2.3 Operational Infrastructure, Compliance Policies & IT Setup

2.3 Operational Infrastructure, Compliance Policies & IT Setup

Establishing an estate agency enterprise requires building a robust physical and digital operational infrastructure that complies with South African statutory standards. Beyond commercial efficiency, enterprise architecture must meet strict regulatory demands imposed by the Property Practitioners Act 22 of 2019 (PPA), the Financial Intelligence Centre Act 38 of 2001 (FICA), and the Protection of Personal Information Act 4 of 2013 (POPIA). Principal property practitioners are responsible for establishing compliant business premises, appointing statutory compliance officers, implementing Risk Management and Compliance Programmes (RMCP), managing Section 54 trust accounts, and enforcing 5-year record retention protocols.

---

1. Physical & Virtual Office Premises Standards

Statutory Display Mandates

Under PPRA Regulations, every physical business office or branch location operated by a property practitioner enterprise must maintain prominent public displays near the primary entrance:

1. Fidelity Fund Certificates: Certified copies of the valid Business Enterprise FFC of the firm and the individual FFCs of all principal, non-principal, and candidate practitioners assigned to or operating from that branch location.
2. Mandatory Condition Disclosure Statements: Blank copies of the statutory Immovable Property Condition Disclosure Form (prescribed under Section 67 of the PPA) must be available for client inspection.
3. POPIA Information Notice: A visible public notice detailing the enterprise's Information Officer contact details and personal data processing policy summary.
4. FICA Compliance Notice: Formal notification confirming the firm's registration as an Accountable Institution with the Financial Intelligence Centre.

Virtual & Remote Agency Operations

Modern estate agency enterprises operating fully remote or virtual business models (without storefront premises) must fulfill specific statutory controls:

• Registered Physical Office Address: The enterprise must register a fixed physical street address in South Africa with the PPRA where statutory accounting ledgers, trust records, and transaction files are maintained and accessible for official inspection.
• Digital Display Compliance: Virtual agencies must display certified digital copies of all valid FFCs prominently on their primary public website homepage and client portals.

---

2. FICA Compliance Officer & RMCP Architecture

Property practitioner firms are classified as Accountable Institutions under Item 3 of Schedule 1 to the Financial Intelligence Centre Act 38 of 2001 (as amended by the General Laws Amendment Act 22 of 2022).

Compliance Officer, FIC Registration & Governance (FICA Sections 42–43B)

Every estate agency enterprise must formally appoint a designated FICA Compliance Officer (or maintain a compliance function) with the requisite seniority, expertise, and operational authority to oversee anti-money laundering (AML) and counter-terrorist financing (CTF) compliance. Under Section 43B, all accountable institutions must register with the FIC and supply their compliance officer details; under Section 43, employees must receive ongoing AML training.

Risk Management & Compliance Programme (RMCP)

Under Section 42 of FICA, the enterprise must formulate, document, maintain, and implement a custom RMCP tailored to its business model:

• Risk Identification & Rating: Establishing frameworks to assess money laundering risks associated with client categories, geographic locations, transaction types, and payment mechanisms.
• Customer Due Diligence (CDD): Verification of buyer and seller identities, residential addresses, tax registration numbers, and corporate ownership structures (beneficial ownership verification for companies and trusts).
• Enhanced Due Diligence (EDD): Mandatory EDD protocols for Politically Exposed Persons (PEPs), Prominent Influential Persons (PIPs), and high-risk foreign jurisdictions.
• Suspicious Transaction Reporting (STR / SAR): Establishing internal mechanisms to detect and report suspicious transactions to the FIC via the goAML portal within statutory reporting timeframes (typically within 15 days of establishing suspicion).
• Cash Threshold Reporting (CTR): Mandatory reporting under Section 28 of FICA for all cash transactions (receipts or payments) exceeding the statutory threshold of R49,999.99.

---

3. Financial Systems & Section 54 Trust Account Governance

Financial infrastructure requires a clear operational separation between business trading funds and client trust monies under Section 54 of the Property Practitioners Act 22 of 2019.

Section 54 Trust Account Mandatory Rules

1. Opening Trust Account: Every property practitioner enterprise must open and maintain one or more separate trust bank accounts with a registered credit institution in South Africa (Section 54(1)).
2. Bank Notification & PPRA Filing: Immediately after opening a trust account and appointing the auditor, the principal must provide the PPRA in writing with the prescribed account details and auditor details (Section 54(1)(c) read with Regulation 27).
3. Interest Allocation: Under the PPRA Practice Directive on interest earned from trust accounts (February 2024), trust interest is split 50:50 between the practitioner and the PPRA (whose share is paid into the PPFF), unless the parties to the lease or sale contract agree otherwise in writing. Separately, Section 54(2) permits trust funds not immediately required to be invested in a separate savings or interest-bearing account referenced to that subsection.
4. Section 23 Audit Exemption: Small practices or digital agencies that do not receive, hold, or process client trust funds may apply to the PPRA for formal Section 23 Audit Exemption, releasing them from mandatory annual trust audit filings provided strict compliance conditions are maintained.

---

4. POPIA Compliance & Data Security Setup

The Protection of Personal Information Act 4 of 2013 (POPIA) regulates how estate agency enterprises collect, store, process, share, and destroy client personal information (PII).

Information Officer Registration

Every estate agency must register its Information Officer (automatically the Chief Executive Officer or Managing Principal, unless formally delegated in writing) with the Information Regulator of South Africa.

The Eight Lawful Processing Conditions in Real Estate

Direct Marketing Protocol (POPIA Sec 69)

Estate agencies are legally restricted from sending unsolicited electronic marketing communications (SMS blasts, bulk emails, WhatsApp promotions) to prospective buyers or sellers:

• Opt-In Consent Requirement: Agencies must obtain prior explicit consent (Form Part 4 of POPIA Regulations) before sending electronic marketing to non-customers.
• Existing Customer Exception: Marketing is permissible to existing clients if their contact details were obtained during a prior transaction, provided they were given an easy, free opportunity to opt out (unsubscribe) during initial collection and with every subsequent communication.

Data Breach Notification (POPIA Sec 22)

In the event of a security compromise (e.g., ransomware attack or stolen agency laptop containing client FICA records), the Information Officer must notify both the Information Regulator and affected data subjects as soon as reasonably possible in writing.

---

5. Statutory Record Keeping (PPA Sec 55)

Section 55 of the Property Practitioners Act 22 of 2019 imposes strict mandatory record-keeping requirements on all property practitioner enterprises.

The 5-Year Retention Rule

An estate agency enterprise must retain all statutory documents for a minimum period of 5 years from the date of execution or completion:

1. Trust Accounting Records: Trust bank statements, deposit slips, payment vouchers, trust ledgers, and monthly trust reconciliation statements.
2. Mandate Agreements: Exclusive and open sales mandates, rental management mandates, and power of attorney documents.
3. Transaction Documents: Signed deeds of sale, lease agreements, mandatory property condition disclosure forms, and addenda.
4. FICA Verification Documents: ID copies, proof of residence, beneficial ownership registers, and CDD verification sheets.

Storage & Inspector Access Standards

• Storage Media: Records may be maintained in physical hard-copy format or secure electronic digital formats (cloud repositories complying with POPIA encryption standards).
• Immediate Accessibility: Under Section 25 of the PPA, records must be immediately accessible upon request during routine or unannounced compliance inspections by PPRA inspectors.