Legal & Risk: What Businesses Need to Watch
2026-06-16
This week’s headlines highlight two critical legal and compliance risks that South African and UK businesses must address: state overreach in energy sector contracts and AI liability in global tech operations. These issues often appear in economic news but demand legal scrutiny to avoid operational and reputational risks.
As detailed in “Curtailment, conflicts of interest and cash flow: Eskom’s tightening grip on IPPS” (Moneyweb), Eskom’s growing control over Independent Power Producers (IPPs) raises red flags for private sector players. IPPs face curtailment, cash flow disputes, and regulatory overreach, often tied to Eskom’s dominant position in the power sector.
Legal Angle: Businesses operating under IPP agreements must audit their contracts for unambiguous terms on curtailment, revenue allocation, and dispute resolution. While Eskom’s actions may not directly trigger POPIA (Protection of Personal Information Act 4 of 2013) or the Labour Relations Act 66 of 1995, they highlight the risks of state intervention in private contracts, which could lead to enforceability issues or unexpected liabilities under SA’s Contracts Act 11 of 1965. A key risk is conflict of interest clauses—if IPPs lack clear governance terms to prevent Eskom from prioritizing its own interests, this could result in invalidated agreements or forced renegotiation.
Compliance Action: Review all IPP agreements for clauses that limit Eskom’s authority to curtail supply or alter revenue terms without mutual consent. Ensure compliance with SA’s Companies Act 71 of 2008 for disclosure requirements if Eskom’s control influences corporate governance.
The UK court ruling in “Google on the hook for what its AI tells users, court rules” (TechCentral) has far-reaching implications. The ruling holds Google accountable for AI-generated content, even if summaries are “mostly accurate.” This marks a shift toward holding developers liable for AI outputs in jurisdictions with robust AI regulations.
Legal Angle: For businesses using AI tools, the ruling underscores the need for transparency, data integrity safeguards, and liability clauses in service agreements. In the EU, the AI Act (2024) already mandates high-risk AI systems to undergo strict compliance, including transparency reporting. While South Africa lacks a specific AI law, POPIA could apply if AI systems process personal data inaccurately, triggering reporting obligations. UK businesses must also align with UK GDPR if AI outputs involve personal data.
Compliance Action: Audit AI tool usage for accuracy guarantees, data protection compliance, and include disclaimer clauses in vendor contracts to clarify liability boundaries.
The potential nationalization of Thames Water (The Guardian) signals increased government scrutiny of utilities. While not a direct legal issue for non-UK firms, it highlights contractual risks for businesses operating in regulated sectors.
Compliance Action: Review contracts with UK public utilities for clauses allowing state intervention. Ensure UK GDPR compliance if handling personal data, as nationalization could alter data governance frameworks.
**
** The AI liability ruling’s broader implications for global AI usage (outside UK/EU) require qualified legal advice. Similarly, the exact regulatory impact of Eskom’s state control on private-sector agreements needs deeper analysis under SA law.