UK FRC Sharpens Audit Focus on Non-Compliance

The UK Financial Reporting Council (FRC) has revised auditing standards to strengthen how auditors assess risks arising from non-compliance with laws and regulations and to clarify when significant matters should be reported to external authorities.

The revisions adopt a more risk-based approach, directing auditors to focus on whether non-compliance could result in material misstatements, including where laws and regulations are fundamental to an entity’s operations. The FRC has removed the distinction between laws that directly and indirectly affect financial reporting, placing greater emphasis on professional judgment rather than checklist-based procedures. It also clarified that auditors are not expected to identify every applicable law, conduct comprehensive compliance reviews, or routinely involve legal specialists. Management remains primarily responsible for ensuring compliance.

The changes also clarify reporting responsibilities in audits of public interest entities. Matters requiring notification to external authorities may arise from any area of an audit, not only suspected legal or regulatory breaches, and could include concerns relating to going concern, modified audit opinions, or management integrity. Auditors are expected to report relevant matters promptly to authorities with the statutory powers to act, which may in some cases involve more than one regulator.

Following stakeholder concerns that earlier proposals could unnecessarily expand audit work, the FRC strengthened implementation guidance on proportionality, scalability, and professional judgment. It also removed a proposed standalone requirement to consider reporting matters solely on public-interest grounds where there was no underlying legal, regulatory, or ethical reporting obligation.

The revised ISA (UK) 250 and ISA (UK) 270 take effect for audits of financial statements for periods beginning on or after December 15, 2027.