Legal & Risk: What Businesses Need to Watch

Legal & Risk: What Businesses Need to Watch

2026‑09‑22

In a year when headlines scream of cyber‑attacks, infrastructure gaps and legacy legislation, the quiet legal risks that slip through daily operations can be far costlier. Below are three stories that illustrate hidden compliance traps many commercial leaders miss, plus concrete actions for your CLO or risk team.

---

1. Household employers face a R100 000 fine

Source: “R100,000 fine warning for households employing domestic workers in South Africa” — BusinessTech

The proposed Employment Services Amendment Bill now opens public comment and introduces a maximum penalty of R100 000 for households that hire illegal foreign nationals as domestic workers. The fine is not only steep but also applies to the household owner, not just the employer‑service provider.

Hidden legal gap: Many SMEs assume that small‑scale household employment falls outside the reach of labour law because it lacks a formal “contract.” In reality, LRA 66 of 1995 requires all employers – including households – to register workers and provide statutory benefits. Failure to do so triggers enforcement action under both the Labour Relations Act and the proposed amendment’s penalty regime.

Compliance actions for your CLO

• Audit household‑level hiring – Map any domestic staff that your organisation engages indirectly (e.g., through a staffing agency or contract with a private residence) against LRA registration requirements.
• Implement an internal verification process – Before onboarding, collect and verify work permits or national identity documentation; flag any irregularities for escalation.
• Train front‑line managers – Conduct quarterly workshops on the Employment Services Amendment Bill, highlighting penalties, reporting obligations and best‑practice employment contracts.

---

2. Regulating AI: apply the laws we have first

Source: “Regulating AI: apply the laws we have first” — TechCentral

Dirk de Vos argues that South Africa does not need new AI legislation; instead, businesses must read existing statutes—POPIA 4 of 2013, the Consumer Protection Act 68 of 2008 and the Equality Act—to govern algorithmic systems.

Hidden legal gap: The presumption that a lack of specific “AI law” means no regulatory scrutiny overlooks how AI can trigger multiple overlapping obligations: data protection (POPIA), consumer fairness (CPA), anti‑discrimination (Equality Act) and, for public‑sector algorithms, the Public Service Charter. Failure to map these rules onto your AI projects risks hefty fines, reputational damage and contractual liability.

Compliance actions for your CLO

• Conduct a regulatory impact assessment – For every new AI deployment, evaluate data flows against POPIA’s processing principles and identify any automated decision‑making that could implicate the Equality Act.
• Update vendor contracts – Insert clauses that require third‑party developers to adhere to South African law, supply audit rights and provide indemnity for non‑compliance.
• Establish an AI governance framework – Create a cross‑functional steering committee (data protection, legal, ethics) to review algorithms before market launch.

---

3. New laws put R2.2 bn deals on hold

Source: “New laws coming to South Africa put R2.2 billion deals on hold” — BusinessTech

Digital‑asset firms have paused multi‑billion rand transactions after proposed regulatory changes would bring cryptocurrencies under the country’s exchange‑control regime and limit their use in cross‑border payments. The moves could trigger a need to re‑structure financing, comply with new AML/KYC rules and secure licences that were previously unnecessary.

Hidden legal gap: Many companies focus on domestic settlement but ignore that cross‑border token transfers may now fall under the Exchange Control Act 9 of 1997 (EA). Ignoring this exposes firms to sanctions for unauthorized foreign exchange and breaches of international financial regulations.

Compliance actions for your CLO

• Map transaction flows against EA – Identify any cross‑border crypto‑payment paths that might become restricted; assess whether a “foreign‑currency transaction licence” is required.
• Strengthen AML/KYC procedures – Align your Know‑Your‑Customer (KYC) onboarding with the South African Reserve Bank’s new guidelines and ensure real‑time monitoring of token movements.
• Engage regulators early – Submit clarifications or seek provisional approvals to confirm that proposed deals meet the forthcoming regulatory framework.

---

Bottom line

The common thread in all three stories is that “new law” is not the only trigger for compliance risk—existing statutes, evolving interpretations and cross‑sector interactions can create silent exposures. A proactive compliance audit that maps current operations against every relevant piece of legislation remains your safest bet.

Sources

• Johannesburg Master’s Office remains without leadership — Moneyweb
• SA could become an offshore wind powerhouse – World Bank — Moneyweb
• Regulating AI: apply the laws we have first — TechCentral
• R100,000 fine warning for households employing domestic workers in South Africa — BusinessTech
• Red flags over R2.6 billion owed to workers in South Africa — BusinessTech
• New laws coming to South Africa put R2.2 billion deals on hold — BusinessTech

Review Note

The interpretation of the proposed Employment Services Amendment Bill and its penalty regime is preliminary; confirm with statutory counsel to ascertain exact registration thresholds for household employers. The AI governance framework suggested is a high‑level template; adaptation to specific industry contexts (e.g., finance, healthcare) may require deeper statutory mapping. Finally, the exchange‑control implications for crypto transactions are evolving—monitor regulatory announcements closely and seek guidance from the South African Reserve Bank where appropriate.