Privacy Policy

1 – Introduction
1.1 For purposes of this Notice:
1.1.1 “Applicable Laws” means all laws, regulations that SARB Group is required to comply with.
1.1.2 “SARB Group” means the South African Reserve Bank (SARB), the Corporation for Public Deposits (CPD), the Prudential Authority (PA), the Corporation for Deposit Insurance (CoDI) (on establishment), the South African Bank Note Company (RF) (Pty)
Limited (SABN), the South African Mint Company (RF) (Pty) Limited (South African Mint), the South African Reserve Bank Retirement Fund (SARB RF), and any other SARB Group legal entities.
1.2 We are committed to protecting the privacy of the Data Subjects’ whose personal information (PI) we process, and to meeting our responsibilities to process PI in compliance with Applicable Laws. The provisions of this Notice are subject to mandatory, unalterable provisions of Applicable Laws.
1.3 This Notice sets out how your PI will be used by SARB Group and applies to all PI and special PI, you give to us or which we may collect from third parties.

2 – Privacy and indemnity
2.1 The SARB Group takes privacy and the protection of your PI very seriously, and we will only use your PI in accordance with this Notice and Applicable Laws. It is important that you take all necessary and appropriate steps to protect your PI yourself (for example, by ensuring that all passwords and access codes are kept secure).

3 – The Role of the SARB Group (What we do)
3.1 Monetary Policy: The Constitution gives the SARB the mandate to protect the value of the rand. We use interest rates to keep inflation low and steady.
3.2 Financial Stability: The SARB has a mandate to protect and enhance financial stability. We identify and mitigate systemic risks that might disrupt the financial system.
3.3 Prudential Regulation: The Prudential Authority regulates financial institutions and market infrastructures to promote and enhance their safety and soundness, and support financial stability.
3.4 Financial Markets: Open market operations are the main tool we use to implement monetary policy. We manage South Africa’s gold and foreign exchange reserves.
3.5 Financial Surveillance: The SARB is responsible for regulating cross-border transactions, preventing the abuse of the financial system and supporting the regulation of financial institutions.
3.6 Payments and Settlements: The SARB is responsible for ensuring the safety and soundness of the national payment system, which is the backbone of South Africa’s modern financial system.
3.7 Statistics: The SARB provides important economic and financial statistics that present an overview of the economic situation in South Africa.
3.8 Research: Research conducted by the SARB focuses on economics, financial stability, banking and emerging trends in finance. Our research supports policy decision-making.
3.9 Banknotes and Coins: The SARB has the sole right to make, issue and destroy banknotes and coin in South Africa.

4 – Whose Information we process
4.1 The SARB Group may collect and hold PI about individuals or entities who are:
4.1.1 Executives, employees, officials or customers of financial institutions and banks with which the SARB Group deals or interacts in the course of performance of its functions and powers including executives and other employees or officials in
government or another regulator or government agency in the Republic of South Africa or other countries, financial institutions, global development institutions, payment system providers, payment system participants, payments industry a
associations and their members and clearing and settlement facility applicants and licensees.
4.1.2 Customers and dealers of the SA Mint.
4.1.3 SARB Group employees and their families or beneficiaries and applicants for employment with the SARB.
4.1.4 SARB Group Retirement Fund pensioners and/or their spouses and/or nominated beneficiaries.
4.1.5 Executives, employees, officials of suppliers and service providers to the SARB Group and of organisations tendering to provide goods or services to the SARB Group including through submission of quotations or tenders.
4.1.6 Shareholders of the SARB.
4.1.7 Individuals who make damaged banknote claims or submit suspected counterfeit banknotes.
4.1.8 Individuals or entities on sanctions lists.
4.1.9 Visitors to SARB Group premises and facilities.
4.1.10 Individuals who register to access any website or portal hosted by the SARB Group.
4.1.11 Media contacts.
4.1.12 Participants of conferences and workshops hosted or arranged by the SARB Group.
4.1.13 The SARB Group also collects the PI of members of the public if they request information or make a complaint, ask to be placed on a mailing list; or make submissions to the SARB Group.

5 – Type of Personal Information we Process
5.1 Depending on the circumstances, we may collect the following information about you:
5.1.1 Name, surname, any identifying numbers, symbol, e-mail address, physical address, telephone number, location information, online identifiers or other particular assignment to you.
5.1.2 Correspondence sent by you that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence.
5.1.3 Your personal opinions, views, or preferences and/or the views or opinions of another individual about you.
5.1.4 Information relating to your biometrics, race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language and birth.
5.1.5 Information relating to your education or the medical, financial, criminal or employment history.

6 – Why we collect the information
6.1 For regulatory purposes.
6.2 In the fulfilment of the function of the SARB Group.
6.3 As part of policy formulation and management.
6.4 In the fulfilment of an obligation of law.
6.5 As part of procurement of goods and services.
6.6 As part of the recruitment of employees.
6.7 Visitors of the SARB Group websites.
6.8 Visitors to SARB Group premises.
6.9 As part of economic research and statistics.
6.10 For exchanging banknotes.
6.11 As part of selling of products and services for the SA Mint.
6.12 Detection and prevention of fraud and money laundering and/or in the interest of security and crime prevention.
6.13 Improving or evaluating the effectiveness of SARB Group’s services or offerings through surveys and research.

7 – How we collect personal information
7.1 If it is reasonable and practical to do so, we collect PI directly from you. We may do this through application or other forms, over the telephone, the internet or in person.
7.2 We may also need to collect PI about you from other institutions. Sometimes this may happen without your direct involvement.
7.3 We may also collect your PI from your appointed agent, any regulator, or other third party that may hold such information.
7.4 Website usage information may be collected using “cookies” which allows us to collect standard internet visitor usage information.
7.5 We may also collect information through electronic equipment such as CCTV facilities

8 – Disclosure of your information
8.1 We will only share PI with others including other regulators when we are legally permitted to do so.
8.2 Your PI may be shared within the various business units of the SARB Group, with our agents and sub-contractors, and selected third parties who process the information on our behalf.
8.3 We may disclose information to other central banks and similar institutions for the purpose of one of SARB Group’s functions or powers.
8.4 The SARB Group may be required to process PI in other countries. We contractually require such third parties to whom we transfer PI to agree to abide by our information processing standards and requirements.

9 – Change of Purpose
9.1 We will only use your PI for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

10 – The Security of Your Information
10.1 We have put in place appropriate security measures to prevent your PI from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
10.2 If you suspect that your information may have been breached, you must immediately report the breach to the SARB Group Privacy Centre of Excellence on privacy@resbank.co.za

11 – How We Retain Your Information
11.1 We will only retain your PI for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

12 – Your Rights
12.1 As a Data Subject, you have the right to the following:
12.2 To accurate and current PI. Please keep us informed if your PI changes during your working relationship with us.
12.3 To request access to or copies of your PI. (Please note such access request may be subject to payment of a legally allowable fee)
12.4 To request correction of the PI that we hold about you.
12.5 To request erasure of your PI.
12.6 To object to processing of your PI as well as the right to object where we are processing your PI for direct marketing purposes.
12.7 To request the restriction of processing of your PI.
12.8 If you want to exercise the any of the rights listed above, you may contact the SARB Group Privacy Centre of Excellence on privacy@resbank.co.za.

13 – Consent
13.1 We do not need your consent to process your PI in accordance with carrying out our legal obligations or exercising the functions of the SARB. In limited circumstances, we may approach you for your written consent to allow us to process certain particularly special PI. If we do so, we will provide you with full details of the information that we would like and the reason we need it, so that you can carefully consider whether you wish to consent.

14 – How to contact us
14.1 If you have any comments or questions about this Notice, please contact the SARB Group Deputy Information Officer on privacy@resbank.co.za

15 – Complaints
15.1 Should you believe that SARB Group has utilised your PI contrary to Applicable Laws, you undertake to first attempt to resolve any concerns with the SARB.
15.2 If you are not satisfied with such process, you may have the right to lodge a complaint with the Information Regulator, using the contact details listed below:
15.2.1 Tel: 012 406 4818
15.2.2 Fax: 086 500 3351
15.2.3 Email: inforeg@justice.gov.za.

16 – Changes to this Privacy Notice
16.1 We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates.
16.2 Any such amendment will come into effect and become part of any agreement you have with the SARB Group when notice is given to you of the change by publication on our website. It is your responsibility to check the website often.