South Africa: Why AI is a boardroom liability under the new King V framework

With South African businesses deploying AI at scale for everything from credit scoring to dynamic pricing, boards are celebrating ‘innovation’ while sitting on a governance timebomb. Corporate expert Lebogang Molebale of CMS South Africa explores the nuances of AI oversight now being a direct fiduciary duty under King V

OPINION

King V reframes corporate governance as a competitive necessity, embedding ESG factors and integrated thinking at the heart of board decision-making. The question boardrooms across South Africa are now facing is what this framework demands in practice when it comes to overseeing artificial intelligence (AI).

The answer is more consequential than many organisations have yet recognised. 

AI deployment in South Africa's finance and retail sectors is accelerating rapidly and moving from experimentation into core business processes. South African banks are deploying AI for credit scoring, fraud detection, and customer engagement at scale, while retailers are using algorithmic pricing, demand forecasting, and personalised marketing as standard commercial tools. 

Globally, the IMF has warned that AI could affect 40% of jobs worldwide, with financial services among the most exposed sectors. These are no longer experimental deployments. They are operational systems making consequential decisions about people's financial lives, and they sit squarely within the governance obligations King V imposes on every South African board effective 1 January 2026.

The framework is unambiguous. King V positions technology governance as a core component of board accountability, requiring oversight mechanisms for decisions influenced or made by AI systems. What this means in practice is that technology can no longer be treated as an operational matter delegated entirely to technical teams and revisited only when something goes wrong. 

It has become a fiduciary duty.

From functional silo to fiduciary duty

The shift King V demands is structural. Boards have historically received technology updates as operational briefings, reviewing cybersecurity incidents or system upgrades as items of information rather than strategic accountability. King V ends that arrangement and places boards at the centre of direction-setting, policy approval, oversight and accountability. 

Where AI systems are influencing credit decisions in financial services or determining pricing in retail, the board must be able to demonstrate integrated thinking: an active understanding of how those systems work, what risks they carry, and how their outcomes align with the organisation's stated values and its obligations to stakeholders.

The legal exposure this creates is significant. South Africa's Protection of Personal Information Act (POPIA) already imposes strict obligations around automated decision-making and data processing, and the Consumer Protection Act provides further grounds for challenge where algorithmic outputs produce unfair outcomes. 

When an algorithm produces a biased lending outcome or a discriminatory pricing structure, the board cannot claim ignorance. Under the framework, boards are required to report on how technology risks were identified and assessed, what governance structures exist to oversee AI deployment, how outcomes were monitored against the organisation's stated values, and where material failures occurred and what remediation followed. These disclosures appear in the integrated report, a document that is public-facing and scrutinised by investors, regulators and civil society alike. 

Critically, King V requires boards to explain the quality of their governance processes, not simply confirming that processes exist. A board that cannot demonstrate active, structured oversight of its AI systems, including documented risk categorisation, bias testing protocols and human oversight mechanisms, will find that absence of evidence becomes evidence of failure. The question boards must now ask is whether their current oversight structures are genuinely adequate for that responsibility, and whether they could withstand the scrutiny that King V's reporting obligations now invite.

Responsible AI as a governance instrument

One practical and increasingly necessary response is the adoption of a formal Responsible AI Statement, a public-facing document approved at board level that sets out the organisation's position on data privacy, algorithmic transparency and human-in-the-loop requirements. This is not a communications exercise. It is a governance instrument that operationalises King V's principle of ethical leadership by making the board's accountability explicit and auditable.

A credible Responsible AI Statement addresses several interlocking questions. Which AI applications does the organisation deploy, and how are they categorised by risk level? What testing and bias auditing takes place before deployment and on an ongoing basis? Where does human oversight sit in the decision chain, and under what circumstances can an algorithmic output be reviewed or overridden? How are affected individuals informed and given recourse? 

The World Economic Forum's AI Governance Alliance has provided a widely referenced framework for exactly this kind of structured disclosure, and leading organisations are increasingly integrating responsible AI commitments into executive contracts and performance frameworks, making individual accountability traceable.

Building the foundation that allows innovation to scale

The concern boards sometimes express is that rigorous AI governance will slow deployment and erode competitive advantage. The evidence points in the opposite direction : effective governance is what allows organisations to pursue opportunities while remaining within their risk appetite and preserving trust, resilience and legitimacy. 

Research from MIT Sloan has demonstrated that organisations with mature AI governance frameworks achieve higher rates of successful AI implementation and greater stakeholder trust, precisely because structured oversight identifies failure modes before they become costly. In South Africa's financial sector, where consumer trust is both fragile and foundational to growth, the reputational cost of a high-profile algorithmic failure would far exceed any efficiency gained by moving fast without adequate oversight.

King V provides the architecture for getting this right. 

Boards that invest now in genuine AI literacy, clear governance frameworks, public accountability through Responsible AI Statements, and embedding these commitments into executive accountability structures are building the conditions under which innovation can scale safely and sustainably, and will be better placed to use AI in a way that advances performance and value creation while supporting prudent control and legitimacy. That is the argument King V makes, and it is one that the pace of AI adoption in South Africa makes increasingly urgent to act on.