know.2nth.ai biz HR Compliance
biz · HR · Skill Leaf

The statutory layer no HRMS ships for you.

South African HR runs on a stack of labour and tax statutes — the LRA, BCEA, Employment Equity Act, National Minimum Wage Act, the UIF and SDL contribution regimes, POPIA, and B-BBEE — enforced by the Department of Employment and Labour, the CCMA, SARS, and the Information Regulator. Frappe HR gives you the mechanisms; the SARS-specific outputs and the compliance discipline are yours to build. This leaf maps the obligations, with primary-source citations, so you know what "compliant" actually means.

LRA · BCEA · EEA NMWA · UIF · SDL POPIA B-BBEE Not legal advice

The gap between "HR software" and "compliant".

An HRMS stores the data. Compliance is the obligation that data exists to satisfy. A South African employer is bound by a stack of statutes that govern how people are hired, paid, managed, and let go — and by regulators who audit and penalise. No payroll product makes you compliant by installing it; it gives you the fields and the runs, and you operate them inside the law.

This leaf is the map of that law: the core Acts, who enforces each, the payroll filings SARS expects, the Employment Equity duties that changed materially in 2025, and the POPIA conditions on employee data. It's the gap the Frappe HR leaf flags and the Huly leaf doesn't touch — surfaced here as the value chain's compliance backbone.

This is orientation, not legal advice

Everything below is a structured pointer to primary sources — the Acts, the Department of Employment and Labour, the CCMA, SARS, and the Information Regulator. Labour and tax law change (the figures here are current as at mid-2026), and application is fact-specific. Validate every PAYE/UIF/SDL calculation, EE plan, and disciplinary process with a qualified SA labour-law practitioner or registered payroll specialist before you rely on it. An agent operating in this domain advises and drafts; a human and their advisor decide.

The Acts, and who enforces them.

The core of SA employment law. Each Act governs a slice of the lifecycle; each has a regulator that audits and penalises. Know which one a given obligation lives under — it tells you who you answer to.

StatuteGovernsEnforced by
LRA · Labour Relations Act 66 of 1995Unfair dismissal & labour practice, collective bargaining, strikes, organisational rightsCCMA · Labour Court
BCEA · Basic Conditions of Employment Act 75 of 1997Minimum conditions — hours, leave, notice, written particulars of employmentDept. of Employment & Labour
EEA · Employment Equity Act 55 of 1998 (am. Act 4 of 2022)Prohibition of unfair discrimination; affirmative action & sectoral targetsDept. of Employment & Labour
NMWA · National Minimum Wage Act 9 of 2018The statutory wage floorDept. of Employment & Labour
UIA / UICA · Acts 63 of 2001 & 4 of 2002Unemployment Insurance Fund — contributions & benefitsUIF · SARS (collection)
SDA / SDLA · Acts 97 of 1998 & 9 of 1999Skills development; the Skills Development LevySETAs · SARS (collection)
OHSA / COIDA · Acts 85 of 1993 & 130 of 1993Workplace health & safety; injury-on-duty compensationDept. of Employment & Labour
POPIA · Protection of Personal Information Act 4 of 2013Lawful processing of employee personal informationInformation Regulator
B-BBEE · Act 53 of 2003 (am. Act 46 of 2013)Broad-based black economic empowerment; scorecard elementsB-BBEE Commission · the dtic

BCEA in numbers — the minimum floor

Ordinary hours cap at 45 per week (9/day on a five-day week, 8/day on six); overtime is capped at 10 hours/week and paid at 1.5×. Annual leave is 21 consecutive days per leave cycle. Sick leave over a 36-month cycle equals the days worked in six weeks (30 days for a five-day worker). Maternity leave is four consecutive months (unpaid under the BCEA — the employee claims a UIF maternity benefit); parental leave is 10 days, family-responsibility leave 3 days. Notice runs 1 week (≤6 months' service), 2 weeks (6–12 months), 4 weeks (>1 year). The National Minimum Wage is R30.23 per ordinary hour from 1 March 2026.

PAYE, UIF, SDL — and the filings.

Three statutory payroll deductions/levies, and a filing cadence SARS enforces. This is the layer Frappe HR can model (configurable tax slabs, salary components) but does not ship as a maintained SA pack — you build and validate the outputs.

Deduction · employee

PAYE

Pay-As-You-Earn income tax, deducted per the progressive slab tables in the Fourth Schedule to the Income Tax Act 58 of 1962. Frappe HR's Payroll Period configures the slabs.

Contribution · 1% + 1%

UIF

1% employee + 1% employer (2% total), on remuneration up to the earnings ceiling of R17,712/month (2026) — max R177.12 per party. UICA Act 4 of 2002.

Levy · 1%

SDL

Skills Development Levy — 1% of total payroll, payable where the annual payroll bill exceeds R500,000. Funds the SETAs. SDLA Act 9 of 1999.

Floor · NMWA

Minimum wage

R30.23 per ordinary hour from 1 March 2026 (was R28.79), applying to general, farm and domestic workers; EPWP at R16.62.

SARS filingWhat it isCadence
EMP201Monthly employer declaration of PAYE, UIF and SDLMonthly (by the 7th)
EMP501Employer reconciliation of declarations, payments and tax certificatesBi-annual (interim + annual)
IRP5 / IT3(a)Per-employee tax certificate — income and deductions for the yearIssued via the EMP501 reconciliation

The build item, restated

None of EMP201, EMP501, or IRP5/IT3(a) ships as a first-party Frappe HR feature, nor does SARS e@syFile / eFiling export. They are achievable through salary components, custom reports, and the REST API — but treat them as a discrete build-and-validate item with a registered payroll specialist, or run payroll on a commercial SA product (SimplePay, PaySpace, Sage) that ships these turnkey. Submission and reconciliation happen on SARS eFiling / e@syFile Employer.

What changed on 1 January 2025.

The Employment Equity Amendment Act 4 of 2022 took effect on 1 January 2025 and reshaped who must comply and against what. If you employ at scale in South Africa, this is the obligation that moved most recently — get it wrong and you risk losing the ability to contract with the state.

  • Designated employer = 50+ employees. The old turnover threshold is gone. From 2025 you are a designated employer (and must implement affirmative-action measures and report) only if you employ 50 or more people. Employers under 50 are relieved of the affirmative-action duty — though the prohibition on unfair discrimination (Chapter II of the EEA) still binds every employer.
  • Sectoral numerical targets. The Minister may now set five-year numerical targets for designated groups (black people, women, persons with disabilities) across 18 national economic sectors, to 2030. The Employment Equity Regulations giving effect to these were published on 15 April 2025.
  • Reporting & the compliance certificate. Designated employers submit annual EE reports (EEA2 / EEA4) to the Department. A section 53 compliance certificate becomes a gate for doing business with the state — non-compliance can bar you from state contracts.

Where an agent helps — and where it must not decide

An agent is genuinely useful for EE analysis: computing workforce-profile snapshots against sectoral targets, drafting the narrative of an EE plan, flagging under-representation by occupational level. It must not make appointment or promotion decisions, and EE data is special-category personal information under POPIA — scope its access tightly and keep a human accountable for every equity decision.

Employee records are personal information.

An HR system is a concentrated store of personal — and special — personal information: IDs, salaries, banking, health, disciplinary records. POPIA governs how you may process it, and the Information Regulator enforces.

POPIA sets eight conditions for lawful processing — accountability, processing limitation, purpose specification, further-processing limitation, information quality, openness, security safeguards, and data-subject participation. For HR the load-bearing ones are minimality (collect only what the purpose needs), purpose limitation (don't repurpose employee data silently), and security safeguards (section 19 — appropriate technical and organisational measures).

Health data, biometric data (fingerprint clocking), and trade-union membership are special personal information with extra protection. Self-hosting on an SA region keeps data in-country; you should document the lawful basis for each processing purpose, appoint an Information Officer, and — critically for this tree — treat any agent or MCP access path as a processing operation that must be scoped, logged, and justified.

The agent-access rule for HR data

Never grant an agent blanket read/write to an HR store. Allowlist the DocTypes/objects it needs, scope to the minimum, log every access, and keep mutations on payroll and personal records human-approved. This is the same discipline the Frappe HR leaf sets out — POPIA is the legal reason for it, not just good practice.

What to automate. What to keep human.

Safe to assist with AI

  • Drafting BCEA-compliant contracts & policies from templates
  • Workforce-profile analysis against EE sectoral targets
  • Leave/attendance/overtime checks against BCEA limits
  • Reconciling payroll components before a specialist signs off
  • POPIA processing-register drafting & data-flow mapping
  • Surfacing filing deadlines (EMP201 monthly, EMP501 bi-annual)

Where compliance links in the tree.

Primary sources only.