Section 56 goes one step further, requiring “affected companies” to establish and maintain a register of the persons who hold beneficial interests equal to, or in excess of, 5% of the total number of securities of a particular class of securities. All of the BO information now required in terms of sections 33, 50 and 56 is to be filed with the CIPC. An “affected company” is defined as: “A company regulated as set out in section 117(1)(i) and a private company that is controlled by or a subsidiary of a regulated company as a result of any circumstances contemplated in section 2(2)(a) or 3(1)(a).”
Section 117(1)(i) of the Companies Act refers to a regulated company in terms of section 118(1) and (2) of the Companies Act. Section 118 stipulates that a regulated company includes public companies, state owned companies which have not been exempted under section 9, and private companies where more than 10% of issued securities have been transferred within the previous 24 months, or a private company’s memorandum of incorporation stipulates that it is to comply with Part C of the Companies Act and the Take Over Regulations.
A “beneficial owner” is defined as a natural person who, directly or indirectly, owns 5% or more of a company, or who exercises effective control over the company. Importantly, this definition makes it clear that a company or a trust cannot be regarded as a beneficial owner. In order to ensure compliance, companies have six months from 1 April 2023 to file their BO information. Failure to provide the required information may result in an administrative fine which is not to exceed the greater of 10% of the companies’ turnover during the non-compliance period and R1 million.
The person who files such information with the CIPC must have a valid, written mandate from the company authorising them to file the information. Along with the BO information, the following is required when filing with CIPC:
- the mandate of the filer;
- the companies’ security register;
- certified copies of the beneficial owners’ identification documents;
- certified copies of the beneficial owners’ passports; and
- any other supporting documentation as requested by the CIPC.
Any changes to a company’s BO register need to be filed with CIPC within five days of the changes coming into effect.
These new requirements are anticipated to create a significant company secretarial burden on companies and failure to comply could have serious consequences. Companies should ensure that they comply with the initial obligation to file the information before the end of September 2023 and that they also comply with their ongoing obligations. Should a company be unsure of what is required, legal advice and support should be obtained.
In addition to imposing an obligation on the CIPC to maintain a BO register, the AML and CFT Amendment Act also requires the Masters Office to maintain a BO register for trusts and directors of registered non-profit organisations (NPOs) to keep a register of prescribed information about the office-bearers, control structure, governance, management, administration and operations of the registered NPO. While the creation of the additional registers mentioned above has a sound rationale, in practice, a single national repository of such information may well have proved more efficient than parallel systems.
Access to BO information
At this stage only the CIPC itself, law enforcement and “competent authorities” will be able to access BO information. The information will not be publicly available. While law enforcement plays a key role in investigating and dealing with potential money laundering, terrorist financing and corruption, private companies play an equally important role and are often under legal obligations to conduct due diligence on companies.
The CIPC itself has provided guidance on what a corporate compliance programme should entail in Guideline 1 of 2018. In this guideline, the CIPC has indicated that a corporate compliance programme should include due diligence and that: “The company should know who they are doing business with, and ensure that business relationships are transparent and ethical.” If companies could access the BO register it would make it a lot easier for them to “know who they are doing business with”, and it seems like limiting access to law enforcement and so-called “competent authorities” is a missed opportunity to enhance the ability of private companies to implement effective due diligence.
Even though the register is not publicly accessible, the public can still gain access to the shareholder registers of companies by relying on section 26 of the Companies Act. Under this section, anyone can ask a company for access to its shareholder register and access cannot be refused unless there are compelling reasons for the refusal. While this provides a route for companies to know who they are dealing with, the process is cumbersome and having access to the CIPC register could present a simpler route.
Although there are challenges in mandating such disclosures – especially from an administrative and costs perspective – within the context of state tenders, inefficient methods to combat corruption and deteriorating trust in South Africa’s commercial environment, the introduction of the BO register is a welcomed addition. South African companies should ensure that they make the necessary submissions to the CIPC before the end of September 2023 and that they keep this information up to date. A failure to do so could result in significant fines. It remains to be seen whether the current policy position will change to allow wider access to the information, particularly during due diligence being done by private companies.
Co-Written by Marlene Murphy, Vishana Mangalparsad and Kyle Melville of Pinsent Masons.