POPIA COMPLAINT BREACH.

I would like to formally lodge a complaint regarding a possible breach of the Protection of Personal Information Act (POPIA).

On 24 May 2026, Loyiso Ngqwebo was driving a Volkswagen Polo TSI CAA 40213 which is not registered under his name. Following a collision, he contacted the AA as he has active portfolio with you guys and the guys come approximately 19h30-20h00 to assist with towing the vehicle to his residence.

According to the information provided to us, the individual involved in the collision left the scene. However, the registered owner of the vehicle later received calls and emails from a third party alleging that they were involved in the accident. In our understanding that the owner’s personal details may have been obtained from the individual responsible for towing the vehicle.

This raises serious concerns regarding the unauthorised disclosure of personal information. The registered owner of the vehicle was not the driver at the time of the accident, and no consent was given for personal details to be shared with third parties.

I believe the individual who towed the vehicle acted outside the scope of lawful information processing and may have violated POPIA by disclosing confidential information without proper authorisation.

I kindly request that this matter be investigated urgently and that written feedback be provided regarding:

How the personal information was obtained and shared; Who authorised the disclosure; Whether AA’s POPIA policies and procedures were followed; and What corrective measures will be implemented to prevent similar incidents in future. Given the seriousness of this matter and the responsibilities placed on organisations under POPIA, I trust that this complaint will receive the necessary attention and urgency.