New Compliance Obligations: PAIA Annual Reports and ID Scanning at Security Gates
Two significant regulatory developments have expanded operational compliance requirements for South African public and private bodies regarding annual access reporting and physical security gate controls.
1. Mandatory PAIA Annual Reporting (Section 83(4))
Under Section 83(4) of the Promotion of Access to Information Act (PAIA), both public and private bodies are required to submit an annual report to the Information Regulator detailing all access-to-information requests received, granted, or refused during the reporting period. Submissions must be logged online via the Regulator's portal.
2. Code of Conduct for Gated Access Controls
The Information Regulator has published a draft Code of Conduct targeting personal data collected at security gates, office parks, and residential estates. Scanning driver's licenses, physical ID cards, and vehicle registration plates must strictly adhere to POPIA's Condition 2 (Minimality), prohibiting excessive data capture and unencrypted storage.
Official Directives & Reporting Portals
Ensure your physical security protocols and PAIA annual reporting structures are fully compliant. This email address is being protected from spambots. You need JavaScript enabled to view it..