Digital Visitor Book vs Paper Visitor Register: Accuracy, POPIA and Investigations

What is a digital visitor book?

A digital visitor book is an electronic version of the register kept at a gate or reception. The guard captures each visitor on a phone or tablet instead of in a book.

Good systems scan the visitor's ID card or driving licence, so details are not copied by hand. Each entry is stamped with the time and linked to the guard who made it. Zamatrack's digital visitor book software works this way, and keeps a visitor history for each site.

What is wrong with a paper visitor register?

A paper register records only what someone chose to write, and it shows that to everyone. Most of its weaknesses follow from that.

• Handwriting. Names, ID numbers and number plates are often illegible or wrong.
• Nothing is checked. A visitor can write any name. The guard rarely has time to compare it with a document.
• Times are guesses. Entries written in a rush, or filled in later, do not prove when someone arrived.
• Earlier visitors are exposed. Anyone signing in can read the names and numbers above their own line.
• Books get lost. There is one copy, kept at the gate, exposed to weather, wear and theft.
• Searching is slow. Finding one vehicle over three months means reading several books.

How do a paper register and a digital visitor book compare?

The table compares them on the points that matter at a gate.

Paper still has one advantage: it costs almost nothing to start. The real cost shows up later, when a record cannot be found or read.

What should a visitor book record?

Record enough to answer one question later: who was on site, when, and why. The same fields apply to paper and digital books.

Fewer fields mean faster entries and less to protect. If a field never helps an investigation, drop it.

What does POPIA require for visitor records?

Visitor names, ID numbers, licence details and photos are personal information under the Protection of Personal Information Act (POPIA). The body that decides how the register is kept, such as the body corporate or the company running the site, is responsible for it. These sections apply most directly to a visitor book:

• Purpose (section 13). Collect visitor information for a specific, defined and lawful purpose, and write that purpose into the site rules.
• Minimality (section 10). Collect only what is adequate, relevant and not excessive for that purpose.
• Quality (section 16). Take reasonably practicable steps to keep the information complete, accurate and not misleading. Scanned details help here; illegible handwriting does not.
• Notice (section 18). Before collecting, tell visitors what you collect, who you are and why, whether it is voluntary, what happens if they refuse, and that they may complain to the Information Regulator.
• Retention (section 14). Do not keep records longer than the purpose needs, unless an exception applies. Then delete, destroy or de-identify them so they cannot be rebuilt.
• Security (section 19). Take reasonable technical and organisational steps against loss and unlawful access. An open book on a counter is hard to defend under this section.
• Access (section 23). A visitor who proves their identity may ask whether you hold information about them, and ask for a record or description of it.

This is a summary, not legal advice. For operator contracts and breach notification, see the POPIA table in our visitor management guide for Durban sites.

Who should be able to see and export visitor records?

As few people as the job needs. A digital book only helps with POPIA section 19 if access to it is controlled.

• Gate guards need to capture entries and see who is on site now. They rarely need months of history.
• Supervisors and managers need to search history for incidents and complaints.
• Exports to spreadsheets should be limited to one or two named people, because an exported file leaves the system's safeguards.
• Shared logins should not exist. Each person needs their own, so you can tell who looked at or changed what.

If a guarding company or software supplier keeps the records for you, section 21 of POPIA requires a written contract that obliges it to keep the same safeguards.

How does a visitor book help in an investigation?

It narrows the question "who was here?" to a list of names, vehicles and times. That only works if the entries are accurate and easy to find.

Section 15 of the Electronic Communications and Transactions Act says a data message may not be refused as evidence merely because it is electronic. When a court weighs it, it looks at how reliably the record was generated, stored and kept intact, and how its originator was identified.

In practice, that favours entries made at the time, by a named guard, that cannot be quietly changed. The same principle applies to occurrence books, which we cover in digital vs paper occurrence books.

Illustrative example: a car is broken into in an office park car park on a Saturday. With a paper register, the manager reads three days of handwritten pages to find which vehicles entered. With a digital visitor book, a search on the date and time window lists every vehicle, its number plate and the host each driver visited.

How do you move from a paper register to a digital visitor book?

Plan the switch in a week or two, not overnight. These steps cover the rules as well as the device.

1. Write down the purpose. For example: controlling access, keeping people on site safe and investigating incidents.
2. Choose the fields. Keep only those the purpose needs. Use the field list above as a starting point.
3. Set a retention period. Decide how long records are kept and who may delete them.
4. Put up a notice at the gate. Say who you are, what you collect, why, and how to complain to the Information Regulator.
5. Give each guard a personal login. Shared logins make it impossible to say who made an entry.
6. Run paper and digital side by side for a short trial. Fix gaps before the paper book goes away.
7. Close and store the last paper book. Lock it away and destroy it when the retention period ends.

How Worxit handles the visitor book

Zamatrack's Worxit platform replaces the paper book with the Visitor Access Control module.

• Guards scan South African driving licences, ID cards and vehicle licence discs with a 2D scanner. SADL photo verification adds a photo check at the gate.
• The guard can add a vehicle photo, the number plate and notes, such as the unit or department visited.
• Access can be limited to certain locations or buildings.
• Each visit is kept in the site's visitor history, ready for an audit or an investigation.
• For estates and offices, the Visitor Management module adds resident invites with secure access codes, a live view of who is on site and a central visitor history.

The Worxit dashboard licence is R600 per month, including one admin user, and additional dashboard users are R75 per user per month. Each phone, tablet or radio running the Worxit app needs a mobile device licence at R350 per month. The Visitor Management System (VMS) licence is R1,300 per month. All prices exclude VAT.

Frequently asked questions

Sources

• Protection of Personal Information Act 4 of 2013. gov.za. Sections 10, 13, 14, 16, 18, 19, 21 and 23.
• Electronic Communications and Transactions Act 25 of 2002. gov.za. Section 15: admissibility and evidential weight of data messages.
• Information Regulator. The independent body that monitors and enforces compliance with POPIA, and receives complaints.