have, or have had, access to your information;
will not use your personal information in a manner that discriminates unfairly or causes undue harm to you;
will not use your personal information for any other purpose than for the purposes disclosed at original collection, unless we are allowed by law;
can use your personal information if:
we carry out actions for the conclusion or performance of a contract that you or another person may have with us,
we are required by law,
it is necessary to achieve our legitimate interests, the legitimate interest of another person to whom the information is supplied, or to protect your legitimate interests,
the processing of your information is necessary for a public body to perform a duty properly, or
you have consented;
will, if we require your consent to process your personal information, make sure that your consent is given voluntarily, that it is specific, that you understand what it means and that it is your wish to give your consent for the processing of personal information;
will process your personal information to design products and services, including related models used for determining the advertising, distribution and provision of these products and services to protect your and our interests;
will take reasonable steps to make sure that any personal information that we use from third parties to inform our decisions in relation to you is collected, used, and adequately safeguarded in a manner that maintains privacy and confidentiality;
will, on termination of a banking product or service, ensure that your personal information is not disclosed to any third party unless permitted by law; and
will give you access to your personal information that we hold
within a month of your request, and
if the request is complex or relates to information of another person, within a reasonable period that we will advise;
will store your information in a secure manner and in line with applicable legislation; and
will notify you and the Information Regulator of security compromises in line with applicable laws and the BASA POPIA Code of Conduct.

For your information

Our Promotion of Access to Information disclosures provide more information regarding your privacy and confidentiality. You can access them on our website. The BASA POPIA Code of Conduct, formally known as the ‘The Code of Conduct for the Processing of personal information by the Banking Industry’ also provides more information regarding your privacy and confidentiality. You can access this on our website or the Banking Association South Africa website.

Term	Explanation
Demand guarantee (or on-demand guarantee)	An undertaking (promise) that someone (or an entity), called the guarantor, gives the beneficiary of the guarantee that the guarantor will satisfy (pay) on demand the agreed amount of money (which often relates to the debts of another, called the principal debtor). Take note A demand guarantee is a primary obligation and is not dependent on the existence of any other debt or agreement. Any disputes between the parties about the underlying debt or agreement do not impact this obligation – the guarantee must be paid on demand.
Device	A tablet, cellphone and wearable or similar technology.
Device credentials	Includes but is not limited to: a password, passcode, unlock pattern and login details used as a method of accessing a device or authorising a transaction through a device.
Digital banking	Cellphone banking, internet banking and a banking app or other digital means.
Direct marketing	Us approaching you in person or by mail or by electronic communication, including email, SMS, and automatic calling machines, for the direct or indirect purpose of promoting or offering to supply, in the ordinary course of business, any goods or services to you; or requesting you to make a donation of any kind for any reason. Take note An automatic calling machine makes automated calls without human intervention.
Dormant account	An account on which you have initiated no activity for a period that we have established in advance and in accordance with the rules relating to the specific type of account.

Term	Explanation
Access credentials	The way you access your digital banking services, including your access code, password, or other unique means of personal identification.
Agent	A third party, either a company or a person, that your bank appoints to render a service. This can include third-party debt collection agencies that collect debts on behalf of your bank.
Applicable laws	Any laws in force from time to time; and any applicable industry code, guidance, policy, or standard enforceable by law; or any order that is set out by a regulator.
ATM (automated teller machine)	A machine that you use to withdraw cash and to access other banking services, including balance enquiries and prepaid purchases.
Banking app	An application on your device that allows you to transfer money from one of your accounts to another, pay bills, see statements and perform other transactions.
Basic banking services	The opening, operation, and maintenance of transactional accounts.

Term	Explanation
Vulnerable customer	A natural person, who because of personal circumstances, is especially susceptible to harm, particularly when a bank does not act with appropriate levels of care. Take note Where parts of this Code apply only to vulnerable customers and the term ‘you’ is used, it means vulnerable customers in that part. Vulnerable customers can include customers who: have a physical disability; have psychological problems and/or mental health problems; have a debilitating illness; have limited financial literacy; experience changed or changing financial circumstances; experience adverse life events; are susceptible because of: their age (the youth, due to a lack of experience, or the elderly, in other words people of 65 and older), language barriers, loss (such as of a job, a family member through death, because of divorce or an illness), or geographical location (which can lead to customers not being able to access certain banking products and services); and is at a higher risk of experiencing unfair treatment because of » a limited ability to maintain or develop their wellbeing, difficulty in obtaining or understanding information, or being unable to access, choose or buy suitable products (and services).
We, our, us	Your bank
Written	Something in writing, including electronic representations of information, such as an SMS or email, that is stored, sent, or received by electronic means.

Term	Explanation
Loyalty programme	Any arrangement or scheme where a supplier of goods or services or a similar entity offers or grants any loyalty credit or award in connection with a transaction or agreement to you. Take note Your bank will apply the principles in this Code to a loyalty programme where you are a: natural person. OR juristic person; partnership or trust; and your asset value or annual turnover is less than R2 million. AND Where the Consumer Protection Act 68 of 2008 applies.
Money laundering (ML)	Any activity that has or is likely to have the effect of concealing or disguising the nature, source, location, disposition, or movement of the proceeds of unlawful activities, or any interest that anyone has in such proceeds.
Natural person	An individual and sole proprietor. Take note Where parts of this Code apply only to a natural person and the pronoun ‘you’ is used, it means a natural person in that part.
NCA	The National Credit Act, 34 of 2005, that aims to regulate the business of credit providers and places a variety of obligations on credit providers (mainly aimed at protecting credit consumers), including the prevention of reckless lending practices and measures to enhance disclosure of information to credit consumers.

Term	Explanation
POPIA	The Protection of Personal Information Act, 4 of 2013, that aims to promote the protection of personal information processed by public and private bodies; introduce certain conditions so as to establish minimum requirements for the processing of personal information; provide for the establishment of an Information Regulator to exercise certain powers and to perform certain duties and functions in terms of this Act and the Promotion of Access to Information Act, 2000; provide for the issuing of codes of conduct; provide for the rights of persons regarding unsolicited electronic communications and automated decision making; regulate the flow of personal information across the borders of the Republic; and provide for matters connected therewith.
Proliferation financing (PF)	Any act of providing funds or financial services that are used, in whole or in part, for the manufacture, acquisition, possession, development, export, trans-shipment, brokering, transport, transfer, stockpiling, or use of nuclear, chemical or biological weapons and their means of delivery and related materials in contravention of national laws or, where applicable, international obligations.
Promotional competition	A competition or game that we conduct for the purpose of promoting our products and/or services and where we distribute prizes to participating winners. Take note Your bank will apply the principles in this Code to a promotional competition where you are a: natural person; OR juristic person; trust or partnership, your asset value or annual turnover is less than R2 million. AND Where the Consumer Protection Act 68 of 2008 applies.

Term	Explanation
NCA credit agreement	A credit agreement as defined in the NCA with a customer to which the NCA applies. Take note Your bank will apply the NCA to a credit agreement concluded with you if you are a: natural person; or trust with one or two trustees (and the trustees are not juristic persons); or stokvel.
Password	A string of characters that allows you to access various services (such as digital banking, your device, or your email account) and that is also used for identification. Take note If there is any occasion that you are given a temporary password, you must change this to your own unique password.
Person	A natural and a juristic person. Take note Where parts of this Code apply only to persons and the pronoun ‘you’ is used, it means persons in that part.
Personal customer	Natural persons or sole proprietor who maintain an account or who receive other services from a bank. Take note Where parts of this Code apply only to personal customers and the pronoun ‘you’ is used, it means personal customers in that part.

Term	Explanation
Fixed interest rate	An interest rate that remains unchanged and not affected by market rate fluctuations for the specified period of the loan or credit agreement or other product.
Integrity	To be accurate, consistent, and reliable.
Interest	The amount we charge you in respect of the amount you owe us; or the amount we pay you in respect of for example, your savings or investment account, usually expressed as a percentage with reference to a period, such as per annum.
Internet banking	An internet-based system that is provided by us and allows you to transfer money between your accounts, pay bills, see statements, and perform other transactions.
Juristic person	Includes a trust, partnership, association, body of persons, body corporate, company or close corporation or similar entities with legal rights and duties either incorporated in or outside the Republic of South Africa, which has legal personality or enjoys a similar status in terms of which it may enter into contractual relations and legal proceedings. Take note Where parts of this Code apply only to juristic persons and the pronoun ‘you’ is used it means juristic persons in that part.
Loyalty credit or award	Any benefit or a right to goods, services, or other benefits (including points, credits, tokens, devices or other intangible or tangible things that can accrue to you) that you can accumulate and entitles you to certain goods, services or benefits that are part of a loyalty programme.

Term	Explanation
Promotional offer	An offer we make you of a prize, a reward, gift, free goods or services, a price reduction or other benefit, such as a voucher entitling you to a price reduction or other benefit. Take note Your bank will apply the principles in this Code to a promotional offer where you are a: natural person; OR juristic persons; trust or partnership; your asset value or annual turnover is less than R2 million. AND Where the Consumer Protection Act 68 of 2008 applies.
Reasonable	Justifiable and comparable to the service provided.
Sanctions	Restrictions on activities that relate to particular countries, goods and services, or persons and entities. Take note South Africa implements the targeted financial sanctions (TFS) that originate from the United Nations Security Council resolutions under Chapter VII of the Charter of the United Nations (UNSCR). For these sanctions to be given effect FICA requires accountable institutions to freeze property and transactions pursuant to financial sanctions imposed in the UNSCR.
Security	Items of value, such as a mortgage bond registered over a property, share certificates and life policies, which represent assets used as support for a loan or other credit facilities. Take note If you do not repay the loan for which you have provided security, we have the right to dispose of the security.

Term	Explanation
Personal information	Information relating to an identifiable, living, natural person and, where it is applicable, an identifiable, existing juristic person, including, but not limited to: information relating to the race, gender, sex, pregnancy, marital status, national, ethnic, or social origin, and colour, sexual orientation, age, physical or mental health, wellbeing, disability, religion, conscience, belief, culture, language, and birth of the person; information relating to the education or the medical, financial, criminal or employment history of the person; any identifying number, symbol, email address, physical address, telephone number, location information, online identifier, or other particular assignment to the person; the biometric information of the person; the personal opinions, views, or preferences of the person; correspondence sent by the person that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the content of the original correspondence; the views or opinions of another individual about the person; and the name of the person if it appears with other personal information relating to the person or if the disclosure of the name itself would reveal information about the person.
Phishing	The fraudulent practice of sending emails or other messages claiming to be from reputable companies to make individuals reveal personal information, such as passwords and credit card numbers.
PIN (personal identification number)	A number that is provided to you or that you choose on a strictly confidential basis, such as a card PIN that will enable you to draw cash and access other services from an ATM or point-of-sale device and that can also be used as an authentication mechanism.

Term	Explanation
Credit agreement	A legal contract in terms of which we lend you a certain amount of money for a specified period or finance movable goods and that outlines the terms and conditions associated with the contract, including your periodic repayments of the loan plus interest or, in the event of a lease, the monthly rental. The NCA does not apply to your credit agreement with your bank if: you are a juristic person (subject to the below principles regarding trusts); or you are a trust with three or more trustees; or you are a trust with one or two trustees, but the trustees are juristic persons; or you are a partnership; and your asset value or annual turnover is R1 million or more.
Customer	A personal customer and an SMME. Take note Where parts of this Code only apply to a customer of a bank and the pronoun ‘you’ is used, it means customer in that part.
Debit order	A mandate, being a written, verbal, or electronic authority that you give to a service provider, allowing a service provider to debit your bank account.
Deposit	Putting money into an account, thereby increasing the credit balance, or reducing any debit balance.

Term	Explanation
Cardholder	A customer who has a card, or a secondary cardholder linked to the account of the customer.
Charges [or fee(s)]	An amount or amounts that we can charge in respect of a transaction, product, an account, or a service that we offer.
Conduct Standard for Banks, 3 of 2020	The standard that applies to banks in relation to our provision of financial products and financial services. The aim of the standard is to make sure that we treat you as our customer fairly in accordance with six treatingcustomers- fairly outcomes, namely: Outcome 1 – Fair treatment is central to the culture of banks; Outcome 2 – Products and services in the retail market that are sold and marketed are designed according to the needs of the customers identified and targeted accordingly; Outcome 3 – Customers are provided with clear information and kept appropriately informed before, during and after point of sale; Outcome 4 – Advice is suitable and according to the customer’s circumstances; Outcome 5 – Service is of an acceptable standard and products perform as customers have been led to expect; and Outcome 6 – Customers do not face unreasonable after-sale barriers when they want to change a product, switch providers, submit a claim or make a complaint.
Contact details	Details that you have provided us with to contact you, such as your address, email, telephone, and cellphone information. Take note We require your address to send you communications and notices, including legal notices.

Term	Explanation
Suretyship	An undertaking (promise) by a person called the surety, that the surety as coprincipal (joint) debtor will pay the debts of another, called the principal debtor, if the principal debtor fails to pay or does not perform some other legal obligation in a contract. Take note A suretyship is dependent on the existence of any other debt or agreement.
Terrorist financing (TF)	Any activity that has, or is likely to have, the effect of concealing or disguising the nature, source, location, disposition or movement of funds for the purposes of financing any act of terrorist and related activities, as defined in regulations and/or any property in possession or under the control of a bank that is associated with specified entities (terrorists or terrorist organisations).
Transaction account	An account into which you can pay money or into which people can pay money to you and from which you can pay third parties.
Unique means of personal identification	A selection of memorable facts and information of a private and personal nature that you choose and of which only you know the sequence. Take note You can use the selection of facts and information for identification and for verifying identification when accessing accounts.
Username	A sequence of characters used by a person to access a computer, network, or other digital banking services, such as internet banking.
Verification	The process of confirming the accuracy or validity of information provided by you, by comparing it against information contained in documents or electronic databases created by reliable and independent third-party sources.
Vishing	The fraudulent practice of making phone calls or leaving voice messages claiming to be from reputable companies to make individuals reveal personal information, such as bank details and credit card numbers.

Term	Explanation
Electronic wallet	An electronic or digital container in which you can securely store value or add a card (typically including technologies to interface with point-of-sale devices, such as QR code scanners, near-field communications, and other wireless communication technologies), thereby providing a secure means of transacting and transferring value between you and businesses.
Email compromise	A type of cybercrime where the fraudster or scammer uses email to trick someone into sending money or divulging confidential information.
Exchange rate	The current market price at which one currency can be exchanged for another.
Fee(s) (or charges)	An amount or amounts that we can charge in respect of a transaction, a product, an account, or a service that we offer.
FICA	The Financial Intelligence Centre Act, No 38 of 2001 (FICA) (as amended). Take note This legal framework exists to help identify the proceeds of unlawful activities and to combat activities related to money laundering, terrorist funding and tax evasion.
Financial difficulties	Any circumstances that can have an adverse effect on your financial ability to fulfil contractual obligations in terms of agreements you entered into.
Financial education	The method by which customers: improve their understanding of financial products, concepts, and risks through acquiring information, and develop the skills and confidence to become more aware of financial risks and opportunities, allowing them to: make informed choices, know where to go for assistance, and take other effective actions to improve their financial wellbeing.

Term	Explanation
Beneficial owner	A defined natural person who independently or together with another person ultimately owns or exercises effective control over a juristic person and ultimately owns or exercises effective control over a juristic person customer, thereby applying a transparent principle through multiple layers of corporate ownership. Take note This definition provides for a singular, natural person beneficial owner, unless the ownership, interest or control is held or exercised jointly in a material manner, in which case all joint holders will collectively be deemed to be the beneficial owner(s). In the case of trusts the definition specifically includes all founders, settlors, donors, trustees, protectors, and named beneficiaries. In the case of partnerships this specifically includes all partners.
Bundled	Selling goods or services together as a required package, but: they have been packaged together for your benefit and convenience, including any savings in charges for you or we sell the bundled products or services separately and there is individual prices for those products or services. Your bank will apply the principles in this Code to bundled goods or services where you are a: natural person; OR juristic person; partnership or trust; and your asset value or annual turnover is less than R2 million; AND Where the Consumer Protection Act 68 of 2008 applies.
Business day	Any day other than an official South African public holiday, Saturday, or Sunday.
Card	Any card (physical plastic or virtual card issued to you) or card information that allows you to pay for goods and services and, where applicable, for performing functions at an ATM or point-of-sale device.

Term	Explanation
Setoff	Our using available funds in one of your accounts for settling a debt or part of a debt in one of your other accounts. Take note “Setoff’ is the noun or name of the activity and “set off’ is the verb that describes the action.
Site security certificate	A validation and encryption tool that shows that a website is secure, and that data is encrypted for your security. Take note You can see the site security certificate when you click on the closed padlock in the status bar of your browser window.
SMME (small, medium and microenterprise)	A juristic persons whose turnover for the past financial year was up to and including R10 million. Take note Where parts of this Code apply only to SMMEs and the pronoun ‘you’ is used, it means SMMEs in that part.
Social engineering	The use of fear or pressure or other psychological methods to obtain personal and confidential information from you, such as by tricking you to disclose information you would not usually disclose or by getting you to install malware on your computer for fraudulent purposes.
Stop order	An instruction that you give us to pay an amount to a nominated beneficiary regularly.

Customer confidentiality and privacy

What you can do

Take note

What we do

For your information