0

No products in the basket.

POPIA and Your ID Number: What South African Law Says

Published — Updated

South Africa's Protection of Personal Information Act (POPIA) classifies an identity number as personal information. This means that anyone who collects, stores, or processes SA ID numbers has legal obligations around how they handle that data — and individuals have rights over how their ID number is used. This includes protection against unauthorised searches of ID numbers by name.

Here is what you need to know about POPIA and ID numbers.

What POPIA Says About ID Numbers

Under POPIA, personal information includes "the identity number of a person." This is explicitly stated in Section 1 of the Act. It means your 13-digit ID number receives the same legal protection as your name, address, email, financial records, and biometric data.

Any organisation that collects your ID number — whether a bank, employer, medical practice, or online retailer — is considered a "responsible party" under POPIA and must comply with eight conditions for lawful processing:

  1. Accountability — the organisation must ensure compliance
  2. Processing limitation — only collect what is necessary
  3. Purpose specification — collect for a specific, defined purpose
  4. Further processing limitation — don't use the data for unrelated purposes
  5. Information quality — keep ID records accurate and up to date
  6. Openness — tell people you are collecting their ID number and why
  7. Security safeguards — protect ID numbers from unauthorised access
  8. Data subject participation — allow individuals to access and correct their data

POPIA's definition of personal information goes well beyond the ID number itself. For a broader breakdown of what qualifies as personal information under POPIA — including the categories of "special" personal information that carry stricter handling rules — Pagel Schulenburg's legal overview is a useful reference.

When Can a Business Ask for Your ID Number?

A business can only request your ID number when there is a lawful basis for doing so. Common lawful reasons include:

  • FICA compliance — banks and financial institutions are legally required to verify your identity, which includes collecting your ID number
  • Employment — employers need your ID number for tax (SARS), UIF, and payroll purposes
  • Medical aid registration — schemes use ID numbers as unique identifiers
  • Insurance — underwriting and claims processing
  • Private security registration — security companies and guards regulated by PSIRA must verify identity using the ID number before grading and certification
  • SIM card registration — under RICA, mobile networks must record your ID number and home address before activating a SIM
  • Credit applications — credit bureaus use ID numbers to match credit records

If a business asks for your ID number without a clear legal or contractual reason, you have the right to refuse and ask why it is needed.

Your Rights Under POPIA

As a data subject, you have several rights regarding how your ID number is handled:

  • Right to be informed — you must be told when your ID number is being collected and for what purpose
  • Right to access — you can request confirmation of whether an organisation holds your ID number
  • Right to correction — you can ask for incorrect ID records to be updated
  • Right to deletion — you can request that your ID number be deleted when it is no longer needed for the original purpose
  • Right to object — you can object to the processing of your ID number for direct marketing

What to Do If Your ID Number Is Misused

If you believe your ID number has been collected or shared unlawfully, you can lodge a complaint with the Information Regulator, the body responsible for enforcing POPIA. Their website is inforegulator.org.za.

Does This Tool Store Your ID Number?

No. The ID Checker tool on this site runs entirely in your browser using JavaScript. Your ID number is never sent to a server, stored in a database, or logged in any way. There is no data collection, no cookies tracking your input, and no third-party analytics on the numbers you enter.

This is by design. An ID number is personal information, and we built this tool to be useful without requiring you to hand that information over to anyone.

Tips for Protecting Your ID Number

  • Never share your ID number on social media or public forums
  • Only provide it when there is a clear legal or contractual reason
  • Ask businesses how long they will retain your ID number and how they secure it
  • Check your credit report regularly — ID theft often starts with a stolen ID number
  • If you suspect your ID number has been compromised, report it to the SA Fraud Prevention Service (SAFPS)

For a full breakdown of what information is encoded in your ID number, see our guide to the South African ID number format.

Related: Criminal record checks are a high-stakes test of POPIA consent. For the full SA process and consent requirements, see our how to check a criminal record in South Africa.