1. Our Commitment
LabourID is committed to the responsible use of personal information. Every verification check we process touches real people's lives. This Usage Policy sets out the rules that govern how our verification services may be used, and our commitment to protecting the rights and dignity of data subjects.
By using our Service, you agree to comply with this policy in addition to our Terms of Service and Privacy Policy.
2. Permitted Uses
All permitted uses require a valid lawful basis under POPIA and, where applicable, explicit consent from the data subject.
- Employee onboarding: Verifying the identity of prospective or current employees as part of a documented HR process
- KYC/AML compliance: Meeting your legal obligations under FICA and applicable anti-money laundering legislation
- Fraud detection and prevention: Checking identities in connection with financial transactions, lending, or insurance under NCA Regulation 18(4)(b)
- Business due diligence: Verifying company registration, directors, and bank accounts before entering commercial relationships
- Workforce trust profiles: Enabling workers to build verified LabourID profiles with their own consent
- Account security: Verifying account ownership during registration or recovery processes
3. Prohibited Uses
Prohibited uses may result in immediate account termination, reporting to relevant authorities, and civil or criminal liability.
- Conducting surveillance on individuals without lawful authority
- Discriminating against individuals based on race, gender, religion, sexual orientation, disability, or any other protected characteristic
- Building consumer profiles or data aggregations beyond the stated, lawful purpose of each check
- Reselling, sublicensing, or redistributing verification results or API access
- Processing personal information of persons under 18 without verifiable parental or guardian consent
- Using results to harass, intimidate, or coerce any individual
- Circumventing POPIA consent requirements or data subject rights
- Using the Service to facilitate identity theft or impersonation
- Processing results for a purpose incompatible with the disclosed purpose
- Retaining full verification reports beyond your stated retention period without legal justification
4. Lawful Basis & Documentation
You must, before initiating any verification:
- Identify and document the lawful basis for the specific check (contractual necessity, legal obligation, legitimate interests, or consent)
- Where relying on consent, obtain and record explicit, informed, specific, and freely given consent from the data subject
- Provide clear notice to the data subject of the purpose and extent of the check
- Maintain records sufficient to demonstrate your lawful basis if challenged by the data subject or the Information Regulator
LabourID processes checks as your operator/data processor. We do not verify or validate the lawful basis you hold — that responsibility rests entirely with you as the responsible party.
5. Data Security Obligations
If you retain verification results, you must:
- Implement appropriate technical and organisational security measures to prevent unauthorised access
- Restrict access to results on a strict need-to-know basis
- Apply data minimisation — do not retain more than is necessary for the stated purpose
- Delete results when the retention period expires
- Notify LabourID at security@labourid.com within 24 hours of discovering a breach involving results obtained from our platform
6. Age Restrictions & Child Protection
Our services may not be used to verify or process the personal information of persons under 18 years of age, except:
- With the verified, explicit, written consent of a parent or legal guardian
- Where required by law (e.g., age verification for alcohol or tobacco sales)
Where such use is permitted, you must implement additional safeguards appropriate for the protection of minor's data.
7. Regulatory Compliance
Your use of LabourID must comply with all applicable South African legislation, including:
- POPIA — Protection of Personal Information Act 4 of 2013
- FICA — Financial Intelligence Centre Act 38 of 2001
- NCA — National Credit Act 34 of 2005
- ECTA — Electronic Communications and Transactions Act 25 of 2002
- CPA — Consumer Protection Act 68 of 2008
- Any sector-specific legislation applicable to your business
8. Compliance Monitoring & Enforcement
LabourID reserves the right to monitor usage patterns to detect potential abuse. We may:
- Suspend or terminate accounts exhibiting patterns inconsistent with permitted use
- Request evidence of lawful basis from any customer at any time
- Report suspected unlawful use to the Information Regulator or other relevant authorities
- Cooperate fully with regulatory investigations