Anti-Bribery and Corruption Policy
Template — South Africa
An attorney-drafted Anti-Bribery and Corruption Policy template designed specifically for South African businesses. This comprehensive, legally compliant document establishes a zero-tolerance framework for bribery and corrupt activities — covering PRECCA 12 of 2004 compliance, Companies Act section 77 director liability, gifts and hospitality thresholds, facilitation payment prohibitions, third-party due diligence, and whistleblower protection under the Protected Disclosures Act, with provisions for UK Bribery Act exposure where applicable.
What is a Anti-Bribery and Corruption Policy in South Africa?
An Anti-Bribery and Corruption (ABC) Policy is a zero-tolerance framework that South African businesses adopt to comply with the Prevention and Combating of Corrupt Activities Act 12 of 2004 (PRECCA). It addresses PRECCA Sections 3, 4 and 12 (bribery offences) and the Section 34 mandatory duty to report transactions above R100,000 to the SAPS. Absence of the policy destroys directors' Companies Act Section 76(4) business-judgment defence.
Drafted and reviewed by
Attorney & Founder, My-Contracts.co.za · Legal Practice Council of South Africa (LPC F17333)
Last legal review
Anti-Bribery and Corruption Policy TL;DR
The Anti-Bribery and Corruption Policy is the primary compliance document through which a South African business prevents, detects, and responds to bribery, corruption, fraud, and gratification-related misconduct. It is grounded in the Prevention and Combating of Corrupt Activities Act 12 of 2004 (PRECCA) — which criminalises bribery and imposes a Section 34 mandatory duty on persons in positions of authority to report corrupt transactions of R100,000 or more to the SAPS — and in the Companies Act 71 of 2008 director duties, which expose directors to personal liability under Section 77 where adequate anti-corruption controls are not in place. For South African companies with UK connections, the policy must additionally satisfy the UK Bribery Act 2010 Section 7 "adequate procedures" defence. The policy imposes an absolute prohibition on facilitation payments, establishes gift and hospitality thresholds, mandates third-party due diligence, guarantees whistleblower protection under the Protected Disclosures Act 26 of 2000, and integrates with FICA compliance programmes.
Also known as: ABC Policy, Anti-Corruption Policy, Bribery Prevention Policy, Anti-Bribery Policy, PRECCA Compliance Policy, Ethics and Anti-Corruption Policy, Gifts and Hospitality Policy.
Why Your Business Needs This Agreement
Criminal Prosecution of Directors for Failure to Report Under Section 34
Section 34 of PRECCA imposes a mandatory reporting duty on persons in positions of authority — including every director and senior manager. Failure to report known or suspected corrupt transactions involving R100,000 or more to the SAPS is a criminal offence carrying imprisonment of up to 10 years. Without an Anti-Bribery Policy establishing clear reporting procedures and awareness of this duty, directors may unwittingly fail to report, exposing themselves to personal criminal prosecution. Several directors in South Africa have been charged under section 34 for failing to report corruption they were aware of.
Personal Liability of Directors Under Companies Act Section 77
Directors who fail to implement adequate anti-corruption controls face personal liability under section 77 of the Companies Act for any loss suffered by the company as a result of corruption. This includes losses from fines, contract cancellations, debarment from government contracts, and reputational damage. Without a comprehensive Anti-Bribery Policy and active compliance programme, directors cannot establish the section 76(4) business judgment defence — leaving them personally exposed to claims that could run into millions of rands.
Debarment from Government Contracts and SOE Business
Companies convicted of corruption under PRECCA or found to have engaged in corrupt activities during procurement processes face debarment from government contracts and state-owned enterprise business. The National Treasury maintains a register of restricted suppliers, and debarment can last for a minimum of five years. For companies that derive a significant portion of their revenue from government contracts — common in construction, IT, healthcare, and consulting — debarment is effectively a commercial death sentence.
UK Bribery Act Prosecution for South African Companies
South African companies with UK connections — LSE listings, UK subsidiaries, UK clients, or UK-resident directors — face prosecution under UK Bribery Act section 7 for failure to prevent bribery. UK penalties include unlimited fines, and the Serious Fraud Office (SFO) has demonstrated willingness to prosecute non-UK companies. Without an Anti-Bribery Policy that meets the UK "adequate procedures" standard, South African companies have no defence to a section 7 prosecution. The reputational damage from an SFO investigation alone can destroy shareholder value.
Facilitation Payment Demands in Daily Operations
South African businesses routinely face demands for facilitation payments — from municipal officials processing licence applications, customs officers clearing shipments, and government departments issuing permits. Employees without clear policy guidance may pay these demands to maintain business operations, unwittingly committing criminal offences under PRECCA. Without a policy prohibiting facilitation payments and providing practical guidance on refusal and escalation, the organisation accumulates criminal liability with every payment.
Third-Party Corruption Exposure Through Agents and Intermediaries
Companies that use agents, consultants, or intermediaries to interact with government officials bear liability for corrupt acts committed by those third parties on their behalf. Under both PRECCA and the UK Bribery Act, the organisation can be held responsible if the third party paid a bribe to secure a contract or regulatory approval — even if the organisation did not directly authorise the payment. Without a third-party due diligence programme established by the Anti-Bribery Policy, the organisation has no visibility into and no defence against third-party corruption.
What is a Anti-Bribery and Corruption Policy?
South Africa faces a corruption crisis of extraordinary proportions, and the legal consequences for businesses that fail to prevent bribery are severe and far-reaching. The Prevention and Combating of Corrupt Activities Act 12 of 2004 (PRECCA) imposes criminal liability on both individuals and juristic persons (companies) for corrupt activities, with penalties including unlimited fines and imprisonment of up to life for the most serious offences. Section 34 of PRECCA creates a mandatory duty for persons in positions of authority — including directors, managers, and partners — to report known or suspected corrupt transactions involving amounts of R100,000 or more to the South African Police Service. Failure to report is itself a criminal offence punishable by imprisonment of up to 10 years.
The Companies Act 71 of 2008 compounds this exposure. Section 76 requires directors to exercise the degree of care, skill, and diligence that may reasonably be expected — which includes implementing adequate anti-corruption controls. Section 77 imposes personal liability on directors who breach their duties, including liability for losses suffered by the company as a result of corruption that the director failed to prevent. The business judgment defence under section 76(4) requires directors to demonstrate that they took reasonable steps to become informed about the matter and had a rational basis for their decisions — maintaining a comprehensive Anti-Bribery Policy and conducting regular training are critical elements of this defence.
For South African companies with international operations or that do business with UK-connected entities, the UK Bribery Act 2010 introduces additional extraterritorial exposure. Section 7 creates a corporate offence of failure to prevent bribery by persons associated with the organisation, and the only defence is that the organisation had "adequate procedures" in place to prevent bribery. This offence applies to any company that carries on business in the UK, regardless of where the bribery occurred. South African companies listed on the London Stock Exchange, with UK subsidiaries, or that provide services to UK clients may be subject to UK Bribery Act jurisdiction. The US Foreign Corrupt Practices Act (FCPA) creates similar exposure for companies with US connections.
PRECCA Section 34 turns every director who knows of a R100,000+ corrupt transaction into a mandatory SAPS reporter — and makes silence a 10-year imprisonable offence.
The Financial Intelligence Centre Act 38 of 2001 (FICA) adds a further dimension for accountable institutions (banks, insurance companies, estate agents, attorneys, and other designated entities) by requiring customer due diligence, suspicious transaction reporting, and compliance programmes designed to prevent money laundering — which is closely linked to corruption. FICA compliance programmes and anti-bribery policies should be integrated to create a unified anti-financial crime framework.
This attorney-drafted template establishes a zero-tolerance standard for all forms of bribery and corruption, provides practical guidance on gifts, entertainment, and hospitality thresholds, prohibits facilitation payments in absolute terms (as required under PRECCA), addresses political and charitable donations with board approval and disclosure requirements, establishes a comprehensive third-party due diligence framework, creates robust reporting channels with whistleblower protection under the Protected Disclosures Act 26 of 2000, implements record-keeping and financial controls to prevent off-books payments, and includes training and certification requirements for all employees and associated persons.
Who Needs This
Want early access to the Anti-Bribery and Corruption Policy template?
We'll email you the moment early access opens
What an Anti-Bribery and Corruption Policy Must Include Under South African Law
Clauses required by PRECCA 12 of 2004, the Companies Act 71 of 2008, the Protected Disclosures Act 26 of 2000, and — for companies with UK exposure — the UK Bribery Act 2010 "adequate procedures" standard.
| Clause | Required / Recommended By | Key Reference |
|---|---|---|
| Zero-tolerance policy statement signed by the CEO and board chair | UK Bribery Act adequate procedures; King IV | UK Bribery Act 2010 Section 7 Guidance Principle 2 |
| Broad definition of "gratification" including non-monetary advantages | PRECCA 12 of 2004 | Section 1 definitions |
| Absolute prohibition on facilitation payments | PRECCA 12 of 2004 | Sections 3 and 4 |
| Gift and hospitality thresholds with register and pre-approval | UK Bribery Act adequate procedures | Principle 3 (risk assessment); Principle 4 (DD) |
| Third-party due diligence on agents, consultants, JV partners | PRECCA and UK Bribery Act | PRECCA Section 3; UK Bribery Act Principle 4 |
| Political donation and charitable contribution controls | Political Party Funding Act 6 of 2018 | Political Party Funding Act |
| Section 34 PRECCA mandatory reporting duty for R100,000+ transactions | PRECCA 12 of 2004 | Section 34 |
| Multiple reporting channels including anonymous hotline | Protected Disclosures Act 26 of 2000 | Protected Disclosures Act Section 3 |
| Prohibition on retaliation against whistleblowers | Protected Disclosures Act 26 of 2000 | Sections 3 and 4 |
| Financial controls preventing off-books payments | Companies Act 71 of 2008 | Section 28 accounting records |
| Annual training and certification for all employees | UK Bribery Act adequate procedures | Principle 5 (communication and training) |
| FICA integration for accountable institutions | Financial Intelligence Centre Act 38 of 2001 | FICA Sections 21, 29, 42 |
PRECCA section 34 requires persons in positions of authority to report corrupt transactions involving R100,000+ to the SAPS — failure to report carries imprisonment of up to 10 years
Directors face personal liability under Companies Act section 77 for losses caused by corruption they failed to prevent — an Anti-Bribery Policy is essential for the section 76(4) business judgment defence
South African companies with UK connections face prosecution under UK Bribery Act section 7 (failure to prevent bribery) — the only defence is demonstrating "adequate procedures"
PRECCA makes no exception for facilitation payments — any gratification to a public official to expedite routine functions is a criminal offence regardless of value or local custom
Companies convicted of corruption face debarment from government contracts for a minimum of five years — effectively a commercial death sentence for government-dependent businesses
Key Clauses Included
This Anti-Bribery and Corruption Policy template covers 12 essential sections, each drafted by South African attorneys.
Policy Statement & Zero-Tolerance Commitment
An unequivocal statement from the board of directors that the organisation prohibits all forms of bribery and corruption — whether direct or through intermediaries, in both the public and private sectors, regardless of the value or the perceived customs of the jurisdiction. Signed by the CEO and chairperson, reflecting the "tone from the top" that international anti-corruption standards (including the UK Bribery Act guidance) require as the foundation of an effective compliance programme.
Definitions of Bribery, Corruption & Gratification
Clear definitions aligned with PRECCA's broad definition of "gratification" under section 1, which includes money, gifts, loans, fees, rewards, valuable security, property, employment, contracts, services, favours, and any other advantage. Defines bribery (offering, giving, soliciting, or receiving gratification to improperly influence), corruption, facilitation payments, kickbacks, extortion, and trading in influence as separate but related offences.
Gifts, Entertainment & Hospitality
Specific monetary thresholds for acceptable gifts (typically R500 per item, R2,000 cumulative per source per annum), mandatory declaration and pre-approval requirements, gift register maintenance, an absolute prohibition on gifts to or from government officials involved in procurement or regulatory decisions, corporate entertainment guidelines with proportionality requirements, and special provisions for festive season gifts and corporate hospitality events. Cross-references the Code of Conduct.
Facilitation Payments — Absolute Prohibition
An unequivocal prohibition on facilitation payments — small payments to public officials to expedite routine government actions such as licence processing, customs clearance, or utility connections. Unlike some foreign jurisdictions, PRECCA makes no exception for facilitation payments regardless of value, local custom, or perceived necessity. The section addresses practical scenarios employees may face and provides guidance on refusing demands for facilitation payments, escalation procedures, and documentation requirements.
Political Donations, Charitable Contributions & Sponsorships
Rules governing political donations (board approval required, full transparency, prohibition on donations to influence tender outcomes), charitable contributions (due diligence on recipient organisations, verification that funds reach intended beneficiaries, prohibition on charitable donations as disguised bribes), and sponsorships (genuine commercial justification, proportionality, and documentation). Addresses compliance with the Political Party Funding Act 6 of 2018.
Third-Party Due Diligence & Agent Management
Comprehensive framework for vetting agents, consultants, joint venture partners, suppliers, and other third parties who interact with government officials or could engage in corrupt activities on behalf of the organisation. Covers risk-based due diligence procedures, contractual anti-corruption representations and warranties, the right to audit third-party records, immediate termination rights for corruption-related breaches, and ongoing monitoring of high-risk third-party relationships.
Record Keeping, Financial Controls & Audit
Requirements for accurate and transparent recording of all payments and receipts in the company's books and records, prohibition on off-books accounts, slush funds, and unrecorded payments, petty cash controls with segregation of duties, regular internal auditing of high-risk transactions and expense categories, and the annual certification by the CFO that the company's financial records are complete and accurate in relation to anti-corruption compliance.
Reporting Channels & Whistleblower Protection
Multiple reporting channels — line manager, compliance officer, dedicated ethics hotline (anonymous and confidential), online reporting portal, and external reporting to the SAPS where criminal conduct is suspected. Establishes the mandatory duty to report suspected corruption, guaranteed protection for whistleblowers under the Protected Disclosures Act 26 of 2000, the prohibition on retaliation (dismissal for whistleblowing is automatically unfair under the LRA), and the commitment to investigate all reports promptly.
Section 34 PRECCA Reporting Duty
Specific procedures for complying with the mandatory section 34 reporting duty, which requires persons in positions of authority to report corrupt transactions involving R100,000 or more to the SAPS. Identifies who in the organisation bears this duty (directors, senior managers, the compliance officer), establishes the internal escalation process, sets out the timeframe for reporting, and documents the legal consequences of failure to report (imprisonment up to 10 years).
Consequences of Breach & Enforcement
Internal disciplinary consequences ranging from written warnings to summary dismissal depending on the severity of the breach. Addresses the employer's obligation to report criminal conduct to the SAPS, the personal criminal liability of individuals under PRECCA (imprisonment up to life for corruption involving contracts worth R100 million or more), the company's criminal liability for employee corruption, and the potential for civil recovery of losses from the perpetrator.
Training, Certification & Annual Compliance
Mandatory anti-corruption training for all employees with enhanced training for high-risk roles (procurement, government relations, finance, senior management). Annual certification by all employees that they have read, understood, and complied with the policy. Regular risk assessments to identify emerging corruption risks, and annual policy review to address legislative changes, enforcement developments, and lessons learned from internal investigations.
International Anti-Bribery Compliance
Additional provisions for South African companies with exposure to international anti-bribery legislation — the UK Bribery Act 2010 section 7 (failure to prevent bribery), the US Foreign Corrupt Practices Act (FCPA), and the OECD Anti-Bribery Convention. Addresses the concept of "adequate procedures" under the UK Bribery Act, extraterritorial jurisdiction, and the integration of South African compliance with international anti-corruption standards.
South African Law Compliance
Prevention and Combating of Corrupt Activities Act 12 of 2004
South Africa's primary anti-corruption statute. Section 3 criminalises the giving of gratification to an agent (bribery). Section 4 criminalises the receiving of gratification by an agent. Section 12 addresses corrupt activities relating to contracts. Section 13 addresses corrupt activities relating to procurement. Section 34 imposes a mandatory reporting duty on persons in positions of authority for corrupt transactions involving R100,000 or more — failure to report carries imprisonment of up to 10 years. Penalties for corruption offences range from fines to life imprisonment for the most serious offences involving contracts worth R100 million or more.
Companies Act 71 of 2008
Section 76 requires directors to exercise care, skill, and diligence — including implementing adequate anti-corruption controls. Section 77 imposes personal liability on directors for any loss, damage, or costs sustained by the company as a result of the director's breach of duty. Section 76(4) provides the "business judgment" defence, which requires the director to have taken reasonably diligent steps to become informed and to have had no personal financial interest. Maintaining a comprehensive Anti-Bribery Policy is a critical element of the section 76(4) defence.
Financial Intelligence Centre Act 38 of 2001
Requires accountable institutions to conduct customer due diligence (section 21), report suspicious transactions (section 29), and implement compliance programmes (section 42). Corruption proceeds are frequently laundered through financial systems, making FICA compliance integral to anti-corruption efforts. The anti-bribery policy supports FICA compliance by establishing internal controls, third-party due diligence, and reporting mechanisms that identify suspicious transactions linked to corruption.
Protected Disclosures Act 26 of 2000 (amended 2017)
Provides legal protection to employees who disclose information about corrupt activities in the workplace. Section 3 prohibits any occupational detriment against a whistleblower, including dismissal, demotion, harassment, and transfer. The 2017 amendments expanded the definition of "employee" and "occupational detriment" and increased the remedies available through the Labour Court, including compensation of up to 24 months' remuneration for unfair dismissal. The anti-bribery policy must establish protected reporting channels and guarantee these protections.
UK Bribery Act 2010 (extraterritorial application)
Section 7 creates a corporate offence of failure to prevent bribery by "associated persons" — employees, agents, subsidiaries, and joint venture partners. The only defence is "adequate procedures" to prevent bribery. The Act has extraterritorial reach: it applies to any body corporate that carries on business or part of a business in the UK, regardless of where the bribery occurred. South African companies listed on the LSE, with UK operations, or with UK clients may be subject to UK Bribery Act jurisdiction and should ensure their anti-bribery policy meets the UK "adequate procedures" standard.
South African businesses are lining up for My-Contracts — be first in when we launch
Create Your Anti-Bribery and Corruption Policy in Minutes
Our guided wizard walks you through every clause — no legal knowledge required. Attorney-drafted, South African law compliant.
Conduct a corruption risk assessment across the business
Before drafting or customising the policy, conduct a documented corruption risk assessment — this is a formal requirement of the UK Bribery Act 2010 Principle 3 "adequate procedures" defence and a practical necessity for calibrating the policy to your actual risks. Identify every interaction with government officials (licences, permits, customs, municipal approvals, tax authorities, state-owned enterprises), every use of agents, consultants, or intermediaries who act on your behalf, every high-corruption jurisdiction in which you operate, every high-risk sector interaction (construction, mining, pharmaceuticals, defence, infrastructure), and every function with spending authority (procurement, treasury, marketing, HR). Score each risk for likelihood and financial and reputational impact, and document the assessment methodology. This risk register drives the policy's specific controls and is your Principle 3 evidence.
Customise the policy to your risk profile and jurisdictions
Complete the template with your organisation's specific detail: gift and hospitality thresholds (typically R500 per item and R2,000 cumulative per source per year, with a hard zero for government officials), third-party due diligence procedures scaled by risk tier, the compliance officer's name and escalation contacts, industry-specific corruption scenarios to watch for, and — if applicable — your UK Bribery Act, US FCPA, or OECD Anti-Bribery Convention exposure profile. For companies listed on the JSE and the LSE, align the policy with both PRECCA and UK Bribery Act Principle 6. For accountable institutions under FICA, integrate the FICA suspicious transaction reporting workflow under Section 29 so that corruption red flags trigger both an internal investigation and a regulatory report to the Financial Intelligence Centre.
Obtain board approval and documented CEO sign-off
Present the completed policy to the board of directors for formal approval, and obtain the CEO's and board chairperson's signature on the zero-tolerance statement. The "tone from the top" is explicitly required by UK Bribery Act Principle 2 and is examined by courts, regulators, and B-BBEE verifiers as an indicator of genuine commitment. Record the approval in the board minutes with reference to the corruption risk assessment, the policy scope, the budget for compliance activities, and the compliance officer's appointment. Ensure the Section 34 PRECCA mandatory reporting duty is explicitly acknowledged by every director in writing — this is a key element of the Companies Act Section 76(4) business-judgment defence if corruption later occurs.
Train every employee and maintain annual certifications
Deliver mandatory anti-corruption training to every employee at induction and annually thereafter. The general training covers the definition of bribery and gratification, the absolute prohibition on facilitation payments, gifts and hospitality rules, reporting channels, whistleblower protection under the Protected Disclosures Act 26 of 2000, and the personal criminal consequences of corruption under PRECCA (including the Section 34 duty for persons in authority). High-risk roles — procurement, government relations, finance, sales to government, senior management — receive enhanced training including third-party due diligence, red-flag recognition, interaction protocols with public officials, and refusal-of-facilitation-payment scenarios. Require every employee to certify annually in writing that they have read, understood, and complied. Retain the training attendance records and certifications for at least seven years.
Implement third-party due diligence across every relationship
Agents, consultants, joint venture partners, and suppliers who interact with government officials on your behalf are the primary vector for corruption exposure. Implement a tiered due diligence programme. For low-risk third parties (routine suppliers in low-corruption categories), collect basic identification, FICA verification, and a signed anti-corruption representation. For medium-risk third parties, add ownership verification, PEP screening against sanctions lists, and background checks. For high-risk third parties (those interacting with government officials, PEPs, or operating in high-corruption jurisdictions), conduct enhanced due diligence including site visits, reputation checks, and detailed source-of-funds verification. All third-party contracts must include anti-corruption representations, audit rights, immediate termination for corruption breaches, and an obligation to maintain equivalent controls.
Activate reporting channels and the Section 34 workflow
Procure a genuinely independent external ethics hotline operated by a specialist provider (24/7, multilingual, telephone and online, with anonymous option), and publish the reporting channels prominently — email to the compliance officer, online portal, anonymous hotline number, and an external reporting address for matters involving senior management. Build a formal Section 34 PRECCA workflow: when an investigation reveals a corrupt transaction of R100,000 or more, the compliance officer escalates within 48 hours to the directors and senior managers in positions of authority, who must report to the SAPS (not merely to internal compliance) within a reasonable time. Document every decision in the workflow so that the Section 34 duty is visibly discharged — silence is a 10-year imprisonable offence.
Monitor, audit, and review the policy annually
Establish the gifts register, implement third-party due diligence procedures, configure financial controls (segregation of duties, dual approvals for payments above thresholds, analytics flags for unusual patterns, petty cash reconciliation), and schedule internal audits focused on high-risk transactions (government payments, consultant fees, marketing and hospitality spend). Every quarter, the compliance officer reports to the audit committee on gifts register volume and outliers, hotline activity, third-party due diligence status, and any Section 34 reports made. Conduct an annual policy review covering PRECCA amendments, UK Bribery Act enforcement developments (SFO cases are instructive), and lessons from internal investigations. Update the risk assessment and re-train employees on any policy changes.
Frequently Asked Questions
Under PRECCA, bribery specifically refers to the giving (section 3), offering, soliciting, or receiving (section 4) of "gratification" to improperly influence someone's actions. "Gratification" is defined extraordinarily broadly under section 1 to include money, gifts, loans, fees, rewards, valuable security, property, employment, contracts, services, favours, and any other advantage. Corruption is a broader concept encompassing bribery, fraud, extortion, embezzlement, trading in influence, and abuse of power for private gain. PRECCA treats both public sector and private sector bribery as criminal offences with identical penalties — there is no distinction in severity based on whether the bribe involves a government official or a private party.
This anti-bribery and corruption policy page answers
- PRECCA section 34 mandatory reporting duty
- UK Bribery Act adequate procedures South Africa
- facilitation payments legal in South Africa
- Companies Act section 77 director liability corruption
- gift and hospitality threshold anti-bribery policy
- third-party due diligence agents corruption
- whistleblower protection corruption South Africa
- State Capture PRECCA prosecution
- debarment from government tenders corruption
- King IV ethics and anti-corruption
Terms used in this Anti-Bribery and Corruption Policy
Definitions, statutory basis, and cross-links to every template that uses each term.
What You Get With This Template
Drafted specifically for South African law — addresses PRECCA section 34 reporting duty, Companies Act director liability, and the Protected Disclosures Act in a single comprehensive policy
Includes specific provisions for UK Bribery Act "adequate procedures" compliance for South African companies with international exposure
Absolute facilitation payment prohibition with practical guidance for employees on refusing demands and escalation procedures
Comprehensive third-party due diligence framework covering agents, consultants, joint venture partners, and suppliers
Multiple reporting channels including anonymous hotline, with full whistleblower protection guaranteed under the Protected Disclosures Act
Gift and hospitality thresholds with register requirements, proportionality standards, and government official restrictions
Record-keeping and financial control provisions that create an auditable trail for anti-corruption compliance
Annual certification and training requirements establishing the "reasonable steps" defence under PRECCA