Tag: compliance

South Africa has been fighting corruption with legislation that, frankly, lacked teeth. The Prevention and Combating of Corrupt Activities Act 12 of 2004 (PRECCA) has long been the cornerstone of the country's anti-corruption framework - criminalising bribery, fraud and a broad range of corrupt conduct in both the public and private sectors. The law was there. The convictions, historically, were not. That is rapidly changing.

Running a business means managing risk every day. Whether it's protecting assets, managing cash flow or ensuring regulatory compliance, business leaders understand the importance of planning for the unexpected. However, one risk often receives far less attention. It is the possibility of a tax audit.

White-collar crime in Africa is no longer a predominantly domestic concern. It has expanded onto an international stage, and so has the corporate exposure that comes with it. As capital crosses borders, data moves at the speed of light, and corporate structures become more complex, economic crime has kept pace. It has become more sophisticated, more multinational and increasingly difficult to investigate and prosecute within the confines of a single legal system.

The recent amendments to the Consumer Protection Act 68 of 2008 (CPA) Regulations introduced a formal compliance framework for direct marketing in South Africa. The CPA Amendments took effect on 15 April 2026. For property practitioners who rely on cold-calling or other direct marketing methods, the rules have changed. These methods include SMS campaigns, neighbourhood canvassing, and outsourced lead-generation services.

The Public Procurement Act 28 of 2024 is signed but not yet in force. However, the Constitutional Court is yet to rule on a challenge by the Western Cape Government, the City of Cape Town and amaBhungane. They argue that Parliament failed to facilitate reasonable public participation on material amendments, as required by section 59(1)(a) of the Constitution. That judgment is still pending.

Regulatory compliance in cybersecurity is no longer an administrative chore that organisations can treat as an afterthought. As digital ecosystems expand, threat actors are leveraging automation, Artificial Intelligence (AI)-driven reconnaissance and supply-chain attack vectors. Consequently, governments are moving from advisory guidelines to enforceable directives.

The enterprise Goliath is worried about its suppliers. These Small and Medium-sized Enterprises (SMEs) are underprepared. They are also disproportionately targeted. In fact, 43% of cyber-attacks target their digital front door. In addition, the Protection of Personal Information Act (POPIA) holds large organisations legally responsible when a supplier is breached.

South African businesses do not need to look far for a cautionary tale. The fallout from the Steinhoff scandal continues to reveal how weak governance, inadequate scrutiny of business relationships and unchecked transactions can destroy billions in shareholder value. What began as aggressive growth ultimately became one of the country’s most expensive lessons on the cost of insufficient oversight.

South Africa’s growing water insecurity has moved from an environmental concern to a central economic and regulatory challenge. Deteriorating infrastructure continues to worsen the situation. Recurring supply disruptions also place strain on national systems. In addition, unlawful water use increases pressure on already limited strategic water resources. These factors together strain the country’s water governance framework.

Skills development planning is no longer viewed as an administrative compliance exercise under South Africa's Broad-Based Black Economic Empowerment (B-BBEE) framework. Companies must now demonstrate clear alignment between training initiatives and measurable transformation outcomes. Skills development remains a priority element of the B-BBEE scorecard.