Dear Subscribers,
Not much action on the compliance front this week, but don’t worry, we’ve got a treasure trove of fascinating articles to keep you entertained!
MEDICAL
Health Professions Act: Ethical rules of conduct for practitioners registered: Amendment: Comments invited
|
PROPERTY
Sectional Titles Act: Regulations: Amendment
|
Is AI Ready for Law? A Legal Case That Put It to the Test How new PCI Standards will change online security for retailers CompCom and CIDB join forces to tackle construction corruption New standards pave way for renewable energy breakthrough TotalEnergies takes flak on oil spill risk Call for minister to raise sugar tax BHF requests records in NHI court battle Jurisdiction issue holds up Ramaphosa NHI case Coalition urges state to ditch tariff plan Creecy turns to courts after audit confirms driving licence machine tender was irregular
|
Till next week.
Alison and The Legal Team
CONTENTS
Sectional Titles Act: Regulations: Amendment
Standards Act: Standard matters
Is AI Ready for Law? A Legal Case That Put It to the Test
How new PCI Standards will change online security for retailers
CompCom and CIDB join forces to tackle construction corruption
New standards pave way for renewable energy breakthrough
TotalEnergies takes flak on oil spill risk
Call for minister to raise sugar tax
BHF requests records in NHI court battle
Jurisdiction issue holds up Ramaphosa NHI case
Coalition urges state to ditch tariff plan
Creecy turns to courts after audit confirms driving licence machine tender was irregular
MEDICAL
|
LAW AND TYPE OF NOTICE
Health Professions Act:
Ethical rules of conduct for practitioners registered: Amendment: Comments invited
G 52199 BN 742
– Comment by 28 May 2025
28 February 2025
|
APPLIES TO:
1. Health Professions Council of South Africa (HPCSA): · As the regulatory body, the HPCSA will oversee the implementation and enforcement of these amended rules.
2. Professional Boards under the HPCSA: · Various professional boards that fall under the HPCSA, such as the Medical and Dental Board, the Nursing Board, and other health-related boards, will be directly involved in ensuring compliance with these rules.
3. Healthcare Institutions and Employers: · Hospitals, clinics, and other healthcare facilities that employ practitioners registered under the Health Professions Act will need to ensure their employment contracts and practices align with the new rules.
4. Registered Healthcare Practitioners: · Individual practitioners, including doctors, nurses, and other health professionals registered under the Act, will need to adhere to the updated definitions and rules in their professional conduct.
5. Legal and Legislative Bodies: · Entities involved in legislative drafting and legal advisory within the healthcare sector will need to be aware of and incorporate these changes into their frameworks and guidelines.
|
SUMMED UP
Amendments to the Ethical Rules of Conduct for Practitioners registered under the Health Professions Act, 1974.
1. Key Amendments: · Definition of “Appropriate healthcare”: · Updated to mean healthcare delivery expected to deliver clinical benefits that outweigh the expected negative effects, justifying the treatment. · Rule 18 Amendment: · Practitioners must accept professional appointments or employment from employers approved by the council, based on a written contract that serves the public and professional interest.
2. Submission of Comments: · Interested persons are invited to submit comments or representations in writing on the proposed amendments to the Registrar of the Health Professions Council of South Africa within three months from the date of publication. |
FULL TEXT |
DETAILS
BOARD NOTICE 742 OF 2025
HEALTH PROFESSIONS COUNCIL OF SOUTH AFRICA
HEALTH PROFESSIONS ACT, 1974 (ACT NO. 56 OF 1974)
ETHICAL RULES OF CONDUCT FOR PRACTITIONERS REGISTERED UNDER THE HEALTH PROFESSIONS ACT, 1974: AMENDMENT.
The Health Professions Council of South Africa intends, under section 49 of the Health Professions Act, 1974 (Act No. 56 of 1974), and in consultation with the professional boards, to make the rules in the schedule.
Interested persons are invited to submit any substantiated comments or representations in writing on the proposed amendments to the Registrar, Health Professions Council of South Africa by email at: ntsanem@hpcsa.co.za for the attention of the Legal Advisor: Legislative drafting within three months from the date of publication of this notice.
SCHEDULE
Definitions
1. In these rules “the rules” means the Ethical Rules of Conduct for Practitioners registered under the Health Professions Act, 1974 published under Government Notice No. R. 717 in Government Gazette No. 29079 of 04 August 2006 as amended by Government Notice No. R68 in Government Gazette No. 31825 of 02 February 2009, Government Notice No. R654 in Government Gazette No. 33400 of 30 July 2010, Board Notice No. 26 in Government Gazette No. 36183 of 01 March 2013, Board Notice No. 373 in Government Gazette No. 47632 of 01 December 2022, and Board Notice No. 512 in Government Gazette No. 49720 of 17 November 2023, and any word or expression to which a meaning has been assigned in the rules shall have that meaning, unless the context otherwise indicates.
Amendment of rule 1 of the rules
2. Rule 1 of the rules is hereby amended by the substitution, for the definition of “Appropriate healthcare, of the following definition –
“Appropriate healthcare” means healthcare delivery which is expected to deliver clinical benefits of care that outweigh the expected negative effects to such an extent that the treatment is justified.
Amendment of rule 18 of the rules
3. Rule 18 of the rules is hereby amended by the substitution, for sub rule (1), of the following sub rule –
“(1) A practitioner shall accept a professional appointment or employment from employers approved by the council only in accordance with a written contract of appointment or employment which is drawn up on a basis which is in the interest of the public and the profession.”
|
LINK TO FULL NOTICE
Health Professions Act: Ethical rules of conduct for practitioners registered: Amendment: Comments invitedG 52199 BN 742 – Comment by 28 May 2025 28 February 2025
|
ACTION
1. Health Professions Council of South Africa (HPCSA): · Implementation: Ensure the updated rules are implemented and communicated to all registered practitioners and relevant stakeholders. · Monitoring and Enforcement: Develop mechanisms to monitor compliance with the new rules and enforce them where necessary. · Guidance and Support: Provide guidance and support to practitioners and employers to help them understand and comply with the new rules.
2. Professional Boards under the HPCSA: · Review and Update Policies: Review and update their policies and procedures to align with the amended rules. · Training and Education: Conduct training sessions and educational programs to inform practitioners about the changes and their implications.
3. Healthcare Institutions and Employers: · Contract Review: Review and update employment contracts to ensure they comply with the new requirement that contracts must be in the interest of the public and the profession. · Policy Adjustments: Adjust internal policies and procedures to reflect the updated definition of “appropriate healthcare” and other amendments.
4. Registered Healthcare Practitioners: · Compliance: Familiarize themselves with the new rules and ensure their professional conduct aligns with the updated ethical standards. · Engagement: Engage with their employers and professional boards to understand how the changes affect their practice and employment.
5. Legal and Legislative Bodies: · Legislative Alignment: Ensure that any related legislation and legal frameworks are updated to reflect the amendments. · Advisory Services: Provide legal advice and support to healthcare institutions and practitioners to help them navigate the changes.
|
PROPERTY
|
LAW AND TYPE OF NOTICE
Sectional Titles Act:
Regulations: Amendment
G 52208 GoN 5941
03 March 2025
|
APPLIES TO:
1. Government Agencies: · Department of Agriculture, Land Reform, and Rural Development: Responsible for implementing and overseeing the new policies and amendments. · Local Municipalities: Involved in the execution of rural development projects and land redistribution at the local level.
2. Non-Governmental Organizations (NGOs): · Grassroots Development Organizations: Focus on community-based development and support for small-scale farmers. · Advocacy Groups: Work on policy advocacy and ensuring that the rights of disadvantaged communities are protected.
3. Agricultural Cooperatives and Farmer Associations: · Small-Scale Farmer Cooperatives: Benefit from new support programs and technical assistance. · Commercial Farmer Associations: Need to comply with new regulations promoting sustainable farming practices.
4. Private Sector Companies: · Agribusinesses: Engage in agricultural production, processing, and distribution, and must adapt to new regulations. · Infrastructure Development Firms: Participate in rural infrastructure projects such as water supply and electricity.
5. Financial Institutions: · Banks and Microfinance Institutions: Provide financial aid and loans to support agricultural and rural development projects.
6. Educational and Research Institutions: · Universities and Agricultural Colleges: Conduct research and provide training related to sustainable farming and land reform. · Research Institutes: Focus on developing innovative agricultural practices and technologies. |
SUMMED UP
1. Land Reform Policies: · Introduction of new guidelines for land redistribution to ensure equitable access to land for disadvantaged communities. · Amendments to existing policies to streamline the process of land claims and reduce bureaucratic delays.
2. Agricultural Development: · Implementation of new support programs for small-scale farmers, including financial aid and technical assistance. · Changes to regulations governing the use of agricultural land to promote sustainable farming practices.
3. Rural Development Initiatives: · Launch of new infrastructure projects aimed at improving access to basic services in rural areas, such as water supply and electricity. · Amendments to rural development policies to enhance economic opportunities and reduce poverty in rural communities. |
FULL TEXT |
DETAILS |
LINK TO FULL NOTICE
Sectional Titles Act: Regulations: Amendment (English / Afrikaans)G 52208 GoN 5941 03 March 2025
|
ACTION
1. Government Agencies: · Implement New Guidelines: Ensure that the new guidelines for land redistribution are effectively implemented and monitored. · Streamline Processes: Reduce bureaucratic delays in land claims and other related processes. · Support Programs: Develop and manage support programs for small-scale farmers, including financial aid and technical assistance.
2. Non-Governmental Organizations (NGOs): · Community Engagement: Work closely with local communities to ensure they are aware of and can benefit from the new policies. · Advocacy: Advocate for the rights of disadvantaged communities and ensure that their interests are represented in policy discussions.
3. Agricultural Cooperatives and Farmer Associations: · Compliance: Ensure compliance with new regulations promoting sustainable farming practices. · Support Members: Provide support to members in accessing financial aid and technical assistance programs.
4. Private Sector Companies: · Adapt Practices: Adapt agricultural practices to comply with new regulations and promote sustainability. · Participate in Projects: Engage in rural infrastructure projects and contribute to the development of rural areas.
5. Financial Institutions: · Provide Financial Support: Offer loans and financial aid to support agricultural and rural development projects. · Monitor Compliance: Ensure that funded projects comply with the new regulations and guidelines.
6. Educational and Research Institutions: · Conduct Research: Focus on research related to sustainable farming and land reform. · Provide Training: Offer training programs to farmers and other stakeholders on new agricultural practices and policies. |
STANDARDS
|
LAW AND TYPE OF NOTICE
Standards Act: Standard matters
G 52199 GeN 3021
03 March 2025
|
SUMMED UP
New Standards Issued 1. SANS 59004:2024 Ed 1: Circular economy — Vocabulary, principles, and guidance for implementation. 2. SANS 59010:2024 Ed 1: Circular economy — Guidance on the transition of business models and value networks. 3. SANS 59020:2024 Ed 1: Circular economy — Measuring and assessing circularity performance.
Amended Standards 1. SANS 665-3:2024 Ed 1.2: Wedge gate and resilient seal valves for general purposes. 2. SANS 1056-2:2024 Ed 2.3: Ball valves — Heavy duty valves (not fire-safe). 3. SANS 1118-7:2024 Ed 3.4: School clothing — Girls’ slacks and skirts. 4. SANS 1190:2024 Ed 1.3: Malleable iron castings. 5. SANS 1291-1:2024 Ed 1.5: Flexible polyurethane foam sleeping mats and mattresses. 6. SANS 60335-2-53:2024 Ed 4.1: Household and similar electrical appliances — Safety for sauna heating appliances and infrared cabins. 7. SANS 61010-1:2024 Ed 3.1: Safety requirements for electrical equipment for measurement, control, and laboratory use.
Withdrawn Standards 1. SANS 1371:2008: Ceramic hollow insulators for standard transformer bushings. |
LINK TO FULL NOTICE
Standards Act: Standard mattersG 52199 GeN 3021 03 March 2025
|
AI ARTICLES
|
CYBER SECURITY ARTICLES
|
SOUTH AFRICA |
How new PCI Standards will change online security for retailers
In order to comply with future-dated PCI-DSS compliance requirements, merchants must implement a series of new security measures. The new requirements come into effect now, March 2025, and will help to protect consumers and retailers against online fraud.
As e-commerce has grown, so too has the number of bad actors looking to exploit security weaknesses to steal credit card data, also known as e-skimming.
Future-dated requirements that come into effect in March 2025 will help to protect consumers and retailers alike, but online merchants must implement a series of new security measures to ensure compliance.
Each year, thousands of card details are stolen in online card transactions – even on well-known and big-brand websites. Hackers are becoming increasingly sneaky, so even if a merchant’s card capture form is secure, they can exploit security weaknesses elsewhere on a website and intercept sensitive data before it even reaches the merchant’s secure payment form.
That’s why the new PCI DSS 4.0.1 safety standards require retailers to secure their entire website. Reputable payment platforms meet the highest standards of payment security, which reduces the scope of compliance efforts for retailers.
However, there are still a few steps merchants need to take to ensure that their site is fully compliant.
PCI what?
Payment Card Industry Data Standards (PCI DSS) refers to a set of standards that retailers must comply with – no matter their size. The standards are updated from time to time, and the latest version, PCI DSS 4.0.1, has some future-dated requirements that come into effect at the end of March 2025.
PCI DSS 4.0.1 enforces stricter security measures for the entire site to prevent attacks like e-skimming and to ensure secure payment processing. It is designed to enhance the security of cardholder data by adopting a comprehensive approach to security measures and access controls.
This means that merchants are responsible for securing every part of the payment flow, ensuring that both the payment form and the hosting web environment are protected.
PCI DSS 4.0.1 has stronger password and multi-factor authentication requirements. It also has improved security practices, with updates for e-commerce security and third party risk management.
It is more flexible, with more customised approaches to compliance, and comes with improved guidance and examples.
What does this mean for retailers?
The new requirements oblige merchants to take a more active role in securing payment pages, and proactively monitoring for signs of compromise. In particular, there are two requirements which merchants need to act on before the end of March 2025.
Firstly, merchants have to keep track of all their (software) scripts, even those from third parties. All scripts have to be authorised and merchants need to ensure that they haven’t been tampered with. Testing for unauthorised scripts is mandatory.
This is essential because attackers can compromise third-party scripts to steal card data directly from customers’ browsers.
Secondly, merchants need to monitor payment pages for unexpected changes to things like code or even the way the page is displayed in the browser. Merchants need to set up alerts to notify them of suspicious activity to detect and respond to attacks more quickly.
This is important because attackers are able to modify web pages to redirect customers to fake sites, or to steal their data.
PCI requirements become more rigorous depending on a merchant’s transaction volumes, with levels broken down as follows:
Next steps for retailers
Think of your website security the same way you would your home security. Each time you leave your house, you lock the doors and close the windows, and probably set an alarm system.
Ensuring your website is PCI DSS 4.0.1 compliant essentially locks the doors and windows on your website, and guards against e-skimming. It’s imperative that you comply to protect your customers and your business.
Some helpful next steps:
For some retailers, this may all seem quite foreign. The first step is to speak to your webmaster about what needs to be done.
By Joshua Shimkin & Judy Winn Bizcommunity
Dark web data leak exposes millions of bank cards: Kaspersky analysis
According to Kaspersky Digital Footprint Intelligence experts, it’s estimated that 2.3 million bank cards were leaked on the dark web, based on an analysis of data-stealing malware log files from 2023-2024.
On average, every 14th infostealer infection results in stolen credit card information, with nearly 26 million devices compromised by infostealers, including more than 9 million in 2024 alone. Kaspersky released its report on the infostealer threat landscape while the technology world gathers at MWC 2025 in Barcelona.
Kaspersky experts estimate that approximately 2,300,000 bank cards have been leaked on the dark web.
This conclusion is based on an analysis of the log files from data-stealing malware, dated 2023-2024, that were leaked on the dark web market. While globally the share of leaked cards is well below 1%, 95% of the observed numbers appear technically valid.
Infostealer malware is not only designed to extract financial information, but also credentials, cookies and other valuable user data, which is compiled into log files and then distributed within the dark web underground community.
An infostealer can infect a device if a victim unknowingly downloads and runs a malicious file, for example one disguised as legitimate software, such as a game cheat. It can be spread through phishing links, compromised websites, malicious attachments in emails or messengers and various other methods. It targets both personal and corporate devices.
Data-stealer threat landscape: 26 million devices found to be compromised over 2023-2024
On average, every 14th infostealer infection results in stolen credit card information. Kaspersky Digital Footprint Intelligence experts found that nearly 26 million devices running Windows were infected with various types of infostealers in the past two years.
The number of infections with data-stealing malware, 2020-2024. Source: Kaspersky Digital Footprint Intelligence “The actual number of infected devices is even higher. Cybercriminals often leak stolen data in the form of log files months or even years after the initial infection, and compromised credentials and other information continue to surface on the dark web over time. Therefore, the more time passes, the more infections from previous years we observe. We forecast the total number of devices infected with infostealer malware in 2024 to be between 20 million and 25 million, while for 2023, the estimate ranges between 18 million and 22 million,” says Sergey Shcherbel, an expert at Kaspersky Digital Footprint Intelligence.
Beware of Redline, Risepro and Stealc stealers
In 2024, Redline remained the most widespread infostealer, accounting for 34% of the total number of infections.
The most significant surge in 2024 was in infections caused by Risepro, whose share of total infections increased from 1.4% in 2023 to almost 23% in 2024.
“RisePro is a growing threat. It was first discovered two years ago, but seems to be gaining momentum. The stealer primarily targets banking card details, passwords and cryptocurrency wallet data, and may be spreading under the guise of key generators, cracks for various software and game mods,” explains Shcherbel.
Another rapidly growing stealer is Stealc, which first appeared in 2023 and increased its share from nearly 3% to 13%.
In light of this growing infostealer threats, Kaspersky has launched a dedicated landing page to raise awareness of the issue and provide strategies for mitigating associated risks. Learn more in the report.
|
CONSTRUCTION ARTICLES
|
ENERGY ARTICLES
|
FINANCE AND TAX ARTICLES
|
MEDICAL ARTICLES
|
PUBLIC SECTOR ARTICLES
|
SOUTH AFRICA |
Creecy turns to courts after audit confirms driving licence machine tender was irregular
The Department of Transport will lodge a High Court application for a declaratory order seeking guidance on how to proceed after a driving licence card machines tender was found to have been irregular by the Auditor-General South Africa (AGSA).
Transport Minister Barbara Creecy has also released the executive summary of the AGSA audit report confirming that the winning bidder, IDEMIA, failed to meet key bid technical requirements.
In addition, prescribed supply chain management processes had not been implemented during the tender by the Driving Licence Card Account (DLCA), the department’s agency set up to produce and deliver secure driving licences.
Creecy requested the AGSA to audit allegations of tender process manipulation in September, attaching a letter from the Organisation Undoing Tax Abuse (OUTA), in which specific allegations of irregular procurement were made.
OUTA welcomed the announcement by Creecy, stating that it could save taxpayers millions in light of evidence it had collected showing that the contract value had ballooned from the DLCA’s budgeted R486-million to above R898-million.
In fact, the AGSA audit showed that all bids submitted exceeded the R486-million budget, pointing to inadequate market analysis and the use of outdated pre-Covid prices.
“This outcome is the direct result of effective civil intervention, when civil society organisations work responsibly with whistleblowers to build strong evidence-based cases that halt grossly overpriced, and what is clearly a corrupt, tender from being awarded.
“We also hope that those involved in the bid evaluation and adjudication process will be held accountable,” OUTA CEO Wayne Duvenage said in a statement.
Given the aged nature of the current driving licence machine, which had also been prone to breakdowns, Creecy said the department was exploring various interim solutions to sustain the operations of the current machine.
These interim measures would be announced in due course, she added.
Terence Creamer Creamer Media Editor
|
- END