MSME Compliance Checklist India 2026: Stay Registered, Stay Penalty-Free
MSMEs — the 6.3 crore businesses that employ 11 crore Indians — carry the heaviest compliance load with the smallest legal teams. The good news: most MSME compliance is registration + filing discipline, not legal complexity. The bad news: missing one filing draws penalties that compound.
Here is the complete MSME compliance checklist for 2026, organised by frequency.
One-Time Registrations (Do These First)
- Udyam registration — free, online, unlocks priority-sector lending and scheme access. Aadhaar-based, takes 10 minutes.
- GST registration — mandatory when turnover crosses ₹40 lakh (goods) or ₹20 lakh (services); most B2B MSMEs register voluntarily earlier
- Shops & Establishments — state registration from day one (Maharashtra, Karnataka, Tamil Nadu etc. each have their own portal)
- PAN/TAN for the business entity
- Professional tax registration (state-specific, e.g., Maharashtra PT)
- MSME trademark registration — 50% fee concession on government fees for MSMEs
Monthly and Quarterly Filings
- GST returns — GSTR-1 (monthly/quarterly by scheme) and GSTR-3B; late fees ₹50/day (₹20 for NIL)
- TDS returns — quarterly (Q1–Q4) with challan payments
- PF/ESI challans — monthly when employee thresholds are crossed (20+ for EPF, 10+ for ESI)
- Professional tax — monthly/quarterly depending on state
GST late fees are the classic MSME trap: ₹50 per day per return, but each return, each month, plus interest at 18% on tax due. Three years of neglect can produce a penalty larger than the business's annual profit.
Annual Compliance
- Income tax return — presumptive 44AD for many small businesses, or regular books
- GST annual return (GSTR-9) — mandatory for turnover above ₹2 crore
- Audit — tax audit (44AB) above turnover thresholds
- Labour law annual returns — state-specific
- Board/partnership documentation — minutes and records for registered entities
Contracts Every MSME Should Have
Compliance is not just filings — it is the paper trail that keeps disputes out of court:
- A sales/purchase order template with clear terms, liability caps, and governing law
- An NDA for every customer relationship that shares business information — generate one in 60 seconds with Lexacore's generator
- Vendor agreements with DPDP-compliant data clauses (see our data protection guide)
- Employment agreements covering notice, IP, and confidentiality (see our employment clauses guide)
- Review every contract with ContractIQ — it flags uncapped liability and missing clauses that routinely bankrupt small businesses
DPDP Act for MSMEs: Yes, It Applies
If you collect a customer's phone number or an employee's Aadhaar, you are a Data Fiduciary. The DPDP Act has no MSME exemption — and its penalties start at ₹10 crore for rights violations. Proportionate steps for small businesses: documented consent, a simple privacy notice, password hygiene, and encryption for customer records. Our DPDP guide breaks it down in plain language.
MSMEs that automate compliance monitoring stop missing deadlines entirely. ComplianceRadar tracks MCA, GST, DPDP and labour updates in real time and flags what applies to you — for less than the cost of one late-filing penalty. Try the interactive demo.