GEPF Law and Rules

Around 490 000 pensioners and
assets worth R2.3 trillion


There are strict rules about the kind of benefits GEPF must pay and how money must be invested. These rules are spelled out in the Government Employees Pension Law 21 of 1996, as amended, which is referred to as the GEP Law. The aim of this law and the rules that guide the Board of Trustees in governing the Fund is to ensure that GEPF puts the interests of its members first.

  • The benefits are guaranteed: All GEPF benefits are defined in the GEP Law and rules, which is why GEPF is called a defined benefit fund. The advantage of belonging to a defined benefit fund is that benefits are guaranteed. Members will never receive less than the benefits they qualify for.
  • The benefits are protected against inflation: We have a solid track record in safeguarding the value of members’ retirement wealth and in protecting our pensioners against inflation. According to the Fund’s rules, the annual pension increase paid to our pensioners must be at least 75% of the average increase in consumer inflation during the previous year. Where pensions fall behind inflation, we also pay catch-up pension increases

Fraud Helpline - 0800 203 900

Breach Notification

NOTIFICATION OF SECURITY COMPROMISE AS PER SECTION 22 OF THE PROTECTION OF PERSONAL INFORMATION ACT, 4 OF 2013 ("POPIA")

The GEPF experienced a security breach and the compromise of personal information held on the GPAA systems and records between February and March 2024. Data subjects were notified of the security breach and potential compromise of personal information on 20 March 2024.

The GPAA immediately shut down all its systems and initiated its Cyber Incident and Response Plan to mitigate the damage at the time of the security compromise. As a result, the compromise of personal information was isolated and curtailed. The GPAA initiated an investigation into the cause and extent of the security breach and committed to providing updates/outcomes of the investigation as soon as practically possible.

Although the investigation is still ongoing, the assessment recently revealed a compromise of personal information of a number of data subjects. The extent of the compromise of personal information is still being investigated and will be communicated on the conclusion of the investigation.

The GPAA has put various additional control measures in place to strengthen the security safeguards on its systems since the incident. The GPAA is working with security agencies to strengthen control measures and avoid future reoccurrences.

The GEPF and GPAA recognises the importance of safeguarding personal information and is working actively to prevent any recurrence of security compromises on the GEPF and GPAA systems.

We apologise for any inconvenience caused and assure you that every reasonable step has been taken to ensure that all GPAA systems and platforms are safe and protected from unauthorised and unlawful access.

The security compromise was reported to the relevant authorities, entities and regulators for further investigations, support and transparency.

Gepf Logo