← Back to Resources OHS Act

10 Common OHS Compliance Mistakes South African Employers Make

HSE Compliance Resources · ZeroLapse

Most OHS Act compliance failures aren't dramatic — no one deliberately ignores a requirement. They're small, quiet gaps that build up because there's no system catching them until an auditor, inspector, or an actual incident brings them to light. Here are ten of the most common.

1

Treating training certificates as "set and forget"

A certificate issued three years ago with a two-year validity period doesn't stay valid because no one's checked. Certificates need a review cadence, not a one-time filing.

2

No written appointment letters for safety roles

Someone acting as a fire warden or first aider isn't the same as a formally appointed one. Without a signed, dated letter, the role isn't legally recognised.

3

PPE issued but never logged

Handing over boots and a hard hat on someone's first day means nothing on paper if there's no record of what was issued, when, and whether it's been replaced since.

4

No link between job roles and what's actually required

Without a clear rule for what each role needs (which certificates, which PPE), compliance becomes guesswork per employee instead of a consistent standard per position.

5

Incidents closed with no corrective action recorded

Marking an incident "resolved" without documenting what was actually done about it is one of the most common — and most avoidable — audit findings.

6

Letting the COID Letter of Good Standing lapse unnoticed

It doesn't come up in daily operations until a client or tender committee asks for it — by which point a lapsed letter can stall a deal at the worst possible moment.

7

Relying on one person's memory instead of a system

When compliance knowledge lives in one manager's head rather than in records anyone can check, it doesn't survive that person being on leave, or leaving the business.

8

Spreadsheets with no automatic reminders

A spreadsheet can hold expiry dates perfectly well — but it doesn't tell anyone when one is approaching. That step still depends on someone remembering to look.

9

Not distinguishing "expiring soon" from "already expired"

Treating both the same way means genuine emergencies (an expired cert someone's currently working under) get lost in the same list as items with weeks of runway left.

10

No POPIA disclosure register for employee data

Holding personal information on employees — names, contact details, training records — without being able to show what's held and why is a POPIA gap most businesses don't realise they have.

The pattern behind all ten: almost none of these are about businesses not caring about safety. They're about compliance depending on manual attention in a system that doesn't proactively flag what's about to go wrong.

Catch these before an auditor does

ZeroLapse automatically flags every certificate, appointment, and PPE item as it approaches expiry — and won't let an incident be marked closed without a recorded corrective action.

Start Your Free 30-Day Trial

Related reading: How to Prepare for an HSE Audit in South Africa · Excel vs HSE Compliance Software

This article is general information for South African employers and isn't legal advice. Consult the Department of Employment and Labour or a qualified HSE professional for guidance specific to your business.