The Companies and Intellectual Property Commission had 517,181 annual returns due from registered companies and close corporations in a single quarter of its 2025/26 financial year, and only 117,884 had actually been filed in that same quarter, according to CIPC’s own first-quarter performance report. Returns filed later in the year narrow that gap, but the scale of it points to the same pattern underneath South Africa’s entire small business sector: a registered company is not automatically a running one, and running one is an ongoing obligation, not a once-off task.
The problem: compliance is recurring, and most owners treat it as a one-time event
Registering a company is a single transaction. Running one is a calendar: monthly, annual and sometimes once-off filings that never stop as long as the company exists, whether or not it is actively trading. CIPC’s own notice on Annual Return deregistration describes the consequence of missing that calendar in blunt terms, and names the most common cause itself: “the low prioritisation of compliance or timeous compliance with obligations in terms of the Companies Act.” Businesses that stop filing do not get a warning that quietly disappears; they move through an automated process that ends in final deregistration, at which point, CIPC says, directors can become personally liable for the company’s debts, bank accounts can be frozen, and the company stops legally existing in the eyes of its own creditors and service providers.
The irony is that most of what trips owners up is not difficult. It is recurring, and recurring things get missed by businesses that have no system for tracking them, not by businesses facing genuinely hard decisions.
The running-a-business compliance calendar
Annual, from CIPC
Every company and close corporation must file an annual return in the month its registration anniversary falls, every year, whether or not it traded. This is separate from, and in addition to, any tax return. Missing it is what starts the deregistration clock. Our guide to key business compliance requirements sets out the full list alongside this one.
Monthly or periodic, from SARS
PAYE and UIF deductions are due monthly if you employ staff. VAT returns, if you are registered, are typically due every two months. Provisional tax is paid twice a year on an estimate of annual income, reconciled at filing. None of these wait for you to feel ready; a missed PAYE submission accrues penalties and interest from the date it was due, not the date you notice it is overdue.
Ongoing, on your own books
A company that cannot produce clean monthly figures, income, expenses, what is owed and what is owed to it, cannot answer the one question every bank, investor and larger client eventually asks: can this business actually pay its bills? Bookkeeping discipline is not a back-office nicety once a company is running; it is the record that proves the business is real when something goes wrong, a client disputes an invoice, or a loan application needs a trading history.
As needed, protecting what the business has built
A running business accumulates things worth protecting that a brand-new one does not: a client list, a trademark worth defending, a reputation a competitor could damage. Our guide to protecting your intellectual property in South Africa and our guide to business insurance for South African SMEs both cover risks that only become relevant once a business has something to lose, which is precisely the stage many owners stop thinking about compliance and start thinking they have already done enough.
Data has become its own compliance category too. We covered what to do when your business has a data breach and separately how ransomware attacks on South African small businesses have risen sharply, both of which carry their own POPIA obligations the moment a business holds any customer’s personal information, which almost every running business does.
Why the gap matters more than it looks
Research from the Small Business Institute, built on actual SARS and Stats SA payroll data rather than estimates, found that South Africa has only around 250,000 formal, employing small and medium enterprises nationally, a small fraction of the millions of entities registered with CIPC over the years, in its baseline study. Formal SMEs make up 98.5% of formal firms by count, yet generate only 28% of formal jobs, a figure the study says should be closer to 60 to 70% in a healthy economy. A registered company that never becomes a properly run one, filed, bookkept, insured, compliant, cannot be the employer that closes that gap. The compliance calendar is not bureaucratic overhead sitting on top of running a business. For a small company, it is a meaningful part of what running one actually means.
Frequently asked questions
What is the single most common way a running business falls out of compliance?
Missing the annual CIPC return, because unlike monthly SARS obligations it only happens once a year and is easy to forget between registration anniversaries, especially for a business with no staff member specifically responsible for compliance dates.
Do I still need to file an annual return if my company has not traded yet?
Yes. The annual return obligation is tied to the company’s existence on the register, not to whether it has generated revenue. A dormant, non-trading company still has to file.
How do I know if my business is at risk of CIPC deregistration right now?
You can check your company’s compliance status directly on CIPC’s e-Services or BizPortal platforms. If your status shows as being in the Annual Return deregistration process, CIPC’s own guidance is to submit all outstanding annual returns and Beneficial Ownership declarations urgently, rather than waiting, since final deregistration follows if the non-compliance is not resolved.
