POPIA & PAIA Risks: Protect your property portfolio

• Landlords carry legal risk when tenant data is mishandled by schemes
• Non-compliance can trigger fines up to R10m and costly special levies
• 30 June 2026 deadline: PAIA reporting now mandatory for schemes and companies

As a property investor, your focus is usually on yields and maintenance. However, two pieces of legislation, the Protection of Personal Information Act 4 of 2013 (POPIA) and the Promotion of Access to Information Act 2 of 2000 (PAIA), are becoming just as critical to your bottom line.

Q: We hear these acronyms everywhere, but what do POPIA and PAIA actually mean for an everyday investor?

A: Think of them as two sides of the same coin. POPIA is about protecting an individual's right to privacy by regulating how we collect and use their data. PAIA is about transparency, ensuring people can access information that they are entitled to.

If you own property in a body corporate or a Homeowners Association (HOA), these laws apply directly to the scheme. These entities handle vast amounts of data, from owner records to security camera footage, and they are legally required to have both POPIA and PAIA manuals, as well as a registered Information Officer in place.

Further, annually, a PAIA report is due to be compiled and submitted to the Information Regulator. This year’s deadline being 30 June 2026.

Q: As a landlord, I’m just an owner. Why does the scheme’s compliance matter to me?

A: This is a common misconception. When you hand your tenant's personal details over to a body corporate, as required by legislation, you are acting as a Responsible Party in terms of POPIA.

You have a legal duty to ensure that data is handled correctly. If your scheme has a major information breach and your tenant’s data is leaked, you could find yourself in the middle of a very messy legal situation. This is why we always tell landlords: Make sure your scheme is compliant. It’s your first line of defence against liability.

Q: What should I be doing differently in my lease agreements?

A: You need to be proactive. Because you are required to share tenant information with the HOA or body corporate, you must make the tenant aware of this from the start.

We recommend that owners update their lease agreements to include a clause where the tenant acknowledges and consents to their information being shared with the scheme for regulatory and operational purposes. Transparency is the best way to avoid a complaint to the Information Regulator later.

Q: Speaking of the Information Regulator, what are the actual consequences if a scheme just ignores these rules?

A: The Information Regulator can investigate complaints, monitor compliance, and even issue codes of conduct for specific sectors, like gated access points.

If a scheme acts recklessly with data, they face:

• Regulatory sanctions and damage to their reputation.
• Fines of up to R10 million.
• Imprisonment for serious offenses, ranging from 12 months to 10 years.

        For an owner, these fines can lead to massive special levies, which directly eats into your investment return. Moreover, the landlord may be held responsible by the tenant as the Responsible Party which shared their personal information with the scheme.

Q: Is there anything urgent investors and schemes need to know for 2026?

A: Yes! As mentioned above, there is a hard deadline approaching. All private and public organisations, including community schemes, must submit their annual reports regarding any PAIA requests (requests for information) by latest 30 June 2026. Investment owners who own their portfolios through registered companies must also submit reports for those entities.

It’s not just about having the manuals on a shelf anymore; it’s about active reporting and proving you are following the law. If your scheme hasn't started this process, they need to move quickly to avoid being flagged by the Information Regulator.

TVDM Consultants supports property owners and community schemes with end-to-end POPIA and PAIA compliance. Get ahead of the risk today to secure your compliance.
Email:info@tvdmconsultants.com 
Call 061 536 3138

is able to provide owners and schemes with POPIA and PAIA compliance services. Contact info@tvdmconsultants.com or call 061 536 3138 today for our assistance.