PAIA Requests: Consider Implications Before Sharing Information

In South Africa, the Promotion of Access to Information Act 2 of 2000 (PAIA) gives legislative effect to the constitutional right of access to information, as provided under section 32 of the Constitution, establishing a procedure for compelling both public and private bodies to disclose records in their possession.

This legal development is profoundly significant for all legal practitioners, businesses, and the public, as it underpins the principle of transparency and accountability in both governmental and private sectors. For businesses, it means a potential obligation to disclose internal records, which can have far-reaching implications for commercial confidentiality, intellectual property, and competitive advantage. For the public, it provides a powerful tool to hold institutions accountable and access information vital for democratic participation and the protection of rights. Practitioners must navigate the delicate balance between the right to access information and legitimate grounds for refusal, ensuring compliance while safeguarding client interests.

The legal context for PAIA is firmly rooted in Section 32 of the Constitution of the Republic of South Africa, 1996, which guarantees everyone the right of access to any information held by the state, and any information held by another person that is required for the exercise or protection of any rights. PAIA operationalises this constitutional right, setting out the procedural framework, including timelines, fees, and grounds for refusal. The Information Regulator is the independent body established to oversee and enforce PAIA, providing guidance and handling complaints related to non-compliance. Understanding the hierarchy of these legal instruments and the Regulator's role is crucial for effective engagement with PAIA.

Key parties involved in PAIA requests include the requester (any person seeking information), public bodies (such as government departments, municipalities, and state-owned enterprises), and private bodies (including companies, non-profit organisations, and other entities). The courts, particularly the High Courts, serve as the ultimate arbiters in disputes arising from PAIA requests, reviewing decisions made by public and private bodies or the Information Regulator. The interplay between these parties defines the practical application and enforcement of the Act.

Practitioners should closely monitor developments in PAIA jurisprudence and guidance from the Information Regulator. It is imperative for attorneys to advise clients, both public and private bodies, on the proactive development and maintenance of PAIA manuals, the proper processing of requests, and the robust application of legitimate grounds for refusal. Businesses must also conduct regular audits of their information holdings to identify potential PAIA risks and ensure that their record-keeping practices align with the Act's requirements, preparing for the eventuality of a request and understanding the implications of disclosure or refusal.