Skip to main content

Welcome to a Grasp lesson

Create a free account to keep studying and create your own study path.

Lesson 28

Direct vs. Indirect Laws & Financial Statements (SA 250)

Recommended resources

Hello! Welcome to your next lesson.

In our previous lessons, we explored the auditor's communication with Those Charged with Governance (TCWG), covering general findings under SA 260 and then zooming in on the specifics of internal control deficiencies with SA 265. Today, we continue on this path of understanding the auditor's wider responsibilities by examining how you consider the vast landscape of laws and regulations that an entity operates within.

This lesson focuses on SA 250, "Consideration of Laws and Regulations in an Audit of Financial Statements." Your articleship experience has likely shown you that companies must navigate a complex web of legal requirements, from tax laws to environmental regulations. But as an auditor, are you responsible for checking compliance with every single one? SA 250 provides a clear and logical framework to answer this.

The core of this standard, and a frequent point of testing in exams, is understanding that not all laws are treated equally from an audit perspective. Your primary goal for this lesson is to master this distinction.

By the end of this 60-minute lesson, you will be able to: Distinguish between laws/regulations with a direct vs. indirect effect on financial statements.

1. The Foundation: Management's vs. Auditor's Responsibility

Before we dive into the two categories of laws, we must establish a foundational principle. Who is ultimately responsible for ensuring the company follows all laws and regulations?

The answer is unequivocal: Management and Those Charged with Governance (TCWG).

It is their primary responsibility to ensure the entity's operations are conducted in accordance with all applicable laws and regulations. The auditor's role is not to prevent non-compliance or to detect every instance of it. An audit is subject to inherent limitations, and these limitations are particularly relevant when it comes to laws and regulations, many of which relate to operational aspects not directly captured by the accounting system.

7 | CA FINAL AUDIT REVISION SERIES| SA 200 series| CA Mahamood Shaik

To begin, let's watch a short clip that sets the stage by explaining the scope of SA 250 and clarifying the primary responsibility of management.

Watch from 45:38 to 49:22. Focus on how the instructor, CA Mahamood Shaik, clarifies that SA 250 deals with laws the client must comply with, and that the primary responsibility for this compliance rests with the client's management and TCWG, not the auditor.


2. The Core Distinction: Direct vs. Indirect Effect

SA 250 simplifies the auditor's task by dividing all laws and regulations into two manageable categories based on their effect on the financial statements. Understanding this division is the key to understanding your responsibilities.

Let's break them down.

Draft SA 250 (Revised), Consideration of Laws & Regulations in an ...

For a precise definition that you can use in your exams, let's refer to an official text. This will give you the exact technical language required by the ICAI.

Please read paragraphs 6 and 7 of this document. You will find them under the main heading 'The Auditor’s Responsibility for Compliance with Laws and Regulations.' These two paragraphs perfectly summarize the two categories of laws and the auditor's differing responsibilities for each.

As you've just read, the two categories are:

Category 1: Laws and Regulations with a Direct Effect

These are provisions that are generally recognized to have a direct impact on determining the material amounts and disclosures in the financial statements. Think of them as laws that have a built-in accounting consequence.

  • Examples:

    • The Companies Act, 2013: It dictates the format of financial statements (Schedule III) and rules on managerial remuneration.
    • Tax Laws (e.g., Income Tax Act): These directly determine the calculation of the 'Provision for Taxation' and 'Deferred Tax' amounts.
    • Labour Laws (e.g., PF Act, Gratuity Act): These directly determine the amounts to be provided for employee benefits.
  • Auditor's Responsibility: For this category, your responsibility is to obtain sufficient appropriate audit evidence regarding compliance. In essence, you treat compliance with these laws as you would any other material financial statement assertion. You need to perform detailed audit procedures to be reasonably sure the amounts and disclosures are correct.

Category 2: Other Laws and Regulations (Indirect Effect)

These are laws that do not have a direct effect on the amounts and disclosures, but compliance with them can be:

  • Fundamental to the entity's ability to continue its business.
  • Crucial for avoiding material penalties.

Non-compliance here doesn't automatically change a number in the balance sheet or profit & loss account. However, the consequences of non-compliance (fines, litigation, business closure) can have a material financial effect.

  • Examples:

    • Environmental and Pollution Control Laws: A manufacturing company must comply with these to operate. Non-compliance doesn't affect revenue or cost of goods sold directly, but a large penalty from the pollution control board would require a provision.
    • Industry-Specific Regulations: For a pharmaceutical company, compliance with the Drug Price Control Order (DPCO) or regulations from the Food and Drug Administration (FDA) is critical.
    • Child Labour Laws: Violation could lead to significant fines and reputational damage.
  • Auditor's Responsibility: For this category, your responsibility is limited to performing specified audit procedures to help identify instances of non-compliance that may have a material effect on the financial statements. You are not expected to be an expert in environmental law, but you are expected to look for evidence of non-compliance that could result in a large, unrecorded liability.

Flowchart on ISA 250: Consideration of Laws and Regulations in an Audit
This flowchart visually summarizes the auditor's responsibilities under SA 250. Notice how it clearly splits the approach into two paths: one for laws with a 'direct effect' and another for 'other laws and regulations' (indirect effect).

To reinforce this crucial distinction, let's watch one more explanation.

SA 250 English Revision | CA Final Audit | CA Shubham Keswani (AIR 8)

This video provides another excellent breakdown of the two categories, with clear examples and a useful mnemonic for the procedures related to indirect-effect laws.

Watch from 09:26 to 12:58. CA Shubham Keswani clearly distinguishes between the two types of laws and outlines the specific procedures for each. Pay attention to his examples and the 'II + WR' (Inquiry, Inspection + Written Representation) mnemonic for indirect laws.


3. Audit Procedures for Each Category

Let's formalize the audit procedures you need to perform for each category.

Procedures for Direct-Effect Laws

As mentioned, your goal is to obtain sufficient appropriate audit evidence. The procedures are integrated into your regular audit work and might include:

  • Testing calculations: Recalculating the tax provision based on the Income Tax Act.
  • Inspecting documents: Verifying that employee benefit liabilities are calculated in accordance with the relevant acts.
  • Checking disclosures: Ensuring financial statements are prepared as per Schedule III of the Companies Act.

Specified Procedures for Indirect-Effect Laws

For the second category, your work is more focused and limited. The specified procedures are designed to act as a 'net' to catch potential issues. They are:

  1. Inquiring of management and, where appropriate, TCWG as to whether the entity is in compliance with such laws and regulations.
  2. Inspecting correspondence, if any, with the relevant licensing or regulatory authorities (e.g., notices from the environmental agency, tax authorities, or industry regulators).

In addition to these, you must:

  • Remain alert throughout the audit for any information that might indicate non-compliance (e.g., reading board minutes that discuss a legal case).
  • Obtain written representations from management that they have disclosed to you all known instances of non-compliance or suspected non-compliance.

This practical distinction is vital. You are not expected to actively search for violations of indirect-effect laws, but you must perform these specific steps and react to any red flags you find.


Practical Application: A Case Study Example

Let's look at a practical example from the Bombay Chartered Accountant Journal to see how this works.

Auditing Standards - Bombay Chartered Accountant Journal

The following resource provides several excellent case studies. Let's briefly look at one to see the theory in action.

Please read Case Study I under the heading 'Let us now examine certain case studies.' It involves a pharmaceutical company receiving notices from the FDA for non-compliance with Good Medical Practices (GMP). Think about how this relates to our topic: Is GMP compliance a direct or indirect effect law? What financial statement impacts does the auditor need to consider?

In this case study, compliance with GMP is an indirect-effect regulation. The rules themselves don't dictate a specific accounting entry. However, the non-compliance triggers significant financial consequences that the auditor must evaluate:

  • Provisions for fines/penalties.
  • Reduction in the carrying value of inventory (if it can no longer be sold).
  • Provisions for sales returns.

This is the perfect illustration of SA 250 in action. The auditor's job isn't to become a GMP expert, but to identify the financial fallout from the non-compliance identified by the regulator.


Conclusion

Mastering SA 250 hinges on understanding the logical and practical distinction between the two types of laws. This framework allows you to focus your audit effort where it matters most—on matters that could materially affect the financial statements—without making you responsible for policing every aspect of a company's legal compliance. For your exams, being able to clearly articulate this distinction and the corresponding auditor responsibilities is essential.

Key Takeaways:

  • Primary Responsibility: Management and TCWG are responsible for ensuring compliance with laws and regulations.
  • Direct Effect Laws: These directly determine amounts and disclosures (e.g., Tax Acts, Companies Act). The auditor must obtain sufficient appropriate audit evidence of compliance.
  • Indirect Effect Laws: These relate to operations and non-compliance may lead to material penalties or going concern issues (e.g., Environmental Laws, Industry Regulations). The auditor's responsibility is limited to performing specified procedures (inquiry, inspection of correspondence) to identify non-compliance that could have a material financial impact.
  • Auditor's Goal: The auditor's goal is not to provide legal assurance but to identify the financial statement consequences of non-compliance.

Preview of the Next Lesson

Now that we have learned how to categorize laws and what initial procedures to perform, the next logical question is: What do you do when you actually find or suspect non-compliance? In our next lesson, we will address exactly that. You will learn to: Describe the auditor's procedures and reporting responsibilities upon identifying non-compliance with laws and regulations.