The Three Gates Framework

KYC for JSE-Listed Companies: Enhanced Due Diligence Requirements

JSE-listed South African companies exporting to the EU face a more complex compliance landscape than private companies. While JSE listing requirements and the King IV Code on Corporate Governance provide a strong foundation for KYC compliance, EU-specific obligations under the Corporate Sustainability Reporting Directive (CSRD) and the Corporate Sustainability Due Diligence Directive (CSDDD) add significant additional requirements. This guide is part of the KYC by Sector framework.

What Enhanced Due Diligence Means for JSE-Listed Exporters

JSE-listed companies have existing corporate governance frameworks — JSE Listings Requirements, the King IV Code on Corporate Governance, and the Companies Act 71 of 2008 — that align well with KYC requirements. However, EU buyers apply enhanced due diligence to all South African counterparties due to FATF grey-listing, and JSE-listed companies are not exempt from this requirement.

The additional layer for JSE-listed companies comes from EU sustainability regulations. The EU Corporate Sustainability Reporting Directive (CSRD) requires large companies to report on ESG performance, and JSE-listed companies with EU operations or EU-listed subsidiaries may fall within scope. The EU Corporate Sustainability Due Diligence Directive (CSDDD) requires large companies to identify and address adverse human rights and environmental impacts throughout their supply chains.

EU Obligations for JSE-Listed South African Companies
Directive / RegulationScopeKey Obligation
EU CSRD (Directive 2022/2464/EU)Large companies with EU operationsESG reporting under ESRS standards
EU CSDDD (Directive 2024/1760/EU)Large companies with EU operationsSupply chain human rights due diligence
EU AMLD6All exportersEnhanced KYC (FATF grey list)
EU Taxonomy RegulationEU-listed companiesGreen finance taxonomy alignment disclosure

Step-by-Step: JSE-Listed Company KYC Compliance

  1. Confirm CSRD and CSDDD applicability. Assess whether your company falls within the scope of CSRD and CSDDD based on your EU operations, employee count, and turnover.
  2. Update your beneficial ownership register. Ensure your CIPC beneficial ownership register reflects the current ownership structure, including any institutional shareholders above the 5% threshold.
  3. Prepare an ESG compliance package. Compile your King IV governance report, integrated annual report, and any CSRD-aligned sustainability disclosures.
  4. Conduct supply chain due diligence. Map your supply chain and identify any adverse human rights or environmental impacts that must be addressed under CSDDD.
  5. Register on the Digital Product Passport Registry. The Digital Product Passport Registry provides a unified compliance pathway for JSE-listed companies.

Common Mistakes and How to Avoid Them

  1. Assuming JSE compliance equals EU compliance. JSE listing requirements and King IV governance are strong foundations, but they do not satisfy all EU compliance requirements. CSRD, CSDDD, and AMLD6 impose additional obligations.
  2. Not assessing CSRD applicability. Many JSE-listed companies have not assessed whether they fall within CSRD scope. The thresholds are based on EU operations, not South African operations.
  3. Incomplete supply chain due diligence. CSDDD requires due diligence throughout the supply chain, not just at the first tier. JSE-listed companies must map their supply chains to at least the second tier.

Frequently Asked Questions

Your Next Step

Know your obligations. Act before the FIC does.

South Africa's FATF grey-list status means the FIC is actively inspecting accountable institutions. Use the KYC checklist to confirm your compliance posture before your next inspection.

Read the full KYC checklist for your sector