Secretarial Audit in India: Applicability, Process and Penalties

The statutory auditor reviews financial statements. The secretarial auditor reviews everything else: whether the board meetings happened on time, whether ROC filings were made within deadlines, whether FEMA reporting was done correctly, whether director appointments followed the prescribed procedure. It is a compliance examination, not a financial one. The two serve entirely different purposes.

Secretarial audit in India was introduced under Section 204 of the Companies Act 2013. A Practising Company Secretary conducts it, issues a report in Form MR-3, and the report is attached to the board report. It is a public document. However, foreign-owned Private Limited Companies are not automatically subject to secretarial audit; however, where such companies fall within the prescribed applicability criteria, such as being subsidiaries of public companies or meeting the specified thresholds, secretarial audit becomes mandatory. the first secretarial audit usually brings forward the gaps that have been accumulating since incorporation.

What Is Secretarial Audit India and What Does It Cover?

Secretarial audit India under Section 204 is an independent examination by a Practising Company Secretary of the company’s compliance with the Companies Act, SEBI regulations, FEMA, RBI guidelines, labour laws, environmental laws, and all other applicable statutes. The PCS issues Form MR-3 covering each area with observations, qualifications, or adverse remarks where non-compliance is found.

The scope is wider than most companies expect when they first encounter the requirement. It is not limited to the Companies Act. Every applicable statute gets examined.

What it specifically covers for a foreign-owned Private Limited Company:

• Board meetings: frequency, notice period, quorum, minutes within 30 days
• ROC filings: AOC-4, MGT-7, ADT-1, DIR-12, and all other prescribed forms within their deadlines
• Director compliance: DIR-3 KYC by September 30, disqualification checks, appointment formalities
• Share transactions: allotment procedures, transfer procedures, share certificate issuance
• FEMA and RBI: FC-GPR within 30 days of allotment, FC-TRS within 60 days, FLA return by July 15
• Related-party transactions: Board and shareholder approval under Section 188 where required
• Statutory registers: whether all prescribed registers are maintained and updated

Who Needs Secretarial Audit India and What Are the Thresholds?

Not every company is required to undergo secretarial audit India. Under Section 204(1) read with Rule 9 of the Companies (Appointment and Remuneration of Managerial Personnel) Rules,2014, the requirement applies to listed companies, specified public companies, companies with outstanding loans or deposits of Rs. 100 crore or more, private subsidiaries of public companies, and The two private company categories were added by the Companies (Amendment) Act, 2020.

The subsidiary trigger is what catches most foreign-owned subsidiaries. The foreign parent is often a listed entity. If the Indian subsidiary is a subsidiary of that listed entity under the Companies Act definition, secretarial compliance for private limited company is mandatory. Control under Section 2(87), not just shareholding percentage, determines subsidiary status.

Who Conducts It and What Are the Independence Requirements?

Secretarial audit in India must be conducted by a Practising Company Secretary holding a Certificate of Practice from ICSI. The PCS must be independent: they cannot hold securities in the company, cannot be an employee, and cannot be a relative of any director or KMP. The Practising Company Secretary conducting the Secretarial Audit must maintain professional independence and objectivity. The PCS should ensure that there is no conflict of interest or relationship that may compromise the ability to provide an unbiased audit report. A PCS who issues a false or misleading company secretary audit report faces personal liability with ICSI, ROC and SEBI.

The PCS examines records for the entire financial year. The secretarial audit is typically conducted between April and August of the year following the financial year under examination. Form MR-3 must be submitted to the board before the annual report is approved, since it must be attached to the board’s report under Section 134.

What Is the Secretarial Audit Process Step by Step?

The secretarial audit process runs through five stages: engagement and scoping, record collection and access, compliance examination across all applicable statutes, preliminary findings discussion with management, and finalisation of Form MR-3. Standard Private Limited Company audits take two to four weeks. Listed company audits take longer given the wider SEBI compliance scope.

Stage by stage:

Stage 1: Engagement and Scoping

The PCS confirms applicability thresholds, identifies the statutes applicable to the company’s sector, and reviews prior-year filings for context.

Stage 2: Record Collection

The company provides access to all statutory registers, minute books, ROC filing acknowledgments, FEMA compliance records, share transaction records, and director appointment documentation.

Stage 3: Compliance Examination

The PCS works through each applicable statute and conducts a detailed review of the company’s compliance position. The examination includes verification of statutory records, regulatory filings, approvals, corporate actions, and historical compliance matters to identify gaps, risks, and areas requiring corrective action.Common gaps found in foreign-owned companies includes- DIR-3 KYC missed by September 30, FC-GPR filed after 30 days, FLA return not filed for one or more years, board meeting gap exceeding 120 days, minutes not entered within 30 days.

Stage 4: Preliminary Findings Discussion

The PCS shares preliminary observations with management before finalising. Management can provide supporting documentation or acknowledge gaps. The discussion does not change what goes in the report. It ensures the report reflects accurate facts.

Stage 5: Form MR-3 Finalisation

The PCS signs Form MR-3 with the required details, including name, membership number, and Certificate of Practice (CoP) number. The report is annexed to the Board’s Report under Section 204 of the Companies Act, 2013 and forms part of the company’s annual reporting documents.

What Is the Difference Between Observations, Qualifications, and Adverse Remarks?

In a secretarial audit India report, 

• Observations flag minor or technical non-compliance without materially affecting the company’s compliance posture. 
• Qualifications indicate significant non-compliance with a specific provision.
• Adverse remarks indicate wilful, systematic, or material non-compliance. 

Most standard private company audits carry observations. Qualifications and adverse remarks are more serious and require board-level response.

An observation that FC-GPR was filed on day 32 instead of day 30 is very different from a qualification that the company received FDI in a sector requiring Government Route approval without obtaining it. Both appear in Form MR-3 compliance. The severity and the downstream consequences are not comparable.

What Are the Secretarial Audit Penalties for Non-Compliance?

If a company fails to comply with the requirements of Section 204(4), the company, every officer of the company who is in default, and the Practising Company Secretary in default shall be liable to a penalty of ₹2 lakh.Separately, every compliance gap documented in the Form MR-3 carries the penalty prescribed under the relevant provision of the applicable law.

Two distinct penalty tracks apply. Track one is for not conducting the audit at all where it is required. Track two is for the underlying compliance gaps the audit documents. An FLA Return not filed for three years constitutes FEMA non-compliance and may require regularisation, payment of applicable fees, or compounding proceedings depending on the facts and circumstances.That’s why managing the secretarial audit process proactively matters. A Form MR-3 documenting repeated FEMA non-compliances, Director KYC defaults, or other statutory gaps becomes part of the company’s compliance record and may be considered during regulatory reviews, investor due diligence, financing processes, or other assessments.

Conclusion

Secretarial audit in India surfaces what the statutory audit does not touch. Gaps in board procedures, FEMA filing delays, director compliance defaults, and annual return timing issues that exist quietly in a company’s record are documented in Form MR-3 and attached to the public annual report.

Companies that manage these obligations correctly find the secretarial audit confirms a clean record. Companies that do not find it creates a catalogue of issues that carry their own regulatory consequences.

Corporate Legit Consulting LLP assists companies with secretarial audit India readiness assessments, gap remediation before the PCS is engaged, compliance record organisation, and ongoing secretarial compliance management. Reach out before your secretarial audit is commissioned.