Records & POPIA
Data-Subject Requests
POPIA gives data subjects enforceable rights, and the entity's ability to meet request deadlines is a visible test of its information governance.
Why Data-Subject Requests Matter
Under POPIA, data subjects may access, correct or request deletion of their personal information, and the responsible party must respond within prescribed timeframes or risk complaints to the Information Regulator. Volume and turnaround of these requests are a direct measure of whether information management is functioning, and slow handling is both a legal and a reputational risk. AuditPro Core tracks data-subject requests and their turnaround so the information officer can demonstrate compliance and catch bottlenecks before deadlines lapse.
The Numbers
AuditPro Core renders this view from your tenant's live, tamper-evident records. The figures below are illustrative sample data.
Requests received
92
last 12 months
Within deadline
81%
Overdue
7
Avg turnaround
18 days
Requests by type
Open requests by status
| Status | Count | Avg days open | Overdue |
|---|---|---|---|
| Acknowledged | 11 | 6 | 0 |
| In progress | 14 | 16 | 3 |
| Awaiting requester | 5 | 22 | 1 |
| Escalated | 4 | 31 | 3 |
Figures shown are illustrative sample data for demonstration. AuditPro Core renders these views from your own tenant's live, tamper-evident records.
The data-subject rights
POPIA confers rights of access, correction and deletion, each with its own handling requirements. Tracking requests by type ensures the correct process and timeframe is applied to each.
Turnaround against deadline
Requests carry statutory response deadlines, so turnaround time is the key compliance metric. A growing backlog of overdue requests is a clear signal of capacity or process failure.
Evidence of handling
Compliance is demonstrated not by intention but by a record of how each request was received, processed and answered. That trail is what the entity relies on if a complaint reaches the Regulator.
How AuditPro Core Bridges the Gap
- Request register: access, correction and deletion requests are logged with type and statutory deadline.
- Turnaround monitoring: requests approaching or past their deadline are flagged for escalation.
- Traceability to source: each request links to its handling record and response.
- Audit-ready export: the request log exports as evidence of POPIA data-subject-participation compliance.
Key Takeaways
- Track requests by type so the right process and deadline apply to each.
- Turnaround against the statutory deadline is the core compliance measure.
- A rising overdue backlog is an early warning of process or capacity failure.
- A documented handling trail is the entity's defence in a Regulator complaint.
See This on Your Own Data
AuditPro Core renders this dashboard from your tenant's live, tamper-evident records — every figure traceable to source.