Identity crisis

Gated communities, access control, office parks, hotel security – who decides what personal information is required, where it’s stored and whether it’s a violation of the PoPI Act?