CAC’s Letterhead Crackdown: Months After the Warning, Who Is Actually Complying?

 When the Corporate Affairs Commission (CAC) announced months ago that it would begin enforcing provisions of the Companies and Allied Matters Act 2020 governing information displayed on company business letters, the warning appeared straightforward: companies had to get their corporate paperwork in order or face sanctions.

 But as the enforcement deadline approaches, a more important question emerges: what has actually changed inside Nigerian companies?

 Are corporate letterheads now compliant? Have finance, procurement, legal and administrative departments reviewed their invoices, quotations and official correspondence? Have company secretaries checked whether the names and details appearing on corporate documents match the information held at the CAC?

 Or are thousands of companies still using stationery templates designed years ago?

 The CAC’s position is rooted in existing provisions of CAMA 2020 rather than a newly created requirement. The Commission has moved to enforce provisions requiring companies to disclose specified corporate information on business letters and other official documents.

 Among the information required are the company’s registered name, registration number and registered office addres, together with prescribed details concerning its directors. Where applicable, the names of former directors and the nationality of directors who are not Nigerian must also be reflected.

 On paper, the requirement sounds simple. In practice, it could expose a surprisingly wide compliance gap.

The Letterhead Nobody Checked

 Consider a company that changed directors two years ago.

 Its CAC records may have been updated. Its annual returns may have been filed. Its corporate secretarial records may be accurate.

 But what appears on its letterhead?

 What about the quotation template being used by the sales department? The invoice generated by the accounting software? The purchase order issued by procurement? The PDF quotation emailed to customers? The standard contract cover page? The letter signed by a branch manager? If those documents still contain outdated information, has the company really achieved compliance?

 This is where the CAC intervention becomes more than a stationery issue. It becomes a corporate-control issue.

 A company can have sophisticated compliance policies, an external auditor and a company secretary, yet still have outdated corporate information circulating through ordinary business transactions.

 The question for boards and compliance officers is therefore uncomfortable but necessary: who owns the responsibility for ensuring that every official corporate template remains legally compliant?

A Governance Test Hiding in Plain Sight

 The CAC’s enforcement push also exposes a broader weakness in corporate governance: the disconnect between a company’s statutory records and its everyday operations.

 Director changes, registered-office changes, company-name changes and other corporate alterations often pass through legal or company-secretarial departments. But do those changes automatically trigger a review of every document carrying the company’s name?

 Often, they do not.

 A company may update its CAC records but forget its invoice template.

 It may update its website but overlook its quotation format. It may appoint a new director but continue using old stationery that contains obsolete information

 That raises another question: does the company have a documented process for propagating statutory changes across all business documents?

 If not, the CAC enforcement exercise could expose weaknesses that have little to do with the design of a letterhead and everything to do with internal controls.

 What About the Directors

 The requirement to disclose director information creates another compliance pressure point.

 Companies are to ensure that the information appearing on their documents corresponds with their current statutory position.

 What happens when a director resigns? How quickly is that change reflected across corporate stationery?  What happens when a new director is appointed?

 Is the company expected to update every template immediately? And where a company has foreign directors, has their nationality been properly captured?

 These are not merely administrative questions. They touch on the integrity of corporate records and the ability of regulators, customers, counterparties and other stakeholders to identify who stands behind a registered company.

 For companies operating across multiple subsidiaries or jurisdictions, the challenge could be even greater.

The Compliance Department’s Next Question

 Perhaps the most important question is not whether the CAC has issued its warning.

 It is whether companies have treated the warning as a compliance remediation exercise.

 A serious response should go beyond changing a logo or adding an RC number to the bottom of a letterhead

 Companies should be asking: What official documents do we issue? Who approves them? Which templates are currently in circulation? Who has authority to amend them? How do we withdraw obsolete versions? And how do we prove that the exercise was complete

That last question matters.

 In an increasingly enforcement-driven regulatory environment, “we thought it had been updated” may not be an adequate compliance defence.

The Invoice Proble

 The issue also extends beyond traditional business letters. CAMA contains disclosure requirements affecting other corporate documents, including documents such as invoices, receipts and notices. This potentially creates a much bigger compliance universe.

 A company may have dozens of employees issuing documents daily. Some may use centrally controlled systems; others may download old templates from email archives or shared folders.

 So, how many versions of a company’s official documents are currently circulating

 And perhaps more importantly, does anyone know?

 The risk is particularly acute for large organisations with multiple branches, subsidiaries, sales teams, contractors and third-party service providers.

 A regulatory requirement that appears simple at headquarters can become complicated once it enters the operational ecosystem.

From Warning to Enforcement

 The CAC’s intervention should therefore be viewed against a broader regulatory trend.

 Nigeria’s regulators are increasingly moving away from relying solely on registration, periodic filings and self-reporting. Compliance is becoming more visible in the day-to-day conduct of businesses.

 For companies, that means the old distinction between “legal compliance” and “operations” is becoming increasingly difficult to maintain.

 A letterhead can become a compliance issue. An invoice can become a compliance issue. A director’s information can become a compliance issue.

 A seemingly insignificant omission can therefore become evidence of a wider control weakness.

The Questions Boards Should Be Asking

 As the CAC’s enforcement regime takes shape, boards, company secretaries and compliance officers should be asking some basic but uncomfortable questions.

Who is responsible for removing them?

 Has the company documented its remediation exercise? And, critically, what happens if the CAC asks the company to demonstrate compliance?

 The answers could reveal whether a company has genuinely addressed the regulator’s warning—or simply changed a template and moved on.

Compliance Takeaway

 The CAC’s letterhead enforcement may appear mundane compared with Nigeria’s bigger regulatory battles. But that could be precisely why companies should take it seriously.

 Regulatory breaches do not always begin with spectacular failures. Sometimes they begin with an outdated document sitting in a shared folder, an old invoice template or a letterhead nobody remembered to review.  The CAC has effectively put corporate paperwork under the compliance microscope. The question now is no longer whether companies were warned. It is: months after that warning, are they actually ready to demonstrate that they com