Top bank in South Africa tracking airtime purchases, social media profiles, website visits, and online shopping to decide if customers can get loans

• FNB fined R1 million by the Information Regulator of South Africa for breaching several sections of the Protection of Personal Information Act (POPIA).
• The bank collects customer personal information from telecom operators, social media profiles, certain website cookies, and online retailers to assess credit risk.
• FNB's collection of personal information from newspapers and other sources is considered unlawful under Section 12(2) of POPIA.