Legal & Risk: What Businesses Need to Watch

Legal & Risk: What Businesses Need to Watch

Date: 2026‑08‑26

Every headline is a quiet litmus test for corporate legal hygiene. This week three stories that might appear routine on the surface actually expose gaps in compliance regimes across South Africa and beyond.

---

1. MTN’s AI Data‑Centre Expansion

MTN’s latest announcement, as highlighted by TechCentral in “MTN targets 150MW in first phase of AI data centre push”, outlines a 150 MW energy commitment for a new generation of AI‑processing facilities. While the headline is about scale, the legal implications run deeper.

• POPIA and Data‑Protection: Large‑scale AI training requires vast volumes of personal data. Under the POPIA Act 4 of 2013, MTN must establish lawful bases for processing, conduct Data Protection Impact Assessments (DPIAs) and enforce robust security controls.
• National Telecommunication Authority (NTCA) Licensing: Construction of a high‑power data centre triggers licensing under the Telecommunications Act and requires notification to the NTCA, which regulates power usage, electromagnetic emissions and network interconnectivity.
• AI Governance Frameworks: Even absent specific AI legislation in South Africa, corporate governance best practice dictates that MTN adopt an internal AI ethics charter outlining transparency, explainability and bias mitigation—especially given the potential for public‑sector contracts.

Compliance Actions for a CLO

| Action | Purpose |

|--------|---------|

| Conduct a POPIA DPIA focused on data sources for training models. | Identify lawful bases, privacy risks and mitigation strategies. |

| Submit a formal application to the NTCA detailing power consumption, cooling infrastructure and inter‑carrier connections. | Avoid regulatory fines or forced shutdowns. |

| Draft an AI ethics charter that maps data flows to contractual obligations with suppliers and third‑party model providers. | Mitigate reputational risk and align with emerging EU AI Act expectations for export. |

---

2. Northam Platinum’s Unsolicited M&A Approach

Northam Platinum Holdings’ announcement, reported by BusinessTech in “South African mining giant worth R122 billion for sale”, shows the company receiving an unsolicited approach from a major platinum‑producer. The headline masks a complex web of legal scrutiny.

• Mineral and Petroleum Resources Development Act (MPRDA): Any change in ownership or control of mining assets must be reported to the Mineral and Energy Ministry, and may trigger mandatory government approval under section 23.
• Companies Act & Shareholder Approval: A board‑level decision to consider proposals is only the first step; shareholders must approve a 75 % majority vote under Section 179(1)(c) of the Companies Act (SA).
• Competition Law: The Competition Commission will examine whether a merger would substantially lessen competition in the platinum market, especially given global supply constraints.

Compliance Actions for a CLO

| Action | Purpose |

|--------|---------|

| Prepare an MPRDA compliance package documenting the current mineral rights and any encumbrances. | Ensure statutory disclosure before board approval. |

| Draft shareholder notice templates that comply with Section 179(1)(c) to secure the required 75 % vote. | Avoid legal challenges or invalidation of decisions. |

| Engage a competition lawyer early to assess potential antitrust objections and develop mitigation strategies. | Reduce delay in regulatory clearance. |

---

3. R264 bn Construction Pipeline

President Ramaphosa’s comment, as relayed by BusinessTech in “Ramaphosa says South Africa's R264 billion construction site is coming”, signals a surge of procurement opportunities. The sheer scale exposes firms to procurement and corruption risks.

• Public Service Procurement Regulations (PSPR) 2009: Any contract above the threshold must be tendered through the Public Service Purchasing Portal, with mandatory competition testing and value‑for‑money analysis.
• Anti‑Corruption Controls: The Prevention of Corrupt Conduct Act mandates robust internal controls for monitoring procurement processes, especially when public funds are involved.
• Contractual Risk Allocation: Large infrastructure projects often involve multiple parties (designers, contractors, financiers). Inadequate force majeure or liability clauses can expose firms to unforeseen costs.

Compliance Actions for a CLO

| Action | Purpose |

|--------|---------|

| Review existing procurement policies against PSPR 2009 and update tender templates. | Ensure compliance with statutory thresholds and fair competition. |

| Implement an anti‑corruption audit trail for all bids, including vendor background checks and conflict‑of‑interest disclosures. | Reduce the risk of sanctions under the Prevention of Corrupt Conduct Act. |

| Standardise contractual clauses that address scope creep, change orders and risk sharing in joint‑venture arrangements. | Protect against post‑contractual liabilities. |

---

Bottom Line

These three stories illustrate how seemingly mundane corporate actions—building AI data centres, evaluating unsolicited M&A offers, or stepping into a booming construction pipeline—can surface significant legal exposure if not managed proactively. A CLO should weave the above compliance actions into the enterprise risk framework to safeguard both operational continuity and regulatory standing.

---

**