From Paper Tiger to Watchdog: The NFRA’s Overdue Transformation Under the Corporate Laws (Amendment) Bill, 2026

[Saanvi Rao is a third year student at Gujarat National Law University]

Introduction

When IL&FS collapsed in 2018, and when the auditors of Dewan Housing Finance Corporation Ltd ("DHFL") came under scrutiny shortly after, a quiet institutional embarrassment surfaced: India’s single focus audit regulator, the National Financial Reporting Authority (“NFRA”), was virtually powerless.

Not being a corporate entity, NFRA did not have any independent rule-making power and was entirely dependent on the Ministry of Corporate Affairs for the procedural rules, being constituted under Section 132 of the Companies Act, 2013, it was what came to be known as a quasi-departmental body. It had only penalties and debarment as tools for enforcement, and even that was not supported by a strong statutory basis as an enforcement tool because it could be attacked by the very audit firms it was trying to discipline.

The Corporate Laws (Amendment) Bill, 2026 (“Bill”), introduced in the Lok Sabha on March 23, 2026, and currently before a Joint Parliamentary Committee (“JPC”), proposes to fundamentally change this. Through the insertion of new Sections 132A to 132K, the Bill seeks to transform NFRA from a regulatory footnote into a full-fledged statutory authority. This piece examines whether that transformation is structurally sound, and what it means for audit firms, listed companies, and the broader governance landscape.

What the Bill Actually Proposes

The reforms to NFRA are layered, and their cumulative effect is significant in the corporate jurisprudence.

Institutional independence: This would allow the NFRA to have the independent powers to make regulations, which it has never had before. This makes NFRA more similar to different agencies such as SEBI, the Insolvency and Bankruptcy Board of India (“IBBI”), and Competition Commission of India, which have their own rule-making powers.

Expanded enforcement toolkit: There would be advisories, censures, and warnings; an additional requirement for errant auditors to take further professional training; and a recommendation to the Central Government. Now, if a firm or individual fails to comply with an order of the NFRA, the consequences would be criminal and imprisonment for up to six months, and fines of up to INR 25 lakh for individuals and INR 5 lakh for firms, and debarment.

Mandatory auditor registration: The proposed system will involve the cross-intimation of the details of the auditor registered with the Institute of Chartered Accountants of India (“ICAI”) to NFRA before the auditor can be appointed to audit a company under NFRA’s jurisdiction. Periodic returns will also be required of auditors. If the information is not provided, it carries a penalty of up to INR 25 lakh while providing false or misleading information carries a penalty of up to INR 50 lakh.

Expanded misconduct jurisdiction: The Bill extends the range of acts or omissions that are considered misconduct, under NFRA’s remit, to come within the scope of the Companies Act. This is consequential because NFRA can directly investigate and penalize those auditors who fail to meet the statutory requirements, as opposed to having to be first examined and disciplined by ICAI.

Adjudicatory exclusivity: This would complete the architecture where no civil court has jurisdiction over matters NFRA is empowered to determine and no court or authority may grant an injunction in regard to action taken by NFRA. This directly addresses the jurisdictional challenges that in the past have destabilised NFRA's enforcement actions.

Why This Matters: The Structural Problem It Solves

The case for a stronger NFRA is not merely theoretical. India’s audit quality failures have had real market consequences. The IL&FS crisis, involving alleged audit failures across multiple years and multiple firms, eroded investor confidence in a manner that regulatory penalties alone could not address. The DHFL episode similarly raised questions about whether the existing ICAI-led disciplinary framework was adequate as the primary mechanism for auditor accountability in systemically significant companies.

The fundamental problem was not a shortage of rules, but a shortage of regulatory credibility. NFRA's prior structural constraints, its non-corporate status, its dependence on Ministry rules, its limited enforcement range meant that a determined audit firm could challenge its orders on jurisdictional grounds, and sometimes succeed. A regulator that can be litigated into paralysis is not a regulator in any meaningful sense.

The Bill addresses this at the root. By giving NFRA independent rule-making power, a formal registration framework, a broadened misconduct definition, and adjudicatory exclusivity, it removes the legal handholds that audit firms previously used to resist oversight. Equally significant is the shift in the misconduct definition: by extending it to include violations of Companies Act provisions, NFRA can now act on substantive failures not merely on what constitutes misconduct under the Chartered Accountants Act, 1949, which had previously constrained the scope of its investigations.

The Implications for Audit Firms and Corporate India

The practical consequences of a strengthened NFRA will be felt across several dimensions.

For audit firms, the mandatory registration and periodic filing requirements introduce a layer of regulatory compliance that previously did not exist under NFRA’s jurisdiction. The post-tenure restriction on non-audit services proposed under complementary amendments to Sections 144 and 139(2) means that large audit firms will need to assess, at the point of accepting an audit mandate, whether that engagement forecloses future advisory work with that client group for a period extending three years beyond their tenure. This requires a materially different commercial calculus than what has been practised previously.

For companies undergoing M&A due diligence or capital market transactions, an ongoing NFRA investigation against a target company’s auditor will now constitute a material risk flag potentially signalling restatement risk or the prospect of a mid-engagement auditor transition, both of which affect deal timelines and valuations.

For the broader governance ecosystem, the transformation of NFRA signals a deliberate policy shift: the government is moving toward specialised, autonomous regulators for each domain of financial oversight, rather than relying on professional self-regulation. Whether this model produces better outcomes depends, ultimately, on the quality of NFRA’s own institutional leadership and the calibre of its investigative capacity, neither of which is legislated.

An Unresolved Tension

The Bill is substantively ambitious, but it carries an internal tension that deserves attention. The decriminalisation agenda that runs through much of the Bill converting procedural defaults from criminal offences to civil penalties is sound policy. But the decision to retain, and even expand, criminal consequences specifically for non-compliance with NFRA orders sits in an uneasy relationship with that broader direction. If the legislative philosophy is that procedural violations should be addressed through proportionate monetary penalties rather than the threat of imprisonment, it is worth asking whether the criminal sanction for non-compliance with NFRA imprisonment of up to six months reflects a considered judgment about the severity of audit regulatory failures, or whether it is simply a residual deterrence mechanism that was not revisited in the drafting process.

This question is not merely academic. The JPC process offers an opportunity for stakeholders to examine whether this asymmetry is intentional and justified, and whether the proposed penalty ranges for NFRA-related defaults are calibrated appropriately relative to the other enforcement mechanisms in the Bill.

Conclusion

The NFRA reforms in the Corporate Laws (Amendment) Bill, 2026 represent the most structurally significant change to audit regulation in India since the Companies Act, 2013 was enacted. By giving NFRA the institutional architecture it needed from the beginning:  independent rule-making, mandatory registration, broadened misconduct jurisdiction, and adjudicatory exclusivity, the Bill closes a governance gap that cost India dearly in the wake of high-profile audit failures. The Bill is currently before the JPC, and its provisions will come into force only upon notification by the Central Government. Companies and audit firms would do well to begin assessing how this strengthened framework affects their compliance postures, well before the legislation is enacted.

As for whether NFRA will live up to its expanded mandate, that is a question of institutional will, not legal drafting. The Bill gives it the tools. What it builds with them remains to be seen.