Registering a company is only the first compliance step, and it is usually the easiest one. Once a business is trading, employing people and generating revenue, a wider set of obligations kicks in, and none of them are optional extras: they are the difference between a business that can survive an audit, a labour dispute or a data breach, and one that gets caught out by a rule it never knew applied to it. Here is what actually applies to a small business in South Africa, beyond the paperwork covered in registering the company itself.
Business registration and structure
Every business needs a legal identity before anything else applies. Registering with the Companies and Intellectual Property Commission (CIPC) is what gives a company that identity, and the structure chosen at registration determines which of the rules below apply and how. A sole proprietor operating alone, such as a freelancer, can skip formal company registration entirely and trade as an individual, but that choice still comes with its own tax obligations, not fewer of them.
Tax compliance
Every business, regardless of size, has to register for tax with the South African Revenue Service (SARS), which means obtaining a tax number and then keeping up with the ongoing side of the obligation: filing returns on time and paying what is owed when it is due. Missing a filing deadline or a payment is what typically turns tax compliance into a penalty problem rather than a routine administrative one. A tax consultant is worth the cost here, not just to stay current but to make sure the business claims deductions and incentives it is actually entitled to, rather than overpaying out of caution.
Employment compliance
The moment a business hires its first employee, South Africa’s labour laws apply in full, not on a sliding scale for smaller operations. That means a written employment contract for every hire, pay that meets minimum wage requirements, and working hours and leave entitlements that follow the law rather than informal arrangements. Getting this structured properly from the first hire, ideally with a labour lawyer’s input rather than a generic template, is what prevents a dispute later from turning into a legal problem the business did not see coming.
Occupational health and safety
A safe workplace is a legal requirement under the Occupational Health and Safety Act, not just good practice. In concrete terms that means actually conducting risk assessments for the specific work being done, putting safety measures in place based on what those assessments find, and training staff on them, rather than having a policy document that exists but is not applied. This matters more, not less, for businesses in physically riskier trades, where the gap between a paper policy and an applied one is where accidents actually happen.
Consumer protection
Any business selling to consumers has obligations under the Consumer Protection Act: honest product information, marketing that does not mislead, and pricing that is transparent rather than obscured until checkout. Beyond the legal exposure of getting this wrong, it is also the more practical concern, since a business’s reputation with its own customers is built or damaged by exactly these details.
Financial recordkeeping
Accurate, current financial records are a legal requirement, not just something an accountant asks for at year end. Income, expenses and transactions need to be kept on record for at least five years, both to survive a tax audit and to give the business itself an honest picture of where it stands. Bookkeeping software closes most of the gap here, and an experienced bookkeeper closes the rest, particularly once transaction volume makes manual tracking unreliable.
Intellectual property
Trademarks, copyrights and patents cut both ways for a small business: know enough about them to avoid infringing on someone else’s rights, and take the deliberate steps needed to protect your own, whether that is a brand name, a product design or original content the business produces. Assuming this does not apply because the business is small is one of the more common and more expensive assumptions to get wrong.
Data protection and privacy
Almost every business now holds some amount of customer data, which means data protection law applies almost by default. In practice that means protecting the information collected, getting proper consent before collecting it, and having real security measures in place to prevent it being breached, not just a privacy policy published on a website that nobody follows operationally.
Environmental compliance
Not every business has environmental obligations, but those that do, based on their industry or where they operate, need to know which regulations apply to them specifically rather than assuming environmental compliance is only a concern for heavy industry. It is worth checking this explicitly rather than assuming it does not apply.
Which of these actually apply to you
Not every one of these carries the same weight for every business. A one-person consultancy working from home has real tax and financial-recordkeeping obligations but limited exposure on occupational health and safety or environmental compliance. A business with a handful of staff in a retail space picks up employment compliance and consumer protection as immediate concerns the moment it opens its doors. The list above is not a single checklist every business works through in order; it is closer to a menu that gets narrowed down by what the business actually does, who it employs, and who it sells to. What does not change is that ignoring a category because it feels unlikely to apply is a worse strategy than spending an afternoon confirming it does not.
Treat this as a day-one list, not a growth-stage one
The common mistake is treating most of these as problems for later, once the business is bigger. Tax and employment obligations apply from the first rand of revenue and the first hire, not once a business reaches some informal size threshold. Building compliance in from day one is considerably cheaper than retrofitting it after an audit, a dispute or a complaint forces the issue.
