Personnel suitability checks (vetting) services for wced – 5-Year contract

Legal requirements:

• Must be a registered entity in South Africa (or compliant with local laws if foreign).
• No conflicts of interest with WCED or government officials.
• Must sign confidentiality agreements and adhere to POPIA's duty of confidentiality (Section 54).

Technical requirements:

• Demonstrated experience in personnel vetting, background checks, or similar services.
• Certifications or accreditations in data protection (e.g., ISO 27001, POPIA compliance audits).
• Infrastructure to handle large-scale vetting operations securely and efficiently.

Financial requirements:

• Financial stability to fulfil a five-year contract.
• Proof of insurance coverage for data breaches or liability claims.

Quality management requirements under POPIA:

• Implement reasonable technical and organisational measures to secure personal information.
• Regularly verify and update safeguards to address new risks.
• Ensure personal information is accurate, complete, and not misleading.
• Establish procedures for data subjects to review and correct their information.
• Maintain documentation of processing operations and compliance measures.

Methodology for processing personal information must comply with POPIA:

• Collect personal information directly from the data subject unless exempt.
• Ensure processing is limited to the specified, explicit, and lawful purpose.
• Obtain consent from data subjects where required, unless processing is justified under POPIA.
• Implement measures to prevent unauthorised access or processing of personal information.
• Provide data subjects with clear information about the purpose of collection and their rights.

Required experience and qualifications for the service provider:

• Demonstrated expertise in conducting personnel suitability checks (vetting) in compliance with legal and regulatory frameworks, particularly POPIA.
• Experience in handling sensitive personal information securely and confidentially.
• Knowledge of data protection principles and the ability to implement appropriate safeguards.
• Capacity to manage and process personal information in accordance with POPIA's conditions for lawful processing.
• Familiarity with the roles and responsibilities of the Information Regulator and compliance requirements.

Compliance with the Protection of Personal Information Act (POPIA) is mandatory. Key requirements include:

• Lawful processing of personal information, ensuring it is adequate, relevant, and not excessive.
• Obtaining consent from data subjects for processing, unless exempt under POPIA.
• Implementing security safeguards to protect the integrity and confidentiality of personal information.
• Notifying the Information Regulator and affected data subjects of any security compromises.
• Allowing data subjects to access, correct, or delete their personal information.
• Restricting processing of special personal information (e.g., health, biometrics, criminal behaviour) unless specific conditions are met.
• Ensuring compliance with retention and destruction policies for personal information records.

Contractual terms must align with POPIA requirements:

• Ensure lawful processing of personal information with appropriate safeguards.
• Define the purpose and scope of data processing explicitly.
• Include clauses for data subject rights, such as access, correction, and deletion of personal information.
• Mandate notification of security breaches to the Information Regulator and affected parties.
• Restrict the processing of special personal information unless authorised or exempt under POPIA.
• Ensure compliance with retention and destruction policies for records containing personal information.

This is an itemised pricing schedule (Annexure B) for the tender: Appointment of a Service Provider to Conduct Personnel Suitability Checks (Vetting) for the Western Cape Education Department (WCED) for a five-year period.

• The schedule lists mandatory and other verification types required for vetting.
• It includes a section for training WCED users.
• Bidders must provide firm prices for each item per year and a total for five years.

Based on the pricing schedule document, key eligibility criteria include: ability to provide firm pricing for all five years, capability to perform all specified verification types, experience with AFIS platform for criminal checks, capacity to train users across multiple locations, and compliance with SAQA accreditation requirements for qualification verification.

The tender requires a service provider to conduct personnel suitability checks (vetting) for the Western Cape Education Department (WCED) for a five-year period. The scope includes:

• Mandatory verification types (Items 1–19):
• Verification of National Matric qualifications (pre-1992 and post-1992) via UMALUSI and SAQA.
• Verification of National tertiary qualifications via relevant institutions and SAQA.
• Verification of International Qualifications.
• Criminal checks via AFIS.
• Credit reports from TransUnion, Experian, XDS, and Compuscan.
• Combined consumer credit profile.
• Citizenship validation.
• Sex Offender Register Check.
• Employment reference checks.
• SMS and WhatsApp consent processes.
• Booking for fingerprint branches in all provinces.
• Verification of Permanent/Temporary Residency Permits (work permits).
• Driver’s License verification (including Public Driver Permits).
• ID Validation.
• Other verification types (Items 20–25):
• Directorship Listing.
• Fraud Listing.
• Verification of short courses/certificates.
• Membership of Organisations.
• Company Credit Check (South Africa and Proof of Registration for International).
• Fingerprint Detail.
• Training: Online orientation and training for WCED users and administrators at Head Office and district offices on loading requests and documents on the relevant platform (AFIS).

The pricing schedule requires firm prices for a five-year period.

• Bidders must provide itemised pricing for:
• Mandatory Verification Types (Items 1–19).
• Other Verification Types (Items 20–25).
• Training Users (Item 26).
• Prices must be specified for each year (Year 1 to Year 5) and a total price for all five years.
• The document indicates a total price of R0 for all items in the provided extract; bidders must submit their actual pricing.