Who the Information Officer is
For a private body, the Information Officer is the head of the body, such as the chief executive or equivalent, or a person they authorise. The role cannot be outsourced away from the organisation's accountability, though the head can designate deputy Information Officers to carry out the work.
Their duties
Section 55 sets out the Information Officer's responsibilities:
- Encouraging compliance with the conditions for lawful processing
- Dealing with requests made to the body under POPIA
- Working with the Information Regulator on investigations
- Ensuring a compliance framework is developed, implemented and monitored
- Ensuring a personal information impact assessment is done
- Ensuring a PAIA manual is developed, monitored and made available
- Ensuring internal awareness sessions are held
How to register
Section 55(2) requires the Information Officer to be registered with the Information Regulator before taking up their duties. Registration is done online through the Regulator's eServices portal, for the Information Officer and each deputy. Update the registration whenever the people in those roles change: a stale registration after a CEO leaves is a common finding.
The PAIA manual
The Promotion of Access to Information Act requires a manual describing the records you hold and how to request them. Publish it on your website and keep it at your offices. hlola tracks the Information Officer registration, the PAIA manual review date and the annual awareness sessions as POPIA controls.
Common questions
Who is the Information Officer under POPIA?
By default the head of the organisation, such as the CEO of a private body, or a person they duly authorise.
Does the Information Officer need to be registered?
Yes. Section 55(2) of POPIA requires registration with the Information Regulator before they take up their duties.
Can we appoint deputy Information Officers?
Yes. Deputy Information Officers can be designated and should also be registered; accountability remains with the head of the body.
This guide explains the law in general terms and is not legal advice. Laws, regulations and regulators' guidance change; confirm how they apply to your organisation with qualified counsel. Last reviewed 25 October 2026.