This Manual has been prepared in terms of section 51 of the Promotion of Access to Information Act 2 of 2000 (“PAIA”) and updated in the light of the Protection of Personal Information Act 4 of 2013 (“POPI”).
This manual is for Discovery Limited, Discovery Health (Proprietary) Limited, Discovery Life Limited, Discovery Vitality (Proprietary) Limited, Vitality Healthstyle Travel (Proprietary) Limited, Discovery Insure Limited, Discovery Life Investment Services (Proprietary) Limited, Discovery Life Collective Investments (Proprietary) Limited,Discovery Nominees (Proprietary) Limited and Discovery Retirement Annuity Fund 12/8/37469, Discovery Investment Retirement Annuity Fund 12/8/37787, Discovery Preservation Pension Fund 12/8/37760 and the Discovery Preservation Provident Fund 12/8/3775. These entities will collectively be referred to as “Discovery”, and specifically excludes all Medical Schemes administered by Discovery Health (Proprietary) Limited.
PAIA is an act that was passed to give effect to the constitutional right, held by everyone in South African, of access to information which is held by the State or by another person and which is required for the exercise or protection of any right. Where a request is made in terms of PAIA, the body to which the request is made is obliged to give access to the requested information, except where the Act expressly provides that the information may or must not be released.
It is important to note that PAIA recognises certain limitations to the right of access to information, including, but not exclusively, limitations aimed at the reasonable protection of privacy, commercial confidentiality, and effective, efficient and good governance, and in a manner which balances that right with any other rights, including such rights contained in the Bill of Rights in the Constitution.
POPI was enacted in November 2013, to promote the protection of personal information processed by public and private bodies. POPI amended certain provisions of PAIA, balancing the need for access to information against the need to ensure the protection of personal information.
One of the main requirements specified in PAIA is the compilation of an information manual that provides information on both the types and categories of records held by a private body. This document serves as Discovery’s information manual.This Manual is compiled in accordance with section 51 of PAIA and the Schedule to POPI. It is intended to give a description of the records held by and on behalf of Discovery; to outline the procedure to be followed and the fees payable when requesting access to any of these records in the exercise of the right of access to information, with a view of enabling requesters to obtain records which they are entitled to in a quick, easy and accessible manner.
This Manual is available for public inspection:
The Manual is available from the designated Information Officer, whose details appear below.
The responsibility for administration of, and compliance with, PAIA and POPI have been delegated to the Information Officer.
Requests pursuant to the provisions of PAIA and/or POPI should be directed to the Information Officer as follows:
An official Guide has been compiled which contains information to assist a person wishing to exercise a right of access to information in terms of PAIA and POPI. This Guide is made available by the Information Regulator (established in terms of POPI). Copies of the updated Guide are available from Information Regulator in the manner prescribed.
The South African HUMAN RIGHTS COMMISSION
Braampark Forum 3
33 Hoofd Street
A private body may, on a voluntary basis, make available a description of categories of records that are automatically available without a person having to request access in terms of PAIA.
The only fee for access to these records may be a prescribed fee for reproduction.
RECORDS HELD IN ACCORDANCE WITH OTHER LEGISLATION
A requester may also request information that is available in terms of other legislation, such as:
SUBJECT CATEGORIES OF RECORDS
The information is classified and grouped according to records relating to the following subjects and categories:
"Personnel" refers to any person who works for or provides services to or on behalf of Discovery and receives, or is entitled to receive, remuneration and any other person who assists in carrying out or conducting the business of Discovery. It includes, without limitation, directors (executive and non-executive), all permanent, temporary and part-time staff, as well as contract workers.
Personal records provided by personnel include:
CLIENT RELATED RECORDS
"Client" refers to any natural or juristic entity that receives services from Discovery, with the exception of the Medical Schemes administered by Discovery Health (Proprietary) Limited. This includes prospective clients who submit applications to Discovery, but which or who ultimately do not become Discovery clients.
Requests for records pertaining to the diagnosis, treatment or health of members of the medical schemes administered by Discovery Health (Proprietary) Limited, must be requested from the Medical Scheme directly by following the Medical Scheme’s PAIA prescribed process on the Medical Scheme’s website.
Client related records include:
PRIVATE BODY RECORDS
These records include, but are not limited to, the records which pertain to Discovery's own affairs. These include:
OTHER PARTY RECORDS
These records include:
In terms of POPI, data must be processed for a specified purpose. The purpose for which data are processed by Discovery will depend on the nature of the data and the particular data subject. This purpose is ordinarily disclosed, explicitly or implicitly, at the time the data are collected.
PURPOSE OF THE PROCESSING
Discovery processes personnel data for business administration purposes. For example, personnel data are processed for payroll purposes. Personnel data are also processed to the extent required by legislation and regulation. For example, Discovery discloses employees’ financial information to the Commissioner for the South African Revenue Service, in terms of the Income Tax Act 58 of 1962 and employee’s sensitive personal information in terms of the Employment Equity Act 55 of 1998.
Client related data
Discovery processes client related records as an integral party of its commercial services. For example, Discovery processes client related records during the client application process, in assessing a client’s profile and risk, in administering a client’s health plan, and for academic research purposes. Discovery may also process data provided to it by credit bureaus or industry regulatory bodies (and other “sources”, including a client’s employer) to consider a client’s application, to conduct underwriting or risk assessments, or to consider a claim for medical expenses on behalf of a Medical Scheme.
This list of processing purposes is non-exhaustive.
Third party data
Discovery processes third party records for business administration purposes.
Other party data
Discovery processes “other party” records for business administration purposes. For example, personnel data may be processed in order to effect payment to contractors and / or suppliers.
In performing these various tasks, Discovery may, amongst others, collect, collate, process, store and disclose personal information.
CATEGORIES OF DATA SUBJECTS
Discovery holds information and records on the following category of data subject:
This list of categories of data subjects is non-exhaustive.
RECIPIENTS TO WHOM PERSONAL INFORMATION WILL BE SUPPLIED
Depending on the nature of the data, Discovery may supply information or records to the following categories of recipients:
PLANNED TRANSBORDER FLOWS OF PERSONAL INFORMATION
Discovery may transfer personal information to a third party who is in a foreign country in order to administer certain services, but may only do so subject to the provisions of POPI. For example, academic / market research may be conducted by a company within the Discovery group and / or by a contracted research and survey provider, which may be inside or outside South Africa. Thus internal cross-border transfers, as well as external cross-border transfers of information are envisaged, subject to the provisions of POPI.
Discovery takes extensive information security measures to ensure the confidentiality, integrity and availability of personal information in Discovery’s possession. Discovery takes appropriate technical and organizational measures designed to ensure that personal data remain confidential and secure against unauthorized or unlawful processing and against accidental loss, destruction or damage.
Discovery may refuse a request for information on the following basis:
A requester is any person making a request for access to a record of, or held by, Discovery. The requester is entitled to request access to information, including information pertaining to third parties, but Discovery is not obliged to grant such access. Apart from the fact that access to a record can be refused based on the grounds set out in paragraph 9 above, in order to successfully access information the requester must fulfill the prerequisite requirements for access in terms of PAIA, including the payment of a request and access fee.
ACCESS REQUEST PROCEDURE
A requester requiring access to information held by Discovery must complete the prescribed form, enclosed herewith as Annexure 2 (“Access Request Form”), submit it to the Information Officer at the postal or physical address, fax number or electronic mail address recorded in paragraph 4 and pay a request fee (and a deposit, if applicable).
In order to facilitate a timely response to requests for access, all requesters should take note of the following when completing the Access Request Form:
The Access Request Form must be completed with enough particularity to enable the Information Officer to identify:
If a request is made on behalf of another person, then the requester must submit proof of the capacity in which the requester is making the request to the reasonable satisfaction of the Information Officer.
If an individual is unable to complete the prescribed form because of illiteracy or disability, such a person may make the request orally.
The requester will be informed in writing whether access has been granted or denied. If, in addition, the requester requires the reasons for the decision in any other manner, he must state the manner and the particulars so required.
PAYMENT OF FEES
Payment details can be obtained from the Information Officer and can be made either via a direct deposit, by bank guaranteed cheque or by postal order. Proof of payment must be supplied when the Access Request Form is submitted.
The following fees are (or may be) payable:
An initial “request fee” is payable on submission of the Access Request Form. The prescribed fee is set out below in Annexure 1.
Note that the requester may lodge a complaint to the Information Regulator or an application with a court against the tender or payment of the request fee.
If the request for access is successful, an access fee must be paid. This fee is for the search, reproduction and/or preparation of the record(s). The access fee will be calculated based on the prescribed fees set out below in Annexure 1.
Note that the requester may lodge a complaint to the Information Regulator or an application with a court against the tender or payment of the access fee.
This fee is applicable in respect of documents/records which are voluntarily disclosed (see ‘Automatic Disclosure’ above). This is for reproduction, copying and transcribing the relevant documents / records. The reproduction fee will be calculated based on the prescribed fees set out below in Annexure 1.
If the search for, and the preparation of, the record for disclosure would, in the opinion of the Information Officer, require more than 6 hours, the requester may be required to pay as a deposit one third of the access fee (the fee which will be payable if the request is granted).
Note that the requester may lodge a complaint to the Information Regulator or an application with a court against the tender or payment of the deposit.
If a deposit has been paid in respect of a request for access which is subsequently refused, then the Information Officer must refund the deposit to the requester.
The requester must pay the prescribed fee before any processing, or any further processing, can take place.
THIRD PARTY NOTIFICATION
Discovery must take all reasonable steps to inform a third party to whom or which a requested record relates if the disclosure of that records would -
Discovery will inform the third party as soon as reasonably possible, but in any event, within 21 days after that request is received.
Within 21 days of being informed of the request, the third party may-
Discovery will notify the third party of the outcome of the request. If the request is granted, adequate reasons for granting the request will be given.
The third party may lodge a complaint to the Information Regulator or an application with a court against the decision within 30 days after notice is given, after which the requester will be given access to the record after the expiry of the 30 day period.
The Information Officer will, within 30 days of receipt of the request, decide whether to grant or decline the request and give notice with reasons (if required) to that effect.
The 30 day period, within which Discovery has to decide whether to grant or refuse the request, may be extended for a further period of not more than 30 days if the information cannot reasonably be obtained within the original 30 day period. For example, the time period may be extended if the request is for a large amount of information, or the request requires Discovery to search for information held at another office of Discovery.
The Information Officer will notify the requester in writing should an extension be required. The requester may lodge a complaint to the Information Regulator or an application with a court against the extension.
Discovery does not have internal appeal procedures. Therefore, the decision made by the Information Officer is final. Requesters who are dissatisfied with a decision of the Information Officer will have to exercise external remedies at their disposal.
All complaints, by a requester or a third party, can be made to the Information Regulator or a court, in the manner prescribed below.
Complaints to the Information Regulator
The requester or third party, as the case may be, may submit a complaint in writing to the Information Regulator, within 180 days of the decision, alleging that the decision was not in compliance with the provisions of PAIA.
The Information Regulator will investigate the complaint and reach a decision - which may include a decision to investigate, to take no further action or to refer the complaint to the Enforcement Committee established in terms of POPI. The Information Regulator may serve an enforcement notice confirming, amending or setting aside the impugned decision, which must be accompanied by reasons.
Application to court
An application to court maybe brought in the ordinary course. For purposes of PAIA, any reference to an application to court includes an application to a Magistrates’ Court.
ANNEXURE 1: PRESCRIBED FEES
Where Discovery has voluntarily provided the Minister with a list of categories of records that will automatically be made available to any person requesting access thereto, the only charge that may be levied for obtaining such records, will be a fee for reproduction of the record in question.
The applicable fees for reproduction as referred to above are: (VAT inclusive)
For every photocopy of an A4-size page or part thereof
For every printed copy of an A4-size page or part thereof held on a computer or in electronic or machine readable form
For a copy in a computer-readable form on:
A transcription of visual images for an A4-size page or part thereof
For a copy of visual images
A transcription of an audio record, for an A4-size page or part thereof
For a copy of an audio record
Where a requester submits a request for access to information held by Discovery on a person other than the requester himself/herself, the request fee is payable up-front before the institution will further process the request received.
An access fee is payable in all instances where a request for access to information is granted, except in those instances where payment of an access fee is specially excluded in terms of the Act or an exclusion is determined by the Minister in terms of section 54(8). The applicable access fees which will be payable are:
The applicable fees which will be payable are: (VAT inclusive)
To search for a record that must be disclosed (per hour or part of an hour reasonably required for such search)
Where a copy of a record needs to be posted the actual postal fee is payable.
Where Discovery receives a request for access to information held on a person other than the requester himself/herself and the Information Officer upon receipt of the request is of the opinion that the preparation of the required record of disclosure will take more than 6 hours, a deposit is payable to the requester.
The amount of the deposit is equal to 1/3 of the amount of the applicable access fee.
Please note: In terms of Regulation 8, Value Added Tax (VAT) must be added to all fees prescribed in terms of the Regulations. Therefore, the fees reflected above are VAT inclusive.
Join the conversation
To remain logged in, please select the "Extend session" button below.
Go to the home page to start a new session.