MIE Released My Personal Information Without Valid Consent – POPIA Breach

I am lodging a complaint against Managed Integrity Evaluation (MIE) for releasing my personal information without a valid or recently signed consent form.

I signed a consent form in April 2024 for a specific background screening purpose. However, in November 2024, MIE released my personal information again to Airports Company South Africa (ACSA) relying on that same April consent, without requesting new consent or notifying me.

Under the Protection of Personal Information Act (POPIA), consent must be informed, specific, and lawful. It cannot be reused months later for further processing without the data subject’s knowledge or renewed authorisation.

I was never contacted to reconfirm consent, yet my personal information was disclosed again, resulting in serious prejudice to me, including reputational and employment-related harm.

I have formally lodged a POPIA complaint with MIE and will escalate the matter to the Information Regulator of South Africa should this not be resolved satisfactorily.

I am requesting: • A written explanation of the legal basis used to release my information; • Copies of the consent re**** upon; and • Confirmation of MIE’s policy on the validity and reuse of consent forms.