Search legal guides

Search MJ Kotze Inc legal guides and articles

Trading & compliance

Tax and Employer Registrations After You Incorporate in South Africa [2026]

Income tax and the public officer, PAYE, UIF, SDL, COIDA, VAT and customs — every registration a new South African company needs, with deadlines.

Published Last reviewed 13 min read

Written by

Martin Kotze

Attorney, Conveyancer & Notary Public

Quick answer

At incorporation: what is automatic, and what is immediately due

Whether you incorporated a local subsidiary or registered an external company (branch), the registration work does not end when the Companies and Intellectual Property Commission (CIPC, the South African companies registry) issues your registration certificate. Three things happen — or must happen — on day one. Figures last reviewed 16 July 2026.

1. Your income-tax number arrives automatically

The South African Revenue Service (SARS) has a direct interface with CIPC: when the company is incorporated, SARS automatically generates an income tax reference number. There is no separate corporate income-tax registration to file. The company is also automatically a provisional taxpayer, which drives the twice-yearly IRP6 payment deadlines in the calendar below. Rates and structuring live on the corporate tax page.

2. Appoint the public officer — there is no grace period

Every company must appoint a public officer (SARS calls the role the registered representative): a natural person resident in South Africa who is a senior official of the company. Since 24 December 2024, when the Tax Administration Laws Amendment Act 43 of 2024 amended section 246 of the Tax Administration Act 28 of 2011, the appointment is due at formation — the old one-month window was deleted. If no appointment is made, a statutory default hierarchy applies (managing director, then financial director, then company secretary, and so on), or SARS may itself designate a suitable person.

This is the single most-missed step for foreign-owned companies, and the most expensive to miss: until the representative is activated on eFiling (SARS aims to finalise activations within 21 business days), the company effectively cannot transact with SARS — no VAT registration, no employer registration, no refunds, no tax clearance. Who can hold the role, and what to do when nobody in the group lives in South Africa, is covered in resident directors and the public officer.

3. File beneficial ownership with CIPC within 10 business days

New companies must file a beneficial-ownership (BO) declaration with CIPC within 10 business days of incorporation, disclosing the natural persons who ultimately own or control 5% or more of the company — for a foreign-owned group, that means mapping the chain of ownership all the way up to individuals. Updates are due within 10 business days of any change, and the declaration is re-confirmed with every annual return. Prepare the group structure chart and certified identity documents of the ultimate owners before incorporation — the practicalities are covered in company registration for foreigners and the wider regime in our beneficial-ownership guide.

Before you start trading

Bank account

You will need a South African bank account for almost everything that follows — VAT registration for non-resident-owned applicants generally requires one, and SARS refunds are paid only into a verified local account. Bank onboarding for foreign-owned companies is a Financial Intelligence Centre Act (FICA — South Africa's anti-money-laundering law) verification exercise on the offshore shareholders and beneficial owners, and it is the step that most often delays a market entry. Start it on day one: see opening a business bank account and our FICA guide.

VAT — compulsory above R2.3 million, voluntary from R120 000

Value-added tax (VAT) registration is compulsory once taxable supplies exceed (or will contractually exceed) R2.3 million in any 12-month period — a threshold that rose from R1 million on 1 April 2026. The application must be made within 21 business days. A business below the threshold may register voluntarily once past-12-month supplies exceed R120 000 — most inbound groups do this early to recover input VAT on setup costs.

Source — the actual words

It is compulsory for a person to register for VAT if the value of taxable supplies made or to be made, is in excess of R2.3 million in any consecutive 12 month period.

SARS — Register for VAT, “Register for VAT” guidance (updated 17 June 2026)Read it on SARS

Non-resident practicalities — the South African-resident representative vendor required by section 46 of the VAT Act, the local bank account, and the separate regime for foreign suppliers of electronic services — are dealt with in VAT for foreign companies.

Customs — if you move goods

Importers and exporters register through SARS's Registration, Licensing and Accreditation (RLA) system on eFiling for importer/exporter codes. SARS's stated service level is 5 days; practitioners report one to two weeks or longer in practice. One rule catches foreign groups: a non-resident (foreign) principal cannot self-register — it must appoint a South African registered agent (a clearing agent does not qualify) and register through a Customs branch, which is why most groups make the South African entity the importer of record.

First hires: PAYE, UIF, SDL and COIDA

The moment you employ someone in South Africa, four registrations stack up on two clocks — one at SARS, one at the Department of Employment and Labour (DoEL).

Register as an employer with SARS — within 21 business days

One application (form EMP101e on eFiling) registers the company for all three payroll taxes: Pay-As-You-Earn (PAYE, employee income tax withheld at source), Unemployment Insurance Fund (UIF) contributions, and the Skills Development Levy (SDL).

Source — the actual words

According to law, an employer must register with the South African Revenue Service (SARS) within 21 business days after becoming an employer, unless none of the employees are liable for normal tax.

SARS — Pay-As-You-Earn (PAYE), “Registering” (Income Tax Act, Fourth Schedule)Read it on SARS
  • UIF is 1% employer + 1% employee of remuneration, capped at R17 712 per month. SARS collects the money with PAYE — but the employee declarations (form UI-19) go separately to the UIF at the DoEL, monthly by the 7th, via uFiling. Register on the Labour side too; without the declarations, employees cannot claim benefits.
  • SDL is 1% of payroll, payable only once annual remuneration will exceed R500 000 annual payroll. The levy flows to a Sector Education and Training Authority (SETA) matched to your industry code.
  • The monthly rhythm starts immediately: the EMP201 return and payment are due within 7 days after each month end, alongside the UI-19.

COIDA — within 7 days of commencing business

The Compensation for Occupational Injuries and Diseases Act 130 of 1993 (COIDA) is South Africa's statutory workers'-compensation scheme — private insurance does not replace it. Under section 82(1A), an employer commencing business must furnish the Compensation Commissioner with a return of estimated earnings within 7 days of commencement (DoEL guidance applies this from the first hire). Thereafter an annual Return of Earnings is filed each season (earnings assessed up to a cap of R668 000 per year per employee from 1 March 2026), and paying the resulting assessment keeps the company's Letter of Good Standing current. That letter matters commercially: mines, construction sites, factories and many private counterparties will not let your staff on site — or sign your contract — without it. Mining/metals and construction employers register with a licensed mutual (Rand Mutual Assurance or FEM) instead of the Fund.

Employment terms, dismissal law and the other duties that arrive with the first hire are covered in employment law essentials; visas for relocating founders and staff in work visas and immigration.

Sector licences — and killing the municipal-licence myth

South Africa has no general business licence. What it has is a short municipal list and a layer of sector regulators. Start with the trigger-list: if none of these describes you, no licence stands between incorporation and trading.

If you do this…RegulatorWhat you need
Lend money or extend credit under the National Credit ActNCR (National Credit Regulator)Credit-provider registration — the threshold is nil, so it can catch even some intra-group lending into South Africa
Give financial advice or intermediary services, distribute insurance, manage assets, or provide crypto-asset servicesFSCA (Financial Sector Conduct Authority)A financial services provider (FSP) licence, with fit-and-proper key individuals — budget months, not weeks
Provide telecoms or broadcasting servicesICASA (Independent Communications Authority of South Africa)Class-licence registration or an individual licence; ownership and control rules apply — check before structuring
Provide private security servicesPSiRA (Private Security Industry Regulatory Authority)Registration of the business and all executives; the sector is heavily restricted for foreign-controlled companies (a 2014 Amendment Act restricting foreign ownership was signed in 2021 but had not been brought into force as at mid-2026)
Manufacture or distribute medicines, medical devices or health productsSAHPRA (South African Health Products Regulatory Authority)Product registration plus site licences for manufacture, wholesale or distribution
Bid for public-sector construction workCIDB (Construction Industry Development Board)Contractor registration and grading (levels 1–9)
Make, distribute or sell liquorNational Liquor Authority (the dtic) / provincial liquor boardsNational licence for macro-manufacture and distribution; provincial licence for retail and on-consumption

(The dtic is the Department of Trade, Industry and Competition. Manufacturers establishing a site should also check whether any listed activity under the National Environmental Management Act (NEMA) requires environmental authorisation before construction begins.)

The municipal “business licence” myth

A persistent piece of folklore says every South African business needs a municipal trading licence. It does not. Under the Businesses Act 71 of 1991, a licence is required only for the short list of businesses in Schedule 1:

Source — the actual words

The carrying on of business by the sale or supply to consumers of— (a) any foodstuff in the form of meals for consumption on or off the business premises; or (b) any perishable foodstuff.

Note — Item 2 of Schedule 1 adds the remaining licensed trades: saunas and health baths, massage, escort agencies, three or more gaming machines, three or more snooker tables, night clubs and discotheques, cinemas and theatres, and adult premises. Food hawking is also listed. Nothing else on the statute book requires a general municipal licence to trade.

Businesses Act 71 of 1991, Schedule 1, item 1(1)Read it on LawLibrary

So a software company, a distributor or a consultancy needs no municipal licence at all. What every premises-based business does need is the correct municipal zoning and land-use rights for its premises — and food premises additionally need a Certificate of Acceptability from municipal environmental health under regulation R638 before handling food, which is separate from the trading licence.

Always-on duties: POPIA, PAIA and B-BBEE

Register your Information Officer, and adopt a PAIA manual

The Protection of Personal Information Act 4 of 2013 (POPIA, South Africa's data-protection law) applies to effectively every company. Its head is by default the Information Officer (delegable to a locally based deputy), and the officer must be registered with the Information Regulator before starting in the role:

Source — the actual words

Officers must take up their duties in terms of this Act only after the responsible party has registered them with the Regulator.

Protection of Personal Information Act 4 of 2013, s 55(2)Read it on LawLibrary

Alongside it sits the Promotion of Access to Information Act 2 of 2000 (PAIA): every private body — even a one-person company — has needed a PAIA manual since 1 January 2022, when the long-standing small-company exemption lapsed. The manual goes on the website and is kept at the principal place of business. POPIA administrative fines run to R10 million, so an EU-style privacy programme is not enough on its own — the South African-specific duties are covered in our POPIA guide.

B-BBEE — not compulsory to trade, but hold the affidavit

Broad-Based Black Economic Empowerment (B-BBEE) is not a licence to trade, but public procurement, many sector licences and large corporate supply chains score it. An entity with annual turnover of R10 million or less is an Exempted Micro Enterprise (EME): a simple sworn affidavit, valid for 12 months, gives it automatic Level 4 status — it costs nothing and takes minutes, so there is rarely a reason not to hold one. How the scorecard really bites, and the equity-equivalent route for multinationals, is in B-BBEE for foreign-owned companies.

The first 90 days at a glance

For a new subsidiary that starts hiring immediately, the deadlines fall roughly like this:

WhenAction
Day 0Incorporate at CIPC; income-tax number auto-issued; sign the public-officer appointment resolution; start the bank-account (FICA) process
Within 10 business daysFile the CIPC beneficial-ownership declaration
Days 1–21Activate the registered representative and eFiling; register as employer (EMP101e: PAYE/UIF/SDL) within 21 business days of the first hire; check municipal zoning for premises
Within 7 days of the first hireCOIDA estimated-earnings return to the Compensation Fund; UIF registration on uFiling (DoEL side)
Days 21–45VAT registration (voluntary or compulsory); customs RLA codes if importing or exporting; adopt the PAIA manual and register the Information Officer
Days 45–90First EMP201 and UI-19 cycles (by the 7th of the month after first payroll); B-BBEE EME affidavit; Tax Compliance Status PIN; CSD registration if selling to government; SETA and bargaining-council confirmation; lodge any sector-licence applications

The recurring annual calendar

Once trading, the company settles into a fixed compliance year. Two clocks matter most — and they are unrelated: the CIPC annual return runs off the incorporation anniversary, while the SARS tax return runs off the financial year end. Filing one does not satisfy the other.

The CIPC annual return is now a bundle

Every company (and every external company) files an annual return under section 33 of the Companies Act 71 of 2008, within 30 business days of its anniversary, with a fee scaled by turnover (currently R100 to R3,000; more when late). Since 2023 it is no longer a quick form:

Source — the actual words

When filing the Annual Returns, the company or close corporation MUST also file its latest Beneficial Ownership Declaration as well as its Audited Financial Statements (AFS) or Financial Accountability Supplement (FAS).

CIPC — Annual Returns FAQ (fees and deregistration), Annual Returns FAQ, v5.0Read it on CIPC

Audited companies file annual financial statements (AFS) in iXBRL (a machine-readable digital format); everyone else files the short Financial Accountability Supplement (FAS). A compliance checklist is completed as part of the e-Services filing flow — answer it accurately, as false answers are an offence. And since 15 April 2024 CIPC applies a hard stop: the annual return cannot be filed on any CIPC platform unless the beneficial-ownership declaration is up to date.

Miss two, and the company is deregistered

Source — the actual words

Deregistration will be automatically triggered by the CIPC when two or more successive Annual Returns are outstanding.

CIPC — Annual Returns FAQ (fees and deregistration), Annual Returns FAQ, v5.0 (deregistration)Read it on CIPC

The full year, for a typical February year-end subsidiary

WhenObligation
Monthly, by the 7thEMP201 return and PAYE/UIF/SDL payment to SARS; UI-19 declaration to the UIF; VAT201 per your cycle (eFiling: last business day of the month)
Incorporation anniversary + 30 business daysCIPC annual return + beneficial-ownership confirmation + AFS (iXBRL) or FAS + compliance checklist. (External companies file the lighter CoR 30.3 confirm-or-update return instead, with no financial statements attached — see external company registration.)
1 April – 31 MayEMP501 annual employer reconciliation, with IRP5/IT3(a) employee certificates
1 April – 30 JuneCOIDA Return of Earnings (DoEL labels seasons by earnings year: the 2025 season ran 1 April – 30 June 2026), then pay the assessment to refresh the Letter of Good Standing
30 AprilWorkplace Skills Plan / Annual Training Report (WSP/ATR) to your SETA — unlocks the 20% mandatory grant of SDL
31 AugustFirst provisional tax payment (IRP6) for a February year end
21 September – 31 October 2026EMP501 interim reconciliation
By 15 JanuaryEmployment equity report — designated employers only (50 or more employees); the online window opens 1 September
28/29 FebruarySecond provisional tax payment (IRP6); financial year end
Within 12 months of year endITR14 company income tax return (late returns attract recurring monthly administrative penalties)
Rolling 12 monthsB-BBEE affidavit or certificate renewal; Tax Compliance Status PIN; PAIA manual and Information Officer review

One 2026 wrinkle on the EMP501: SARS's reconciliation notice requires valid employee income-tax reference numbers “where applicable” and warns of penalties and delays, and payroll providers report that from the February 2026 tax year certificates cannot be created or submitted with outstanding numbers — so get every employee's tax number captured at onboarding, including inbound assignees.

Tax Compliance Status and the tender pack

South Africa replaced paper tax-clearance certificates with the electronic Tax Compliance Status (TCS) system. On eFiling you request a “Good Standing” TCS PIN (the separate “Tender” option was discontinued) and give the PIN to the counterparty, who sees your live compliance status — one late return or unpaid EMP201 flips it to non-compliant in real time. This is why the monthly rhythm above matters commercially, not just legally.

A foreign-owned company chasing government or big-corporate work in 2026 typically needs the full pack: the TCS PIN, the COIDA Letter of Good Standing, registration on the Central Supplier Database (CSD) for public-sector work, a B-BBEE certificate or affidavit, and — for employers with 50 or more employees — an employment equity compliance certificate under section 53 of the Employment Equity Act. Broader compliance themes across the business are collected in our compliance hub, and the rest of this hub's answers live in the Doing Business in South Africa FAQ.

Frequently asked questions

  • Only income tax is automatic: SARS generates an income tax reference number through its interface with CIPC when the company is incorporated, and BizPortal can bundle UIF, Compensation Fund and a B-BBEE affidavit at incorporation. Everything else is manual — appointing and activating the public officer on eFiling, the CIPC beneficial-ownership filing within 10 business days, VAT, PAYE/UIF/SDL employer registration, customs codes, Information Officer registration, and the Labour-side UIF and COIDA follow-through.

    • Public officer: at formation — no grace period (since 24 December 2024).
    • CIPC beneficial ownership: within 10 business days of incorporation.
    • Employer registration (PAYE/UIF/SDL): within 21 business days of becoming an employer.
    • COIDA estimated-earnings return: within 7 days of commencing business.
    • VAT: within 21 business days of exceeding (or contracting to exceed) R2.3 million.
    • CIPC annual return: within 30 business days of each incorporation anniversary.
    • ITR14: within 12 months of financial year end.
  • Almost certainly not. There is no general trading licence in South Africa. Under the Businesses Act 71 of 1991 only Schedule 1 activities need a municipal licence — chiefly selling or supplying meals or perishable foodstuffs, certain listed health and entertainment premises (saunas, massage, night clubs, cinemas, three or more gaming machines), and food hawking. A software company, an importer, a consultancy or a manufacturer needs no Businesses Act licence at all. What every premises-based business does need is the correct municipal zoning or land-use rights, and food premises separately need a Certificate of Acceptability before handling food.

  • CIPC assumes the company is dormant. Deregistration is automatically triggered once two successive annual returns are outstanding, and final deregistration strips the company of legal personality — banks, SARS and counterparties may refuse to deal with it, and contracts and property are imperilled. Reinstatement (form CoR 40.5) works retrospectively, as the Supreme Court of Appeal confirmed in Newlands Surgical Clinic v Peninsula Eye Clinic [2015] ZASCA 25, but it is slow and requires filing all arrear returns, beneficial-ownership declarations and financial statements.

  • Partially. BizPortal (run by CIPC) can bundle company registration with an income tax number, a bank account referral, a B-BBEE affidavit, UIF and Compensation Fund registration and a domain name in one flow. But it does not cover the public officer appointment, VAT, PAYE/SDL employer registration, customs codes, Information Officer registration or any sector licence — those remain separate processes with their own deadlines. For larger investors, the InvestSA One Stop Shop (the dtic) helps coordinate registrations and permits across agencies, but it coordinates rather than replaces them.

  • Only if they live in South Africa. The public officer (SARS calls the role the registered representative) must be a natural person resident in South Africa who is a senior official of the company; if no senior official is resident, another suitable person approved by SARS may be appointed. Since 24 December 2024 the appointment is due at formation, with no grace period. If nobody is appointed, a statutory default hierarchy applies, or SARS may itself designate a suitable person. Until the representative is activated on eFiling, the company effectively cannot transact with SARS at all — see resident directors and the public officer.

For the businesses we act for

The Keystone Workspace

The attorney-designed platform the businesses we act for use to run their contracts, e-signatures and company secretarial work in one place.

Why you can trust this: Martin Kotze has been an admitted Attorney of the High Court of South Africa, registered Conveyancer, and Notary Public since 2014, practising from Pretoria. The firm is regulated by the Legal Practice Council under firm registration 17444.

This guide is general information, not legal advice for your specific matter.

Work with an attorney

Set up in South Africa with counsel on the ground

Martin Kotze advises overseas companies and their local teams on South African market entry — entity setup, directors and governance, contracts, employment and regulatory compliance. General guidance on this page is not a substitute for advice on your facts.