Compliance & Regulatory
Buslyft is committed to full regulatory compliance across transport law, data protection, financial services, and corporate governance. Here is how we meet and exceed South African legislation.
Live compliance overview
National Land Transport Act
The NLTA (Act 5 of 2009) is the primary legislation governing public transport in South Africa. It requires all e-hailing operators and drivers to hold valid operating licences, meet vehicle safety standards, and comply with fare regulations.
- All drivers hold valid e-hailing operating licences
- Vehicles meet prescribed roadworthiness standards
- Fares comply with provincial fare guidelines
- Driver conduct code enforced via the platform
- Regular compliance audits conducted by our team
- Non-compliant drivers suspended automatically
PRE Licensing
Provincial Regulatory Entities (PREs) issue e-hailing operating licences in each province. Buslyft verifies every driver's PRE licence before they can accept rides and continuously monitors licence validity.
- Licence verified at onboarding via PRE database
- Real-time licence status monitoring
- Automatic suspension on licence expiry
- Support provided for licence renewal applications
- Quarterly compliance re-verification cycle
Regulatory approvals by province
Buslyft holds or is in the process of obtaining operating approvals in all nine provinces of South Africa.
| Province | PRE | Licence No. | Since | Status |
|---|---|---|---|---|
| Gauteng | GPRE | GP-EH-2022-00841 | 2022 | Active |
| Western Cape | WCPRE | WC-EH-2023-00312 | 2023 | Active |
| KwaZulu-Natal | KZNPRE | KZN-EH-2023-00187 | 2023 | Active |
| Eastern Cape | ECPRE | EC-EH-2024-00094 | 2024 | Active |
| Free State | FSPRE | FS-EH-2022-00056 | 2022 | Pending renewal |
| Limpopo | LPRE | — | — | Application in progress |
| Mpumalanga | MPRE | MP-EH-2024-00038 | 2024 | Active |
| North West | NWPRE | — | — | Application in progress |
| Northern Cape | NCPRE | — | — | Application in progress |
POPIA — Protection of Personal Information Act
Buslyft is fully compliant with POPIA (Act 4 of 2013). We are registered with the Information Regulator of South Africa and have appointed a dedicated Information Officer responsible for overseeing data protection across all business units.
Data Minimisation
We collect only the personal information strictly necessary to provide and improve our services. No unnecessary profiling.
Encryption
All personal data is encrypted in transit using TLS 1.3 and at rest using AES-256. Keys are rotated on a quarterly cycle.
Transparency
You can view, export, or request deletion of your data at any time via Account > Settings > Privacy in the app.
Data Subject Rights
We honour access, correction, objection, and deletion requests within 30 days as required under POPIA and GDPR.
Cross-Border Transfers
International data transfers are governed by standard contractual clauses approved by the EU Commission and POPIA Section 72.
Breach Notification
In the event of a data breach, we notify affected persons and the Information Regulator within 72 hours as required by law.
Information Officer: Privacy enquiries and data subject requests can be directed to our Information Officer at privacy@buslyft.co.za or by post to: Information Officer, Buslyft (Pty) Ltd, 3rd Floor, 138 West Street, Sandton, 2196.
Corporate registrations
CIPC Registration
Buslyft is registered with the Companies and Intellectual Property Commission as a private company under the Companies Act, 2008.
FSCA Registration
The Buslyft Wallet and in-app payment facilitation are operated under a Category I Financial Services Provider licence issued by the Financial Sector Conduct Authority.
B-BBEE Certificate
Buslyft is committed to Broad-Based Black Economic Empowerment and is verified annually by an accredited B-BBEE verification agency.
Driver compliance
Every Buslyft driver undergoes a rigorous verification process before activation and is subject to continuous monitoring throughout their time on the platform. Our compliance framework exceeds the minimum standards set by the NLTA.
Policies & legal summaries
Click any section to read the summary. Full legal documents are available for download below.
Regulatory documents
Download official compliance documents, policies, and certificates.
NLTA Compliance Certificate
Current National Land Transport Act compliance certificate issued by the Department of Transport.
POPIA Privacy Policy
Full privacy policy detailing how we collect, process, store and protect personal information.
Driver Code of Conduct
Behavioural standards, expectations, and disciplinary process for all Buslyft drivers.
Vehicle Safety Standards
Minimum vehicle requirements and mandatory roadworthiness inspection criteria.
B-BBEE Certificate
Current Broad-Based Black Economic Empowerment verification certificate.
Data Processing Agreement (DPA)
Template DPA for business clients processing personal data via the Buslyft platform.
Whistleblower & Anonymous Reporting Hotline
Buslyft is committed to ethical conduct. If you have knowledge of fraud, corruption, driver misconduct, data breaches, regulatory violations, or any other wrongdoing, you can report it anonymously through our confidential hotline. Reports are investigated by our independent compliance committee.
Compliance contacts
Compliance FAQs
Questions about compliance?
Our legal and compliance team is here to help with any regulatory queries.