Back to Compliance Hub
OHS Act & COID10 March 2026 5 min read

Legal Register Management: How South African Employers Stay Ahead of OHS Act and NEMA Changes

R
Risk Systems Architect
SHEQ24 Subject Matter Expert

A legal register is not a once-off compliance exercise. It is a living document that must reflect the current state of South African legislation — and South African legislation changes frequently. The Department of Employment and Labour amends OHS Act regulations. The Department of Forestry, Fisheries and the Environment updates NEMA regulations. New sector-specific regulations are promulgated. Existing regulations are revised. For compliance managers relying on spreadsheets, keeping pace with these changes is a full-time job — and missing a change can have serious consequences.

What ISO 45001 and ISO 14001 Require

ISO 45001 Clause 6.1.3 requires organisations to determine and have access to up-to-date legal requirements and other requirements applicable to their hazards and OHS risks. ISO 14001 Clause 6.1.3 imposes the same obligation for environmental aspects. Both standards require organisations to evaluate their compliance with these requirements at planned intervals and to retain documented information as evidence of the evaluation.

This is not a passive obligation. The standard requires active monitoring of legislative changes, regular compliance evaluations, and documented evidence that the evaluations were conducted. A spreadsheet that was last updated eighteen months ago does not satisfy this requirement — regardless of how comprehensive it was when it was created.

The South African Legislative Landscape

A comprehensive South African SHEQ legal register must cover the Occupational Health and Safety Act 85 of 1993 and all its subsidiary regulations — the General Safety Regulations, Construction Regulations, Driven Machinery Regulations, Electrical Installation Regulations, Hazardous Chemical Substances Regulations, and more than twenty other sets of regulations. It must also cover the National Environmental Management Act and its specific acts, the Compensation for Occupational Injuries and Diseases Act, the Mine Health and Safety Act for mining operations, and applicable SANS standards.

Each of these instruments is subject to amendment. When an amendment is promulgated in the Government Gazette, compliance managers must identify which entries in their legal register are affected, assess whether their current controls still satisfy the amended requirements, and update the register accordingly. In a manual system, this process is slow, error-prone, and frequently incomplete.

The Consequences of an Outdated Legal Register

During an ISO 45001 or ISO 14001 certification audit, the auditor will request evidence that the organisation has identified its legal requirements and evaluated its compliance. If the legal register does not reflect current legislation, the auditor will raise a non-conformance. If the organisation cannot demonstrate that it has evaluated its compliance with current requirements, the auditor may raise a major non-conformance — potentially jeopardising the certification.

During a DoL inspection, an inspector who identifies a regulatory requirement that is not reflected in the organisation's legal register will question whether the organisation is aware of and complying with that requirement. The absence of a current legal register is itself evidence of inadequate compliance management.

Automating Legal Register Management

The most effective solution to the legal register maintenance problem is automation. A system that monitors South African legislative changes and alerts compliance managers when the register requires updating eliminates the manual monitoring burden and ensures that the register remains current without relying on individual vigilance.

SHEQ24's legal register module maintains a curated database of South African SHEQ legislation and monitors the Government Gazette for relevant changes. When a change is identified, the system alerts the compliance manager, identifies the affected register entries, and prompts a review of the organisation's compliance obligations and controls. The compliance evaluation record is retained automatically as documented information satisfying ISO 45001 Clause 9.1.2 and ISO 14001 Clause 9.1.2 requirements.

For South African organisations managing multiple sites across different provinces, the legal register must also reflect provincial by-laws and municipal requirements that vary by location. SHEQ24 supports multi-site legal registers with site-specific scoping, ensuring that each site's register reflects the specific legislative requirements applicable to that location.

Is your current system legally sound?

Our enterprise architects can audit your current compliance architecture and identify immediate OHS Act and POPIA liabilities.

Book a Technical Demo