Compliance Lawyers in Sandton

Compliance lawyers in Sandton help local businesses meet the regulatory frameworks that govern how a South African company is run, the contracts it signs, and the personal information it processes — principally the Companies Act 71 of 2008, the Consumer Protection Act 68 of 2009, the Protection of Personal Information Act 4 of 2013 (POPIA) and the Financial Intelligence Centre Act 38 of 2001 (FICA). The work covers company secretarial compliance (MOI maintenance, CIPC annual returns, beneficial-ownership disclosures, shareholder and director records), drafting and reviewing the commercial contracts a Sandton close corporation or (Pty) Ltd relies on (SLAs, provider agreements, lease and sale-of-goods agreements), and producing the policies a business needs on file for FICA onboarding, POPIA processing and consumer-facing dealings. Burger Huyser Attorneys fields compliance work through its Commercial Law and Contracts practice from the firm’s Sandton branch at Block 3, 1st floor, Northdowns Office Park, 17 Georgian Crescent East, Bryanston, Sandton (011 253 3080).

Why Sandton Businesses Specifically Need a Compliance Lawyer

Sandton hosts the head offices of most major South African banks, JSE-listed groups, asset managers and large professional services firms, which means the regulator-facing footprint is concentrated here rather than spread evenly across Gauteng. The statutory layer is national, but enforcement is heaviest where the Financial Intelligence Centre, the FSCA and the Prudential Authority supervise their largest populations of accountable institutions. A Sandton close corporation or (Pty) Ltd that doesn’t keep its MOI current, files its CIPC annual return late, or processes personal information without a POPIA policy in place is exposed to the same statutory penalties as a JSE-listed group — but rarely has an in-house legal team to catch it. The biggest exposure is usually ignorance rather than wilful non-compliance: directors and owners land in difficulty because duties accumulated as the business grew faster than their awareness of those duties. Burger Huyser Attorneys’ Sandton branch operates inside this concentration directly, coordinating commercial compliance work through the firm’s wider Commercial Law and Contracts practice under specialist consultant J’Retha van Rensburg.

The Compliance Stack: The Main Statutes a Sandton Business Sits Under

Six statutes make up the core compliance stack most Sandton businesses need to consider. Each operates independently and has its own regulator, but the obligations usually overlap in practice.

Statute	What it governs	Regulator
Companies Act 71 of 2008	Incorporation, governance and dissolution of every South African company; director duties, MOI maintenance, CIPC annual returns and beneficial-ownership disclosures	CIPC (Companies and Intellectual Property Commission)
Consumer Protection Act 68 of 2009	Every transaction in the ordinary course of business where the other party is a consumer; marketing, disclosure, fair contract terms, returns and supplier accountability	National Consumer Tribunal / National Consumer Commission
Protection of Personal Information Act 4 of 2013 (POPIA)	How natural and juristic persons’ personal information is processed; Privacy Policy, Social Media Policy, website terms and conditions, email disclaimers, operator-level controls	Information Regulator
Financial Intelligence Centre Act 38 of 2001 (FICA)	Accountable institutions’ customer due diligence, ongoing monitoring, and reporting of suspicious or unusual transactions	Financial Intelligence Centre (FIC)
Prevention of Organised Crime Act 121 of 1998 (POCA)	Criminal liability and asset forfeiture framework that runs alongside FICA; relevant when a compliance failure escalates into a money-laundering allegation	NPA / SAPS
Financial Sector Regulation Act 9 of 2017	Establishes the twin regulators (FSCA for market conduct, Prudential Authority for prudential supervision) that supervise AML compliance within financial institutions	FSCA and Prudential Authority

A compliance lawyer working in Sandton should be able to read across all six — most exposure sits at the intersection of two or more frameworks rather than in a single statute in isolation.

What the Service Covers (Scope of Engagement)

Engagement scope varies by entity, but six workstreams cover the bulk of what a Sandton close corporation or (Pty) Ltd needs on file.

• Company secretarial compliance. Maintaining the company’s MOI, preparing and lodging CIPC annual returns, recording share allotments and transfers, updating director and shareholder registers, and lodging beneficial-ownership disclosures.
• Contract drafting and review. Service Level Agreements, Provider Agreements, lease and sale-of-goods agreements, shareholders’ agreements, and any other commercial contracts the business relies on.
• Consumer-facing documentation. Terms and conditions of sale, returns and refund policies, warranty terms, and review of marketing copy against the CPA’s unfair-contract and direct-marketing rules.
• POPIA programme build-out. Drafting the Privacy Policy, Social Media Policy, website terms and conditions and email disclaimers; advising on operator agreements, cross-border data-flow controls and Section 22 consent frameworks.
• FICA onboarding framework. Designing customer due diligence checklists, ongoing-monitoring procedures, suspicious-transaction-report escalation paths and accountable-institution registration where applicable.
• Internal policies and manuals. Drafting compliance summaries, internal manuals, flow charts and staff-training material so that compliance is embedded operationally rather than just documented on paper.

The Local Sandton Layer: Where the National Framework Hits the Map

Sandton sits within the City of Johannesburg metropolitan municipality, but most of the filing layer for a Sandton-based business is national and online rather than local. Company-secretarial work runs through the Companies and Intellectual Property Commission (cipc.org.za), which has no walk-in Sandton office; CIPC filings are lodged electronically and original-document certification is handled at the firm’s branch. FICA reporting and AML compliance guidance run through the Financial Intelligence Centre (fic.gov.za), which administers supervisory contact centrally. POPIA enforcement and complaints run through the Information Regulator, also national.

The Sandton layer that does matter locally is the operational layer: where the business actually sits when it needs to talk to its compliance lawyer, where contracts are reviewed in person, where original IDs are certified for FICA onboarding files, and where the relationship is held over time as the regulatory stack evolves. Burger Huyser Attorneys’ Sandton branch at Block 3, 1st floor, Northdowns Office Park, 17 Georgian Crescent East, Bryanston, Sandton, 2191 (011 253 3080, after-hours 064 555 3358) is the practical intake point. The branch operates inside a firm that is a member of the Johannesburg Attorneys Association, which provides the regional professional tie-in for commercial work of this kind.

What a Compliance Audit Typically Surfaces in a Sandton SME

A compliance audit usually surfaces the same five gaps in close corporations and small (Pty) Ltd entities — not because the businesses are careless, but because the obligations have accumulated faster than the documentation has been updated.

Common gap	Statute implicated	Why it matters
MOI has drifted out of sync with how the business actually runs — share allotments never recorded, director changes not lodged, objects clauses that no longer match the trading activity	Companies Act 71 of 2008	CIPC filings may be rejected; director duties under the Act become difficult to evidence
Consumer-facing contracts missing cooling-off and disclosure provisions required for direct marketing	Consumer Protection Act 68 of 2009	Agreements risk being declared void or unenforceable; CPA administrative penalties apply
Website without terms and conditions or a privacy notice, or one copy-pasted and not updated since POPIA’s substantive sections commenced	POPIA 4 of 2013	Information Regulator enforcement action; reputational exposure on data-handling queries
Service-level and provider agreements that don’t allocate data-protection responsibility between the parties	POPIA 4 of 2013	Each party may assume the other is the responsible party; neither meets the operator obligations
FICA onboarding paperwork that captures ID copies but not source-of-funds or beneficial-owner declarations	FICA 38 of 2001	Non-compliant CDD undermines the FIC’s reporting framework and exposes the business to administrative sanctions

What to Look for When Choosing a Compliance Lawyer in Sandton

Compliance work is recurring rather than transactional, which changes the criteria for choosing the right firm.

• Working knowledge of all four core statutes. Compliance failures usually sit at the intersection of two or more frameworks — a lawyer who only does Companies Act work, or only POPIA work, will leave the gaps where directors actually face exposure.
• Drafting and advisory capability in one firm. Secretarial compliance that produces a stack of forms but no contract review leaves gaps; a compliance lawyer who only reviews contracts and won’t touch CIPC filings is similarly incomplete.
• Direct principal-attorney access. The relationship matters more than the cheapest quote because the work is ongoing rather than a once-off transaction.
• A plain-language register. The firm should be able to explain what POPIA requires in terms a non-lawyer director can act on, rather than burying the advice in statute references.
• Transparent cost conversation up front. Fees for ongoing secretarial compliance are usually quoted on a retainer or per-filing basis; quoted ad-hoc fees with no scope clarity are a yellow flag.

Burger Huyser’s Sandton branch runs commercial compliance work alongside its wider Commercial Law and Contracts practice, which the firm’s Commercial Law Firm of the Year 2025 — South Africa award (5 Star Lawyers Awards 2025) directly recognises.

Practical Considerations: Cost, Timeline, What to Bring

Cost. Costs depend on the size of the company (number of entities, directors, annual return cycles) and whether the engagement is a one-off clean-up or an ongoing retainer. Burger Huyser quotes on a per-engagement basis after an initial scope review at the Sandton branch — fixed-fee for a clean-up, retainer-based for ongoing secretarial compliance, hourly for ad-hoc advisory work.

Timeline. A clean-up engagement to bring a Sandton close corporation current across the four statutes typically runs four to eight weeks. A greenfield compliance build-out for a new (Pty) Ltd runs faster because there is less legacy documentation to reconcile. An AML compliance programme build-out for a small Sandton business typically runs 6 to 12 weeks based on industry benchmarks.

What to bring to the first consultation.

1. Current MOI (or founding statement, for a close corporation still operating under its pre-2011 form).
2. Latest CIPC annual return confirmation.
3. Copies of any standard contracts the business uses (SLAs, provider agreements, lease, sale of goods).
4. Copies of the website terms, privacy policy and any marketing templates.
5. FICA onboarding forms if the business is an accountable institution.
6. Any prior correspondence from CIPC or the FIC.

Frequently Asked Questions

Does my Sandton business actually need a compliance lawyer, or can I keep up with this myself?

A small close corporation with one director, no employees and a single product line can stay current with CIPC filings using the CIPC’s own services. As soon as the business has multiple directors, processes personal information beyond basic contact details, signs recurring contracts with suppliers or customers, or handles client money, the gaps multiply faster than a non-lawyer owner can reasonably close them. A compliance lawyer’s value is less about annual returns, which are largely mechanical, and more about the policy and contract layer underneath, which is where directors actually face personal exposure.

How much does a compliance lawyer cost in Sandton?

Costs depend on the scope. A one-off clean-up across the four core statutes is usually quoted on a fixed-fee basis once the lawyer has reviewed what exists. Ongoing secretarial compliance is typically retainer-based, with CIPC filings and contract reviews priced per item. Hourly rates apply for advisory work such as interpreting new FIC or CIPC guidance, drafting a new policy, or advising on a regulator query. Burger Huyser Attorneys gives a transparent cost conversation up front after the initial scope review at the Sandton branch (011 253 3080).

What’s the difference between company secretarial work and compliance work?

Company secretarial work is the CIPC-facing layer, covering the MOI, annual returns, director and shareholder registers, and beneficial-ownership filings. Compliance work is the broader layer that includes secretarial work but also covers the contracts the business signs, the personal information it processes under POPIA, the consumer-facing documentation the CPA requires, and the customer-due-diligence and reporting obligations FICA imposes on accountable institutions. Many Sandton firms use the terms interchangeably; the substantive distinction is that secretarial work is the registrar-facing layer, while compliance work covers the wider statutory stack.

Does POPIA apply to my small business, or only to big corporates?

POPIA applies to any person or organisation that processes personal information, regardless of size. A one-person close corporation holding a customer database still falls under it. The Information Regulator has been increasingly active on small-business enforcement, particularly around direct-marketing consent and the absence of a published Privacy Policy. The compliance burden scales with what you do with personal information, not with your turnover.

What does FICA compliance actually require of a Sandton business that isn’t a bank?

If your business is an accountable institution under FICA, which includes lawyers in transactional matters, estate agents, high-value dealers in goods above the FICA threshold, and any business that handles client money in a way that triggers FICA, you need customer due diligence at onboarding (ID verification, source of funds where relevant), ongoing monitoring of transactions, and a process for filing suspicious-transaction reports to the FIC through the prescribed channels. A compliance lawyer can design the framework and the documentation, but the operational monitoring is the business’s own responsibility.

Where is the Burger Huyser Sandton branch, and what are the hours?

Block 3, 1st floor, Northdowns Office Park, 17 Georgian Crescent East, Bryanston, Sandton, 2191. Tel 011 253 3080. After-hours mobile 064 555 3358. Open Monday to Friday, 7:30am to 4:30pm.

What is the biggest compliance risk you see in Sandton SMEs right now?

The most common exposure isn’t the headline statute; it’s the gap between the documents the business thinks it has and the documents it can actually produce when a regulator asks. MOIs that haven’t been updated since incorporation, privacy policies that were copy-pasted from a template years ago, SLAs that don’t address POPIA responsibility allocation, and FICA onboarding files missing beneficial-owner declarations are the four gaps a Sandton audit most often surfaces.

Need a compliance lawyer in Sandton? Contact Burger Huyser Attorneys’ Sandton branch on 011 253 3080 (after-hours 064 555 3358) or visit Block 3, 1st floor, Northdowns Office Park, 17 Georgian Crescent East, Bryanston, Sandton, 2191. The firm fields compliance work through its Commercial Law and Contracts practice and was named Commercial Law Firm of the Year 2025 — South Africa at the 5 Star Lawyers Awards 2025. Bring your current MOI, latest CIPC annual return confirmation, standard contracts (SLAs, provider agreements, lease, sale of goods), website terms and privacy policy, and any prior CIPC or FIC correspondence to the first meeting; the firm will scope the engagement and quote transparently before any work begins. The Sandton office sits within a firm that carries a 4.8/5 average across 250+ Google reviews (Trustindex verified — “Top Rated Law Firm in South Africa”) and operates across nine Gauteng branches.