An Information Officer is the person responsible for POPIA and PAIA compliance in a South African public or private body, registered with the Information Regulator.

Who it is by default

Under POPIA sections 55 and 56, every public and private body must have an Information Officer:

  • In a private company, the chief executive officer, managing director or equivalent head
  • In a sole proprietorship, the sole proprietor
  • In a partnership, any partner or designated manager
  • In a public body, the head of the body

The Information Officer may designate one or more Deputy Information Officers to help. Under section 55(2), the Information Officer may take up their duties only after registering with the Information Regulator, through the Regulator's online portal.

What they do

  • Encourage compliance with the eight conditions for lawful processing
  • Deal with access and correction requests under POPIA and PAIA
  • Work with the Information Regulator during investigations and prior authorisation applications
  • Make sure the organisation maintains and publishes its PAIA manual