Statutory Compliance in South Africa: Key Regulations & Tips

What Is Statutory Compliance in South Africa?

Statutory compliance in South Africa means meeting every obligation set by national legislation across tax, payroll, labour, corporate governance, and data protection. It runs on a monthly, bimonthly, and annual cadence enforced by several regulators. The governing statutes include the Companies Act, the Income Tax Act, and the Protection of Personal Information Act (POPIA).

Compliance is also an enabler. A clean record clears investor due diligence and unlocks tenders, foreign investment approvals, and cross-border expansion.

Which Regulators Enforce Statutory Compliance in South Africa?

Five bodies enforce statutory compliance in South Africa: the South African Revenue Service (SARS), the Companies and Intellectual Property Commission (CIPC), the Department of Employment and Labour (DEL), the Information Regulator, and the Compensation Fund. Each owns a slice of the law and runs its own filing portal, shown below.

Sector Education and Training Authorities (SETAs) sit alongside these bodies and administer Skills Development Levy (SDL) grants.

What Are the SARS Corporate Tax Compliance Requirements?

Companies pay corporate income tax at a flat 27% for years of assessment ending on or after 31 March 2023, per the SARS company tax rate tables. Every company files an ITR14 income tax return within 12 months of its own financial year-end through eFiling, since year-ends vary and there is no fixed calendar date.

Keep records, books, and supporting documents for five years from the date a return is submitted, per the SARS record-keeping rules under section 29 of the Tax Administration Act. Maintain a valid Tax Compliance Status (TCS) PIN. A Good Standing PIN proves compliance for tenders, and an Approval of International Transfer PIN clears foreign investment flows, per the SARS TCS functionality guide.

How Does Provisional Tax Work in South Africa?

All companies are provisional taxpayers and make two compulsory IRP6 payments each year of assessment. The first is due within six months of the start of the year (31 August for a standard March year-end), and the second by the last day of the year, per the SARS provisional tax FAQ.

An optional third top-up payment follows within six months after year-end, or seven months for February year-ends, to limit interest. Under-estimation penalties apply when the second payment falls short of SARS thresholds.

What Are the VAT Registration Requirements in South Africa?

Value-Added Tax (VAT) registration is compulsory once taxable supplies exceed R2.3 million in any consecutive 12-month period, with voluntary registration available above R120,000, both effective 1 April 2026, per the SARS VAT thresholds page. These raised the old R1 million and R50,000 limits, the first change since 2009.

The standard VAT rate stays at 15%. A proposed increase to 15.5% then 16% was tabled in the 2025 Budget and formally reversed on 24 April 2025, per the National Treasury VAT reversal statement. Vendors file VAT201 returns per tax period, usually bimonthly. Late payment draws a 10% penalty plus interest.

What Withholding Taxes Apply in South Africa?

South Africa levies withholding taxes on dividends, interest, royalties, and payments to non-resident sellers of immovable property. Double Taxation Agreements (DTAs) can reduce these rates where a treaty applies. The rates and the party that withholds are set out below.

A non-resident claims DTA relief by proving treaty residence to the withholding agent before payment.

How Do You Register for PAYE, UIF, and SDL?

Register for Pay-As-You-Earn (PAYE) with SARS within 21 business days of becoming an employer. The Unemployment Insurance Fund (UIF) contribution is 1% from the employer plus 1% from the employee, totalling 2% of remuneration up to a monthly earnings ceiling, declared to both SARS and the Department of Employment and Labour via UFiling.

SDL is 1% of total payroll and is compulsory only when annual payroll exceeds R500,000. SDL funds flow to SETAs, and employers can reclaim part through skills grants. This threshold applies to SDL alone, not UIF.

What Are the EMP201 and EMP501 Submission Deadlines?

The EMP201 monthly declaration combines PAYE, UIF, and SDL and is due by the 7th of the following month. The EMP501 employer reconciliation is filed twice a year: an interim return covering 1 March to 31 August is due at the end of October, and the annual return for the full tax year is due 31 May. The channels are below.

Late payment draws a 10% penalty plus interest. An incorrect EMP501 attracts an administrative penalty of up to 10% of total employees’ tax, levied in 1% monthly increments.

What Are the Labor Law Compliance Requirements in South Africa?

Employers must comply with the Basic Conditions of Employment Act (BCEA), the Labour Relations Act (LRA), the National Minimum Wage Act, and the Compensation for Occupational Injuries and Diseases Act (COIDA). The BCEA caps ordinary hours at 45 per week and mandates 21 consecutive days of annual leave. The LRA governs unfair dismissal and routes disputes to the Commission for Conciliation, Mediation and Arbitration (CCMA).

The national minimum wage is set under the National Minimum Wage Act, not the BCEA, and is reviewed annually, usually effective 1 March. Employers must issue written contracts, register with the Compensation Fund under COIDA, and meet the Occupational Health and Safety Act (OHSA) duties on risk assessments and safety committees.

What Are the Employment Equity Compliance Requirements?

Designated employers must implement five-year employment equity plans with sector-specific numerical targets and report to the Department of Employment and Labour. Under the Employment Equity Act amendments effective 1 January 2025, a designated employer is one with 50 or more employees, and an equity compliance certificate is now required to win state contracts.

Non-compliance attracts fines up to R1.5 million or 2% of annual turnover, rising for repeat offences, and can exclude a company from government tenders.

What Does Companies Act Compliance Require?

Every company must file a CIPC annual return within 30 business days of its incorporation anniversary. Beneficial ownership information must be filed within 10 working days of registration and refiled annually with each annual return. Non-filing of beneficial ownership blocks acceptance of the annual return.

Companies must also prepare annual financial statements within six months of year-end, audited where the Public Interest Score requires it. Failure to file annual returns triggers deregistration. File and manage all of this through the CIPC BizPortal.

How Do You Comply With POPIA?

The Protection of Personal Information Act (POPIA) requires lawful processing of personal information under its eight conditions, registration of an Information Officer with the Information Regulator, and breach notification to the Regulator and affected data subjects. POPIA has been fully enforceable since 1 July 2021.

Serious breaches carry administrative fines up to R10 million and possible imprisonment of up to 10 years. Section 72 governs cross-border transfers of personal information, which matters for cloud services and foreign parent companies.

What Are the Compliance Requirements for Foreign Companies in South Africa?

A foreign company conducting business in South Africa must either register as an external company with CIPC within 20 business days of starting activity or incorporate a local subsidiary. Each route carries a different filing load, and a company is South African tax resident if incorporated or effectively managed in the country.

Non-resident withholding taxes apply: 20% on dividends, 15% on interest and royalties, and 7.5% to 15% on immovable property sales. DTA relief can reduce these. A TCS PIN is needed to repatriate funds and clear foreign investment approvals.

What Are the Penalties for Non-Compliance in South Africa?

Penalties range from fixed monthly administrative fines to deregistration and criminal prosecution. The most common sanctions, and the body that imposes each, are listed below.

The R250 to R16,000 monthly range is confirmed by the SARS administrative penalty guidance and scales with taxable income.

Statutory Compliance Checklist for South Africa

Compliance is a recurring cadence, not a one-time setup. The checklist below maps each obligation to its frequency, deadline, and filing portal so you can build a calendar for your South African entity.

How We Help With Statutory Compliance in South Africa

Commenda runs entity management and managed compliance across jurisdictions, so your South African filings follow one standardized workflow. Our entity management platform handles CIPC registrations, annual returns, and beneficial ownership filings, while our corporate tax and accounting service covers ITR14, provisional tax, VAT registration, and payroll compliance. The platform connects to 100+ ERPs, APIs, and custom integrations.

Track every deadline in one place with the Commenda compliance calendar, built to map filings by country and entity. Book a demo to get a compliance calendar built for your South African entity.