Some of us have known this for a long time. The problem stems from the value of our data. Faceless corporations are willing to pay good money per data subject, while others are more than willing to sell it, even if that means abusing their own customers and circumventing a few laws along the way. Of course the data subject is expected to provide this data or be denied service, and not receive any compensation when it's sold on at a profit.
Everyone from your banks to your cellular provider is including a clause in their fine print that allows them to sell any data they gather on you. This is totally against the spirit of the POPI Act, but they get away with it in a third world ****hole. Our only hope is that the first world realises the value of personal data and forces laws onto multinational corporations. Then again, the worst offenders are first world governments, so what chance do we have. Maybe we need to burn down a few data centres to get our point across.