Legal requirements for a South African business are the obligations imposed by legislation on how it is formed, how it operates and how it treats employees, customers and the public. They apply from the moment the business exists, regardless of size or turnover.
The most common misconception is that legal obligations scale with size. Many do not: employment law, consumer protection, data protection and health and safety apply to small businesses in substantially the same way as to large ones.
Business Requirements at a Glance
The core legal obligations for a South African business are as follows.
- Company law: registration, annual returns, statutory records and directors duties
- Tax: registration and filing with SARS, including VAT where the threshold is met
- Employment law: contracts, minimum wage, hours, leave, and fair dismissal procedures
- Employee registrations: PAYE, UIF and the Compensation Fund where you employ people
- Occupational health and safety obligations
- Consumer protection obligations where you sell to consumers
- Data protection under POPIA where you process personal information
- Sector-specific licensing, such as liquor, food or financial services
Registration and Legal Requirements
Registration creates the entity and triggers company law obligations. Directors carry statutory duties and, in defined circumstances, personal liability.
Employment obligations arise from the first employee, not from a threshold. Written particulars of employment, minimum wage compliance and leave entitlements all apply immediately.
Documents and Ownership Information Required
Maintain the documents that evidence compliance: statutory registers, employment contracts, records of hours and leave, health and safety risk assessments, and your POPIA documentation.
In a dispute or an inspection, the absence of records is treated as the absence of compliance. Records are the practical form compliance takes.
Tax, Licence and Compliance Requirements
POPIA applies to almost every business that holds customer or employee information, and it requires security safeguards, lawful processing and breach notification. Small businesses are not exempt.
Consumer protection legislation governs your terms, your marketing and your returns and refunds obligations where you sell to consumers.
Sector licensing sits on top of all of this and differs entirely by what you do.
Process, Deadlines and Ongoing Obligations
Establish which obligations actually apply to your business and build a compliance calendar around the recurring ones. Most failures are administrative rather than deliberate.
Take advice where the consequences are significant, particularly on employment matters and on sector licensing. See statutory requirements for the statutory filing side.
This page is general information and not legal or tax advice. Confirm current thresholds, rates and requirements with SARS or a registered tax practitioner, since they change with each budget.
Frequently Asked Questions
Do legal requirements apply to small businesses?
Yes. Employment law, consumer protection, data protection and health and safety apply to small businesses in substantially the same way as to large ones.
When do employment obligations start?
From the first employee. Written particulars, minimum wage compliance and leave entitlements apply immediately.
Does POPIA apply to my business?
It applies to almost every business holding customer or employee information. Small businesses are not exempt.
What happens if I have no records?
In a dispute or inspection, absence of records is treated as absence of compliance. Records are the practical form compliance takes.
Confirm your obligations with CIPC, SARS, the Department of Employment and Labour and any sector regulator. This page is general information and not legal or tax advice. Confirm current thresholds, rates and requirements with SARS or a registered tax practitioner, since they change with each budget. Browse all business and compliance requirements.