When does a director become a director in South Africa? Not on the day CIPC updates the register, even though that is what many people assume.
There is a surprisingly common assumption in South African company secretarial practice that a new director only officially becomes a director once CIPC has processed the director amendment and issued the updated company records.
It is an understandable assumption. After all, when somebody wants to confirm who the directors of a company are, the first place they will usually look is the Companies and Intellectual Property Commission (CIPC). Banks, auditors, accountants, attorneys and other third parties also routinely ask for CIPC records when they need evidence of a company's directors.
That can make it feel as though CIPC is the point at which the appointment becomes legally effective.
Under the Companies Act 71 of 2008, however, that is not how the process works.
There is an important distinction between appointing a director and notifying CIPC that the appointment has taken place. Understanding that distinction has become increasingly important as the administrative process surrounding director amendments has become more dependent on identity verification, OTPs and CIPC's online systems.
So, legally, when does a director become a director?
Section 66(7) of the Companies Act provides the starting point.
A person becomes entitled to serve as a director when that person has been properly appointed or elected in accordance with the relevant provisions of the Act and has delivered written consent to the company confirming that they consent to serve as a director.
In other words, the Companies Act does not say that a person becomes entitled to serve when CIPC processes the CoR39.
It links that entitlement to the valid appointment or election of the person and their written consent to serve.
That distinction is more than a technical interpretation of the legislation. In a 2025 High Court judgment, Royal AM Football Club (Pty) Ltd v National Soccer League and Others, the Court expressly recognised that a person becomes a director upon appointment and written acceptance, with notification to CIPC following thereafter.
There is, of course, another important qualification. Section 66(6) provides that an appointment or election is a nullity if the person was ineligible or disqualified in terms of section 69 at the time of the appointment. A company therefore cannot simply pass a resolution appointing someone and assume that this is sufficient regardless of the circumstances. The appointment itself must be valid under the Companies Act and the company's Memorandum of Incorporation.
CIPC records the change. It does not necessarily create it.
This is where the distinction becomes particularly clear.
Section 70(6) of the Companies Act requires every company to file a notice with CIPC within 10 business days after a person becomes or ceases to be a director.
The wording and sequence are significant.
The person first becomes a director. The company then has an obligation to notify CIPC of that event.
If CIPC registration were itself the legal act that created the directorship, the legislation would not logically require the company to notify CIPC within a prescribed period after the person had already become a director.
The CoR39 is consequently better understood as the mechanism through which the company notifies CIPC of the change and enables the public record to be updated.
CIPC's own CoR39 describes itself as a "Notice of Change of Directors", which is consistent with this distinction.
This does not make the CIPC filing optional or unimportant. The company still has a statutory obligation to file the change within the required period, and accurate CIPC records are enormously important when third parties need to establish who has authority to act on behalf of a company.
It does mean, however, that we should not confuse the registration of the change with the legal event that gave rise to it.
Why the distinction matters even more with the CIPC OTP process
This issue has become far more visible since CIPC introduced enhanced authentication for director amendments.
CIPC implemented identity verification and multifactor authentication for director amendments in December 2023 as part of its efforts to reduce unauthorised changes to company records. The process introduced OTP verification for the filer as well as directors affected by appointments and resignations, together with additional identity verification requirements.
The rationale is entirely understandable. Changing the directors of a company is a significant event, and an unauthorised director amendment can have serious consequences.
The practical reality, however, is that the statutory event taking place inside the company and the administrative event taking place at CIPC do not always happen at exactly the same time.
An appointment may have been properly approved in accordance with the Companies Act and the company's MOI. The incoming director may have provided written consent. The effective appointment date may therefore already have arrived, while the CIPC filing is still working its way through the administrative process.
OTP issues, incorrect contact information, identity verification problems or other filing difficulties can all complicate the process. CIPC itself provides procedures for dealing with director amendment problems and confirms that OTP verification forms part of the automated director amendment process.
That administrative delay does not automatically move the legal appointment date to the date on which the CIPC certificate eventually arrives.
The director's responsibilities do not wait for the CIPC certificate
This is perhaps the most important practical consequence.Once a person has validly become entitled to serve as a director, being appointed to the board is not merely a title that is waiting for CIPC to activate.
Directorship carries real statutory duties and potential liability.
The Companies Act imposes duties relating to the manner in which directors exercise their powers and perform their functions, including requirements relating to good faith, proper purpose, the best interests of the company, conflicts of interest and the required standard of care, skill and diligence.
Those obligations attach to the person's role as a director. They should not be treated as though they only begin when somebody downloads an updated disclosure certificate from CIPC.
For boards, company secretaries and professional advisers, this means that the effective date of appointment needs to be properly documented and understood, particularly where there is a delay between the internal corporate action and the corresponding CIPC update.
A practical example
Consider a company whose shareholders validly appoint a new director on 1 September.
The appointment complies with the company's MOI and the Companies Act, the individual is eligible to serve, and the required written consent is delivered to the company on the same day.
The company then starts the CIPC director amendment process.
An OTP problem prevents the transaction from being completed immediately and the CIPC records are only updated on 8 September.
It would be incorrect simply to assume that the individual only became a director on 8 September because that is the date appearing on the subsequently updated CIPC record.
The legal question is whether the requirements for the person to become entitled to serve as a director were satisfied on 1 September.
If they were, the later CIPC update records the change. It does not necessarily determine when the underlying appointment legally took effect.
This distinction can become particularly important if the board makes decisions during the intervening period, if the director signs documents on behalf of the company, or if questions subsequently arise regarding the person's duties or authority.
This is also why company records matter
One of the risks created by an excessive reliance on CIPC records is that companies can begin treating the CIPC database as their corporate governance system.
It isn't.
The company should be able to establish how and when a director was appointed from its own governance records.
That means retaining the relevant shareholder or board resolutions, meeting minutes where applicable, the director's written consent to serve, supporting documentation and evidence of the subsequent CIPC filing.
For professional firms managing company secretarial work on behalf of clients, maintaining that chain of evidence is particularly important. A CIPC disclosure tells you what is currently reflected on the public register. The underlying company records tell you what happened, how it happened and when it became effective.
Those are not always the same question.
What should happen when a new director is appointed?
From a company secretarial perspective, a director appointment should therefore be treated as a governance process rather than simply a CIPC transaction.
Before the filing begins, the company's MOI should be considered together with the relevant provisions of the Companies Act to establish who has the authority to make the appointment and whether the proposed director satisfies the applicable eligibility requirements.
The appointment should then be properly authorised and documented, and the incoming director's written consent to serve should be obtained.
Only once that corporate governance foundation is in place should the CIPC filing be treated as the next step in the process.
Section 70(6) requires the company to notify CIPC within 10 business days after the person becomes or ceases to be a director, so the filing remains an important statutory compliance obligation rather than an administrative task that can simply be dealt with whenever convenient.
The distinction is small, but important
For accountants, company secretaries and governance professionals, the difference between appointment and registration may initially sound like legal semantics.
In practice, it affects how we advise clients, how we maintain statutory and governance records, how we determine effective dates and how directors themselves understand when their responsibilities begin.
CIPC plays an essential role as South Africa's corporate regulator and the custodian of company information, but the public register should not be mistaken for the corporate action itself.
A director does not simply become a director because their name eventually appears on a CIPC disclosure.
The real question is whether the person has been validly appointed or elected in accordance with the Companies Act and the company's MOI, whether they are eligible to serve, and whether they have delivered their written consent to the company.
Once those requirements have been satisfied, the CIPC filing records what has happened.
And that is an important distinction for anyone responsible for keeping a company's governance and compliance records accurate.
