Your information should stay under your control.
RecordForLife is being designed to protect personal information from the start. Before the full platform holds sensitive records at scale, it will go through formal privacy, POPIA, security and independent review processes.
Our privacy principles
- Share only what is needed: only the information needed for a specific interaction should be shared.
- Your authorisation: scanning a QR code does not give someone access to your full record. You approve requests for more information.
- No personal information inside the QR code: the QR code creates a secure connection to your record rather than storing your personal details inside the code.
- Know where information came from: your record should clearly show what you provided and what was confirmed by a trusted organisation.
- See who accessed your information: you should be able to see who requested information and who added items to your record.
- Correct mistakes: there should be a clear way to question or correct information that is wrong.
- Take your record with you: RecordForLife is being designed so your information and achievements are not trapped in one organisation or platform.
Keeping the platform secure
The production platform will use strong security controls to protect information, manage access, record activity and test for weaknesses. Independent security testing will form part of the rollout.
Consent is more than a checkbox
The planned Consent Centre will let you see requests, approvals, rejections, ongoing permissions and the organisations you have allowed to add information to your record.
Recommendations stay your choice
Future Next Best Step recommendations are intended to help you understand your options. They should explain why an opportunity may suit you, but the final decision remains yours.
This public website describes the proposed RecordForLife service. A full operational privacy notice will be published before the platform processes live user records.