Compliance Lawyers in Roodepoort

A compliance lawyer in Roodepoort advises Gauteng businesses on regulatory obligations under South Africa’s main compliance frameworks — FICA (Financial Intelligence Centre Act 38 of 2001) for AML/CFT, POPIA (Protection of Personal Information Act 4 of 2013) for data-handling, the Companies Act 71 of 2008 for CIPC filings and beneficial-ownership disclosure, B-BBEE compliance under the B-BBEE Amendment Act 46 of 2013 and the Codes of Good Practice, Employment Equity compliance under the Employment Equity Act 55 of 1998, and workplace-safety compliance under OHSA 85 of 1993 — and supports those frameworks through policy drafting, contract review, internal audits, regulator engagement, and filing support with the FSCA, the CIPC, the Information Regulator and the Department of Employment and Labour. Burger Huyser Attorneys handles compliance work through its Commercial Law & Contracts practice (consultant J’Retha van Rensburg) and its Labour Law practice (consultant Marius Ferreira), with intake at the firm’s Roodepoort branch at 16 Galena Avenue, Helderkruin (Director Nadine Roesch-Prinsloo, 011 668 0030).

What a Compliance Lawyer Actually Does (Scope of Work)

Compliance work for a South African business sits across several statutes at once, and the lawyer’s job is to map the framework to the business, draft the policies, and stand in for the client when a regulator engages. For a Roodepoort-based client, the day-to-day scope typically covers the following workstreams.

Workstream	What it involves in practice
Regulatory framework mapping	Identifying which statutes and sector-specific regulations apply to a given business — FSCA-supervised financial services, HPCSA-supervised healthcare, CIPC-supervised entities, DSD-supervised non-profits, and so on.
Policy and procedure drafting	POPIA-compliant privacy policies, FICA internal rules, employment-equity plans, OHSA workplace policies, and whistleblower frameworks under the Protected Disclosures Act 26 of 2000.
Contract review and drafting for compliance	Supplier agreements, employment contracts, data-processing agreements under POPIA section 21, anti-bribery and anti-corruption clauses, and competition-law-aligned distribution terms.
Internal compliance audits and gap analysis	Comparing the business’s current practices against current regulatory requirements and producing a written gap report with remediation steps.
Filing and reporting support	CIPC annual returns, beneficial-ownership filings, B-BBEE verification support, Employment Equity reports to the Department of Employment and Labour, and SARS-related compliance where tax filings intersect with regulatory reporting.
Regulator engagement	Responding on the client’s behalf to the FSCA, the CIPC, the Information Regulator, the Department of Employment and Labour, the B-BBEE Commission and SARS where formal correspondence is required.
Training and ongoing advisory	Staff workshops on FICA, POPIA, anti-bribery and whistleblower protection, with optional retainer-based advisory once the initial framework work is in place.

A point worth flagging: practical policy drafting is the test of a useful compliance lawyer. Producing the actual POPIA manual, the EE plan, or the FICA internal rules — rather than a checklist that lands back on the client’s desk for them to finish — is what separates a usable engagement from a paper exercise.

The South African Compliance Frameworks That Matter Most

South African compliance work is statute-driven, and the practical scope of a Roodepoort compliance file is set by which of the following frameworks apply to the client’s business. The list below covers the main statutes a general commercial and employment compliance practice will encounter.

FICA — Financial Intelligence Centre Act 38 of 2001

FICA imposes AML/CFT obligations on accountable institutions — banks, attorneys, estate agents, insurers, motor-vehicle dealers, and trust companies. The FIC Amendment Act 1 of 2017 brought legal practitioners themselves directly into the FICA accountability framework, with the Money Laundering Reporting Officer (MLRO) appointment now expected of qualifying firms. Accountable institutions must keep internal rules, conduct customer due diligence, and report suspicious and unusual transactions to the Financial Intelligence Centre.

POPIA — Protection of Personal Information Act 4 of 2013

POPIA sets eight conditions for the lawful processing of personal information. Information Regulator enforcement began in 2021, with the bulk of the Act’s provisions taking effect on 1 July 2021. Practical first items for most businesses are direct-marketing compliance, cross-border data-flow controls, and Information Officer registration with the Regulator. Section 21 governs the conditions under which personal information may be transferred to a third party in a foreign country.

Companies Act 71 of 2008

The Companies Act governs CIPC annual returns, beneficial-ownership disclosures under the Companies Regulations, director duties under section 76, financial-assistance and related-party transaction rules, and the records-keeping obligations under section 24. Compliance lawyers commonly support clients through annual-return filing cycles, board-resolution drafting for related-party transactions, and the maintenance of company records at the registered office.

B-BBEE — Broad-Based Black Economic Empowerment

B-BBEE compliance is governed by the B-BBEE Amendment Act 46 of 2013 and the Codes of Good Practice issued under it. Sector-specific codes apply to financial services, tourism, construction, and other industries, and the B-BBEE Commission handles enforcement. The practical distinction for smaller businesses is between a sworn affidavit (used by EMEs and QSEs under the exemption thresholds) and a full verification audit issued by an accredited verification professional.

Employment Equity Act 55 of 1998

Designated employers must file Employment Equity Reports with the Department of Employment and Labour, conduct an Employment Equity analysis, prepare and implement an Employment Equity Plan, and comply with the Employment Equity Regulations. The 2022 amendments brought new sector-specific targets and tightened the reporting cycle, so current regulatory awareness matters when EE work is briefed.

OHSA — Occupational Health and Safety Act 85 of 1993

OHSA imposes workplace-safety obligations on employers, including incident reporting to the Department of Employment and Labour, designated section 8 and section 16 appointments (where applicable), and health-and-safety committee requirements in larger workplaces. Construction-sector clients carry additional obligations under the Construction Regulations.

Protected Disclosures Act 26 of 2000

The Protected Disclosures Act is South Africa’s whistleblowing framework, protecting employees who disclose information about impropriety. Corporate ethics policies typically reference the Act and the remedies it offers, and compliance lawyers commonly draft the internal whistleblowing policy alongside the wider compliance framework.

Consumer Protection Act 68 of 2008 and Competition Act 89 of 1998

These two Acts cover the supply side of compliance: product liability, plain-language disclosure, the National Consumer Commission’s enforcement role under the CPA, and the Competition Commission’s merger-and-abuse regimes under the Competition Act. They apply to most businesses that deal with consumers and to any business above the Competition Act’s merger thresholds.

Across all of these, the unifying point is that regulators expect documented, current evidence of compliance — not just a statement of intent. A Roodepoort business that briefs its compliance lawyer to draft policies and update them on a cycle will be in a markedly different position if a regulator enquiry lands than a business that has policies on file from a previous engagement and no current review.

Commercial Compliance vs. Employment Compliance — Two Sides of the Practice

Compliance work at a Roodepoort business typically splits into two halves, and a useful service offering handles both under one roof.

Side of the practice	Statutes typically in scope	Burger Huyser team
Commercial / regulatory compliance	Companies Act, FICA, POPIA, B-BBEE, Competition Act, Consumer Protection Act, sector-specific regulation (FSCA, HPCSA, ICASA)	Commercial Law & Contracts — consultant J’Retha van Rensburg
Employment compliance	Employment Equity Act, Basic Conditions of Employment Act 75 of 1997, Labour Relations Act 66 of 1995, OHSA, EEA reporting, disciplinary and incapacity procedures	Labour Law — consultant Marius Ferreira

A Roodepoort business typically needs both halves: a Commercial Law attorney for entity-level and regulatory matters, and a Labour Law attorney for workforce-side compliance. Briefing two separate firms doubles the briefing work and creates gaps where the two halves do not align — a POPIA clause in an employment contract, for example, needs the commercial-law reading of the data-processing requirements and the labour-law reading of what is and is not enforceable as a condition of employment.

Cross-over matters — POPIA disclosures in employment contexts, anti-bribery clauses in executive employment contracts, competition-law restraint-of-trade negotiations — run jointly across the two practices. At Burger Huyser, files are coordinated so the same client does not have to manage the seam between two separate firms; the Roodepoort branch under Director Nadine Roesch-Prinsloo is the single intake point.

The Local Layer: Where Compliance Work Actually Happens in Roodepoort

Most compliance work is non-litigious and advisory: policies are drafted, filings are lodged, regulators are engaged with by letter, and businesses operate under the resulting framework. The day-to-day work happens at a desk, not in a courtroom. Where matters do escalate, they typically route through one of the following forums:

• Johannesburg seat of the Gauteng Division of the High Court — for regulatory and commercial matters, including reviews of administrative decisions and commercial-law disputes arising from compliance failures.
• Johannesburg Labour Court — for employment-side disputes and reviews of Department of Employment and Labour decisions, including EEA-related reviews and unfair-dismissal disputes tied to compliance investigations.
• CCMA — for conciliations and arbitrations of employment-relations disputes that arise in the course of compliance-driven processes (for example, a dismissal following a whistleblower disclosure).

All three fall within Burger Huyser’s established Gauteng practice footprint. The Roodepoort branch at 16 Galena Avenue, Helderkruin is the local intake point; files are run through the firm’s central Commercial Law and Labour Law practices, so a Roodepoort client gets a local meeting point without losing access to the specialist bench.

One local-confusion point worth flagging: Roodepoort sits in the West Rand, but compliance-regulator correspondence for a Roodepoort-based business is filed with the national regulators (the FSCA in Pretoria, the CIPC in Pretoria, the Information Regulator in Johannesburg, the Department of Employment and Labour at its provincial offices, the B-BBEE Commission in Pretoria). The West Rand District Municipality does not have a dedicated compliance-regulator office; clients should not route filings to local municipal offices when the statute names a national regulator.

What to Look for When Choosing a Compliance Lawyer in Roodepoort

The following criteria reflect what a commercial-intent searcher — someone evaluating or engaging a service provider, not researching a regulation — should weigh up. None of them are unique to Roodepoort, but the practical application differs depending on the size of the local firm and the breadth of its team.

1. Multi-disciplinary coverage under one roof. The attorney should handle both commercial and employment compliance, or coordinate both internally. Briefing two separate firms doubles the briefing work and creates gaps where the two halves do not align. Burger Huyser’s Roodepoort branch is structured around exactly this joint-coverage model, with Commercial Law (J’Retha van Rensburg) and Labour Law (Marius Ferreira) running off the same intake.
2. Sector-specific experience. Compliance for a financial services firm looks very different from compliance for a healthcare practice, a manufacturer, or a retail operation. Ask for comparable clients and relevant sector exposure — FSCA-regulated, HPCSA-regulated, ICASA-regulated, and so on. A generalist with no sector track record will produce a generic framework; a sector-experienced firm will know where the regulator focus currently sits.
3. Current regulatory awareness. POPIA enforcement, the FIC Amendment Act’s expansion to legal practitioners, and ongoing amendments to the B-BBEE Codes mean the attorney should be able to demonstrate recent work in those areas rather than relying on prior frameworks. Ask when the attorney last updated their standard POPIA manual and whether they have current FICA experience under the post-2017 regime.
4. Practical policy drafting, not just framework listing. A useful compliance lawyer produces the actual POPIA manual, the EE plan, or the FICA internal rules — not a checklist that lands back on the client’s desk for them to finish. The deliverable should be the document, signed off and ready to implement, not a framework matrix with empty cells.
5. Transparent fee structure. Fees should be quoted against a defined scope. A POPIA policy engagement is priced differently from an annual compliance retainer, and the engagement letter should set out what is included and what counts as additional work. Avoid firms that quote a single figure without scoping the deliverable.

Practical Considerations: Cost, Timing, What to Bring

Item	Detail
Cost	Fees depend on scope. A one-off POPIA policy draft costs far less than an annual retainer covering multi-framework compliance support, regulator correspondence and policy updates. Burger Huyser quotes per engagement after an initial scoping call at the Roodepoort branch on 011 668 0030.
Timing	Policy-drafting engagements typically run 2–6 weeks depending on framework complexity and document availability. Regulator-driven timelines (FSCA enquiries, Information Regulator complaints, Department of Employment and Labour inspections) move on the regulator’s clock, not the firm’s.
What to bring to the first consultation	Current policies and procedures, recent CIPC filings, the latest B-BBEE certificate or sworn affidavit (if applicable), the most recent Employment Equity report, any regulator correspondence, and a list of the categories of personal information the business processes (the foundation of any POPIA scoping exercise).
Ongoing support	Many clients move from a project-based engagement (initial gap analysis, policy drafting, regulator response) to a standing advisory arrangement once the framework is in place, particularly where new filings, regulator updates, or staff-training cycles repeat annually.

Compliance Work in Roodepoort: Coordinating Commercial and Employment Compliance Under One Roof

Burger Huyser’s Roodepoort branch, at 16 Galena Avenue, Helderkruin (011 668 0030, after-hours 061 516 0091), is led by Director Nadine Roesch-Prinsloo and serves as the local intake point for compliance instructions. Commercial-side files run through J’Retha van Rensburg (Commercial Law & Contracts) and employment-side files run through Marius Ferreira (Labour Law), so a Roodepoort business needing both halves of the practice can brief one firm and one branch rather than coordinating two separate professional relationships.

The firm’s membership in the Johannesburg Attorneys Association reflects its broader Gauteng professional ties rather than compliance-specific accreditation; the legal practitioners’ own FICA accountability under the FIC Amendment Act 1 of 2017 is operationalised internally through the firm’s own compliance programme.

Most compliance engagements — POPIA policy reviews, FICA internal-rule drafting, CIPC annual-return support, B-BBEE advisory, Employment Equity report preparation — are non-litigious, meaning the day-to-day work happens at a desk rather than in a courtroom. Where matters do escalate, regulator-facing disputes typically route through the Johannesburg seat of the Gauteng Division of the High Court or the Johannesburg Labour Court, both of which fall within the firm’s established Gauteng practice footprint.

If your Roodepoort business needs help with POPIA policy drafting, FICA internal rules, CIPC filings, B-BBEE advisory or Employment Equity reporting, contact Burger Huyser Attorneys’ Roodepoort branch on 011 668 0030 (after-hours 061 516 0091) or visit the office at 16 Galena Avenue, Helderkruin, Roodepoort, 1724. The firm handles compliance work through its Commercial Law & Contracts and Labour Law practices, with files run from the Roodepoort office under Director Nadine Roesch-Prinsloo. Bring a current set of your policies, recent CIPC filings, your latest B-BBEE certificate or sworn affidavit (if applicable), and any recent regulator correspondence to the first consultation. The firm carries a 4.8/5 average across 250+ Google reviews (Trustindex verified “Top Rated Law Firm in South Africa”) and fields this work across its Gauteng branches.

Frequently Asked Questions

What does a compliance lawyer do in South Africa?

A compliance lawyer advises South African businesses on their regulatory obligations under statutes such as FICA, POPIA, the Companies Act, the B-BBEE Amendment Act and Codes, the Employment Equity Act, OHSA and the Competition and Consumer Protection Acts. The work includes policy drafting, contract review, internal compliance audits, regulator engagement, and filing support with bodies like the CIPC, the FSCA, the Information Regulator and the Department of Employment and Labour.

Does Burger Huyser handle POPIA compliance work?

Yes. Burger Huyser Attorneys’ Commercial Law & Contracts practice drafts POPIA-compliant privacy policies, data-processing agreements under POPIA section 21, internal information-handling procedures, and Information Regulator complaint responses. Files are run through the firm’s commercial-law consultants with intake at the Roodepoort branch (011 668 0030) under Director Nadine Roesch-Prinsloo.

Where is the Burger Huyser Roodepoort branch, and what are the hours?

16 Galena Avenue, Helderkruin, Roodepoort, 1724. Tel 011 668 0030. The branch is led by Director Nadine Roesch-Prinsloo, with mobile line 061 516 0091 for after-hours or urgent matters. Hours are Monday to Friday, 7:30am to 4:30pm, in line with the firm’s other Gauteng branches.

Does Burger Huyser handle B-BBEE compliance?

The firm advises on B-BBEE compliance as part of its broader commercial-law offering — including review of the B-BBEE Amendment Act 46 of 2013 and the Codes of Good Practice, the EME / QSE exemption thresholds, and engagement with the B-BBEE Commission where required. For formal verification audits and sworn affidavits the firm refers clients to accredited verification professionals, as those documents must be issued by an independent verification agent.

How much does a compliance lawyer cost in Roodepoort?

Fees depend on scope. A one-off policy-drafting engagement (for example a POPIA privacy policy, a basic EE plan, or a set of FICA internal rules) is quoted against a fixed scope; an annual retainer covering multi-framework advisory, regulator correspondence and policy updates is priced differently. Burger Huyser quotes per engagement after an initial scoping call at the Roodepoort branch.

Does the firm handle compliance work for FICA-reportable institutions?

Yes — the firm works with accountable institutions under FICA (including legal practitioners themselves, who became directly accountable under the FIC Amendment Act 1 of 2017) on internal FICA rules, risk management and compliance programmes, suspicious-and-unusual-transaction reporting procedures, and Money Laundering Reporting Officer (MLRO) support. The firm’s Commercial Law & Contracts practice handles this work alongside its broader commercial-contract offering.