OHS Compliance & Risk Management15 min readPublished 24 July 2026

How to Prepare an OHS Legal Register for ISO 45001 & Department of Labour Audits

A practical compliance guide to compiling, maintaining, and auditing a comprehensive South African OHS Legal Register, linking statutory acts, regulations, SANS standards, and municipal bylaws to operational procedures.

Legal compliance auditor examining statutory legislation register and ISO standardsCompiling a multi-tier South African OHS Legal Register for ISO 45001 Clause 6.1.3.

2. The 4 Tiers of South African Safety Law Every Register Must Include

A compliant South African legal register must not simply list the OHS Act and stop there. It must be organized across four interconnected statutory tiers that govern modern commercial and industrial operations.

The 4 Tiers of South African Occupational Safety Legislation

Legislative TierLegal AuthorityCore PurposeRepresentative South African Examples
Tier 1: Primary National ActsParliament of South AfricaEstablishes primary statutory duties, executive liabilities, and legal frameworks.OHS Act (Act 85 of 1993), COIDA (Act 130 of 1993), National Environmental Management: Waste Act (NEMWA).
Tier 2: Subordinate RegulationsMinister of Employment & LabourPrescribes detailed sector-specific technical safety and administrative rules.General Safety Regs, Construction Regs 2014, Ergonomics Regs 2019, Driven Machinery Regs (DMR 18).
Tier 3: SANS National StandardsSouth African Bureau of Standards (SABS)Mandatory engineering codes incorporated directly into OHS regulations by reference.SANS 10142-1 (Wiring of Premises), SANS 10085 (Scaffolding), SANS 10400-T (Fire Protection).
Tier 4: Municipal BylawsLocal Metropolitan MunicipalitiesLocal health, fire prevention, trade effluent, and hazardous storage bylaws.City of Joburg Emergency Services Bylaws, eThekwini Fire Prevention Bylaws, Cape Town Waste By-laws.
Statutory hierarchy and practical examples governing enterprise legal registers.

3. Mandatory Data Fields for a Bulletproof Legal Register Matrix

To satisfy international certification auditors, each entry in your OHS Legal Register must contain specific metadata fields that bridge the gap between abstract legal text and practical shop-floor execution.

A compliant register includes: Legislation Title & Year (e.g. Electrical Installation Regulations, 2009); Specific Section or Regulation Number (e.g. Regulation 9: Issuing of Certificate of Compliance); Plain-English Operational Requirement (e.g. 'Ensure every electrical installation is tested and possesses a valid Certificate of Compliance (CoC)'); Internal Operational Control Link (e.g. referencing SWP-ELEC-004 and the annual DB board inspection register); Assigned Responsible Person (e.g. GMR 2.1 Electrical Engineer); and the current Evaluation Score (Compliant / Action Required).

4. ISO 45001 Clause 6.1.3: Compliance Evaluation & Audit Scoring

Under ISO 45001, an OHS legal register cannot be a static PDF document that sits in a folder unread. The standard requires two continuous operational cycles:

Clause 6.1.3 (Determination of Legal Requirements) requires the organization to maintain a process for identifying and gaining access to updated legal requirements, and determining how these requirements apply to its OH&S hazards.

Clause 9.1.2 (Evaluation of Compliance) requires the organization to periodically audit its actual performance against every single legal requirement listed in the register. Auditors assign compliance scores (e.g. Compliant, Partially Compliant, Non-Compliant) and generate formal Corrective Action Requests (CARs) for any identified deficiencies.

Frequently Asked Questions

How often should an OHS Legal Register be updated?

A legal register should be reviewed quarterly for legislative changes published in the Government Gazette. A comprehensive compliance evaluation audit of all listed requirements must be conducted at least annually under ISO 45001 Clause 9.1.2.

Can an organization use a generic legal register template?

No. ISO certification auditors and DoEL inspectors require the legal register to be site-specific. Listing mining regulations for a commercial office or omitting SANS electrical codes for a factory will result in audit findings.

What is the difference between an Act and a Regulation?

An Act (like the OHS Act 85 of 1993) is passed by Parliament and establishes broad legal duties and liabilities. Regulations (like the Construction Regulations) are promulgated by the Minister to provide detailed technical rules for specific industries.

Are SANS standards automatically mandatory for all businesses?

SANS standards are voluntary guidelines unless they are explicitly incorporated by reference into an OHS Act regulation (such as SANS 10142 under the Electrical Installation Regulations), at which point compliance becomes legally mandatory.

How does Diba BES help companies build and maintain legal registers?

Diba BES creates fully customized, site-specific OHS Legal Registers, links legal clauses to your internal procedures, delivers quarterly legislative update bulletins, and conducts independent Clause 9.1.2 compliance audits. Explore our [OHS Legal Register Consulting](/services/occupational-health-safety-consulting).

DO
Written by Diba OHS Advisory TeamVerified by Orlinda Pieterson
Senior Occupational Health & Safety ConsultantsPr.CHSA (SACPCMP), Saiosh Tech Member

Diba BES is a 100% Black Women-Owned, Level 1 B-BBEE provider delivering occupational health & safety consulting, accredited workplace training, and commercial workplace services across South Africa since 2003.