Reacting to: Director amendment process (CIPC), published 16 October 2026.

CIPC has changed how a company adds a new director to its records. From 16 October 2026, a newly appointed director has to be confirmed by a majority of the existing board through a one-time password sent by CIPC, and that confirmation has to happen within a set window or the filing is cancelled outright. The first phase of the rollout targets small companies where the directors and the shareholders are the same people, which describes the large majority of registered companies run by South African small business owners.

What changed on 16 October 2026

Before this change, a director amendment filed through CIPC eServices, using the CoR39 form that records director appointments and resignations, went through once the paperwork was uploaded and the filer's login details checked. Now, once a new director is added to the filing, CIPC sends a one-time password to confirm that appointment. A majority of the company's current board has to action that OTP within the required window. CIPC has not published the exact number of hours or days allowed, only that the application is terminated once the window passes, meaning the whole filing has to be redone from the start.

CIPC has not said whether a terminated filing carries a new fee on resubmission. Treat a missed OTP window as the start of a fresh filing, with its own processing time.

Who this affects

This affects any company adding, removing or replacing a director on its CIPC record from 16 October 2026 onward. The first phase applies specifically to small companies where every director also holds shares, the normal setup for a one-person Pty Ltd or a family business that incorporated with the owners as both directors and shareholders. A company bringing in an investor or a professional director who holds no shares currently sits in a later phase that CIPC has not yet detailed.

OTP
A one-time password confirmation from the majority of the board, required before a new director is added

Why CIPC made this change

CIPC has linked the change to unauthorised changes made to company records, where a director is added or removed without the real board's knowledge. This kind of change can be used to take control of a company's bank mandate or its contracts, so a confirmation step aimed at small companies run by a single director closes an obvious gap. The notice also repeats the existing warning under section 214(1)(b) of the Companies Act, 2008, that knowingly submitting false or misleading information for a fraudulent purpose is a criminal offence, carried over unchanged alongside the new OTP step.

The same notice covers a second change. The look and feel of the eServices screens used for a director amendment will shift slightly as part of the same ICT security upgrade. CIPC describes this as a cosmetic update. The underlying filing requirements stay the same. A director filing an amendment for the first time since 16 October 2026 should still expect the screens to look different, even where the form fields themselves have not changed.

How this fits with CIPC's wider checks on company records

The OTP step on director amendments sits alongside two other checks CIPC runs on the same company profile. CIPC validates customer contact details to stop duplicate cellphone numbers and email addresses being reused across accounts, and it continues to require a beneficial ownership declaration alongside the annual return. These are three separate checks on three separate aspects of a company's filing, and passing one says nothing about the other two. A company that keeps its directors current and confirmed through OTP can still be in default on its beneficial ownership filing or its annual return, so a director amendment is a reasonable moment to check the other two filings are also current on the same CIPC profile.

A delayed loan from a missed OTP

Adding a co-director to access a loan

Here is an illustrative example. A sole director of a small Pty Ltd takes on a business partner to help qualify for a R250,000 working capital loan that the bank wants secured against two directors. The accountant files the CoR39 adding the new co-director. CIPC sends the OTP to the number it holds on file for the existing director, who changed phones three months earlier and never updated CIPC eServices. The window passes before anyone sees the message, the application is terminated, and the filing has to start again. The refiling itself costs little beyond the accountant's time, roughly two hours at R450 an hour, but the loan drawdown that depended on the second director being registered slips by at least a week while the paperwork is redone.

What to do this week

  • Log into CIPC eServices and check that the cellphone number and email address held for every director are current, since that is where the OTP will be sent.
  • If you are about to add, remove or replace a director, tell every current director to expect an OTP and to act on it immediately once the filing is submitted.
  • Read CIPC's Notice 51 of 2026 before filing, so the board knows the confirmation step is coming.
  • Keep a note of the date and time any director amendment is filed, so a terminated application can be identified and refiled without delay.

What is still uncertain

CIPC has not published the length of the OTP confirmation window, only that a missed window ends the application. It has also not said when the process extends beyond small companies where directors and shareholders are the same people, or what the OTP step will look like for a company with directors who hold no shares. We'll update this post once CIPC confirms either point.