TTS PAIA Manual

• Check the categories of records held by a body which are available without a person having to submit a formal PAIA request;
• Have a sufficient understanding of how to make a request for access to a record of the body, by providing a description of the subjects on which the body holds records, and the categories of records held on each subject;
• Know the description of the records of the body which are available in accordance with any other legislation;
• Access all the relevant contact details of the Information Officer and Deputy Information Officer who will assist the public with the records they intend to access;
• Know the description of the guide on how to use PAIA, as updated by the Regulator and how to obtain access to it;
• Know if the body will process personal information, the purpose of processing of personal information and the description of the categories of data subjects and of the information or categories of information relating thereto;
• Know the description of the categories of data subjects and of the information or categories of information relating thereto;
• Know the recipients or categories of recipients to whom the personal information may be supplied;
• Know if the body has planned to transfer or process personal information outside the Republic of South Africa and the recipients or categories of recipients to whom the personal information may be supplied; and
• Know whether the body has appropriate security measures to ensure the confidentiality, integrity and availability of the personal information which is to be processed.

Chief Information Officer

Name: Renier Lewis
Tel: +27 12 060 1440
Email: paia@tts-talent.com
Fax: 086 684 6106

Deputy Information Officer

Name: Zainul Abedeen Cassim
Tel: +27 12 060 1440
Email: paia@tts-talent.com
Fax: 086 684 6106

Access to Information General Contacts

Email: paia@tts-talent.com

Head Office

Postal Address: Block 6, Suite 6-102, Monument Office Park, 72 Steenbok Avenue, Monument Park, Pretoria, Gauteng, 0181
Physical Address: Block 6, Suite 6-102, Monument Office Park, 72 Steenbok Avenue, Monument Park, Pretoria, Gauteng, 0181
Telephone: +27 12 060 1440
Email: info@tts-talent.com
Website: www.tts-talent.com

• The objects of PAIA and POPIA;
• The postal and street address, phone and fax number and e-mail address of the Information Officer of every public body, and every Deputy Information Officer of every public and private body designated in terms of section 17(1) of PAIA and section 56 of POPIA;
• The manner and form of a request for access to a record of a public body (section 11) and a private body (section 50);
• The assistance available from the IO of a public body and from the Regulator in terms of PAIA and POPIA;
• All remedies in law available regarding acts or failures to act, including how to lodge an internal appeal, a complaint to the Regulator, and an application with a court;
• The provisions of sections 14 and 51 requiring a manual, and how to obtain access to a manual;
• The provisions of sections 15 and 52 for voluntary disclosure of categories of records by public and private bodies;
• Notices in terms of sections 22 and 54 regarding fees; and
• Regulations made in terms of section 92.

Members of the public can inspect or make copies of the Guide from the offices of public and private bodies, including the office of the Regulator, during normal working hours.

The Guide can also be obtained:

• Upon request to the Information Officer;
• From the website of the Regulator: https://www.justice.gov.za/inforeg/

A copy of the Guide is available in English for public inspection during normal office hours.

Purpose of Processing Personal Information

TTS processes personal information primarily to provide psychometric assessments, consulting, and related talent solutions to clients. Additional purposes include managing internal operations and fulfilling legal obligations.

All personal data is collected for legitimate business purposes, processed lawfully and reasonably, and protected by appropriate organisational and technical safeguards. Please refer to the TTS Privacy Policy for detailed information:
https://www.tts-talent.com/legal/privacy-policy/.

Data Retention

TTS retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Retention schedules are determined in accordance with legal and contractual requirements.

Categories of Data Subjects and Associated Personal Information Processed

Categories of Third Parties to Whom Personal Information May Be Disclosed

Planned Transborder Flows of Personal Information

TTS makes use of third-party service providers and psychometric vendors whose systems may store or process personal data outside of South Africa. This includes data stored in jurisdictions such as Ireland, the Netherlands, the United Kingdom, and the United States.

Personal information categories involved in such transfers may include: name and surname; ID/passport number; contact details; demographic data (age, gender, race, language); assessment responses and scores; and reports generated from assessments.

These transfers are necessary for the delivery of assessments and services to clients, as well as the secure cloud-based storage and hosting of digital platforms like TTS Assess, which is hosted on Amazon AWS, a provider that complies with GDPR, ISO/IEC 27001, and other global standards.

TTS ensures that appropriate safeguards are in place for such transfers, including the use of reputable vendors, data processing agreements, encryption, and compliance with international data protection laws.

General Information Security Measures

• Hosting & Cloud Security: AWS hosting; encryption in transit and at rest (e.g. SSL/TLS, AES-256).
• Access Controls: Role-based access, SSO, AWS IAM, multi-tier firewalls, audit trails.
• Endpoint Protection: Encrypted devices, antivirus, firewalls, password protection.
• Network Security: Segmented environments with strict firewall rules and default-deny inbound policy where not required.
• Data Access & Entry Controls: Fine-grained permissions, logging, version history for traceability.
• Employee Training & NDA: Staff training on data protection; confidentiality agreements.
• Monitoring & Patching: Vulnerability scans, penetration testing, AWS CloudWatch monitoring, regular patch management.
• Anonymisation & Secure Deletion: Data anonymisation/deletion upon request; secure media erasure before disposal.
• Insurance: Professional indemnity and cyber liability coverage.

These safeguards support compliance with POPIA, GDPR, and ISO/IEC 27001 requirements.

• On www.tts-talent.com;
• At the head office of TTS for public inspection during normal business hours;
• To any person upon request and upon payment of a reasonable prescribed fee; and
• To the Information Regulator upon request.

A fee for a copy of the Manual, as contemplated in Annexure B of the Regulations, shall be payable per each A4-size photocopy made.

Submitting a Request

In terms of Section 53(1) of the Promotion of Access to Information Act (PAIA) and Regulation 10, all requests for access to records must be submitted using the prescribed Form C. The form can be obtained from the Information Regulator’s website at:
https://inforegulator.org.za/paia/.

Form C ensures that sufficient information is provided to enable TTS to:

• Identify the specific record being requested;
• Verify the identity and authority of the requester; and
• Process the request in compliance with PAIA requirements.

The completed form must be submitted to the Information Officer, accompanied by any applicable fees as set out in the PAIA Regulations. Access will only be granted where the request is lawful, justified for exercising or protecting a right, and where no valid grounds for refusal exist.

Grounds for Refusal of Access to Records

• Unreasonable disclosure of personal information about a third party;
• Confidential commercial information of a third party;
• Compromise to the security or safety of individuals or property;
• Legal privilege;
• Requests that are manifestly frivolous or vexatious; or
• Records already publicly available or archived under access conditions.

Appeal and Complaint Procedure

Should a request for access be denied, the requester may submit a written appeal to the Information Officer within 30 days of the refusal. The Information Officer will respond within 30 days.

If unsatisfied with the outcome, the requester may lodge a complaint with the Information Regulator or submit an application to court for relief.

Fees and Cost Structure

TTS may charge the following fees as prescribed in Annexure B of the Information Regulator’s PAIA Manual (available at
https://inforegulator.org.za/paia/):

Issued by

Renier Lewis
Chief Information Officer