Personal data is borrowed, not owned.
POPIA's eight conditions apply to your side project and your internal tool, not just big systems. Organisation-wide policy sits in the AI Enablement playbook.
Accountability
01
Someone owns compliance
Processing limitation
02
Lawful, minimal, with consent or a reason
Purpose specification
03
Collect for a clear, stated purpose
Further processing
04
Don't reuse it for something unrelated
Information quality
05
Keep it accurate and up to date
Openness
06
Tell people what you collect
Security safeguards
07
Protect it; report breaches
Data subject participation
08
People can see and correct theirs
Fake data for building. Real data only with a reason.