Does a US/UK parent's existing global compliance program cover its Indian subsidiary, or is local advice still required?

Executive Summary

A US or UK parent company's global compliance program is valuable, but it does not satisfy the India-specific statutory and regulatory obligations governing corporate governance, beneficial ownership disclosure, foreign investment compliance, transfer pricing documentation, labor law adherence, and sector-specific licensing. Multinational corporations operating Indian subsidiaries face exposure to penalties, director prosecution, regulatory investigations, and operational disruptions when they rely exclusively on parent-company compliance frameworks without a local legal overlay.

Key findings:

• Global compliance policies typically address FCPA, UK Bribery Act, GDPR, SOX controls, and anti-corruption mandates relevant to home jurisdictions. They do not cover India's layered regulatory architecture under the Companies Act, 2013, Foreign Exchange Management Act, 1999, Income Tax Act, 1961, GST laws, labor statutes, or beneficial ownership disclosure rules.
• Indian subsidiaries operate under distinct regulatory authorities including the Ministry of Corporate Affairs (MCA), Reserve Bank of India (RBI), Securities and Exchange Board of India (SEBI), Income Tax Department, GST Council, Serious Fraud Investigation Office (SFIO), and Enforcement Directorate (ED), each enforcing separate compliance regimes.
• Non-compliance attracts financial penalties, personal prosecution of directors under penal provisions of the Companies Act, 2013, foreign exchange violations under FEMA, tax scrutiny, remittance delays, and reputational damage during investor due diligence.
• Multinational corporations require India-specific legal advice to overlay global policies with local statutory compliance, governance documentation, regulatory coordination, and director education.

This article identifies the global compliance program India gap, explains why universal frameworks fail to address India-specific obligations, and provides a structured approach to implementing local legal overlays.

Why Global Compliance Programs Do Not Cover Indian Subsidiaries

A global compliance program typically addresses regulatory priorities in the parent company's home jurisdiction. These frameworks focus on:

• US Foreign Corrupt Practices Act (FCPA) compliance
• UK Bribery Act obligations
• General Data Protection Regulation (GDPR) adherence
• Sarbanes-Oxley (SOX) internal controls
• Export controls and sanctions compliance
• Anti-money laundering frameworks

What they omit:

Indian corporate governance obligations, beneficial ownership disclosures, statutory auditor appointments, board composition requirements, related party transaction approvals, managerial remuneration caps, secretarial compliance under the Companies Act, 2013, foreign investment reporting under FEMA, transfer pricing documentation, permanent establishment risks, GST reconciliation mandates, and labor law compliance across states.

These gaps arise because global policies are designed to prevent corruption, manage data privacy, and satisfy securities disclosure obligations relevant to parent-company listing requirements in New York or London. They are not designed to address India's distinct regulatory architecture governing private limited companies, wholly-owned subsidiaries, or branch offices operating locally.

The global compliance program India gap becomes evident when subsidiaries receive notices from the Registrar of Companies for non-compliance with obligations the parent's framework never contemplated. This is not a hypothetical scenario. It reflects a recurring blind spot: the dangerous assumption that universal compliance frameworks automatically satisfy India-specific legal obligations.

India-Specific Governance Requirements That Global Policies Ignore

Companies Act, 2013 Obligations

Indian subsidiaries must comply with the Companies Act, 2013, which imposes obligations absent from US or UK corporate law:

Statutory financial statements and audits: Mandatory annual audits conducted by Chartered Accountants registered with the Institute of Chartered Accountants of India (ICAI). SOX controls do not substitute for statutory audits under Indian law.

Board composition and director responsibilities: Minimum director requirements, independent director appointments for certain classes of companies, director identification numbers (DINs), and fiduciary duties under Sections 166 to 168 of the Companies Act, 2013.

Beneficial ownership reporting: Disclosure of significant beneficial owners under Section 90 and the Companies (Significant Beneficial Owners) Rules, 2018, enforced by the Ministry of Corporate Affairs (MCA). Global policies addressing ultimate beneficial owners for anti-corruption purposes do not satisfy India's disclosure timelines and filing requirements with the Registrar of Companies.

Related party transactions: Board approval, shareholder approval, and disclosure requirements under Sections 188 and 189. Global policies treating these as operational decisions create compliance gaps.

Managerial remuneration: Statutory caps on director compensation unless shareholder approval is obtained under Section 197.

Annual general meetings (AGMs): Mandatory AGMs within statutory timelines, board meetings, maintenance of statutory registers, and filing of annual returns with the Registrar of Companies.

FEMA Compliance for Foreign-Owned Entities

Under the Foreign Exchange Management Act, 1999 (FEMA), foreign-owned Indian entities face obligations not addressed by global compliance frameworks:

Foreign Direct Investment (FDI) compliance: Adherence to sectoral caps, entry routes (automatic versus approval), downstream investment restrictions, and pricing guidelines.

Annual Return on Foreign Liabilities and Assets (FLA): Reporting to the Reserve Bank of India (RBI) through authorized dealer banks.

Overseas remittance compliance: Foreign currency outflows including dividends, royalties, technical fees, or loan repayments require compliance with FEMA regulations and tax withholding obligations. FEMA non-compliance blocks dividend repatriation, affecting parent-company cash flows.

Transfer Pricing and Permanent Establishment Risks

Indian subsidiaries engaging in transactions with parent entities or affiliates must comply with transfer pricing documentation mandates under Sections 92 to 92F of the Income Tax Act, 1961. Inadequate documentation exposes subsidiaries to transfer pricing adjustments, additional tax liabilities, interest charges, penalties, and potential prosecution under the Bharatiya Nyaya Sanhita, 2023 for tax evasion.

Country-by-Country Reporting: Required for multinational groups exceeding specified revenue thresholds.

Permanent Establishment (PE) Risks: Foreign parent activities conducted through Indian subsidiaries may trigger PE exposure under India's tax treaties, creating unintended tax liability and double taxation disputes.

Goods and Services Tax (GST) Compliance

Indian subsidiaries must register under GST, file monthly, quarterly, and annual GST returns, reconcile input tax credits, and maintain GST-compliant invoicing systems. Global compliance frameworks do not address these India-specific indirect tax obligations.

Employment and Labor Law Compliance

Indian subsidiaries must comply with Shops and Establishments Act registration, Provident Fund (PF) and Employee State Insurance (ESI) contributions, Gratuity Act obligations, state-specific labor laws, and sexual harassment policies under the Prevention of Sexual Harassment (POSH) Act, 2013. These obligations vary by state and are not addressed by global HR policies.

Environmental and Sector-Specific Licenses

Certain industries require environmental clearances from State Pollution Control Boards or the Ministry of Environment, and sector-specific regulatory approvals (pharmaceuticals, telecommunications, banking, insurance). Global compliance policies rarely identify which Indian industries trigger these licensing requirements.

Where Global Compliance Frameworks Fail in Practice

Governance Documentation Gaps

Global policies often mandate "compliance with local laws" without specifying which laws, which regulatory authorities, which documentation standards, or which enforcement timelines apply. This generic language creates operational uncertainty and does not protect directors from personal liability under Indian law.

Director Liability Exposure

US and UK compliance frameworks focus on corporate liability. Indian law imposes personal liability on directors for non-compliance with statutory obligations, including penalties and prosecution under Sections 447, 450, and other penal provisions of the Companies Act, 2013. Directors of Indian companies face personal liability regardless of whether the parent company maintains global compliance programs.

Regulatory Reporting Timelines

Global policies rarely account for India's strict filing deadlines. Annual returns, financial statements, beneficial ownership disclosures, FEMA reporting, GST returns, and transfer pricing documentation are governed by separate authorities with independent enforcement mechanisms. Missing MCA or RBI deadlines due to coordination gaps between global compliance teams and local operations creates regulatory exposure.

Board Approval Requirements

Indian law requires specific board approvals for related party transactions, managerial remuneration, loans to directors, investments, guarantees, and other corporate actions. Global policies treating these as operational decisions create compliance gaps that become visible during regulatory scrutiny or investor due diligence.

Audit and Secretarial Compliance

India mandates statutory audits and, for certain companies, secretarial audits under Section 204 of the Companies Act, 2013. Global policies designed around internal audit functions do not satisfy these statutory requirements.

Regulatory Authorities Enforcing India-Specific Obligations

Indian subsidiaries interact with multiple regulatory authorities, each enforcing separate compliance regimes:

Ministry of Corporate Affairs (MCA): Enforces Companies Act compliance, investigates corporate fraud, prosecutes directors, and imposes penalties for non-compliance.

Registrar of Companies (ROC): Monitors statutory filings, annual returns, beneficial ownership disclosures, and corporate governance compliance.

Reserve Bank of India (RBI): Regulates foreign investment, foreign exchange transactions, overseas remittances, and FEMA compliance.

Income Tax Department: Enforces tax compliance, transfer pricing obligations, withholding tax requirements, and permanent establishment assessments.

Serious Fraud Investigation Office (SFIO): Investigates corporate fraud, accounting irregularities, and serious violations of the Companies Act, 2013.

Enforcement Directorate (ED): Investigates foreign exchange violations under FEMA and money laundering cases under the Prevention of Money Laundering Act, 2002.

Goods and Services Tax Council: Enforces GST compliance across states.

Securities and Exchange Board of India (SEBI): Regulates disclosure and reporting obligations for companies raising capital or listing securities in India.

Global compliance frameworks do not address coordination with these authorities or India-specific enforcement timelines.

Consequences of Failing to Overlay Local Compliance

Regulatory Penalties

Non-compliance attracts financial penalties under the Companies Act, FEMA, Income Tax Act, and GST laws. Penalties compound when multiple violations are discovered during regulatory audits or investigations.

Director Prosecution

Directors face personal liability, prosecution, and potential imprisonment for serious violations under Section 447 of the Companies Act, 2013 and corresponding FEMA offences. Global policies protecting corporate entities do not shield individual directors from prosecution under Indian law.

Investor Due Diligence Failures

Private equity investors, venture capital funds, and acquirers conducting legal due diligence identify governance gaps as material transaction risks, affecting valuations and deal timelines. The global compliance program India gap surfaces during due diligence when acquirers discover statutory non-compliance, beneficial ownership disclosure failures, or FEMA violations.

Regulatory Investigations

Non-compliance triggers investigations by SFIO, ED, or tax authorities, creating operational disruption, reputational damage, and cross-border regulatory coordination challenges. Investigations escalate when authorities identify patterns of non-compliance across multiple reporting periods.

Remittance Delays

FEMA non-compliance blocks dividend repatriation, royalty payments, or loan repayments to parent entities, affecting parent-company cash flows and financial planning.

Permanent Establishment Exposure

Incorrect structuring creates unintended tax exposure in India, triggering double taxation disputes and treaty interpretation conflicts. Transfer pricing disputes escalate when authorities challenge the arm's length nature of intercompany transactions.

How to Structure India-Specific Legal Overlays

Step 1: Conduct India-Specific Governance Audits

Review existing compliance systems against Indian statutory obligations, identifying gaps in board governance, regulatory reporting, statutory filings, labor compliance, tax obligations, and sector-specific licensing. Governance audits assess whether current practices satisfy MCA, RBI, SEBI, GST Council, and Income Tax Department requirements.

Step 2: Implement Statutory Compliance Calendars

Create India-specific compliance calendars tracking MCA filings, FEMA reporting, GST returns, PF and ESI contributions, transfer pricing documentation deadlines, and board meeting requirements. Compliance calendars assign responsibility for each filing and integrate with global compliance tracking systems.

Step 3: Appoint Local Legal and Compliance Advisors

Engage Indian legal counsel specializing in corporate governance, FEMA, tax, labor law, and regulatory compliance to provide ongoing advisory support. Local counsel bridges the global compliance program India gap by translating parent-company policies into India-compliant governance frameworks.

Step 4: Establish India-Specific Policies

Develop India-focused governance policies addressing board approval matrices, related party transaction frameworks, managerial remuneration compliance, beneficial ownership disclosure protocols, FEMA compliance procedures, and transfer pricing documentation standards. These policies supplement global frameworks without replacing them.

Step 5: Train Directors and Senior Management

Educate directors on personal liability exposure under Indian law, fiduciary responsibilities under Sections 166 to 168 of the Companies Act, 2013, and compliance obligations. Training programs cover statutory audit participation, board approval requirements, beneficial ownership disclosure timelines, and FEMA reporting obligations.

Step 6: Coordinate Cross-Border Legal Functions

Align global compliance teams with India-specific legal advisors to ensure parent-company policies do not conflict with local regulatory obligations. Coordination mechanisms include quarterly compliance reviews, joint risk assessments, and integrated reporting to parent-company audit committees.

Practical Governance Safeguards

Appoint Local Statutory Auditors

Engage ICAI-registered Chartered Accountants to conduct statutory audits and provide tax advisory support. Statutory auditors review annual financial statements, verify compliance with the Companies Act, 2013, and certify accuracy of regulatory filings.

Maintain Statutory Registers

Ensure accurate maintenance of registers of members, directors, charges, beneficial owners, and related party transactions. Statutory registers must be available for inspection by regulatory authorities and updated within prescribed timelines.

Document Board Approvals

Formalize board resolutions for all corporate actions requiring statutory approval. Board minutes must reflect compliance with Sections 188, 197, and other provisions of the Companies Act, 2013.

File Regulatory Returns on Time

Avoid penalties by ensuring timely filing of annual returns, financial statements, beneficial ownership disclosures, and FEMA reports. Late filings attract automatic penalties and increase regulatory scrutiny.

Monitor Regulatory Changes

Track amendments to the Companies Act, FEMA regulations, GST laws, and tax legislation affecting subsidiary operations. Regulatory monitoring systems alert compliance teams to changes requiring policy updates or operational adjustments.

Common Mistakes Multinational Corporations Make

Assuming Global Policies Satisfy Local Law

Relying exclusively on parent-company compliance frameworks without verifying India-specific obligations. This assumption creates the global compliance program India gap that exposes subsidiaries to regulatory penalties and director prosecution.

Delaying Statutory Filings

Missing MCA or RBI deadlines due to coordination gaps between global compliance teams and local operations. Delayed filings compound penalties and signal governance weaknesses during investor due diligence.

Ignoring Director Liability

Failing to educate directors on personal liability exposure under Indian law. Directors assume global compliance policies protect them from prosecution, only to discover Indian law imposes independent personal liability.

Inadequate Transfer Pricing Documentation

Underestimating documentation requirements during tax audits or assessments. Transfer pricing disputes escalate when subsidiaries cannot produce contemporaneous documentation supporting arm's length pricing.

Poor Coordination Between Jurisdictions

Creating governance conflicts when global policies contradict Indian statutory requirements. Conflicts arise when global approval matrices exclude India-mandated board approvals or when global reporting timelines miss India-specific filing deadlines.

Frequently Asked Questions

Does compliance with FCPA or UK Bribery Act satisfy Indian anti-corruption laws?

No. While FCPA and UK Bribery Act compliance frameworks address anti-corruption obligations relevant to US and UK enforcement, they do not satisfy India's Prevention of Corruption Act, 1988 or specific obligations under the Companies Act, 2013 relating to corporate governance, board accountability, or statutory compliance.

Can a US parent rely on its SOX controls to satisfy Indian audit requirements?

Sarbanes-Oxley internal controls focus on financial reporting accuracy and fraud prevention for publicly listed companies in the United States. Indian subsidiaries must separately comply with statutory audit requirements under the Companies Act, 2013, conducted by ICAI-registered Chartered Accountants, regardless of parent-company SOX compliance.

Are Indian directors personally liable for non-compliance even if the parent has global policies?

Yes. Directors of Indian companies face personal liability under Sections 447, 450, and other penal provisions of the Companies Act, 2013 for non-compliance with statutory obligations, regardless of whether the parent company maintains global compliance programs. Personal liability includes penalties and potential imprisonment for serious violations.

Does GDPR compliance satisfy India's data protection obligations?

GDPR compliance addresses data protection requirements applicable in the European Union. India's Digital Personal Data Protection Act, 2023 imposes separate obligations relating to data processing, consent management, cross-border data transfers, and data fiduciary responsibilities. GDPR compliance does not automatically satisfy Indian data protection law.

How often should Indian subsidiaries update beneficial ownership disclosures?

Under Section 90 of the Companies Act, 2013 and the Companies (Significant Beneficial Owners) Rules, 2018, Indian companies must file beneficial ownership disclosures with the Registrar of Companies within specified timelines whenever changes occur in significant beneficial ownership. Failure to update disclosures within prescribed timelines attracts penalties and regulatory scrutiny.

Can FEMA non-compliance block dividend repatriation to the parent?

Yes. Non-compliance with FEMA reporting obligations or violations of foreign investment regulations can delay or block dividend repatriation, royalty payments, or other overseas remittances, affecting parent-company cash flows. Authorized dealer banks require FEMA compliance certificates before processing foreign currency outflows.

What happens if transfer pricing documentation is inadequate during a tax audit?

Inadequate transfer pricing documentation exposes Indian subsidiaries to transfer pricing adjustments, additional tax liabilities, interest charges, and penalties under Sections 92 to 92F of the Income Tax Act, 1961. Serious violations may attract prosecution under the Bharatiya Nyaya Sanhita, 2023 for tax evasion.

How does the global compliance program India gap affect investor due diligence?

The global compliance program India gap surfaces during legal due diligence when investors identify statutory non-compliance, beneficial ownership disclosure failures, FEMA violations, transfer pricing documentation gaps, or director liability exposure. Governance gaps reduce valuations, delay transactions, and increase investor risk perceptions.

Conclusion

Global compliance programs crafted for US or UK regulatory environments provide important anti-corruption, data privacy, and internal control frameworks. But they do not satisfy India's distinct statutory obligations governing corporate governance, beneficial ownership reporting, foreign investment compliance, tax documentation, labor law adherence, or sector-specific licensing.

The global compliance program India gap creates regulatory exposure, director liability, remittance delays, investor due diligence failures, and enforcement investigations. Multinational corporations operating Indian subsidiaries require India-specific legal overlays combining local statutory compliance, governance documentation, regulatory coordination, director education, and ongoing legal advisory support.

The strongest global operations are built not merely on universal compliance policies, but on jurisdiction-specific legal architecture that aligns global governance standards with local regulatory obligations, protects directors from personal liability, reduces enforcement exposure, and supports sustainable cross-border business growth.

About LawCrust

LawCrust Global Consulting Ltd. is the enterprise legal and consulting arm of the LawCrust Group, delivering lawyer-led corporate legal services, alternative legal services (ALSP), legal process outsourcing (LPO), legal operations support, and AI-enabled legal infrastructure for global businesses, multinational corporations, law firms, procurement-led enterprises, general counsels, investors, and institutional clients.

With operational headquarters in Mumbai's Bandra Kurla Complex (BKC) and a strategic US presence through LawCrust Inc., Delaware, we support cross-border legal and commercial operations involving India, the United States, the Middle East, and other international jurisdictions.

Since 2016, LawCrust has successfully handled over 10,000 legal matters through a strong network of 70+ in-house lawyers and senior partnered advocates.

Our work sits at the intersection of law, business, operations, governance, compliance, risk, and execution.

Our practice spans corporate advisory, commercial contracting, legal operations, due diligence, litigation support, compliance management, risk analytics, managed legal services, enterprise legal infrastructure, and cross-border regulatory support.

For expert legal assistance:

Call Now: +91 8097842911
Email: inquiry@lawcrust.com