Skip to main content
Back to Legislation Portal

ICT & Technology

IT, telecommunications, software, and technology tender compliance requirements for government procurement.

Compliance Roadmap
Mandatory laws and accreditations for ict & technology tenders.
1
SITA Act

Establishes SITA as the central ICT procurement and service provider for government departments.

  • Register on the SITA supplier database
  • Obtain required SITA accreditation for your ICT service category
  • Ensure B-BBEE documentation is current for SITA submissions
2
POPIA

Data protection legislation requiring compliance for any tender involving personal information processing.

  • Register Information Officer with the Information Regulator
  • Conduct a personal information impact assessment for tender requirements
  • Implement security safeguards for personal data processing
3
PPPFA

Establishes the preferential procurement points system (80/20 and 90/10) to promote socio-economic transformation.

  • Confirm correct preference points system (80/20 or 90/10) for the tender value
  • Prepare valid B-BBEE affidavit or certificate from accredited verification agency
  • Complete declaration of specific goals as required in bid documents
4
B-BBEE Act

Promotes economic transformation by requiring B-BBEE compliance and status verification in procurement.

  • Determine your B-BBEE status level through SANAS-accredited verification or sworn affidavit
  • Register with the B-BBEE Commission if required
  • Prepare valid B-BBEE certificate or affidavit for each tender submission
Key Accreditations & Registrations
Essential certifications and registrations required for ict & technology tenders.
SITA Supplier Registration
ICASA Licensing (where applicable)
ISO 27001 (Information Security)
POPIA Compliance Registration
Common Compliance Pitfalls
Why bids in this sector usually fail and how to avoid these mistakes.
  • Not registering on the SITA supplier database before bidding
  • Missing POPIA compliance documentation for data-processing tenders
  • Insufficient information security certifications (ISO 27001)
  • Unclear software licensing models in proposals
  • Failure to demonstrate B-BBEE IT sector code compliance