What Happens After Registering a Business in Nigeria? 5 Next Steps after your CAC registration

There is a moment that happens in almost every Nigerian founder's journey.

The CAC certificate arrives. The email notification lands. You download the document, screenshot it, send it to your group chat, and post about it. The congratulations come in. You feel official. After weeks or months of building something and calling it a business, you now have the document that proves it.

And then you go back to building. Because the registration is done. The legal side is handled. Time to focus on the actual work.

This is the moment the compliance gap begins.

Because the CAC certificate is not the end of the legal journey. It is the starting line. What comes after it, the filings, the registrations, the tax obligations, the sector-specific requirements, is where most Nigerian businesses quietly accumulate risk they do not know they are carrying. Risk that surfaces during a bank application, a corporate contract process, an investor's due diligence, or a regulatory check at the worst possible time.

This guide covers every obligation that comes after the certificate, in the order they should be addressed, with enough detail to actually act on them.

Immediately after registration: TIN registration with FIRS

The Tax Identification Number is the first thing to sort after the CAC certificate lands.

Your TIN is issued by the Federal Inland Revenue Service and is the identifier that connects your business to Nigeria's tax system. Without it, your company cannot open a corporate bank account with most Nigerian financial institutions. It cannot file tax returns. It cannot bid for most formal contracts with government or institutional clients. And it cannot interact meaningfully with any regulatory body that requires tax compliance documentation.

The process of obtaining a TIN has become more streamlined in recent years and can be completed online through the FIRS portal. The information required is largely the same information already submitted during CAC registration, company name, registration number, registered address, director details.

There is no good reason to delay TIN registration. It should happen within weeks of incorporation, not months later when the need for it becomes urgent. By the time most founders discover they urgently need a TIN, there is already a queue behind some other pressing task. Sort it first.

Open a corporate bank account

The corporate bank account is the physical separation of personal and business finances that makes the legal separation of an LLC meaningful in practice.

If a company's revenue is flowing through the founder's personal account, the legal protection the LLC structure provides starts to erode. Courts and tax authorities can disregard the separation between a company and its owner when the financial boundaries between them are consistently ignored. This concept, known as piercing the corporate veil, can expose founders to personal liability for company debts even when they chose an LLC specifically to avoid that exposure.

Beyond the legal risk, mixing personal and business finances creates a practical mess. Tax filings become difficult to prepare accurately. Investor due diligence flags commingled finances as a governance concern. Grant applications and institutional partnerships that require clean financial records become harder to support.

To open a corporate bank account in Nigeria, the company will need the CAC certificate, the TIN, the Memorandum and Articles of Association, valid identification for the directors, and in some cases a board resolution authorising the account opening. Different banks have different requirements and different timelines for account opening, some are significantly faster than others. The Idara team can advise on what to expect based on the bank being approached.

Open the account before the business has significant revenue flowing through a personal account. Correcting a history of commingled finances retroactively is significantly more difficult than starting correctly.

Understand your annual returns obligation

Annual returns are the compliance obligation most Nigerian founders discover too late.

Under the Companies and Allied Matters Act 2020, every registered company in Nigeria is required to file annual returns with the CAC every year from the date of incorporation. Not from when the business becomes profitable. Not from when trading begins. From the incorporation date.

The first annual return for a Private Limited Company is due 18 months after incorporation. After that, returns must be filed every year. The filing includes updated information about directors, shareholders, share capital, and the registered office address, confirming to the CAC that the company is still active and its records are current.

The CAC does not send reminders.

Missing one year triggers penalty fees that accumulate. Missing two consecutive years can result in the CAC initiating strike-off proceedings, the formal process of removing the company from the register. Once struck off, the company ceases to exist as a legal entity. It cannot trade, enter contracts, hold assets, or operate a bank account. The company name is released back to the public, meaning someone else can register it.

Set a calendar reminder for 18 months after your incorporation date. Then set another reminder for the same date every year after that. The cost of filing is small. The cost of a strike-off, in restoration fees, lost contracts, and potential loss of the company name, is significantly larger.

Register for PAYE if you have employees

The moment a Nigerian business takes on its first employee, it becomes a tax-collecting agent of the state.

Pay As You Earn is the system through which income tax is deducted from employee salaries and remitted to the relevant state tax authority, typically the state in which the business operates. Registration for PAYE is required as soon as the first employee is engaged. The monthly deduction must be remitted by the 10th of the following month.

The rates are graduated based on income level and vary slightly by state. Lagos State Internal Revenue Service, Federal Capital Territory Internal Revenue Service, and the internal revenue services of other states each administer PAYE for employees resident in their jurisdiction.

Failure to register and remit creates liability for both the outstanding tax and the penalties and interest that accumulate on it. It also creates personal exposure for directors, the people responsible for the company's tax compliance obligations.

If the business uses contractors rather than employees, different rules apply. The distinction between an employee and a contractor is not simply a matter of what you call the arrangement. It depends on the actual nature of the working relationship, who controls how the work is done, whether tools are provided, whether the person works exclusively for one client, and other factors. Getting this distinction wrong is a common and expensive mistake.

Register for VAT at the appropriate threshold

Value Added Tax is a consumption tax charged on the supply of taxable goods and services in Nigeria. The standard rate is 7.5%.

Businesses with annual taxable turnover above ₦25 million are required to register for VAT with FIRS, charge VAT on taxable supplies, file monthly VAT returns, and remit VAT collected to FIRS by the 21st of the following month.

Operating above the threshold without VAT registration does not exempt a business from the tax. It creates a liability for back taxes, penalties, and interest on the unpaid amounts, calculated from the point at which the threshold was crossed, not from when the business discovers the obligation.

For businesses below the threshold, VAT registration is not mandatory but may be advisable depending on the nature of the client base. Many corporate and institutional clients require suppliers to be VAT-registered as a condition of doing business.

File personal income tax returns as a founder

This is the step most founders skip because they assume that company-level compliance covers their personal tax obligations.

It does not.

The founder and the company are distinct legal persons. The company has its own tax obligations, Companies Income Tax, VAT, and others. The founder has separate personal tax obligations as an individual earning income.

Under Nigeria's Personal Income Tax Act, individuals earning income are required to file annual tax returns with the state tax authority where they are resident. For founders who receive a salary or director fees from the company, this means filing a personal income tax return in addition to the company's corporate returns.

For business name owners, where the business and the individual are legally the same entity, personal income tax applies directly to business profits. There is no corporate tax to file separately. The profit is the founder's income.

The Lagos State Internal Revenue Service and the internal revenue services of other states have increased monitoring of high-income individuals and business owners. Tax clearance certificates are required for an expanding range of transactions and applications. Filing personal income tax returns is not just a legal obligation, it is what keeps the clearance certificate available when it is needed.

File beneficial ownership information

Under the Companies and Allied Matters Act 2020, Nigerian companies are required to maintain a register of persons with significant control, also known as beneficial owners, and file this information with the CAC.

A person with significant control is anyone who holds more than 25% of the shares or voting rights in the company, or who has the right to appoint or remove the majority of the board. In most early-stage Nigerian companies with two or three founders, all of them may qualify.

The obligation to maintain the register exists from incorporation. Failure to file is a compliance gap that surfaces during due diligence, particularly when investors or institutional clients conduct enhanced background checks. It is a straightforward filing that most founders have never been told about.

Understand your sector-specific obligations

CAC registration gives a business its legal identity. What it does not do is authorise that business to operate in every sector.

Depending on what the business actually does, additional licences and regulatory approvals apply on top of the CAC certificate. The most common sector-specific obligations are the following.

Fintech and payment services require CBN licensing before accepting a single transaction. The specific licence, PSP, PSSP, MMO, or PTSP, depends on the exact nature of the payment activity. The capital requirements range from ₦100 million to ₦2 billion, verified before the application is reviewed. The process takes six to eighteen months minimum.

Food, beverages, and cosmetics require NAFDAC registration for any product intended for human consumption or application. Operating without NAFDAC approval is illegal regardless of transaction volume.

Real estate requires SCUML registration, the Special Control Unit Against Money Laundering. Real estate is classified as a designated non-financial business under Nigerian anti-money laundering law. Most real estate operators have never heard of this requirement.

NGOs and non-profits require incorporation as Incorporated Trustees under CAMA 2020, a completely different structure from Business Name and LLC registration, with a different process, different documents, and a different certificate. An NGO registered as a Business Name or LLC is not correctly structured for its purpose.

Digital asset and crypto businesses require SEC registration under the digital asset framework and SCUML registration as an additional mandatory obligation.

If the business operates in any regulated sector and does not have the appropriate sector licence, it is operating outside its regulatory permissions. The consequences, fines, shutdown orders, personal founder liability, investor concern, are real and increasing as enforcement capacity in Nigeria's regulatory bodies grows.

File your trademark

Trademark registration is not a post-incorporation compliance obligation in the strict legal sense. But it belongs in this checklist because the window for filing it correctly, before the brand is visible enough to attract imitation, closes faster than most founders realise.

CAC registration does not protect the brand. It puts a name on a register. A trademark gives exclusive legal rights to that name, logo, and slogan in the relevant class of goods or services, with protection backdated to the date of filing.

The registration process takes 18 to 24 months. Every month of delay is a month during which someone else can file for the name and establish priority. The cost of challenging an existing trademark registration is significantly higher than the cost of filing early.

File the trademark in the months immediately following incorporation, not years later when the brand is established enough to be worth stealing.

Register for data protection compliance under the NDPA

The Nigeria Data Protection Act 2023 created a legal framework for the protection of personal data in Nigeria. The Nigeria Data Protection Commission is its enforcement body, and enforcement is active.

In 2025, the NDPC launched investigations into more than 1,300 organisations across financial services, insurance, and gaming for breaches of the NDPA. Fines, enforcement orders, and in some cases criminal prosecution are the available sanctions.

Any business that collects, stores, or processes the personal data of individuals, names, email addresses, phone numbers, payment details, behavioural data, is subject to the NDPA. This covers the overwhelming majority of Nigerian businesses operating in 2026, including virtually every digital business, every business that maintains a customer database, and every business that uses any form of online marketing.

Compliance requirements include registering as a data controller or processor with the NDPC, appointing a Data Protection Officer for larger organisations, maintaining a privacy policy that accurately describes data processing activities, implementing technical safeguards for data protection, filing annual compliance audit returns, and reporting data breaches within the required timeframe.

This is not a compliance obligation that can be deferred until the business is larger. The NDPC's enforcement posture makes clear that size is not a mitigating factor.

The compliance calendar

Bring all of this together into a single calendar and the picture becomes manageable.

Immediately after incorporation: TIN registration, corporate bank account opening, beneficial ownership register setup.

Within the first three months: PAYE registration if employees are being taken on, data protection compliance review, trademark application initiated, sector-specific licence assessment.

Eighteen months after incorporation: first annual returns filing due.

Every year thereafter: annual returns filed, personal income tax return filed, corporate tax return filed, VAT returns filed monthly if above threshold, PAYE remitted monthly.

The businesses that run into compliance problems are rarely the ones that knew about these obligations and chose to ignore them. They are the ones that nobody told. Now you know.

At Idara, we help founders get compliant from the start and stay compliant as the business grows. Visit app.goidara.com to understand where your business currently stands and what needs to be addressed.