Companies Act Record Retention: What Company Secretaries and Bookkeepers Need to Know
*This article is general information based on publicly available legislation and published regulatory guidance. It is not legal advice. For your specific situation, consult a qualified attorney or compliance professional.*
---
Keeping the right company records for the right length of time is one of the more unglamorous but genuinely high-stakes responsibilities a company secretary or bookkeeper carries. Get it wrong — disposing of records too early, or failing to keep them at all — and your company faces potential enforcement action from the Companies and Intellectual Property Commission (CIPC). This article walks through what the Companies Act 71 of 2008 requires in broad terms, what categories of records are involved, and how to build a practical retention schedule.
> A note on section numbers: The Companies Act record-keeping obligations are detailed across several provisions. Rather than risk citing an incorrect section number, this article describes the requirements in plain terms and directs you to the authoritative source: cipc.co.za and the Government Gazette publication of the Act.
---
Why Record Retention Matters
The Companies Act places ongoing obligations on every registered South African company to maintain accurate, accessible records. These obligations exist for good reasons: they protect shareholders, creditors, employees, and the public. They also give regulators — CIPC, the South African Revenue Service (SARS), and in some circumstances the Financial Intelligence Centre (FIC) — the ability to investigate the company's affairs.
For practical purposes, proper record retention:
- Supports your annual financial statements and audit trail
- Enables directors and shareholders to exercise their statutory rights
- Reduces the risk of CIPC non-compliance findings
- Intersects with SARS record-keeping requirements (SARS guidance on record retention is available at sars.gov.za)
- Supports POPIA compliance when those records contain personal information
---
Categories of Records the Companies Act Addresses
The Companies Act identifies several broad categories of records that companies are required to maintain. These include (but are not limited to):
Incorporation and constitutional documents The Memorandum of Incorporation (MOI), any amendments to it, and all documents filed with CIPC at incorporation form the foundation of a company's record set. These are permanent records — there is no end date on the obligation to keep them.
Registers Companies are required to maintain a register of directors, a securities register (in the case of companies that issue shares), and, where applicable, a register of company secretary appointments. These registers must be kept current and must accurately reflect changes as they occur.
Minutes and resolutions Minutes of shareholders' meetings, board meetings, and written resolutions passed in lieu of meetings must be recorded and retained. The Act contemplates that these records support accountability for decisions made on behalf of the company.
Accounting records Financial records — including records of assets and liabilities, income and expenditure, and supporting source documents — must be kept in a manner that enables the preparation of annual financial statements. SARS independently requires that supporting accounting records be retained for a minimum of five years; company secretaries should align their retention schedules with both sets of obligations.
Annual financial statements Approved annual financial statements, together with any audit or independent review report, are part of the company's formal record set.
---
How Long Must Records Be Kept?
The Companies Act specifies a general retention period for most company records. Without citing a specific section number (to avoid any risk of error), the Act provides that most accounting records and supporting documents must be kept for a period of seven years, while incorporation documents, the MOI, and registers are treated as permanent records that must be maintained for the life of the company.
For the authoritative wording, always refer directly to the Act as published in the Government Gazette or to CIPC's guidance at cipc.co.za.
SARS's own record-keeping requirements — accessible at sars.gov.za — may apply concurrently, particularly for VAT, income tax, and payroll records. Where the two sets of obligations overlap, the more demanding requirement will generally govern in practice.
---
Where Records Must Be Kept
The Companies Act requires that records be kept at the company's registered office, or at another location within South Africa that the company has notified to CIPC. Records may be kept in electronic form provided the format allows them to be reproduced in printed form and the integrity of the records is maintained.
This has practical implications for bookkeepers using cloud accounting platforms or document management systems: ensure that your storage solution:
- Is hosted in a manner that allows you to produce hard copies on demand
- Maintains an audit trail showing that records have not been altered
- Is backed up with sufficient redundancy to prevent accidental loss
- Complies with POPIA's security safeguard requirements (POPIA s19) to the extent the records contain personal information about employees, shareholders, or directors
---
Access Rights
Shareholders, directors, and certain other stakeholders have statutory rights to inspect and receive copies of specific company records. The Companies Act sets out who may access what, and on what terms. Being unable to produce requested records — because they were not kept or were destroyed prematurely — is not just an administrative inconvenience; it can constitute a breach of the Act and expose the company and its directors to liability.
If your company receives a formal request for access to records, consider whether the Protection of Personal Information Act and the Promotion of Access to Information Act (PAIA) also apply, and seek legal advice if there is any doubt.
---
Building a Practical Retention Schedule
A retention schedule is simply a document that maps each record type to its retention period and assigns responsibility for managing it. Here is a basic framework:
| Record Type | Indicative Retention Period | Notes | |---|---|---| | MOI and amendments | Permanent | Keep for life of company | | Register of directors | Permanent | Update on every change | | Securities register | Permanent | Update on every transfer | | Minutes and resolutions | Permanent (consider) | Governance trail | | Annual financial statements | 7 years (minimum) | Align with SARS | | Accounting records and source documents | 7 years | Align with SARS | | Payroll records | 5 years (SARS minimum) | Confirm under employment legislation too |
*These periods are indicative. Always verify against the current text of the Companies Act, SARS guidance, and any sector-specific obligations that apply to your company.*
---
Intersection with POPIA
Many company records contain personal information — think shareholder registers with ID numbers, payroll records, employee contracts. Where that is the case, the Protection of Personal Information Act 4 of 2013 applies alongside the Companies Act.
POPIA's retention principle (addressed in POPIA s14) holds that personal information should not be kept longer than is necessary for the purpose for which it was collected. This creates a tension: the Companies Act may require you to keep a record for seven years, while POPIA encourages you not to retain personal information longer than necessary. The resolution is that a statutory obligation to retain records constitutes a lawful basis for continued retention under POPIA — but once that statutory period expires, you should have a process to securely destroy or de-identify the records.
The Information Regulator's guidance is available at inforegulator.org.za.
---
Key Takeaways
- The Companies Act requires South African companies to maintain several categories of records, many permanently and most accounting records for at least seven years
- Records may be kept electronically, provided they can be reproduced in print and their integrity is preserved
- SARS and POPIA requirements apply concurrently — build your retention schedule to satisfy all applicable obligations
- Failure to maintain records can expose directors and the company to enforcement action by CIPC
- When in doubt about your specific obligations, consult a qualified company secretary, attorney, or compliance professional
---
*This article is general information based on publicly available legislation and published regulatory guidance. It is not legal advice. For your specific situation — including any sector-specific obligations that may apply to your company — consult a qualified attorney or compliance professional. References: Companies Act 71 of 2008 (cipc.co.za); SARS record-keeping guidance (sars.gov.za); Information Regulator (inforegulator.org.za).*