POPIA states that personal information may only be obtained and processed if there is one or more lawful bases for doing so (Condition 2: Processing Limitation). There are 6 lawfulness bases (or legal grounds) the moist commonly used ones are:
If you have obtained consent from the person for an appropriate purpose;
If you need their personal information in order to perform a contract e.g. you are providing a service which includes personal information. In the estate industry, the MOI, Conduct Rules or requivalent is a contract;
If you need their personal information in order to comply with another law. An example of this is empl;oyee information where itis required in rder to comply with the Basic Conditions of Employmet Act;
In essence, consent is not required if the one the criteria above are met unless the personal information contains special personal information such as biometric information health or medical information, race, etc. in which case consent must be obtained.
More information can be found in the article Processing Lawfulness of Personal Information in HOAs.