HB Compliance Consulting

06/09/2026

A professor of cyberlaw has said that South African authorities must spend more training officials to deal with scams and fraud.

06/09/2026

HOUSEHOLD DOMESTIC & GARDENER COMPLIANCE - COIDA, UIF etc

IF YOU EMPLOY SOMEONE IN YOUR HOME, YOU’RE AN EMPLOYER TOO.

Any employee who works more than 24 hours in a month must be registered for UIF & COIDA

Get your household admin properly set up: contract, compliance review/checklist, UIF/COIDA check and employment records guidance.

Employment contract • UIF • COIDA • Leave • Wages • Warnings • Termination

You pay your domestic worker R350 per month at the same cost for one day’s work.

For the equivalent of one additional day’s wages per month, you can have professional support to help you meet your obligations as an employer.

On joining:
✓ Household employment compliance check
✓ Review of existing employment arrangements
✓ UIF/COIDA status check
✓ Basic employee record checklist
✓ Identification of missing documentation

*A once-off onboarding fee is charged on all new registrations

Ongoing:
✓ “Can I do this?” WhatsApp/telephone support
✓ Leave, sick leave, public holiday and working-hours questions
✓ Wage and minimum-wage guidance
✓ Absenteeism and misconduct guidance
✓ Warning and disciplinary guidance
✓ Resignation and termination guidance
✓ UIF/COIDA questions
✓ Annual household employment compliance check

HAYLEY BILJON | HBCCS | PRACTICAL LEGAL & COMPLIANCE SOLUTIONS

Contact [email protected] or 0614905689 — in Johannesburg.

06/09/2026

The beer industry is frothing over Treasury’s proposed overhaul of alcohol excise taxes.

05/09/2026

IMPORTANT CYBER & IT COMPLIANCE UPDATE

From 1 September 2026, certain South African financial institutions are required to follow a prescribed process when reporting material IT and cyber incidents to the FSCA and/or Prudential Authority.

THE FSCA-PA published a Joint Communication 5 of 2026 and supporting documents.

The first reporting deadline is significant: once an incident is classified as material, an initial notification must be submitted within 24 hours.

Businesses need a cybersecurity policy and a practical process that answers:

• Who identifies and assesses the incident?
• Who decides whether it is material?
• Who must be notified internally?
• Who submits the regulatory report?
• What information must be available within 24 hours?
• Does the incident also trigger obligations under POPIA?
• Are outsourced IT and cloud providers contractually required to notify the business quickly enough?

A cyber incident can very quickly become a legal, governance, operational and regulatory issue.

The best time to establish your response process is before an incident occurs.

HBCCS can assist with:
• Cyber and IT incident-response compliance
• POPIA security-compromise procedures
• Regulatory reporting processes
• POPIA training
• Materiality and escalation procedures
• Information Officer processes
• Compliance gap assessments
• IT and service-provider agreement reviews
• Governance and policy documentation

Practical compliance is not just about having policies in place, it is about knowing what to do, who must do it and by when.

HAYLEY BILJON | HBCCS | PRACTICAL LEGAL & COMPLIANCE SOLUTIONS
Email: [email protected] or call 0614905689

05/09/2026

For many employees, work is more than a source of income: it provides structure, purpose and financial stability. But when stress becomes relentless and workplace pressure begins to affect physical and emotional well-being, some workers are deciding that walking away is the only option.
Read on https://tinyurl.com/h99exrb8

05/09/2026

MORE THAN 8,000 DATA BREACHES RECORDED IN 5 MONTHS IN SA

The Information Regulator says the real number is likely much higher because many breaches are never reported.

In only 5 months from April 2026, the Regulator received 1,220 data breach notifications. Millions of South Africans’ personal information have been exposed through security compromises.

For businesses, this is an important reminder: POPIA compliance DOES NOT start after a data breach.

Businesses handling customer, employee, supplier or other personal information should already have appropriate safeguards, policies and procedures in place; including knowing who does what when a security compromise occurs.

The Information Regulator specifically advises organisations to identify and mitigate a compromise, notify the appropriate Information Officer/Deputy Information Officer, notify affected data subjects in writing and report the compromise to the Regulator through its eServices portal.

DO YOU KNOW WHAT TO DO IF YOUR BUSINESS SUFFERS A DATA BREACH TODAY?

HBCCS can assist with POPIA compliance reviews, policies, Information Officer requirements, breach-response procedures, operator agreements, staff awareness and compliance support.

We can assist with all your POPIA requirements.

HAYLEY BILJON | HBCCS | PRACTICAL LEGAL & COMPLIANCE SOLUTIONS
Email: [email protected] or call 0614905689

05/09/2026

05/09/2026

Regular Internet banking fraud costs victims much more per incident than banking app fraud.

05/09/2026

POPIA ENFORCEMENT: The Information Regulator is actively pursuing organizations who are non-compliant with POPIA.

Being compliant costs less than being non-compliant and facing fines, loss of business and reputational damage.

Contact us for assistance with your POPIA Compliance

MTN has been referred to the Information Regulator’s Enforcement Committee after the regulator received complaints from South Africans about unsolicited marketing.

05/09/2026

The Property Practitioners Regulatory Authority (PPRA) hereby invites suitably qualified and interested organisations to apply for accreditation as Continuing Professional Development (CPD) Service Providers.