Updated: | 7 min read
Looking for a PAIA manual template? This page sets out every section a legally compliant PAIA Manual must contain under Section 51 of the Promotion of Access to Information Act, 2000. It explains, in plain language, what to put in each one. Use it as a reference — or skip the drafting entirely and generate your compliant manual online in 15 minutes for R399.
Important Notice
A PAIA Manual is a legal compliance document. Using a generic template without tailoring it to your specific business details, record categories, and POPIA disclosures can leave you non-compliant. Our online PAIA Manual Generator produces a fully customised, attorney-verified manual for your business in minutes.
What is a PAIA Manual?
A PAIA Manual (also called a Section 51 Manual) is a document that every private body in South Africa is legally required to compile and make available to the public. It tells the public:
- Who your Information Officer is and how to contact them
- What categories of records your organisation holds
- How to submit a formal request for access to those records
- What fees apply to information requests
- How your organisation processes personal information (POPIA disclosures)
The manual must be updated whenever your business details or record categories change. Failure to maintain a current PAIA Manual can result in fines or imprisonment of up to two years.
PAIA Manual Template - Required Sections
The following sections are required by Section 51 of the PAIA and Regulation 9 of the PAIA Regulations. Each section of your PAIA manual template must be completed with your specific business information.
This section identifies your organisation. Your PAIA manual template must include:
- Full registered name of the private body
- Physical address and postal address
- Telephone number and email address
- Website address (if applicable)
- Company registration number or Trust/CC number
Every private body must appoint an Information Officer to handle PAIA requests. By default this is the CEO, or the head of the organisation, unless someone else is formally deputised. Your PAIA manual template must include:
- Full name of the Information Officer
- Title and position within the organisation
- Direct telephone number
- Email address
- Physical address for receiving requests
- Names and contact details of any Deputy Information Officers
This section must confirm that the South African Human Rights Commission (SAHRC) has compiled a guide on how to use PAIA, and provide details of how to obtain that guide. The PAIA manual template must state:
- Reference to the SAHRC guide (Section 10 of PAIA)
- Contact details of the SAHRC for obtaining the guide
- Languages in which the guide is available
Some records must be made available automatically, without the public needing to submit a formal PAIA request. Your PAIA manual template must list:
- Any records your organisation makes publicly available (e.g. annual reports, published policies)
- Records available on your website
- Records available at your offices without a request
- The process for accessing these records
Many other Acts require organisations to make records available. Your PAIA manual template must list all legislation applicable to your business and the records accessible under each Act. Examples include:
- Companies Act 71 of 2008 (memorandum of incorporation, share register, financial statements)
- Basic Conditions of Employment Act (employment records)
- Labour Relations Act (employment contracts)
- Income Tax Act (tax records)
- Value Added Tax Act (VAT records)
- National Credit Act (credit agreements, if applicable)
- Consumer Protection Act (consumer contracts, if applicable)
The specific legislation applicable will depend on your industry and business type.
This is one of the most important sections of the PAIA manual template. You must describe the categories of records your organisation holds, typically grouped by subject matter:
- Financial records - bank statements, invoices, financial statements, tax records
- Human resources records - employment contracts, payroll records, leave records
- Client and customer records - contracts, correspondence, personal information
- Supplier and procurement records - purchase orders, contracts with third parties
- IT and system records - software licences, system documentation
- Statutory records - company registration, BEE certificates, permits and licences
- Marketing records - customer databases, campaign records, website analytics
- Immovable property records - lease agreements, title deeds (if applicable)
Your PAIA manual template must set out the procedure for making a formal access request:
- Reference to the prescribed PAIA request form (Form C - available from the SAHRC)
- Where and how to submit the form (physical address, email)
- The request fee payable before the request is processed (currently R50)
- The access fee payable if the request is granted (prescribed rates per page, etc.)
- The 30-day response timeframe
- Grounds on which access may be refused
- The internal appeal process if a request is refused
Since 1 July 2021, all PAIA Manuals must include POPIA (Protection of Personal Information Act) disclosures. This section of the PAIA manual template must cover:
- Purpose of processing - why you collect and use personal information
- Categories of data subjects - employees, clients, suppliers, website visitors, etc.
- Types of personal information processed - names, IDs, financial info, health records, etc.
- Third parties with whom information is shared - service providers, payment gateways, regulators
- Cross-border transfers - if personal information is sent outside South Africa
- Information security measures - how you protect personal information
- Data subject rights - how individuals can access, correct or delete their information
- Complaints to the Information Regulator - how data subjects can lodge complaints
This is the most complex section to get right. Our PAIA Manual Generator walks you through each POPIA requirement specific to your business type.
Why a DIY PAIA Manual Template Falls Short
A blank PAIA manual template gives you the structure but none of the substance. Getting your manual right requires:
- Identifying all legislation applicable to your industry (Section 5)
- Correctly categorising every type of record your business holds (Section 6)
- Tailoring POPIA disclosures to your specific processing activities (Section 8)
- Keeping the document updated whenever your business changes
An incomplete or generic PAIA manual template can give a false sense of compliance. Our online generator was built by attorneys and asks you the right questions to produce a manual tailored to your specific business.
PAIA Manual Template vs. Online Generator
| Factor | DIY Template | Access to Info Generator |
|---|---|---|
| Cost | Free download | R399 (once-off) |
| Customisation | Manual - you fill in everything yourself | Guided questionnaire tailored to your business |
| Legal accuracy | Risk of errors and omissions | Attorney-designed, 20+ years track record |
| POPIA section | Generic - not tailored to your processing | Specific to your data categories and purposes |
| Applicable legislation | You must identify all relevant Acts yourself | Auto-selected based on your business type |
| Updates | You redo the document manually each time | Free unlimited updates through your account |
| Time to complete | Hours of research and drafting | Approximately 15 minutes |
| Output | Word document you format yourself | Professional PDF ready to publish and submit |
Frequently Asked Questions
You can, but it carries significant risk. A generic template will not automatically include the legislation relevant to your industry, will not tailor POPIA disclosures to your specific processing activities, and may omit sections required by the PAIA Regulations. Using our online generator for R399 gives you a document that is customised to your business and verified by legal professionals - a fraction of the cost of legal fees for any errors or non-compliance penalties.
The law does not prescribe a specific format, but the manual must contain all sections required by Section 51 of the PAIA. It must be made available in the prescribed form to anyone who requests it. In practice, a PDF is the most practical format - it can be published on your website, emailed, printed, and submitted to the Information Regulator without formatting issues.
Your PAIA Manual must be kept up to date. You should update it whenever your Information Officer changes, your physical address or contact details change, you add or remove categories of records, your personal information processing activities change, or legislation applicable to your business changes. With our online generator, updates are free for life.
No. A PAIA Manual is a statutory document required by law that covers access to records and includes POPIA disclosures. A privacy policy is a broader document typically published on your website explaining your data practices to users. While they overlap in the POPIA sections, they serve different purposes. Our generator produces a PAIA Manual that meets the statutory requirements; a privacy policy is a separate document.
Yes. Sole proprietors who carry on a trade, business, or profession are private bodies under PAIA and must compile a PAIA Manual. There are no exemptions based on business size or turnover. The requirement applies regardless of whether you have employees or a formal business registration.
An incomplete PAIA Manual is treated as non-compliance with Section 51 of the PAIA. The Information Regulator can take enforcement action, and non-compliance can result in administrative fines. In serious cases, the responsible person can face criminal prosecution. Using a properly constructed manual - whether through our generator or with an attorney - is the only safe approach.
Skip the Template - Get a Custom PAIA Manual in 15 Minutes
Instead of wrestling with a template, let our attorney-designed system generate a fully customised, legally compliant PAIA Manual for your specific business - for only R399.
Generate My PAIA Manual - R399 Learn More