Essential Content for PAIA Manual Compliance
Updated: | 8 min read
Section 51(1) of the Promotion of Access to Information Act, as amended by POPIA, specifies exactly what information must be included in your PAIA manual. Understanding these requirements is crucial for legal compliance and avoiding penalties.
Important Update
Section 51 has been extensively amended by Section 110 of POPIA (Protection of Personal Information Act). These amendments came into effect on 30 June 2021, adding significant new requirements.
Mandatory Sections of a PAIA Manual
1. Details of the Private Body
Essential contact information and identification details of your organization.
2. Records Available Under Other Legislation
Description of records held in accordance with other South African laws.
3. Record Categories and Subjects
Comprehensive index of all records held by your organization.
4. POPIA Compliance Information
Personal information processing details required by POPIA.
1. Details of the Private Body
The manual must contain comprehensive contact information for the head of the private body. This section serves as the primary point of contact for information requests.
Required Contact Information
- Postal address
- Street address
- Phone number
- Fax number
- Email address (if available)
- Website (if applicable)
- Registration number (juristic persons)
2. Records Available Under Other Legislation
Private bodies must list records in their possession or control that have been established in terms of any relevant legislation. This includes records required by:
Tax Legislation
VAT records, income tax returns, employment tax records
Labour Law
Employment contracts, UIF records, skills development
Companies Act
Annual returns, financial statements, shareholder records
3. Record Categories and Subjects
The manual must contain a description of the subjects on which the body holds records and the categories of records held on each subject. This creates a comprehensive index of all organizational records.
What is a "Record"?
Section 1 defines a record as any recorded information regardless of form or medium that is in the possession or under the control of that private body. This includes documents, notes, computer files, recordings, emails, and more.
Common Record Categories
Administrative Records
- Correspondence
- Contracts and agreements
- Meeting minutes
- Policies and procedures
Financial Records
- Banking records
- Financial statements
- Tax records
- Invoice and payment records
Important Clarification
The Act does not impose obligations on private bodies to compile records of any kind. It simply requires a manual that contains an index of all records under control or in possession.
4. POPIA Compliance Information
Since the amendments by POPIA, Section 51(c) now requires detailed information about personal information processing. This is one of the most significant additions to manual requirements.
What Does "Processing" Mean?
POPIA defines 'processing' as any operation or activity concerning personal information, including:
Collection & Storage
- Collection
- Receipt
- Recording
- Organisation
- Storage
Use & Modification
- Updating
- Modification
- Retrieval
- Alteration
- Consultation
Distribution & Destruction
- Dissemination
- Transmission
- Distribution
- Merging
- Destruction
Five Key POPIA Requirements
| Requirement | Description | Example |
|---|---|---|
| Processing Purpose | Why you process personal information | Employee management, customer service |
| Data Subjects | Categories of people whose data you process | Employees, customers, suppliers |
| Recipients | Who you may share information with | SARS, banks, service providers |
| Cross-border Transfers | Planned international data transfers | Cloud storage, international clients |
| Security Measures | How you protect personal information | Encryption, access controls, backups |
5. Other Mandatory Information
Your manual must also include several additional elements to ensure complete compliance:
Section 10 Guide
Description of the Section 10 guide and how to obtain access to it.
Section 52(2) Notice
Latest notice regarding records available without formal request (if any).
Distribution and Availability Requirements
Creating the manual is only the first step. The Act specifies exactly how and where it must be made available:
Website
On your website, if you have one
Principal Place
At your main business location for inspection
On Request
To any person upon request and reasonable payment
Regulator
To the Information Regulator upon request
Practical Implementation Tips
Making Compliance Easier
- Use Templates: Don't reinvent the wheel - use proven templates that cover all requirements
- Regular Updates: The manual must be updated regularly as your business changes
- Keep It Simple: Only include categories that apply to your specific business
- Professional Help: Consider using specialized services for complex requirements
Ready to Create Your Compliant Manual?
Our automated system handles all the complex requirements, ensuring your manual includes everything required by Section 51 and POPIA. Get compliant in minutes, not weeks.
Start Your Manual Now