
The DSRS dataset was created through systematic document analysis rather than survey-based data collection. Organisations across major South African economic sectors were identified using publicly available information. Their POPIA compliance disclosures—such as privacy notices, PAIA manuals, website statements, and data‑protection documents—were manually extracted and coded against POPIA’s lawful‑processing conditions and data‑subject rights. Additional organisational attributes (sector, company size, employee ranges) were compiled using publicly available classifications such as SARS and OECD standards. No personal or respondent data was collected, and no questionnaire was administered.