Yes. POPI requires a responsible party to maintain a record of all the company’s processing operations (or activities or functions) under its responsibility in a PAIA manual.