1. Website Privacy Notice (For the Website Footer)

RAILWAY SAFETY REGULATOR (RSR) WEBSITE PRIVACY NOTICE

Prepared in accordance with the Protection of Personal Information Act, No. 4 of 2013 (POPIA) and the Promotion of Access to Information Act, No. 2 of 2000 (PAIA).

1. Introduction

The Railway Safety Regulator (RSR) is committed to protecting the privacy of all stakeholders, operators, and visitors to our digital platforms. As a public body established under the National Railway Safety Regulator Act, No. 16 of 2002, the RSR processes personal information in a lawful, transparent, and secure manner in full compliance with POPIA.

2. Purpose of Collection

The RSR collects and processes personal information through this website for specific, explicitly defined purposes, including:

• Evaluating and processing operator permit applications, online renewals, and New Works technology submissions via our secure portals.
• Managing regulatory compliance, occurrence reporting, and Board of Inquiry (BOI) submissions.
• Processing employment, internship, and graduate programme applications.
• Administering procurement processes and tender submissions.
• Responding to public inquiries, complaints, and whistleblowing disclosures.

3. Categories of Information Processed

Depending on your interaction with the website, the RSR may process:

• Juristic Persons (Operators/Vendors): Company names, registration numbers, tax outputs, safety management system details, and financial account numbers.
• Natural Persons: Names, identity numbers, contact details, physical addresses, qualifications, employment histories, and digital identifiers (IP addresses, cookies).

4. Security of Personal Information

In terms of Condition 7 of POPIA, the RSR implements rigorous technical and organizational measures to secure the integrity and confidentiality of personal information.

Important Notice on Secure Portals: All operator dashboards, eLMS, and NIIMS-linked interfaces are encrypted and secured behind a mandatory Multi-Factor Authentication (MFA) layer. Users are strictly prohibited from sharing login credentials. Unauthorised access to or exposure of data within these portals constitutes a breach of the RSR Information Security Policy and applicable law.

5. Access and Correction Rights

Data subjects maintain the right to request access to, correction of, or deletion of their personal information held by the RSR. For formal requests regarding institutional records, please consult the RSR PAIA Manual located on our website footer.

6. Contact Details of the Information Officer

For any queries related to this notice or to exercise your rights under POPIA, please contact:

• The Information Officer / Deputy Information Officer

Physical Address: Building 4, Waterfall Point Office Park, Corner Waterfall and Woodmead Drive, Waterfall City, Midrand, 1685