Tax Lawyer in Abuja

Nigerian companies must file annual returns with the CAC, maintain statutory registers, hold annual general meetings unless they are small companies or have a single shareholder, and comply with tax filing obligations. We provide ongoing compliance support.

Non-compliance can result in fines, penalties, and in serious cases, striking off the company from the register. We help businesses get back into compliance and avoid future issues.

For regulated businesses and larger companies, a formal compliance programme is strongly recommended. We design and implement programmes tailored to your industry and risk profile.

In 2025 Nigeria passed four tax laws: the Nigeria Tax Act, the Nigeria Tax Administration Act, the Nigeria Revenue Service (Establishment) Act and the Joint Revenue Board (Establishment) Act. The main changes took effect on 1 January 2026. Together they bring most federal taxes into one Act, set out how taxes are administered and collected, and rename the Federal Inland Revenue Service as the Nigeria Revenue Service.

Under the Nigeria Tax Act 2025, a small company pays company income tax at 0%. A small company is one with a yearly gross turnover of ₦50 million or less and total fixed assets of ₦250 million or less, and businesses that provide professional services do not qualify. A small company must still register for tax and file its returns. Check the current thresholds with us before relying on them.

Companies and business names registered with the Corporate Affairs Commission are given a Tax Identification Number (Tax ID) automatically, linked to their CAC registration number. For individuals, the National Identification Number (NIN) now serves as the Tax ID under the Nigeria Tax Administration Act 2025, and the record can be confirmed or updated with the Nigeria Revenue Service or the state internal revenue service. We can help you check, obtain or correct a Tax ID.

Under the Nigeria Data Protection Act 2023, organisations that the Nigeria Data Protection Commission treats as data controllers or processors of major importance must register with the Commission. Whether you qualify depends on matters such as how many people's data you process and your sector. Registration is renewed every year, and organisations in the higher tiers must also file a yearly compliance audit return, normally by 31 March, through a licensed data protection compliance organisation.

In general it means having a lawful basis for the personal data you collect, telling people how you use it in a clear privacy notice, keeping the data secure, respecting people's rights to access or correct their data, and reporting serious data breaches to the NDPC within 72 hours. We review your practices and prepare the policies and filings you need.