Description

PAIA Manual Template for South African Businesses

The PAIA Manual Template is an editable downloadable document designed for South African private bodies that need a practical manual prepared in terms of section 51 of the Promotion of Access to Information Act.

This PAIA Manual Template helps organisations explain what records they hold, how members of the public may request access to records, what fees may apply, how requests are assessed, when access may be refused, and how personal information is processed in line with POPIA transparency requirements.

For related compliance templates, you may also view our POPIA Compliance Toolkit, Recordkeeping Policy Template and Cyber Security Policy Template.

For official access-to-information resources, you can also visit the Information Regulator South Africa website.

What Is Included In This PAIA Manual Template?

This template is designed to help a private body create a clear, structured and customisable PAIA Manual. It includes the main manual wording together with practical annexures that support request handling, decision-making, publication and recordkeeping.

The manual includes sections for:

• Document control and organisation details
• Policy review and version control sheet
• Definitions and acronyms
• Purpose, legal basis and scope
• Organisation and contact details
• Information Regulator contact details
• Availability of the PAIA Manual and PAIA Guide
• Official PAIA forms
• Categories of records held
• Records automatically available
• Records held in terms of legislation
• Personal information processing under POPIA
• Categories of data subjects and personal information
• Purposes of processing personal information
• Recipients or categories of recipients
• Cross-border transfer wording
• Security safeguard wording
• Access-to-records procedure
• Decision-making, fees and timelines
• Grounds for refusal or partial refusal
• Third-party records and representations
• Health records, children and special personal information
• Records not found or not existing
• Remedies, complaints and court applications
• Duties of the Information Officer
• Recordkeeping, retention and disposal
• Security safeguards and confidentiality
• Monitoring, review and PAIA reporting

PAIA Manual Template Annexures Included

The PAIA Manual Template includes practical annexures to help the organisation manage PAIA requests and keep evidence that request-handling procedures were followed.

The annexures include:

• Annexure A: PAIA Request Register
• Annexure B: Records Search Log
• Annexure C: Third-Party Consultation Register
• Annexure D: Fee Calculation Sheet
• Annexure E: Decision Checklist
• Annexure F: PAIA Manual Publication Checklist
• Annexure G: Official PAIA Forms note
• Annexure H: Request Acknowledgement Template
• Annexure I: Record Not Found Affidavit / Affirmation Template
• Annexure J: Data Subject and POPIA Request Routing Note
• Annexure K: Sector Customisation Guidance
• Approval and adoption section

Why Businesses Need a PAIA Manual Template

A PAIA Manual helps the public, clients, customers, employees, suppliers, regulators and other stakeholders understand what records an organisation holds and how access to those records may be requested.

A properly completed PAIA Manual Template also supports POPIA transparency by explaining categories of personal information processed, purposes of processing, recipients, cross-border transfers and security safeguards.

This template helps address common weaknesses such as:

• No PAIA Manual in place
• No clear Information Officer contact details
• No public access-to-records procedure
• No PAIA request register
• No records search log
• No third-party consultation register
• No fee calculation sheet
• No decision checklist for granting or refusing access
• No PAIA Manual publication checklist
• No record-not-found affidavit or affirmation template
• No POPIA processing section in the manual

Access-to-Records Request Procedure

The template includes a step-by-step access-to-records procedure to help the organisation receive, assess and respond to PAIA requests. It covers receiving a request, checking whether the request is complete, verifying identity and authority, determining fees, searching for records, assessing whether access may be granted, consulting third parties where required, issuing an outcome notice and closing the request file.

This helps the Information Officer and request-handling staff follow a consistent process and keep evidence of how each request was handled.

POPIA Transparency Section Included

The PAIA Manual Template includes a POPIA-aligned section dealing with personal information processing. This section allows the organisation to record categories of data subjects, categories of personal information, processing purposes, recipients, cross-border transfers and security safeguards.

This is useful for organisations that want their PAIA Manual to support both access-to-information compliance and privacy transparency.

Sector Customisation Guidance

The template includes sector customisation guidance for different types of organisations, including financial services, credit, insurance, healthcare, education, training, retail, e-commerce, professional services, NPOs, property and estate agency businesses.

This helps the user adapt the manual to the types of records actually held by the organisation instead of relying on a generic record list that may not fit the business.

Who Should Use This PAIA Manual Template?

• South African private companies
• Sole proprietors and partnerships
• Trusts and NPOs
• Schools and training providers
• Professional practices
• Financial services providers and credit providers
• Healthcare, wellness and advisory businesses
• Retail and e-commerce businesses
• Information Officers and Deputy Information Officers
• Compliance officers assisting clients with PAIA and POPIA documents

Editable and Customisable PAIA Template

This PAIA Manual Template is editable and must be customised before publication or use. The organisation must insert its legal name, trading name, registration number, Information Officer details, Deputy Information Officer details, contact details, PAIA request email address, record categories, automatically available records, applicable legislation, processing activities and publication method.

The manual should also be reviewed whenever there are changes to the organisation’s records, contact details, processing activities, legislation, fees, official forms, website publication details or organisational structure.

Important Compliance Note

This PAIA Manual Template is a compliance support document. It does not replace legal advice, PAIA advice, POPIA advice, Information Officer training, official PAIA form verification or a full access-to-information compliance review. Each organisation remains responsible for ensuring that its final manual is accurate, customised, approved, published where required and aligned with its actual records and processing activities.