The Host's Legal Duty: Unpacking the Immigration Act Guest Register

Scope and retention clarification

Regulation 36 applies to hotels and motels, boarding houses and lodges, guest houses, and apartment buildings. For each lodger, the prescribed register includes full names and surname, a copy of the ID document or passport, residence status in South Africa, normal residential address, and signature. The register must be safeguarded for two years. This is not a blanket two-year rule for every duplicate ID copy or all guest data. POPIA section 14 allows retention required or authorised by law; securely delete information when no lawful retention basis remains. Deletion from a booking platform does not discharge the host's register duty. Check your premises' classification and the prescribed particulars. Sources: Regulation 36 and POPIA section 14.

Are You Keeping a Guest Register? Why It's a Non-Negotiable for SA Hosts

As a holiday accommodation host in South Africa, you wear many hats: marketer, concierge, cleaner, bookkeeper, and experience curator. But there’s another crucial role you must play, one that is legally mandated but often overlooked: record keeper. South African law requires the premises prescribed by Regulation 36 to maintain a register of their lodgers. This isn't just a recommendation for good business practise; it’s a legal obligation under the Immigration Act.

Many hosts, especially those running smaller self-catering units or single holiday homes, are unaware of this duty. Understanding and complying with this law is essential for operating a professional, legitimate, and secure accommodation business. This article will guide you through the specifics of the law, what you need to record, how long you need to keep it, and how this all fits in with the Protection of Personal Information Act (POPIA).

Understanding the Law: The Immigration Act and Your Guesthouse

The primary piece of legislation governing this requirement is the Immigration Act 13 of 2002. Specifically, Section 40(1) of the Act is crystal clear. It provides for regulations requiring specified persons in charge of premises offering paid lodging to keep registers; Regulation 36 identifies the covered classes of premises.

Let's break down what this means for you:

• “Premises providing lodging”: This is a broad definition. It doesn’t just apply to large hotels. It includes guesthouses, bed and breakfasts, self-catering apartments, holiday villas, farm stays, and any property you rent out for short-term accommodation. Check whether your premises fall within the classes prescribed by Regulation 36; payment for a stay alone does not establish that classification.
• “Person in charge”: This is the owner, host, or manager of the property. The responsibility falls directly on your shoulders.
• “Keep a register”: You are legally required to create and maintain a record of your guests.

The purpose of this law is to assist the Department of Home Affairs in tracking the whereabouts of foreign nationals and to ensure they are in the country legally. It’s a matter of national security and immigration control, and the government places the initial responsibility on accommodation providers to collect this vital information.

What You Must Record: A Look at Regulation 36

While Section 40 establishes the duty to keep a register, it’s Regulation 36 of the Immigration Regulations that provides the checklist of exactly what information you must collect. It’s not enough to simply jot down a name and phone number. To be compliant, your register must contain the following details for every guest, not just the person who made the booking:

• Full names and surname: You need the guest’s complete name as it appears on their official identity document.
• Residential address: Their normal home address, not just their city or country of origin.
• Residence status in South Africa: You need to note whether they are a South African citizen, a permanent resident, or a foreign visitor.
• Identity Document or Passport: This is the most critical and often missed step. You are required to make a copy of a specific document for each guest:
• For South African citizens or permanent residents, you must make a copy of their South African identity document or card, or a valid South African passport.
• For foreign nationals, you must make a copy of their passport. This copy should include the page with their personal details (photo, name, date of birth, etc.) and the page that contains their permit or visa authorising their entry into South Africa.

The law requires that an immigration officer must be able to inspect these records at the premises at any time. This means you need a systematic and reliable way to collect and store this information.

Putting it into Practise: How to Collect and Store Guest Information

The Check-In Process

The easiest way to comply is to build this process into your standard check-in procedure. You can use a simple guest registration form, either on paper or as a digital document, that guests complete upon arrival. This form should have fields for all the information required by Regulation 36.

Crucially, you cannot just take the guest’s word for their ID or passport number. The Act implies a duty to verify. You must physically see the document and make a copy. This can be done with a photocopier, a scanner, or even by taking a clear, secure photograph with your smartphone. Ensure the copy is legible and captures all necessary details.

How Long to Keep Records?

The Immigration Act is specific on this point: you must keep the register and the copies of the identity documents or passports for a period of two years from the date of the guest's stay. These records must be kept on the premises of your establishment, ready for inspection.

Navigating POPIA: Your Duty to Protect Guest Data

At this point, you might be thinking about the Protection of Personal Information Act (POPIA). Doesn't POPIA restrict the collection of personal data? This is a valid concern, and it highlights the need for a careful balancing act.

The Immigration Act *compels* you to collect sensitive personal information. POPIA governs how you handle that information. Compliance with the Immigration Act provides you with a “lawful basis” under POPIA for processing this data. However, you are still bound by POPIA’s other principles:

• Purpose Specification: You are collecting this information for one reason only: to comply with the Immigration Act. You cannot use these details, such as email addresses or phone numbers, for marketing purposes unless the guest gives you separate, explicit consent to do so.
• Data Security: This is paramount. You are now the custodian of highly sensitive information. You have a legal duty to protect it from loss, theft, or unauthorised access.
• Physical Records: Paper forms and photocopies should be stored in a locked filing cabinet or safe.
• Digital Records: Scans or photos should be stored in a password-protected folder on a secure computer or in an encrypted cloud storage service. Do not leave them in an open folder on a shared family computer.
• Data Retention and Destruction: After the legally required two-year period, you must securely destroy these records. For paper, this means shredding. For digital files, it means permanent deletion, not just moving them to a recycle bin.

Your Responsibility as a Host on Hols.co.za

As a direct-booking platform, Hols.co.za is designed to connect you directly with your guests, giving you control over your business. This control also comes with responsibility. While Hols facilitates the booking and payment process, we do not and cannot manage your on-the-ground legal compliance.

Hols does not collect copies of guest IDs or passports, nor do we retain this information beyond what is necessary to confirm a booking. The legal obligation to create, maintain, and secure the guest register as required by Section 40 of the Immigration Act rests solely and entirely with you, the host. Seeing your Hols booking confirmation is not a substitute for completing your own legally compliant check-in process.

Practical Summary for Busy Hosts

Juggling legal duties with providing a five-star experience can be tough. Here’s a quick summary of your obligations regarding the guest register:

• Keep a Register: It is a legal requirement for the premises prescribed in Regulation 36.
• Collect the Details: For every guest, record their full name, home address, and residence status.
• Copy the ID: You must make and keep a copy of each guest’s SA ID/passport or foreign passport and visa.
• Store Securely for Two Years: Keep these physical or digital records in a secure, locked location for two years.
• Respect POPIA: Only use this data for legal compliance. Protect it carefully and destroy it securely after the two-year period when no other lawful retention basis remains.
• It’s Your Duty: This legal responsibility rests with you, the host, not with your booking platform.

By integrating these steps into your operations, you not only comply with the law but also demonstrate a high level of professionalism and care, giving both you and your guests peace of mind. As regulations can be updated, it is always a good practise to check the official Department of Home Affairs website or consult a legal professional to ensure you have the most current information.