Which statement best describes the purpose of data protection under FAIS and POPIA?

• A. Increase client data sharing to improve services.
• B. Protect personal information, limit access, and obtain consent for disclosures; ensure secure processing.
• C. Keep data indefinitely without consent.
• D. Outsource data handling to vendor without oversight.

Answer: (B)

Data protection under FAIS and POPIA is about safeguarding personal information and controlling how it’s handled within financial services. The goal is to respect individuals’ privacy by restricting who can access their data, requiring consent for collecting, using, or disclosing it, and ensuring that processing is secure and properly governed. POPIA sets clear rules on lawful processing, purpose limitation, data security, retention, and individuals’ rights, while FAIS reinforces the obligation on financial advisers to protect client information as part of professional and fiduciary duties.

The best description states that personal information should be protected, access should be limited, consent should be obtained for disclosures, and data should be processed securely.

Why the other ideas don’t fit: increasing data sharing without safeguards undermines privacy protections; keeping data indefinitely without consent violates retention rules and privacy rights; outsourcing data handling without adequate oversight or security measures bypasses essential governance and consent requirements.