POPIA requires that in addition to having a lawful basis for collecting and processing personal information (covered in question 4), a valid purpose is needed (Condition 3: Purpose Specification). In an Estate, the main purposes is for managing residents’ affairs relating to the Estate or for controlling visitors from a security perspective. It is recommend that when a new resident registers, the purpose is stated and that consent for collecting their information is obtained.
Similarly, visitors should be made aware of the purpose for which their PI is being collected i.e. visiting the Estate and that their consent for collecting it should be obtained.