POPIA vs PAIA: the difference for your business
POPIA governs the processing of personal information. PAIA provides a route to request access to records, subject to its requirements and exceptions. They work together: protecting information does not mean refusing every request, and receiving a request does not mean releasing every record.
By POPIA Check · Editorial update · General information, not legal advice
Keep the documents and purposes clear
| Item | Main purpose | Practical review |
|---|---|---|
| Privacy notice | Explain relevant processing of personal information. | Compare it with the information actually collected and used. |
| PAIA manual | Describe the organisation's records and access arrangements as required by PAIA. | Check the applicable section 14 or 51 requirements and availability. |
| Request procedure | Handle requests consistently through the right route. | Identify the responsible person, evidence required and applicable deadlines. |
Why a manual and privacy notice are not interchangeable
PAIA's manual provisions include organisation and access information. A privacy notice addresses collection and processing. They can refer to each other, but a generic document title does not tell you whether the necessary content is present. A website link is only useful if the document can be opened and the contact route works.
Worked example: a request for an application file
A former applicant asks for records about their application, including notes that may identify other people. Log the request securely, confirm the correct route and identity checks, and identify the records and recipients. Ask the responsible reviewer to consider any third-party information and applicable disclosure or refusal provisions. Do not release an entire shared folder in response to the first email.
Prepare your team
- Keep a clear contact route and a named backup for requests.
- Locate the current manual, notices and request forms.
- Map where records sit, including supplier systems and archived mail.
- Practise a fictional request, recording who decides and how the response is checked.
- Seek advice on deadlines, grounds for refusal and escalation for a real request.
Sources and further reading
Editorial guidance from POPIA Check, with links to primary sources. Ask your selected legal partner how the law applies to your organisation.
Gather the evidence. Assign the actions.
Download seven editable registers with examples and step-by-step instructions.
Get the free starter toolkitKnow what to work on next.
Get a free PDF gap report, then decide whether to discuss it with your chosen partner.
Start free assessmentView a sample report