What the PAIA Manual Actually Is
PAIA stands for the Promotion of Access to Information Act. It gives any member of the public the right to request records from your business. A PAIA Manual is simply the document that tells people how to do that: who to contact, what kind of records you hold, and what the process looks like.
It also needs to cover a few POPIA-related basics, like what personal information you collect and why, since the two laws are linked.
Who Needs One?
Short answer: every business. There used to be an exemption for small private companies, but that ended on 1 January 2022. Since then, every private body, whether you’re a sole proprietor, a freelancer, a small CC, or a large company, is legally required to have one. There’s no turnover or headcount threshold that gets you out of it.
Get the Free Template
The Information Regulator provides the official template directly on their site, no charge, no signup fees:
How To Fill it in
Download the template. It comes pre-structured with the sections PAIA requires, so you’re not starting from a blank page.
Add your business and contact details. Your business name, address, and the contact details of whoever handles information requests (this is usually you, as the owner).
Describe the records you hold. Think broadly: financial records, HR files, marketing material, client contracts, website data. You don’t need to list every single document, just the categories.
Fill in the POPIA section. What personal information you collect, why you collect it, who you share it with, and whether any of it leaves South Africa.
Save it, and put it where people can find it. It needs to be available on your website and at your business premises if someone asks to see it.
That’s the whole process. Have it ready and accessible for anyone who asks to see it.
Where Most DIY Manuals Go Wrong
The document being free doesn’t mean it’s foolproof. The most common issues we see when business owners do it themselves are:
- The POPIA section is left vague or copied generically, which doesn’t hold up if anyone actually asks a pointed question about your data practices.
- The manual is filled in once and never updated, even as the business adds new systems, services, or ways of collecting client information.
- It gets saved to a folder and never actually published on the website, which technically still leaves you non-compliant.
None of these are reasons to pay R3000 for someone to create the manual from scratch. But they’re worth getting right, since the manual is meant to genuinely reflect how your business operates.
Want a Second Pair of Eyes?
You can absolutely do this yourself, and we’d rather you save the money than pay for something that’s freely available. If you’d like someone to sanity-check your finished manual, particularly the POPIA sections, or help you keep it updated as your business grows, that’s the kind of focused, honest support we offer at The Bloc Studio. No pressure, no upsell on something that should never have a price tag in the first place.
