The lawfulness of processing personal information must be determined using all 8 pillars of lawful processing in terms of POPIA. The 8  pillars for lawfully processing personal information are:
a.	Accountability
b.	Processing limitation
c.	Purpose specification
d.	Further processing limitation
e.	Information quality
f.	Openness
g.	Security safeguards
h.	Data subject participation