The obligations a South African business carries are not the same for every business. They scale with what you do, how much you turn over, whether you employ people and which sector you operate in — and the single most useful thing is to know which of them apply to you.
This page maps the obligations by trigger: what applies to every business, what applies once you employ, what applies at turnover thresholds, and what applies by sector.
Business Requirements at a Glance
What applies to essentially every business.
- A lawful legal form — sole proprietor, company, partnership, trust or co-operative
- SARS income tax registration and annual returns, with provisional tax for most
- Accurate accounting records, which the Companies Act and Tax Administration Act both require
- Municipal zoning permitting the activity at the premises
- Compliance with the Consumer Protection Act, where you sell to consumers
- Compliance with the Protection of Personal Information Act, if you hold personal information
- For companies: CIPC annual returns and a filed beneficial ownership register
Registration and Legal Requirements
Once you employ anyone, a substantial set of obligations attaches immediately — from the first employee, not from the tenth.
You must provide written particulars of employment under the Basic Conditions of Employment Act. You must register for UIF and contribute. You must register with the Compensation Fund under COIDA and obtain a letter of good standing. You must register for PAYE where earnings exceed the threshold, and file monthly employer declarations and an annual reconciliation.
You must comply with any sectoral determination or bargaining council agreement covering your industry, which set minimum wages and conditions that override your own arrangements. The National Minimum Wage Act applies regardless.
You take on occupational health and safety duties under OHSA, including risk assessments, training and, above employee thresholds, health and safety representatives and a committee.
Employers above prescribed thresholds also carry employment equity obligations, including a plan and annual reporting, and skills development levy obligations.
Documents and Ownership Information Required
The document set a business is asked for repeatedly — by banks, clients, funders and tenders.
- CIPC registration documents and a current company profile
- Memorandum of incorporation
- Identity documents and proof of address for directors, members or owners
- Beneficial ownership information as filed with the CIPC
- SARS tax compliance status PIN
- VAT registration certificate, where registered
- Business bank account confirmation letter
- Letter of good standing from the Compensation Fund
- B-BBEE certificate or affidavit
- Latest annual financial statements
- Sector licences and professional registrations
- Proof of insurance, where clients require it
Tax, Licence and Compliance Requirements
Turnover thresholds trigger obligations. VAT registration becomes compulsory above the prescribed annual turnover threshold. Audit or independent review requirements under the Companies Act depend on a public interest score. B-BBEE treatment differs by turnover band, with the smallest businesses able to use an affidavit rather than a verified certificate.
Confirm the current thresholds with SARS and the CIPC rather than working from remembered figures — they are revised.
Sector obligations are where businesses are most often caught out. Financial services require FSCA authorisation. Credit provision requires NCR registration. Security services require PSIRA registration. Construction requires cidb registration. Food businesses require a certificate of acceptability. Liquor requires a provincial licence. Health facilities require Department of Health licensing. Each carries its own renewals and inspections.
Contracts and consumer law matter more than small businesses expect. The Consumer Protection Act regulates unfair terms, marketing, quality and returns, and applies to most transactions with consumers and small businesses. Standard terms that do not comply are unenforceable.
Protection of Personal Information Act obligations include a lawful basis for processing, security safeguards, an information officer, and notification of security compromises. It applies to employee data as much as customer data.
Process, Deadlines and Ongoing Obligations
Do an obligations audit once, properly, listing what applies to you by trigger, and build the renewal and filing dates into a calendar. Most compliance failures in small businesses are omissions rather than refusals.
Review it whenever something changes — the first employee, crossing the VAT threshold, adding a new activity, or opening a second premises. Each of those can trigger obligations that did not previously apply.
- List your obligations by trigger: universal, employment, turnover, sector
- Confirm current thresholds with SARS and the CIPC rather than assuming
- Identify sector regulators for your specific activity
- Register as an employer before the first employee starts
- Check whether a sectoral determination or bargaining council covers you
- Keep the tax compliance status and letter of good standing current
- Review your obligations whenever the business changes
- Use free support from SEDA and your provincial development agency
Frequently Asked Questions
Which obligations apply from day one?
A lawful legal form, SARS registration and returns, proper accounting records, municipal zoning, and consumer and data protection compliance where relevant. CIPC annual returns apply to companies.
What changes when I hire my first employee?
A substantial set: written employment particulars, UIF, Compensation Fund registration, PAYE where applicable, minimum wage and any sectoral determination, and occupational health and safety duties.
When does VAT registration become compulsory?
Above the prescribed annual turnover threshold. Confirm the current figure with SARS rather than relying on a remembered number.
How do I know which sector regulator applies?
Identify what your activity is regulated as — financial services, credit, security, construction, food, liquor or health — and confirm with that regulator directly.
Obligations, thresholds, licences and reporting deadlines are set across several statutes and regulators and are revised. Confirm current requirements with SARS, the CIPC, the Department of Employment and Labour and your sector regulator.