Employee Wellness Programme Services

The Road Accident Fund (RAF) has invited suitable service providers to supply Employee Wellness Programme (EWP) services on a month-to-month basis for a period of ten (10) months. The request for quotation (RFQ) reference PR10119208 sets out the scope of the programme, which is intended to support the wellbeing of RAF employees. The arrangement is short-term and flexible, allowing the RAF to manage its employee wellness needs while it considers longer-term arrangements. Bidders should review the full RFQ document for detailed service specifications, deliverables, reporting expectations and pricing requirements.

Because the service provider will be entrusted with confidential RAF files, personal information and documents, the tender includes a detailed Technical and Organisational Security Measures annexure. Successful bidders must comply with RAF requirements and the Protection of Personal Information Act 4 of 2013 (POPIA). Key obligations include secure handling and lockable transport of physical files, accurate record keeping of document storage, retrieval and access activities, lockable storage cabinets, controlled and monitored access to premises, and fire protection measures for records. Facilities must have secure perimeters, controlled access points, surveillance or 24/7 monitoring, and alarm systems. Any actual, attempted or suspected security breach must be reported to the RAF promptly, together with supporting evidence such as CCTV footage, police reports and alarm records.

Digital systems must also meet defined cybersecurity standards, including firewalls, intrusion detection, encryption of data in transit and at rest, strong authentication, need-to-know access controls, regular patching and a documented incident response plan. Subcontractors and third-party service providers must adhere to the same standards, and the service provider remains fully responsible for their compliance. The RAF reserves the right to audit compliance, conduct security screening or vetting of company directors and resources, and require data protection agreements with third parties. Bidders should also note the standard South African government procurement documentation included with the tender, including SBD 6.1 under the Preferential Procurement Regulations 2022 and the revised SBD 4 declaration form. Providers that can demonstrate proven EWP delivery experience, robust information security practices and POPIA compliance are well positioned to respond.