PAIA Annual Report Submission Guide: South Africa

The Statutory Mandate for Annual PAIA Reporting

Transparency and the constitutional right of access to information are fundamental tenets of the South African legal system. Governed by the Promotion of Access to Information Act 2 of 2000 (PAIA) and monitored by the Information Regulator of South Africa, public access frameworks ensure that citizens can request records held by both the state and private commercial enterprises.

While most South African business owners are familiar with the requirement to hold a Section 51 PAIA manual, many remain unaware of their ongoing annual reporting obligation under Section 83(4) of PAIA. Under this statutory mandate, private bodies and public institutions must submit an annual report to the Information Regulator detailing all access-to-information activity handled during the reporting financial period.

Critical Compliance Alert: The Information Regulator has issued strict compliance directives establishing that failing to submit your statutory PAIA annual report exposes your company to formal Information Regulator compliance notices, administrative sanctions, and regulatory debarment.

The "Zero Requests" Myth: Why Nil Returns Are Mandatory

The single most dangerous misconception among South African SME directors is believing that if their business received zero access-to-information requests during the year, they have nothing to report and can simply ignore the deadline.

This assumption is legally incorrect. The Information Regulator's reporting directives explicitly mandate that entities that received zero PAIA requests during the financial year must still log into the Regulator's e-Services portal and submit an official Nil Return. Submitting a Nil Return is the only legal proof that your business is actively monitoring access requests and complying with statutory oversight.

Who is Required to Submit an Annual PAIA Report?

The annual reporting mandate applies to two broad legal categories:

• All Public Bodies: National and provincial government departments, municipalities, statutory boards, universities, and state-owned enterprises (governed under Section 32 of PAIA).
• All Private Bodies: Registered private companies (Pty Ltd), personal liability companies (Inc), public companies, close corporations, partnerships, and sole proprietors operating in South Africa (governed under Section 83(4) of PAIA).

Key Metrics Captured in the Annual Report

The Information Regulator e-Services portal captures specific statutory data points regarding how your entity handled access requests between 1 April and 31 March:

1. Total Requests Received: The total number of formal access-to-information requests received during the financial year under PAIA.
2. Requests Granted: The number of requests granted in full or granted partially.
3. Requests Refused: The number of requests refused, alongside the specific statutory grounds for refusal (e.g. protection of third-party privacy, trade secrets, attorney-client privilege, or commercial confidentiality).
4. Internal Appeals: The number of internal appeals lodged by unsatisfied requesters against refusal decisions.
5. Complaints to Information Regulator: The number of complaints referred directly to the Information Regulator for adjudication.
6. POPIA Section 24 Correction Requests: The number of requests received under POPIA to correct, update, or destroy personal information.
7. Statutory Fees Collected: The total quantum of prescribed search, preparation, and access fees collected from requesters.

Step-by-Step Portal Submission Roadmap

Submitting your PAIA annual return on the Information Regulator e-Services portal involves five distinct steps:

Step 1: Annual Request Register Reconciliation

Audit your internal Data Subject Access Request (DSAR) and PAIA register to extract exact request figures, refusal grounds, and timelines from the preceding financial year.

Step 2: Information Officer Portal Access

Ensure your company's Information Officer (or designated Deputy Information Officer) is registered and holds active login credentials on the Information Regulator e-Services portal.

Step 3: Portal Data Entry

Navigate to the "PAIA Annual Reporting" module. Select the relevant reporting financial year and enter your reconciled statistics into the prescribed digital schedule (or tick the Nil Return declaration if zero requests were received).

Step 4: Statutory Verification & Declaration

Review the captured figures and execute the digital statutory declaration affirming under oath that the submitted data is complete, true, and correct.

Step 5: Submission & Receipt Archiving

Submit the return and download the official stamped Proof of Submission Receipt. This document must be archived in your corporate compliance records for a minimum of 5 years.

Document Checklist for PAIA Annual Reporting

• Company CIPC Registration Number and Registered Office Address.
• Information Officer Registration Details and Unique IR Registration Number.
• Internal PAIA and DSAR Request Register for the reporting period (1 April to 31 March).
• Written summary of refusal reasons for any denied requests.
• Record of statutory access fees collected (if applicable).
• Signed corporate resolution authorizing the filing (if submitted by an agent).

Turnaround Times and Professional Filing Service

My Accountant reconciles your internal request logs, drafts statutory nil return declarations, and executes your formal portal submission within 2 to 3 business days (R1,150 professional fee), providing you with official stamped proof of submission for corporate audit peace of mind.

Frequently Asked Questions

When is the annual deadline for submitting the PAIA report?

In terms of Information Regulator directives, the annual reporting window opens on 1 April and closes on 30 June each year, covering the preceding 12-month financial period (1 April to 31 March).

What happens if our company misses the PAIA reporting deadline?

Failing to submit your PAIA annual return by the prescribed deadline results in the Information Regulator issuing an official Notice of Non-Compliance. Continued failure exposes the company and its directors to administrative enforcement notices, public naming in the Regulator's parliamentary report, and potential fines.

Can an external accountant or compliance officer submit on our behalf?

Yes. While statutory responsibility remains with the company's registered Information Officer, an authorized accounting professional or compliance agent can compile the return and execute the submission on your behalf under a formal proxy mandate.

Do small businesses with 1 or 2 employees need to submit a PAIA annual report?

Yes. The Information Regulator has confirmed that the Section 83 reporting obligation applies to all private bodies operating in South Africa, regardless of size or turnover. Small businesses that received zero requests must fulfill their legal duty by submitting a formal Nil Return.