Starting a business in Nigeria: build the compliance map first

The foundation that most businesses share

Choose an appropriate structure and register it through the CAC. Record beneficial ownership and governance information accurately, then keep post-incorporation changes and annual returns current. Obtain or retrieve the applicable Tax ID and understand which federal, state and local tax obligations apply.

If you collect personal data through forms, payments, employment, delivery or marketing, the Nigeria Data Protection Act framework is relevant. Data protection begins with knowing what you collect, why you need it, who receives it, how long it is kept and how it is secured.

Then follow the business activity

Sector regulation attaches to what you actually do. Food, drugs, cosmetics, medical devices and other regulated products can bring NAFDAC requirements. Standards and manufactured goods may involve SON. Financial services may involve the CBN or SEC. Communications can involve the NCC. Consumer-facing businesses remain subject to consumer-protection duties.

• Exporting generally starts with NEPC exporter registration.
• Agricultural exports may require NAQS inspection and a phytosanitary certificate that meets the destination country’s rules.
• Processed or semi-processed foods may also require NAFDAC documentation or export certification.
• The buyer, logistics route, customs process and destination market can each add documents beyond Nigerian registration.

Example: exporting farm produce is not one licence. It is a chain of entity, exporter, product-health, customs, buyer and destination requirements.

Build a one-page regulatory map

Write down the activity, product, customer, channel, location and destination. For each one, list the possible authority, required evidence, application owner, renewal date and official source. Mark every uncertain item for professional confirmation before money is committed.

This map prevents the common mistake of discovering a missing permit after inventory has been produced, a campaign has launched or goods have reached a border.

Do not confuse a checklist with advice

Regulations, portals, names, fees and thresholds change. A useful checklist points you towards the right question; it does not replace current advice from the relevant agency or a qualified professional.

A practical sequence from idea to operation

First describe the activity in plain language: what will be sold, to whom, through which channel, from which location and into which market. Next choose a legal structure that fits ownership, liability, financing and continuity. Register the entity accurately, open appropriate financial accounts and establish tax identity and bookkeeping before transactions become difficult to reconstruct.

Then map people, premises, products, data and sector rules. Employment introduces contracts, payroll and workplace responsibilities. Physical premises may introduce state and local approvals. Personal-data collection introduces privacy duties. Regulated products and professional services create additional approval paths.

The farm-produce export example

An agricultural exporter may need an incorporated or registered entity, tax records and NEPC exporter registration. Plant products can require NAQS inspection and phytosanitary certification. The buyer may require traceability, residue, moisture, quality or packaging evidence. Processed food can create a NAFDAC pathway, while customs, logistics, insurance and destination-country rules remain separate parts of the transaction.

The commercial contract should align with operational reality: product specification, inspection, rejection, delivery terms, currency, payment, insurance and responsibility at each border. A missing requirement discovered after harvest or loading can destroy margin and trust.

Common mistakes to avoid

Create the map before committing irreversible money. When the requirement is unclear, write the question precisely and obtain current confirmation from the responsible authority or qualified professional.

• Registering an entity name that does not fit the intended ownership or regulated activity.
• Paying an intermediary without verifying the application on the official portal.
• Assuming a certificate has no renewal or continuing obligation.
• Producing labels, packaging or inventory before requirements are confirmed.
• Keeping every login and document in one consultant’s personal account.
• Treating informal advice from another business as a regulatory decision.