Privacy Policy

Last Updated: April 2025

Introduction

The South African Social Security Agency (SASSA) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Protection of Personal Information Act (POPIA) and other applicable South African laws.

Information We Collect

SASSA collects various types of personal information to administer social grants and provide services to beneficiaries:

Personal Identification Information

• Full name and surname
• South African ID number or passport number
• Date of birth
• Gender
• Nationality and citizenship status
• Photograph for identification purposes

Contact Information

• Physical and postal addresses
• Cell phone number
• Email address (if provided)
• Alternative contact details

Financial Information

• Bank account details (for grant payments)
• Income information from various sources
• Employment status and history
• UIF registration and payment status
• Asset ownership information

Medical Information (where applicable)

• Medical assessment reports for disability grants
• Health condition information
• Medical certificates from healthcare providers

Family and Household Information

• Marital status
• Spouse and dependent information
• Guardian or caregiver details
• Household composition

How We Collect Information

We collect information through various channels:

• Grant Applications: When you apply for a SASSA grant online or at a SASSA office
• Status Checks: When you check your application status online
• Verification Processes: Through data-matching with government databases (Home Affairs, SARS, UIF, etc.)
• Website Usage: Through cookies and analytics when you use our website
• Call Centre: When you contact our SASSA helpline
• SASSA Offices: During in-person visits and consultations
• Third Parties: From government departments, employers, financial institutions, and medical practitioners (with your consent or as legally required)

How We Use Your Information

SASSA uses your personal information for the following purposes:

Primary Purposes

• Processing and assessing grant applications
• Verifying eligibility for social grants
• Administering and paying social grants
• Preventing fraud, corruption, and irregular payments
• Conducting reviews and re-assessments of grants
• Maintaining accurate beneficiary records

Secondary Purposes

• Communicating with you about your application or grant
• Providing customer service and support
• Improving our services and systems
• Conducting research and statistical analysis
• Complying with legal and regulatory requirements
• Responding to appeals and complaints

Legal Basis for Processing

SASSA processes your personal information based on:

• Legal Obligation: We are legally required to administer social grants under the Social Assistance Act
• Consent: You provide consent when applying for grants and agreeing to verification processes
• Legitimate Interest: Processing is necessary for fraud prevention and ensuring public funds are properly distributed
• Public Interest: We process information to fulfill our constitutional mandate to provide social assistance

Information Sharing and Disclosure

SASSA may share your information with:

Government Departments and Agencies

• Department of Home Affairs (for identity verification)
• South African Revenue Service (for income verification)
• Department of Employment and Labour (for UIF verification)
• National Student Financial Aid Scheme (for student funding verification)
• Other government departments as required by law

Service Providers

• Payment service providers (banks, Post Office)
• Card issuers for SASSA payment cards
• IT service providers (under strict confidentiality agreements)
• Medical practitioners for disability assessments

Legal Requirements

We may disclose information when required by law, court order, or to:

• Law enforcement agencies investigating fraud or criminal activity
• Auditors and oversight bodies
• Legal representatives in dispute resolution

Data Security

SASSA implements comprehensive security measures to protect your information:

• Physical Security: Secure facilities with controlled access, locked filing systems
• Technical Security: Encryption, firewalls, secure servers, access controls
• Organizational Security: Staff training, confidentiality agreements, limited access on need-to-know basis
• Monitoring: Regular security audits and threat assessments

Despite our efforts, no data transmission over the internet or storage system can be 100% secure. If you suspect unauthorized access to your information, please contact us immediately.

Data Retention

We retain your personal information for as long as necessary to:

• Administer your grant (for the duration you receive benefits)
• Comply with legal and regulatory requirements (typically 5-7 years after grant closure)
• Resolve disputes and prevent fraud
• Maintain historical records for statistical purposes (in anonymized form)

Your Rights Under POPIA

As a data subject, you have the right to:

Access

Request confirmation of what personal information we hold about you and request copies of that information.

Correction

Request correction of inaccurate, misleading, or incomplete information.

Deletion

Request deletion of your information (subject to legal retention requirements).

Objection

Object to the processing of your information for specific purposes (where legally permitted).

Restriction

Request that we restrict processing of your information in certain circumstances.

Complaint

Lodge a complaint with SASSA or the Information Regulator if you believe your privacy rights have been violated.

How to Exercise Your Rights

To exercise your privacy rights:

1. Visit a SASSA Office: Bring your ID document and complete the relevant form
2. Call the SASSA Call Centre: 0800 60 10 11 (Monday-Friday, 8am-4pm)
3. Email: [email protected] with your request and ID number
4. Write to: SASSA Information Officer, Private Bag X5, Pretoria, 0001

We will respond to your request within 30 days as required by POPIA.

Children's Privacy

When processing information about children (for Child Support Grant, Foster Care Grant, or Care Dependency Grant), we:

• Obtain consent from parents or legal guardians
• Collect only information necessary for grant administration
• Implement additional safeguards for sensitive information
• Ensure information is accessible only to authorized personnel

Automated Decision-Making

SASSA uses automated systems to verify eligibility by checking your information against various databases. These automated checks may result in:

• Automatic approval if all criteria are met
• Automatic decline if disqualifying factors are identified
• Referral to manual review for complex cases

You have the right to request human intervention and appeal automated decisions that affect you negatively.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending notifications for material changes (where contact information is available)

Contact Information

Information Officer

For privacy-related inquiries or to exercise your rights:

• Name: SASSA Information Officer
• Email: [email protected]
• Phone: 0800 60 10 11
• Address: Private Bag X5, Pretoria, 0001

Information Regulator

If you are not satisfied with how we handle your privacy concerns:

• Website: www.justice.gov.za/inforeg
• Email: [email protected]
• Phone: 012 406 4818