All RE5 questions
POPIA Data Protection Record Keeping
POPIA says personal information should be kept only for as long as necessary for the purpose it was collected. Which of the following is a valid exception that allows longer retention?
RE5 practice question with a worked answer. This is one of hundreds of FSCA RE5 questions in the RegulatoryExams question bank.
- a) Retention is required or authorised by another law, such as the five-year FAIS record-keeping rule.Correct
- b) The FSP would like to keep the data in case it is useful for future marketing.
- c) The client has simply forgotten that the FSP holds the data.
- d) The FSP regards the data as commercially valuable.
Why this is the answer
POPIA's retention condition yields to other legislation: because FAIS requires records to be kept for five years, that lawful obligation justifies continued retention. A wish to market later, the client's forgetfulness, or the data's commercial value are not lawful bases for keeping it longer.
Want to test yourself on 700+ more questions like this?
Start your free RE5 simulator today — timed mock exams, full answer explanations and cloud-synced progress tracking.
More POPIA questions
- In handling client personal information, an FSP acts as a 'responsible party' under POP…
- An FSP wants to use client contact details collected for policy administration to run a…
- Under POPIA, a data subject (the client) generally has which right regarding their pers…
- Under POPIA, an FSP suffers a security compromise that exposes clients' personal inform…