Blue Label Telecoms Integrated Annual Report 2019

Blue Label integrated annual report 2019 87 ABOUT US 1 – 21 LEADERSHIP 22 – 29 PERFORMANCE 30 – 73 GOVERNANCE 74 – 120 SHAREHOLDERS’ INFORMATION AND ADMINISTRATION 121 – IBC REGULATORY COMPLIANCE REPORT The IRCC oversees the discharge of regulatory compliance responsibilities. The Committee monitors, assesses, researches and reports on the regulatory environment in which the Group operates. The IRCC reports to the ARCC. The process of compliance management encompasses: u u identifying and prioritising all Acts and regulations at a national level applicable to Blue Label; u u incorporating regulatory requirements into control measures such as standard operating procedures, processes, manuals and policies; u u recommending corrective measures or steps to ensure compliance; and u u monitoring compliance through the adequacy and effectiveness of control measures. The risk of non-compliance is being managed through: u u the annual review and update of the Group regulatory universe; u u the compilation of compliance risk management plans for high risk legislation; and u u the continuous monitoring of the regulatory environment. Compliance report In terms of the Group’s compliance risk profile, the following represents the top three pieces of legislation that demands our attention in the regulatory universe: 1. Protection of Personal Information Act 2013 The Protection of Personal Information Act imposes an obligation on companies to ensure that personal information is processed in accordance with the eight conditions of the Act. Our business model is heavily reliant on electronic data and digitised products. We have since undertaken various assessments to establish the level of compliance and have improved our control environment to ensure compliance with the Act and regulations. Ensuring adequate information security is an ongoing prerequisite for BLT. 2. WASPA (Wireless Application Services Providers’ Association) code of conduct 2017 Membership of an industry body with a recognised code of conduct has been made compulsory by Telkom Mobile, Cell C, MTN and Vodacom for all WASPs (wireless application service providers). As a WASP, we continuously strive to keep abreast and comply to WASPA’s code of conduct and advertising rules. In turn, members of the public are able to use mobile services with confidence, assured that they will be provided with accurate information about all services and the pricing associated with those services. 3. Cybercrimes and Cybersecurity Bill 2015 As our business model is heavily reliant on electronic data and digitised products, we have an ongoing obligation to ensure adequate information security. We are focused on cybersecurity within BLT and take a proactive approach in the prevention of cybercrime.