What this means
Names, phone numbers, identity documents, addresses and payment information can create responsibilities for the organisation collecting them.
Practical rule: Collect only what you genuinely need, restrict access, secure stored information and understand when consent or another lawful basis is required. Data-protection requirements differ across African jurisdictions.