Legal requirements for a South African business are the obligations the law places on how it is formed, taxed, staffed and run. They cover company law, tax, employment, data protection, consumer protection and, depending on what you do, sector licences. Many of them apply to small businesses in substantially the same way as to large ones.
This page is the overview. It names each area, gives the current figures where an official source publishes them, and points you to the authority that sets the rule. For the step-by-step sequence, see the guide on legal requirements for starting a small business.
Business Requirements at a Glance
The core legal obligations for a South African business are:
- Company law: registration with the CIPC, an annual return, beneficial ownership information and statutory records
- Tax: registration and filing with SARS, including VAT once your taxable supplies pass the compulsory threshold
- Employment law: contracts, the national minimum wage, hours, leave and fair dismissal procedures
- Employee registrations: PAYE, UIF and the Compensation Fund where you employ people
- Occupational health and safety obligations
- Consumer protection obligations where you sell to consumers
- Data protection under POPIA where you process personal information
- Sector-specific licensing, such as liquor, food or financial services
Registration and Legal Requirements
Registering a company is done through the CIPC’s BizPortal portal. BizPortal advertises new company registration at R125 without a name and R175 including a name, with no documentation required. Registration creates the entity and triggers company law obligations, and directors carry statutory duties.
Employment obligations arise from the first employee, not from a size threshold. Written particulars of employment, minimum wage compliance and leave entitlements apply immediately.
Employment equity depends on size. Under the Employment Equity Amendment Act, employers with fewer than 50 employees are non-designated and no longer submit EE reports, while designated employers with 50 or more employees must align their EE plans with the five-year sector targets, as set out by the Department of Employment and Labour.
Documents and Ownership Information Required
Keep the documents that evidence compliance: statutory registers, employment contracts, records of hours and leave, health and safety risk assessments, and your POPIA documentation.
Companies must also keep beneficial ownership information current. The CIPC requires the annual return, the beneficial ownership declaration and the securities or beneficial interest register to be filed each year within 30 business days after the incorporation anniversary. An entity that has not met the beneficial ownership requirement cannot finalise its annual return and risks penalties or deregistration.
In a dispute or an inspection, missing records are treated as missing compliance.
Tax, Licence and Compliance Requirements
VAT: from 1 April 2026, compulsory VAT registration applies when your taxable supplies exceed R2.3 million in any consecutive 12 months, up from R1 million. The voluntary registration threshold is R120 000, up from R50 000 (see the SARS Budget 2026 FAQ, or SARS’s page on how to register for VAT).
Employees: the national minimum wage is R30,23 per hour from 1 March 2026, up from R28,79. UIF contributions are 1% from the employee and 1% from the employer, 2% in total, subject to a monthly earnings ceiling of R17 712. The Skills Development Levy is 1% of total salaries; it applies once you expect total salaries over the next 12 months to exceed R500 000.
POPIA: an information officer must be registered with the Information Regulator before assuming duties. Small businesses are not exempt.
Consumer protection: under the Consumer Protection Act 68 of 2008, a consumer may rescind a direct-marketing transaction without reason or penalty within five business days after the later of the date the transaction was concluded or the goods were delivered (section 16(3)). Within six months of delivery, a consumer may return goods that fail the quality standards without penalty, and the supplier must repair, replace or refund at the consumer’s direction (section 56(2)).
Sector licences sit on top of all this and differ by what you do. Confirm them with the relevant regulator or your municipality before you trade.
Process, Deadlines and Ongoing Obligations
Work out which obligations apply to your business and build a compliance calendar around the recurring ones: the CIPC annual return and beneficial ownership filing, SARS returns and payments, and any licence renewals. Most failures are administrative rather than deliberate.
Take advice where the consequences are significant, particularly on employment matters and sector licensing. See statutory requirements for the statutory filing side.
Frequently Asked Questions
What are the legal requirements for a business in South Africa?
Company registration, tax registration and filing, employment compliance if you hire, data protection under POPIA, consumer protection where you sell to the public, and any sector licence your activity needs.
Do legal requirements apply to small businesses?
Yes. Employment law, consumer protection, data protection and health and safety apply to small businesses in substantially the same way as to large ones. Employment equity reporting is the main area that depends on size.
When do employment obligations start?
From the first employee. Written particulars, minimum wage compliance and leave entitlements apply immediately.
When must I register for VAT?
Registration is compulsory when taxable supplies exceed R2.3 million in any consecutive 12 months (from 1 April 2026). You may register voluntarily from R120 000.
Does POPIA apply to my business?
It applies to almost every business holding customer or employee information. Register your information officer with the Information Regulator.
What happens if I have no records?
In a dispute or inspection, missing records are treated as missing compliance. Records are the practical form compliance takes.
Confirm your obligations with the CIPC, SARS, the Department of Employment and Labour and any sector regulator, since thresholds and rates change. This page is general information, not legal or tax advice. See company registration requirements and browse all business and compliance requirements.