The Hidden Compliance Debt: Auditing a 3-Year-Old Subsidiary

How Compliance Debt Accumulates in Indian Subsidiaries

Compliance debt in an Indian subsidiary works like technical debt in software: it accumulates silently, compounds over time, and eventually reaches a point where remediation costs far exceed what prevention would have cost. The typical trigger for discovery is a due diligence exercise -- either because the foreign parent is considering selling the subsidiary, raising external funding, restructuring the group, or simply because the global CFO finally asks: "Is our India entity actually compliant?"

Based on a composite of real audit engagements, here is what a compliance audit of a three-year-old Indian subsidiary -- a Private Limited Company owned by a European parent -- typically reveals. The subsidiary was set up with proper incorporation through SPICe+, had a resident director appointed, and filed its initial FC-GPR with the RBI on time. The problems started in Year 2, when the local accountant left and the parent company assumed everything was running on autopilot.

Layer 1: ROC Filing Defaults

The Registrar of Companies requires every Private Limited Company to file two mandatory annual returns: Form AOC-4 (financial statements, including the balance sheet, profit and loss account, and auditor's report) and Form MGT-7 (annual return), which contains details of the company's shareholders, directors, and compliance status.

What the Audit Found

The subsidiary had filed AOC-4 and MGT-7 for Year 1 (on time). For Year 2, both forms were filed 4 months late. For Year 3, neither form had been filed at all -- the statutory audit itself was incomplete because the auditor had not been provided with complete bank statements and intercompany reconciliation data.

The Cost of ROC Default

Late filing of AOC-4 and MGT-7 attracts a penalty of INR 100 per day for each form, with no cap. For Year 2: 120 days late x INR 100 x 2 forms = INR 24,000. For Year 3 (assuming filing happens 8 months after due date): 240 days x INR 100 x 2 forms = INR 48,000. Total ROC penalties: INR 72,000.

But the real risk is not the penalty amount. Three consecutive years of filing defaults can trigger a strike-off proceeding by the ROC under Section 248 of the Companies Act, 2013. The ROC can mark the company as "active but non-compliant" on the MCA portal, which makes the company's status visible to banks, vendors, and potential acquirers searching the MCA database. Directors of defaulting companies face disqualification under Section 164(2), which bars them from being appointed as directors in any Indian company for a period of five years.

Remediation Steps

1. Complete the statutory audit for Year 3 immediately -- engage a Chartered Accountant and provide all financial records
2. File AOC-4 and MGT-7 for Year 3 with the applicable late filing fees
3. File an application under the Company Fresh Start Scheme (if available) or the Condonation of Delay scheme to regularise the defaults
4. Confirm that director DINs have not been deactivated due to non-filing of DIR-3 KYC -- the annual KYC deadline is September 30, and non-filing triggers DIN deactivation and a INR 5,000 reactivation fee

Layer 2: FEMA and RBI Reporting Failures

This is where the real financial exposure lies. FEMA violations carry penalties up to three times the amount involved in the contravention, plus INR 5,000 per day for continuing violations.

What the Audit Found

The subsidiary had filed FC-GPR on time at incorporation (Year 1). However, in Year 2, the German parent made an additional equity infusion of INR 2 crore to fund working capital expansion. The AD bank processed the wire, the shares were allotted, but no FC-GPR was filed for this second tranche. Two years had passed since the allotment date. The FLA Return (Annual Return on Foreign Liabilities and Assets) had been filed for Year 1 but missed for Years 2 and 3. The July 15 deadline was missed both times because the local accountant was unaware of this RBI-specific filing requirement.

The Cost of FEMA Default

For the missed FC-GPR: Late Submission Fee (LSF) is applicable for delays up to 3 years from the due date. The RBI calculates LSF based on a prescribed formula linked to the amount involved and the length of delay. For a INR 2 crore infusion filed 2 years late, the LSF can range from INR 1-3 lakh. If the filing had been delayed beyond 3 years, a formal FEMA compounding application to the RBI would have been required, with penalties potentially reaching up to three times the INR 2 crore amount -- INR 6 crore.

For the missed FLA Returns: the RBI has prescribed a fixed LSF of INR 7,500 per return for FLA filings. Two missed returns = INR 15,000 in LSF. The financial penalty is modest, but the RBI may flag the company for enhanced scrutiny on future FEMA transactions.

Remediation Steps

1. File the pending FC-GPR immediately on the RBI's FIRMS portal through the AD bank, with Late Submission Fee
2. File both pending FLA Returns on the RBI's FLA portal with LSF of INR 7,500 each
3. Obtain a FEMA compliance certificate from a practising Company Secretary or Chartered Accountant confirming all historical foreign investment reporting is now current
4. Implement a FEMA compliance calendar with automated reminders for all future reporting deadlines

Layer 3: Transfer Pricing Documentation Gaps

If the Indian subsidiary has transactions with its foreign parent -- management fees, technology licensing, purchase or sale of goods, intercompany loans -- transfer pricing documentation is mandatory.

What the Audit Found

The subsidiary had been paying a "management fee" of 5% of revenue to the German parent since Year 1, totalling approximately INR 45 lakh over three years. No transfer pricing study had been conducted. No Form 3CEB (accountant's report certifying arm's length pricing) had been filed with the income tax return. The management fee was being paid based on an informal email from the German CFO, with no intercompany agreement on record.

Additionally, the subsidiary was purchasing components from the German parent at prices set by the parent's ERP system. No benchmarking study existed to demonstrate that these prices were at arm's length.

The Cost of Transfer Pricing Default

Failure to file Form 3CEB: fixed penalty of INR 1,00,000 per year. Over three years: INR 3,00,000.

If the Income Tax Department audits the subsidiary and determines that the management fee or component pricing is not at arm's length, the department can make a transfer pricing adjustment. On the management fee alone: if the department disallows 50% of the INR 45 lakh as not arm's length, the adjustment is INR 22.5 lakh. Tax on this at 25.17% = INR 5.66 lakh. Penalty for under-reporting income: 50% of the tax payable = INR 2.83 lakh. If the department classifies it as misreporting (no documentation at all), the penalty jumps to 200% of the tax payable = INR 11.32 lakh.

Total potential transfer pricing exposure (conservative): INR 3,00,000 (3CEB penalties) + INR 5,66,000 (additional tax) + INR 2,83,000 (under-reporting penalty) = INR 11,49,000. Worst case with misreporting classification: over INR 20 lakh.

Remediation Steps

1. Engage a transfer pricing consultant to conduct a retrospective benchmarking study for all three years
2. Draft and execute a formal intercompany agreement covering management fees, technology licensing, and goods transfer pricing
3. File revised income tax returns with Form 3CEB for all open years (returns can be revised within two years from the end of the relevant assessment year under Section 139(5))
4. Prepare contemporaneous transfer pricing documentation for the current year going forward
5. Consider filing for an Advance Pricing Agreement (APA) to lock in arm's length pricing methodology for future years

Layer 4: GST Compliance Gaps

GST compliance requires monthly or quarterly return filings, accurate input tax credit reconciliation, and timely payment of tax liabilities.

What the Audit Found

Monthly GSTR-1 (outward supply) and GSTR-3B (summary return with tax payment) were being filed, but with multiple errors. Input Tax Credit (ITC) was being claimed on invoices from vendors who had not filed their returns -- leading to ITC mismatches flagged in the GSTR-2A/2B reconciliation. Annual return GSTR-9 had not been filed for Year 2. The subsidiary was making payments to the German parent for management fees and technology licensing without paying GST under the reverse charge mechanism -- services imported from a related party outside India are subject to 18% GST under reverse charge.

The Cost of GST Default

Late filing of GSTR-9: INR 200 per day (INR 100 under CGST + INR 100 under SGST), capped at 0.5% of turnover. For a subsidiary with INR 3 crore annual turnover: maximum penalty = INR 1,50,000. ITC reversal on unmatched invoices: the exact amount depends on the quantum of mismatched credits, but 10-15% ITC reversal is typical in first-time reconciliations. On INR 20 lakh of annual ITC claimed: potential reversal of INR 2-3 lakh plus 18% interest from the date of wrong availment.

Reverse charge GST on imported services: 18% on INR 45 lakh of management fees over three years = INR 8,10,000 in GST liability plus interest at 18% per annum from the due date of each monthly return. Total interest over three years: approximately INR 4-5 lakh.

Remediation Steps

1. File pending GSTR-9 annual returns with applicable late fees
2. Conduct a full ITC reconciliation against GSTR-2B for all open periods and reverse ineligible credits with interest
3. File DRC-03 (voluntary payment form) for the reverse charge GST on imported services, including interest
4. Implement monthly vendor GSTIN verification and ITC matching procedures
5. Set up automated reverse charge identification for all cross-border service payments

Layer 5: Labour Law and PF/ESI Defaults

Indian labour compliance involves multiple overlapping central and state laws, with strict monetary penalties for non-compliance.

What the Audit Found

The subsidiary had 22 employees but had been depositing PF contributions on basic salary only, excluding special allowance -- which the Supreme Court's ruling in Surya Roshni Ltd (2012) and subsequent EPFO circulars have clarified should be included in PF computation. ESI contributions were being made, but two employees whose monthly wages had risen above the INR 21,000 ESI ceiling continued to have ESI deducted, creating an over-contribution issue. Bonus payments required under the Payment of Bonus Act, 1965 (minimum 8.33% of salary for employees earning up to INR 21,000/month) had not been paid for Year 3. The gratuity provision required under the Payment of Gratuity Act, 1972 had not been actuarially valued or disclosed in the financial statements.

The Cost of Labour Default

PF shortfall on special allowance: if EPFO conducts an inspection and finds that PF was calculated on basic salary alone (excluding special allowance that is essentially part of basic), the employer faces retrospective contribution demands plus 12% interest per annum and damages ranging from 5% to 25% of the arrears depending on the length of default. For 22 employees over three years, the retrospective PF contribution shortfall can range from INR 3-8 lakh plus interest and damages.

Bonus default for Year 3: INR 50,000 - 1,50,000 depending on the number of eligible employees and their salary levels. Penalty for non-payment: imprisonment up to 6 months or fine up to INR 1,000 or both (under the old Act; the new Labour Codes prescribe higher penalties once notified).

Remediation Steps

1. Recalculate PF contributions including special allowance for all employees for the entire period and deposit arrears with applicable interest
2. File revised ECR (Electronic Challan cum Return) with EPFO for all affected months
3. Pay the outstanding bonus liability for Year 3 immediately
4. Engage an actuary to value the gratuity liability and create the provision in the financial statements
5. Conduct a comprehensive labour compliance audit and implement payroll corrections going forward

Layer 6: Statutory Audit and Board Governance

What the Audit Found

The statutory auditor for Years 1 and 2 had issued unqualified opinions, but the audit working papers showed minimal testing of FEMA compliance, transfer pricing, and GST reverse charge -- areas where a foreign-owned subsidiary requires specific audit attention. The board meeting requirement (minimum four board meetings per year, with not more than 120 days between consecutive meetings) had been violated in Year 3 -- only two board meetings were held. The Annual General Meeting for Year 3 had not been conducted within the required 6-month window after the financial year end. No Related Party Transaction (RPT) approvals had been obtained from the board or audit committee (if applicable) for the intercompany management fees and component purchases.

The Cost

Failure to conduct minimum board meetings: penalty of INR 25,000 for each director for each meeting not held. For 2 missed meetings with 2 directors: INR 1,00,000. Failure to hold AGM: fine of INR 1,00,000 on the company plus INR 5,000 on each officer in default. RPT without board approval: while not automatically void, unapproved RPTs can be challenged by minority shareholders and create exposure in any future due diligence.

The Total Compliance Debt: Summary

The realistic compliance remediation cost for this three-year-old subsidiary is INR 25-35 lakh -- roughly USD 30,000-42,000. This is the cost of three years of neglect. The annual cost of maintaining proper compliance from Year 1 would have been approximately INR 3-5 lakh per year (statutory audit fees, compliance retainer, return filing charges). Prevention costs one-third of the cure.

The 90-Day Remediation Playbook

Month 1: Emergency Filings (Days 1-30)

1. File all pending ROC returns (AOC-4, MGT-7) with late fees
2. File the pending FC-GPR through the AD bank with LSF
3. File pending FLA Returns with INR 7,500 LSF each
4. File DIR-3 KYC for all directors if overdue
5. Engage a new statutory auditor and begin the Year 3 audit

Month 2: Tax and GST Remediation (Days 31-60)

1. Complete the transfer pricing study for all three years
2. File revised income tax returns with Form 3CEB
3. File pending GSTR-9 annual returns
4. Pay reverse charge GST on imported services with DRC-03
5. Reconcile ITC and reverse ineligible credits

Month 3: Governance and Prevention (Days 61-90)

1. Conduct the overdue AGM and board meetings
2. Pass RPT approval resolutions for all intercompany transactions
3. Rectify PF contributions and deposit arrears
4. Pay outstanding bonus liability
5. Implement a comprehensive annual compliance calendar
6. Engage a professional compliance service for ongoing monitoring

How to Prevent Compliance Debt: The Annual Checklist

Every foreign-owned Indian subsidiary should maintain a compliance calendar with these non-negotiable deadlines. For the complete list, see our 12 compliance deadlines foreign companies miss.

What Global CFOs Should Ask Their India Team

If you are a CFO at a European or American company with an Indian subsidiary, here are five questions to ask your India finance team today:

1. Are all ROC filings current? Check the MCA portal for the company's compliance status. Any filing older than 30 days past its due date is a red flag.
2. Has FC-GPR been filed for every capital infusion? Every wire from the parent to the subsidiary for share capital triggers an FC-GPR filing within 30 days. One missed filing = one FEMA violation.
3. Is FLA Return filed annually? This is a RBI-specific filing that most local accountants miss because it is not part of the standard ROC or income tax compliance calendar.
4. Does a transfer pricing study exist? If the subsidiary pays management fees, royalties, or buys/sells goods from the parent, transfer pricing documentation is mandatory. No study = INR 1 lakh penalty per year plus potential adjustment risk.
5. Is GST reverse charge being paid on imported services? Management fees, technology licensing, and other services received from the foreign parent attract 18% GST under the reverse charge mechanism. This is the most commonly missed GST obligation for foreign-owned subsidiaries.

Key Takeaways

• A three-year-old Indian subsidiary with neglected compliance can accumulate INR 25-35 lakh in penalties, arrears, and remediation costs across ROC, FEMA, transfer pricing, GST, and labour law defaults
• FEMA violations carry the highest financial risk: penalties up to 3x the amount involved for late FC-GPR filings, and formal compounding proceedings for delays beyond three years
• Transfer pricing documentation is mandatory for all intercompany transactions -- the absence of Form 3CEB alone attracts INR 1 lakh per year in penalties, plus adjustment risk of 50-200% of the tax on under-reported income
• ROC filing defaults for three consecutive years can trigger strike-off proceedings and director disqualification -- making the company unsaleable and the directors unable to serve on any Indian board for five years
• The annual cost of maintaining proper compliance (INR 3-5 lakh) is roughly one-third of the cost of remediating three years of neglect (INR 25-35 lakh) -- engage a professional compliance service from Year 1