What Are the Liabilities of an Auditor? A Complete Guide
The liabilities of an auditor are the legal, financial, and professional consequences they may face when they fail to perform their duties properly. In India, these liabilities come in four types: civil (paying damages), criminal (when the auditor acts on purpose), professional (action by ICAI or NFRA), and statutory (penalties under the Companies Act, 2013).
Auditors play an important role in helping shareholders, lenders and other stakeholders understand a company's financial position. They examine financial statements and provide an independent opinion based on the evidence they obtain.
However, an auditor is not automatically liable every time an error or fraud is discovered in a company's accounts. Liability depends on the auditor's duties, conduct, the applicable law, and the facts of the case.
This guide explains the main types of auditor liability, relevant provisions of the Companies Act, 2013, and practical ways auditors can reduce their risk.
What Are the Types of Auditor Liability?
Auditor liability can be classified into four broad categories: civil, criminal, professional, and statutory. These categories may overlap, which means one incident can lead to more than one type of action.
| Type of Liability | What It Means | Possible Consequences |
|---|---|---|
| Civil liability | A claim for loss allegedly caused by negligence or breach of duty | Compensation or damages, where legally established |
| Criminal liability | Liability for an offence under applicable criminal law | Fine, imprisonment or other punishment prescribed by law |
| Professional liability | Disciplinary action for professional misconduct | Reprimand, monetary penalty, suspension or removal, depending on the applicable rules |
| Statutory liability | Liability for breaching a specific legal requirement | Penalties or other consequences provided under the relevant law |
1. Civil Liability of an Auditor
Civil liability generally arises when an auditor's failure to exercise appropriate care causes a loss, and the legal requirements for a claim are established.
For example, suppose an auditor fails to obtain sufficient evidence to verify a company's inventory. The financial statements consequently contain materially incorrect information, and a party suffers a loss after relying on the audit report.
The affected party may seek compensation if the applicable law recognises a duty of care and the necessary elements of the claim are proved. The auditor is not automatically responsible for every loss suffered by a person who reads the report.
Civil claims may involve negligence, breach of duty or other legally recognised grounds, depending on the circumstances.
2. Criminal Liability of an Auditor
Criminal liability depends on the specific offence and its legal requirements. An auditor who knowingly participates in fraud, deliberately misleads stakeholders or helps conceal wrongdoing may face criminal proceedings.
For example, an auditor who knowingly assists management in presenting false financial statements may face serious legal consequences if the relevant offence is established.
An honest mistake or ordinary negligence does not automatically amount to a criminal offence. The prosecution must establish the elements of the offence under the applicable law.
3. Professional Liability of an Auditor
Professional liability arises when an auditor breaches applicable professional requirements or engages in professional misconduct.
The Institute of Chartered Accountants of India (ICAI) regulates its members under the relevant professional framework. The National Financial Reporting Authority (NFRA) also has statutory powers concerning specified companies and professionals within its jurisdiction.
Depending on the applicable law and proceedings, disciplinary action may include a reprimand, monetary penalty, suspension or removal from professional practice.
For example, deliberately ignoring professional requirements, compromising independence or participating in misleading financial reporting may lead to disciplinary scrutiny.
4. Statutory Liability of an Auditor
Statutory liability arises when an auditor breaches a specific legal requirement. The Companies Act, 2013 contains provisions governing auditor appointments, duties, independence, reporting and penalties.
For example, Section 144 restricts certain additional services that an auditor may provide to the company being audited. A breach can lead to consequences under the applicable provisions.
The exact penalty depends on the provision violated, the nature of the breach and the applicable version of the law.
Also read: The Process and Importance of Auditing
When Can an Auditor Be Held Legally Liable?
The legal liability of an auditor depends on whether the failure was a genuine mistake, negligence, or deliberate wrongdoing. From the outside, they can look alike, but the law separates them sharply.
1. Honest Mistake
An honest mistake may occur even when an auditor has performed the audit with appropriate care and followed the applicable standards. A difference of professional judgement does not, by itself, establish misconduct.
The circumstances, evidence and reasoning behind the auditor's conclusion matter when determining whether a duty was breached.
2. Negligence
Negligence generally means failing to exercise the care and skill reasonably expected in the circumstances.
For example, an auditor may fail to obtain necessary bank confirmations or ignore unusual transactions without performing appropriate checks. Whether this amounts to negligence depends on the audit requirements, the facts and the evidence.
In a typical negligence claim, relevant questions include:
- Did the auditor owe a duty of care to the claimant?
- Did the auditor breach that duty?
- Did the breach cause the loss claimed?
- Are the loss and the claimant's right to recover recognised under the applicable law?
The precise legal test may vary depending on the type of claim.
3. Deliberate Wrongdoing
Deliberate wrongdoing involves conduct such as knowingly making misleading statements, participating in fraud or intentionally concealing material information.
Such conduct may lead to civil, criminal, professional or statutory consequences, depending on the facts and the provisions involved.
Audit documentation is important in assessing an auditor's work because it records the procedures performed, evidence obtained, significant judgements and conclusions reached.
Auditor Liability Under the Companies Act, 2013
Auditor liability under the Companies Act, 2013 is mainly found in Chapter X. The law has changed over time, so many older references are no longer accurate. These are the most important sections:
| Section | What It Covers |
|---|---|
| Section 139 | Appointment of auditors |
| Section 143 | Powers, duties and reporting responsibilities of auditors |
| Section 144 | Services an auditor is prohibited from providing to the company being audited |
| Section 145 | Signing of audit reports and other documents |
| Section 147 | Punishment for specified contraventions relating to auditors |
| Section 143(15) | Penalty for failure to comply with the fraud-reporting requirements under Section 143(12) |
| Section 447 | Punishment for fraud, where the legal requirements are met |
1. Section 143: Powers and Duties of Auditors
Section 143 sets out important auditor powers and responsibilities. These include access to the company's books and vouchers, obtaining information and explanations, examining relevant matters, and reporting whether the financial statements give a true and fair view in accordance with the applicable requirements.
Auditors must also comply with applicable auditing standards.
Section 143(12) deals with reporting suspected fraud involving officers or employees of the company. The reporting obligations depend on the circumstances, prescribed thresholds and applicable procedures.
Under the relevant rules, frauds meeting the prescribed threshold must be reported to the Central Government in the prescribed manner and within the prescribed timeline. Fraud below that threshold is subject to reporting to the audit committee or the Board, as applicable. The applicable rules also address the disclosures required in the Board's report.
Failure to comply with Section 143(12) can attract the specific penalty under Section 143(15):
- Listed company: ₹5 lakh.
- Any other company: ₹1 lakh.
Auditors should verify the current rules and reporting procedure before acting on a suspected fraud.
2. Section 144: Restrictions on Additional Services
Section 144 restricts an auditor from providing specified non-audit services to the company being audited, directly or indirectly, including through certain related arrangements.
The prohibited services include bookkeeping and accounting services, internal audit, investment advisory services, investment banking services, management services and other services specified by the section.
These restrictions are intended to protect auditor independence and reduce conflicts of interest.
3. Section 147: Punishment for Specified Contraventions
Section 147 deals with punishment for contraventions relating to auditors.
Under Section 147(2), an auditor who contravenes Sections 139, 144 or 145 may face a fine of ₹25,000 to ₹5 lakh, or four times the auditor's remuneration, whichever is less.
If the auditor commits the relevant contravention knowingly or wilfully with the intention to deceive the company, its shareholders, creditors or tax authorities, the provision allows imprisonment for up to one year and a fine of ₹50,000 to ₹25 lakh, or eight times the auditor's remuneration, whichever is less.
Where an auditor is convicted under Section 147(2), Section 147(3) also provides for refund of remuneration received and payment of damages for qualifying losses arising from incorrect or misleading statements in the audit report.
Important legal distinction: Section 143(15) specifically addresses failure to comply with Section 143(12). Do not assume that every breach of an auditor's duties attracts the same penalty. The applicable provision and consequences depend on the particular contravention and the law in force.
When Can an Auditor Be Held Liable? Common Examples
Most cases follow a handful of patterns:
- Taking management's word on a related-party deal without reviewing any documents.
- Noticing round-number entries made just before year-end and never asking about them.
- Dropping required steps, such as confirmations, because the team is short on time.
- Signing an opinion while knowing of a serious problem.
- Suspecting fraud and saying nothing, or filing the report late.
- Helping hide information to keep a client happy.
The facts still decide the outcome. An auditor who followed the standards and gathered evidence but was deceived by a well-planned fraud may have no liability at all.
Auditor Responsibilities and Liabilities: How Are They Connected?
Auditor responsibilities are the duties an auditor must fulfil. Liabilities are the consequences that may follow when the auditor breaches a duty, and the legal requirements for liability are met.
1. Maintaining Independence
An auditor must avoid prohibited services and manage relevant conflicts of interest. Independence helps preserve the credibility of the audit opinion.
2. Applying Professional Scepticism
Professional scepticism means questioning information when appropriate, considering contradictory evidence and investigating unusual transactions rather than accepting every explanation at face value.
3. Obtaining Sufficient Audit Evidence
An audit opinion must be supported by sufficient appropriate audit evidence. The procedures performed should be appropriate to the risks identified and the applicable auditing standards.
4. Maintaining Proper Documentation
Audit working papers should document the work performed, evidence obtained, significant judgements, and conclusions. Good documentation helps demonstrate how the auditor reached the opinion.
5. Reporting Accurately and on Time
Auditors must prepare their reports carefully and comply with applicable reporting requirements, including fraud-reporting obligations where relevant.
6. Protecting Confidential Information
Auditors should protect confidential client information while complying with legal and professional obligations to disclose or report information when required.
How Can Auditors Reduce the Risk of Liability?
Auditors can reduce the risk of disputes and disciplinary action by following professional standards and maintaining a careful, evidence-based audit process.
Practical steps include:
- Follow applicable auditing standards: Design and perform audit procedures that respond to the risks identified.
- Maintain independence: Identify conflicts of interest and decline prohibited services.
- Obtain sufficient evidence: Do not rely solely on management explanations when further evidence is needed.
- Document key decisions: Record procedures, findings, judgements and conclusions clearly.
- Investigate unusual transactions: Examine significant inconsistencies, unexpected balances, and potential fraud indicators.
- Meet reporting requirements: Understand applicable deadlines and procedures for audit reports and fraud reporting.
- Seek professional advice when necessary: Consult relevant experts when legal or technical issues fall outside the auditor's expertise.
- Review engagement quality: Use appropriate supervision and quality-control procedures.
Professional indemnity insurance may help cover certain claims, depending on the policy terms, exclusions, and circumstances. It does not remove an auditor's professional responsibilities or guarantee protection from every claim or proceeding.
FAQs
1. What Are the Liabilities of an Auditor?
An auditor faces civil liability (damages to someone who lost out), criminal liability (when they act on purpose), professional liability (action by ICAI or NFRA), and statutory liability (penalties under the Companies Act, 2013). One incident can lead to more than one type.
2. What Are the Types of Auditor Liability?
There are four: civil, criminal, professional or disciplinary, and statutory. They can overlap. A single act can bring a damages claim, a criminal case, a penalty and a disciplinary inquiry all at once.
3. Is an Auditor Liable Every Time the Accounts Are Wrong?
No. If they followed the standards, collected evidence and recorded their reasoning, an auditor has not breached any duty by making a mistake. Even if a planned fraud fools them, they may still have no liability.
4. What Is the Difference Between Negligence and Fraud by an Auditor?
Negligence means the auditor did not take the care a skilled auditor would, for example, by skipping bank confirmations. Fraud means they knew the accounts were misleading or helped hide the truth. Negligence usually leads to a claim. Fraud can bring criminal charges.
5. What Is the Penalty for an Auditor Under the Companies Act, 2013?
Under Section 147, an auditor who breaks Section 139, 144 or 145 can face a fine of ₹25,000 to ₹5 lakh, or four times the fee, whichever is less. If they acted knowingly or on purpose to cheat, the fine rises to ₹50,000 to ₹25 lakh, or eight times the fee, whichever is less, and up to one year of imprisonment is possible. They must also return the fee and pay damages for any loss caused by misleading statements in the audit report.
6. Can an Auditor Go to Jail in India?
Yes, in serious cases. Up to one year in prison is possible under Section 147 when the auditor acted knowingly or on purpose to cheat. Fraud can also fall under Section 447, which carries much heavier punishment.
7. What Does Section 143(12) Say About Fraud?
It requires an auditor to report fraud if they have reason to believe an officer or employee is committing fraud against the company. A fraud of ₹1 crore or more must be reported to the Central Government. A smaller one must be reported to the audit committee or the board. Failing to follow this rule can cost ₹5 lakh for listed companies and ₹1 lakh for other companies.
8. What Is the Difference Between Auditor Responsibilities and Liabilities?
Responsibilities are the duties an auditor must carry out, such as staying independent, gathering evidence, and reporting honestly. Liabilities are the consequences that follow when they fail in one of those duties.
9. Does Professional Indemnity Insurance Protect an Auditor?
Partly. It can help pay for some negligence claims, but the auditor remains responsible. It usually does not cover wrongdoing or fraud, and it gives no cover against disciplinary action or a criminal case.
Conclusion
The liabilities of an auditor depend on the nature of the conduct, the duties involved and the applicable law. Civil claims may arise from legally actionable negligence, criminal proceedings may follow offences such as qualifying fraud, professional bodies can take disciplinary action, and statutory provisions may impose specific penalties.
Understanding Sections 143, 144 and 147 of the Companies Act, 2013 is important for understanding auditor duties and potential consequences. Auditors can reduce risk by maintaining independence, applying professional scepticism, obtaining sufficient evidence, documenting their work and complying with reporting requirements.
For students and finance professionals, understanding auditor liabilities is an important part of learning auditing, professional ethics, and corporate governance.
About Author
