Nigeria NGO Compliance Checklist for 2026: Complete Guide

By Rosana Empowerment Foundation (REF)
Updated Edition – 2026

For nonprofit organisations in Nigeria, good intentions alone are no longer enough. A credible civil society organisation must be able to demonstrate that its governance structures are functioning, its statutory filings are up to date, its financial records are properly maintained, its employees are protected, donor funds are properly accounted for, personal data is handled responsibly and its programmes comply with applicable laws and agreements.

Compliance should therefore not be treated as something an organisation remembers only when a donor asks for documents, when an audit is approaching, or when a regulatory agency sends a notice.

Compliance is a continuous organisational responsibility.

Rosana Empowerment Foundation (REF) believes that strong governance, transparency, accountability and responsible stewardship are fundamental to sustainable community development. For an NGO working with women, children, youth, vulnerable populations, communities, donors, government institutions and development partners, compliance is particularly important.

This practical guide provides a structured 2026 NGO Compliance Checklist for nonprofit organisations operating in Nigeria. It covers governance, the Corporate Affairs Commission (CAC), taxation, SCUML and AML/CFT, data protection, human resources, financial management, donor and programme compliance, operational risk and state/local government requirements.

Important: This article is an organisational compliance guide and self-assessment tool. It is not legal, tax, accounting or professional advice. Requirements can vary according to an organisation’s legal status, activities, workforce, turnover, funding arrangements, location and applicable regulatory thresholds. NGOs should obtain professional advice where necessary.

Why NGO Compliance Matters

An NGO may be doing excellent work in communities and still face serious institutional problems if its statutory and administrative obligations are neglected.

For example, an organisation may have:

• an impressive programme portfolio but outdated corporate records;
• strong donor relationships but incomplete financial documentation;
• qualified staff but weak employment records;
• substantial community impact but inadequate safeguarding systems;
• a valid registration certificate but overdue statutory filings;
• donor funding but inadequate supporting documentation;
• a website collecting personal information without an appropriate privacy framework.

Compliance helps bridge the gap between doing good work and demonstrating that the work is being done responsibly.

For organisations seeking grants, partnerships, accreditation, membership of international or regional bodies, government collaboration or institutional funding, compliance documentation can also become an important part of due diligence.

The Corporate Affairs Commission (CAC) identifies incorporated trustees as one of the categories of organisations it registers and regulates, and its mandate includes corporate governance, annual returns and record-keeping.

1. Start With an Organisational Compliance Register

Every NGO should maintain a central compliance register.

This can be a physical compliance file, spreadsheet, secure cloud folder or dedicated compliance management system.

At minimum, the register should contain:

Organisation Name	__________________________
CAC Registration Number	__________________________
Tax ID/TIN	__________________________
SCUML Certificate Number	__________________________
NFIU/goAML Reporting Entity ID	__________________________
Reporting Year	__________________________
Compliance Officer	__________________________
Data Protection Officer	__________________________
Registered Address	__________________________
Principal Office	__________________________
Current Trustees/Board	__________________________
External Auditor	__________________________

The purpose is simple: the organisation should know what it is required to comply with, who is responsible and when each obligation is due.

2. Governance Compliance

Governance is the foundation of a credible nonprofit organisation.

A properly constituted board or governing body should not exist merely on paper. It should actively provide oversight, approve policies, review finances, monitor management and protect the organisation’s mission.

Governance checklist

Requirement	Frequency	Status
Board meetings held according to governing documents	Quarterly	☐
Annual General Meeting, where applicable	Annually	☐
Board resolutions documented	Ongoing	☐
Minutes signed and archived	After meetings	☐
Conflict-of-interest declarations updated	Annually	☐
Board/trustee register updated	Annually	☐
Organisational policies reviewed	Annually	☐
Board performance evaluation conducted	Annually	☐
Trustee tenure/succession arrangements reviewed	Annually	☐

Why board minutes matter

Minutes provide evidence that decisions were properly considered and approved.

Important organisational decisions should not depend solely on informal conversations, WhatsApp messages or verbal instructions.

A good board file should contain:

• meeting notices;
• agenda;
• attendance;
• minutes;
• resolutions;
• financial reports;
• management reports;
• policy approvals;
• conflict-of-interest declarations;
• action points and follow-up reports.

This creates an institutional memory and provides evidence of proper oversight.

3. Corporate Affairs Commission Compliance

For an NGO registered as an incorporated trustee, maintaining accurate corporate records is essential.

The CAC provides services specifically for incorporated trustees, including post-incorporation filings and annual returns. Its current published fee schedule also lists annual returns and other post-incorporation/miscellaneous filings for incorporated trustees.

CAC checklist

Requirement	Frequency	Status
Annual Returns filed	Annually	☐
Changes to trustees reported	As required	☐
Constitution amendments filed	As required	☐
Registered address updated	As required	☐
Special resolutions filed	As required	☐
Certificate of Incorporation kept safely	Ongoing	☐
CAC status report maintained	Ongoing	☐
Certified copies of key documents maintained	Ongoing	☐

Documents an NGO should maintain

A central CAC file should ideally contain:

1. Certificate of Incorporation;
2. Constitution;
3. current trustee information;
4. CAC status report;
5. evidence of annual returns;
6. notices of changes;
7. resolutions affecting the organisation;
8. amendments to the constitution;
9. registered office information;
10. other relevant CAC filings.

CAC itself describes its role as including registration, regulation, corporate governance, annual returns and record-keeping.

4. Tax Compliance for NGOs

Being a nonprofit organisation does not mean that every tax obligation automatically disappears.

An NGO should determine which taxes apply to its specific activities and maintain evidence of compliance.

Nigeria’s tax administration framework has undergone significant changes. The Nigeria Revenue Service (NRS) is now the federal tax authority under the 2025 reforms, and the Nigeria Tax Administration Act 2025 commenced in January 2026.

The NRS also provides taxpayer services for tax registration, filing, payments, tax clearance and compliance management.

Tax compliance checklist

Requirement	Frequency	Status
Register with NRS	One-off	☐
Maintain valid Tax ID	Ongoing	☐
Annual income tax return	Annually	☐
Review eligibility for tax exemption	As applicable	☐
PAYE deducted/remitted	Monthly	☐
Withholding Tax obligations reviewed	As applicable	☐
VAT obligations reviewed	Monthly/as applicable	☐
Reverse-charge VAT reviewed for relevant foreign services	As applicable	☐
Accounting records maintained	Ongoing	☐
Financial statements prepared	Annually	☐
ITF obligations assessed	Annually/as applicable	☐

The NRS Tax ID portal confirms that organisations and trustees may have Tax ID obligations and provides a mechanism for retrieving Tax IDs using organisational information.

An important lesson for NGOs

Do not assume:

“We are an NGO, therefore we do not need to worry about tax.”

A better approach is:

“We are an NGO, therefore we must understand which tax rules apply to our organisation and document our compliance position.”

Where tax exemption is available, the organisation should maintain the relevant documentation demonstrating its eligibility and status.

5. SCUML and AML/CFT Compliance

Anti-money laundering and counter-terrorist financing compliance is increasingly important for nonprofit organisations.

NGOs should understand their obligations relating to:

• donor identification;
• source of funds;
• suspicious transactions;
• large transactions;
• record keeping;
• internal controls;
• staff awareness;
• reporting requirements.

The Special Control Unit Against Money Laundering (SCUML) publishes registration guidance specifically covering NGOs/nonprofit organisations and identifies documents such as registration certificates, trustee information and constitutions among the documents required for NGO registration.

SCUML/AML-CFT checklist

Requirement	Frequency	Status
Valid SCUML certificate	Ongoing	☐
AML/CFT policy	Ongoing	☐
Know Your Donor procedures	Ongoing	☐
Donor/source-of-funds due diligence	Ongoing	☐
NFIU/goAML registration where applicable	One-off	☐
Required transaction reporting	As required	☐
Suspicious transaction reporting	As required	☐
AML/CFT staff training	Annually	☐
Compliance records maintained	Ongoing	☐

Know Your Donor

NGOs should be able to answer basic questions about significant sources of funding:

• Who provided the funds?
• Through which organisation were the funds received?
• What is the purpose of the funding?
• Is there a grant agreement?
• What restrictions apply?
• What reporting obligations exist?
• Is the ultimate source identifiable where funding comes through an intermediary?

This is particularly important where an NGO receives funding through a sub-grant or intermediary partner.

An organisation should not describe an indirect sub-grant as a direct grant from an international organisation if the funding was actually channelled through another implementing or intermediary organisation.

Accuracy in funding disclosure is itself part of good governance.

6. Data Protection and Privacy Compliance

NGOs routinely collect personal information.

Consider the information collected through:

• beneficiary registration;
• attendance sheets;
• health programmes;
• scholarship applications;
• staff records;
• volunteer forms;
• donor databases;
• photographs;
• surveys;
• monitoring and evaluation;
• websites;
• social media;
• online registration forms.

This makes data protection an important organisational responsibility.

Data protection checklist

Requirement	Frequency	Status
Privacy Policy available	Ongoing	☐
Data Protection Officer designated	Ongoing	☐
Staff trained on privacy	Annually	☐
Data processing records maintained	Ongoing	☐
Data breach procedure available	Ongoing	☐
Data retention arrangements documented	Ongoing	☐
Data access/security controls reviewed	Regularly	☐
NDPC compliance obligations assessed	Annually	☐
Compliance Audit Return filed where applicable	Annually	☐

Protect beneficiaries, not merely databases

Data protection is particularly important for NGOs because some beneficiary information may be highly sensitive.

For example, a health intervention may involve information about a person’s medical condition. A child-protection programme may contain sensitive information about minors. A GBV intervention may involve highly confidential information.

Such information should never be casually published online.

Photographs should also be handled responsibly. Before publishing identifiable photographs of beneficiaries, organisations should consider consent, safeguarding, dignity, purpose and applicable privacy requirements.

7. Human Resources Compliance

Employees and volunteers are among an NGO’s most important assets.

At the same time, staff-related compliance failures can create financial, legal and reputational risks.

HR compliance checklist

Requirement	Frequency	Status
Written employment contracts	Ongoing	☐
Employee handbook	Ongoing	☐
Pension obligations	Monthly	☐
Employee Compensation/NSITF obligations	As applicable	☐
Group Life Insurance	As applicable	☐
Health insurance/NHIA arrangements	As applicable	☐
PAYE compliance	Monthly	☐
Personnel files updated	Ongoing	☐
Expatriate permits/quota	As applicable	☐

A proper personnel file should contain relevant employment documentation, including:

• employment letter;
• job description;
• identification documents where appropriate;
• emergency contact;
• tax information;
• pension information;
• performance records;
• leave records;
• disciplinary records where applicable;
• training records.

8. Financial Management Compliance

Financial accountability is one of the most important areas of NGO governance.

A nonprofit should be able to trace money from:

Source → Bank account → Budget → Activity → Supporting documents → Report → Audit

Financial management checklist

Requirement	Frequency	Status
Bank reconciliation	Monthly	☐
Annual budget approved	Annually	☐
Management accounts	Monthly	☐
External audit	Annually	☐
Asset register	Quarterly	☐
Procurement documentation	Ongoing	☐
Payment vouchers	Ongoing	☐
Receipts/invoices maintained	Ongoing	☐
Grant expenditure reconciled	As required	☐

Separate programme money from organisational assumptions

Every project should have a clear financial trail.

For grant-funded activities, maintain:

• grant agreement;
• approved budget;
• budget revisions;
• payment records;
• procurement documents;
• invoices;
• receipts;
• payroll records;
• activity reports;
• beneficiary records;
• financial reports;
• donor correspondence;
• bank evidence.

A donor should be able to understand how funds were used without relying on verbal explanations.

9. Donor and Programme Compliance

An NGO’s relationship with a donor is governed not only by trust but also by the grant agreement.

Donor compliance checklist

Requirement	Frequency	Status
Donor reports submitted on time	As required	☐
Grant agreement complied with	Ongoing	☐
Supporting documentation maintained	Ongoing	☐
Programme indicators monitored	As required	☐
M&E reports completed	As required	☐
Budget expenditure tracked	Monthly/quarterly	☐
Donor assets recorded	Ongoing	☐
Grant close-out completed	At project end	☐

A strong grant file should answer five questions

1. What was funded?

2. Who benefited?

3. Where was the project implemented?

4. What was achieved?

5. How was the money accounted for?

If an NGO cannot answer these questions with documentary evidence, its grant management system needs improvement.

10. State and Local Government Compliance

Federal compliance is not necessarily the end of the process.

Depending on the state, local government area and nature of activities, an NGO may encounter additional registration, premises, signage, fire-safety or sector-specific requirements.

State/local checklist

Requirement	Frequency	Status
State NGO registration where required	One-off	☐
Business/premises registration where applicable	As required	☐
Fire Safety Certificate	Annually/as required	☐
Signage/advertisement permit	Annually/as required	☐
Sector-specific operating permit	As applicable	☐
Local government requirements reviewed	Annually	☐

For example, an organisation operating a health facility, school or specialised service may face regulatory requirements beyond those applicable to a general community development NGO.

11. Operational Risk and Business Continuity

NGOs should also consider what happens when something goes wrong.

A good compliance system should address:

• financial fraud;
• cyberattack;
• loss of records;
• theft;
• fire;
• equipment failure;
• staff turnover;
• loss of key personnel;
• interruption of donor funding;
• security incidents;
• reputational crises;
• interruption of programme activities.

Operational checklist

Requirement	Frequency	Status
Risk register updated	Quarterly	☐
Insurance reviewed	Annually	☐
Business Continuity Plan reviewed	Annually	☐
IT backups completed	Monthly	☐
Cybersecurity controls reviewed	Quarterly	☐
Incident reporting system	Ongoing	☐

12. The 2026 NGO Compliance Calendar

One of the easiest ways to improve compliance is to stop treating it as a once-a-year exercise.

Every Month

Review:

• PAYE;
• withholding tax;
• VAT obligations;
• reverse-charge VAT where relevant;
• payroll;
• bank reconciliation;
• financial records;
• grant expenditure;
• outstanding statutory obligations.

Every Quarter

Review:

• Board meetings;
• asset verification;
• risk register;
• programme performance;
• donor reporting schedules;
• compliance register;
• procurement;
• safeguarding;
• cybersecurity.

Every Year

Review:

• CAC Annual Returns;
• tax returns;
• tax-exemption position where applicable;
• external audit;
• financial statements;
• organisational policies;
• board performance;
• trustee succession;
• staff compliance training;
• AML/CFT training;
• data-protection obligations;
• state/local permits;
• insurance;
• business continuity plan.

13. REF’s Recommended Compliance Filing System

For a growing NGO such as Rosana Empowerment Foundation, a structured digital and physical filing system can significantly improve readiness for audits, donor due diligence and institutional applications.

REF recommends maintaining at least the following folders:

Folder 01 – Corporate & Legal

• CAC certificate;
• constitution;
• CAC status report;
• annual returns;
• trustee records;
• resolutions;
• legal correspondence.

Folder 02 – Governance

• board meeting notices;
• agendas;
• signed minutes;
• resolutions;
• conflict-of-interest declarations;
• board evaluations.

Folder 03 – Finance

• bank statements;
• reconciliations;
• payment vouchers;
• receipts;
• invoices;
• budgets;
• management accounts;
• audited financial statements.

Folder 04 – Tax

• Tax ID;
• tax filings;
• payment receipts;
• exemption documentation;
• PAYE;
• WHT;
• VAT records.

Folder 05 – SCUML/AML-CFT

• SCUML certificate;
• AML/CFT policy;
• donor due diligence;
• transaction records;
• reporting evidence;
• training records.

Folder 06 – Data Protection

• privacy policy;
• DPO appointment;
• data-processing records;
• consent forms;
• breach procedures;
• training records;
• compliance documentation.

Folder 07 – Human Resources

• contracts;
• personnel files;
• payroll;
• pension;
• insurance;
• leave;
• training.

Folder 08 – Projects

For each project:

• proposal;
• agreement;
• budget;
• workplan;
• attendance;
• photos;
• monitoring;
• narrative report;
• financial report;
• beneficiary evidence;
• donor correspondence.

Folder 09 – Procurement & Assets

• procurement plans;
• quotations;
• evaluation;
• approvals;
• purchase orders;
• invoices;
• delivery notes;
• asset register.

Folder 10 – Partnerships & Donors

• MoUs;
• grant agreements;
• partner due diligence;
• sub-grant documentation;
• reports;
• correspondence.

14. NGO Compliance Scorecard

Organisations can conduct a simple quarterly self-assessment.

Compliance Area	Score
Governance	____ / 10
Tax Compliance	____ / 10
Financial Management	____ / 10
HR Compliance	____ / 10
Data Protection	____ / 10
SCUML / AML-CFT	____ / 10
Donor Compliance	____ / 10
Corporate Compliance	____ / 10
State & Local Compliance	____ / 10
Overall	____ / 90

Suggested interpretation

75–90: Strong compliance position
The organisation has established systems but should continue monitoring them.

60–74: Moderate compliance position
Some important gaps require corrective action.

45–59: High-priority improvement required
The organisation should establish a formal corrective-action plan.

Below 45: Significant compliance risk
Management and the governing body should urgently review the organisation’s statutory, financial and operational systems.

This scorecard is an internal management tool, not an official regulatory rating.

15. Compliance Is More Than Paperwork

It is tempting to think of compliance as collecting certificates.

That is not enough.

An organisation can have:

• a CAC certificate;
• an audit report;
• a tax ID;
• a SCUML certificate;
• a constitution;

and still have weak governance.

True compliance is demonstrated through consistent organisational behaviour.

It means that:

Board decisions are documented.

Funds are properly accounted for.

Staff are treated fairly.

Beneficiary information is protected.

Donors receive accurate reports.

Conflicts of interest are disclosed.

Programme results are documented.

Assets are tracked.

Policies are actually implemented.

Statutory obligations are monitored.

Problems are identified and corrected.

That is the difference between having compliance documents and having a compliance culture.

16. Why Compliance Strengthens Donor Confidence

Donors increasingly conduct due diligence before providing funds.

They may ask for:

• registration documents;
• governance information;
• audited accounts;
• bank information;
• tax documents;
• policies;
• safeguarding procedures;
• AML/CFT documentation;
• data protection policies;
• programme reports;
• evidence of previous projects;
• references;
• procurement procedures.

An NGO that maintains these records continuously is much better positioned to respond quickly.

For REF, this is particularly relevant because the Foundation works through partnerships and community-focused programmes involving women, children, youth and vulnerable populations.

A well-maintained compliance system supports not only statutory accountability but also institutional credibility and programme sustainability.

17. Compliance and Transparency in Funding

Funding transparency deserves special attention.

Where an NGO receives funds directly from a donor, the organisation should describe that relationship accurately.

Where funds come through another organisation, the organisation should identify the arrangement appropriately.

For example:

Incorrect or potentially misleading description:

“REF received a direct grant from International Donor X.”

Where the actual arrangement was:

“REF received a sub-grant through Partner Organisation Y under a programme supported by International Donor X.”

The second description is more transparent because it distinguishes the ultimate funding source from the organisation through which REF received the funds.

This is especially important when preparing:

• audited financial statements;
• donor reports;
• grant applications;
• institutional profiles;
• ECOSOCC applications;
• government submissions;
• partnership due-diligence documents.

18. Compliance Should Be Reviewed by the Board

Compliance should not be left entirely to an administrator or programme officer.

The Board or governing body should receive periodic compliance updates.

A quarterly board compliance report could include:

Corporate: CAC status and outstanding filings

Tax: returns, payments and outstanding issues

Finance: bank reconciliation, budget performance and audit matters

HR: staffing, payroll and statutory obligations

AML/CFT: SCUML, donor due diligence and reporting

Data protection: privacy, incidents and staff training

Programmes: donor reporting and implementation status

Risk: major organisational risks and mitigation

Corrective action: outstanding compliance issues and responsible persons

This transforms compliance from an administrative burden into a governance instrument.

19. Final 2026 Master Checklist

Before closing a reporting year, management should ask:

Governance

☐ Are board meetings properly documented?
☐ Are minutes signed and archived?
☐ Are conflicts of interest declared?
☐ Are policies reviewed?
☐ Is trustee information current?

CAC

☐ Are annual returns up to date?
☐ Are organisational changes properly filed?
☐ Is the CAC status report current?

Tax

☐ Is the organisation’s Tax ID active?
☐ Are applicable tax returns filed?
☐ Are PAYE obligations up to date?
☐ Are WHT and VAT obligations reviewed?
☐ Is tax exemption status properly documented where applicable?

SCUML/AML-CFT

☐ Is the SCUML certificate valid?
☐ Is the AML/CFT policy current?
☐ Is donor due diligence conducted?
☐ Are required reports submitted?
☐ Are staff trained?

Data Protection

☐ Is there a privacy policy?
☐ Is a DPO designated where required?
☐ Are data-processing activities documented?
☐ Are staff trained?
☐ Are data breaches properly managed?

Human Resources

☐ Do employees have contracts?
☐ Are personnel files complete?
☐ Are payroll and statutory obligations current?
☐ Are insurance and pension obligations reviewed?

Finance

☐ Are bank reconciliations current?
☐ Is the budget approved?
☐ Are management accounts prepared?
☐ Are procurement records complete?
☐ Is the asset register updated?
☐ Has the annual audit been completed?

Programmes and Donors

☐ Are donor reports submitted on time?
☐ Are grant conditions being followed?
☐ Are beneficiary records maintained?
☐ Are project results documented?
☐ Are project photographs properly captioned?
☐ Are grant expenditures supported?

Operations

☐ Is the risk register updated?
☐ Are backups working?
☐ Is cybersecurity reviewed?
☐ Is insurance current?
☐ Is the Business Continuity Plan reviewed?

State and Local

☐ Are applicable state registrations current?
☐ Are premises requirements satisfied?
☐ Is fire safety documentation current?
☐ Are signage permits current where required?
☐ Are sector-specific permits reviewed?

Conclusion: Building NGOs That Communities Can Trust

The future of civil society in Nigeria depends not only on the number of projects organisations implement but also on the quality of the institutions delivering those projects.

A strong NGO must be able to demonstrate integrity, accountability, transparency, responsible financial management, effective governance and measurable community impact.

Compliance should therefore not be viewed simply as a regulatory obligation.

It is an investment in:

trust.

credibility.

institutional sustainability.

donor confidence.

community protection.

good governance.

and long-term impact.

Rosana Empowerment Foundation (REF) encourages Nigerian nonprofit organisations to review their compliance position regularly throughout 2026 rather than waiting until a regulator, auditor, donor or funding partner requests the documentation.

The strongest organisations are not necessarily those that have never encountered a compliance challenge. They are organisations that identify gaps early, document them honestly, take corrective action and continuously improve their systems.

For REF and other Nigerian civil society organisations, the goal should be simple:

Do good work. Document it properly. Account for resources responsibly. Protect the people we serve. Govern with integrity.

That is how community impact becomes sustainable institutional impact.

Important 2026 Regulatory Note

The compliance environment in Nigeria is evolving. In particular, Nigeria’s tax administration framework changed with the 2025 tax legislation taking effect from January 2026, including the transition to the Nigeria Revenue Service (NRS). Organisations should therefore avoid relying indefinitely on older compliance templates that refer only to previous institutional arrangements.

Similarly, CAC continues to provide specific services and filing requirements for incorporated trustees, while SCUML maintains NGO/NPO registration guidance.

REF recommends that organisations verify current requirements directly with the relevant regulator or qualified professional before making statutory filings or relying on a specific deadline, threshold or exemption.

Official reference points

Corporate Affairs Commission (CAC) – corporate registration, incorporated trustees and statutory filings.

Disclaimer: This article is intended as a general educational and organisational self-assessment guide. It does not replace legal, tax, accounting, regulatory, data-protection or other professional advice. Requirements may differ depending on an NGO’s legal structure, activities, staffing, funding arrangements, state of operation and applicable regulatory thresholds.

Nigeria Revenue Service (NRS) – federal tax administration and taxpayer services.

SCUML – AML/CFT and SCUML-related information for covered entities, including NGOs/NPOs.