Provident Fund, Payroll & Labour Law Audit

It covers three layers: payroll mechanics (are wage components correctly classified for PF/ESI purposes), statutory compliance (are contributions computed correctly, filed on time, and actually deposited), and documentary/procedural readiness (are the registers and records an inspector would ask for in place and accurate). For manufacturing clients it also tests Factories Act registers; for services clients with contract staffing, it tests principal-employer exposure under the Contract Labour Act.

No. Unlike statutory financial audit or internal audit under Section 138 of the Companies Act, there is no law that mandates a periodic PF/payroll/labour law audit. It is a management- or board-commissioned exercise, undertaken voluntarily for assurance, ahead of a transaction, or in response to a notice or anticipated inspection.

In Regional Provident Fund Commissioner (II) West Bengal vs Vivekananda Vidyamandir & Others (2019), the Supreme Court held that allowances paid universally, necessarily, and ordinarily to all employees in a category cannot be excluded from the PF wage base merely by labelling them a 'special allowance' or similar — if the allowance is not linked to any variable factor (like actual travel or actual overtime) and is paid to everyone as a matter of course, it forms part of 'basic wages' for PF purposes. Many CTC structures created before this judgment — and some still created today — deliberately split a large portion of gross pay into such allowances to shrink the PF contribution base.

The statutory PF wage ceiling has stood at ₹15,000 per month (basic + DA) since 2014, though the government has signalled possible revision from time to time — always verify the current notified figure before relying on it for planning. Employees whose basic + DA is at or below this ceiling must be covered under PF; above it, coverage is optional at the point of first employment unless the employee is already an existing PF member from a previous employer, in which case coverage continues regardless of wage level (with contribution either capped at the ceiling wage or on full wages if the employer opts for a higher contribution).

Employees with gross monthly wages at or below the statutory ESI wage ceiling are covered; those above it are excluded. This coverage now runs under the Code on Social Security 2020 (in force since 21 November 2025), which has consolidated and repealed the standalone ESI Act 1948, though the ESIC administrative machinery, benefit structure, and wage ceiling mechanism continue substantially unchanged under the Code. The ceiling has been revised periodically by government notification — the applicable figure must be confirmed as of the audit period being tested, since historical periods before the Code's commencement are still tested against the erstwhile ESI Act as it stood at the time. A related rule: once an employee is covered in a contribution period (April–September or October–March) their coverage continues for that full period even if their wages are subsequently revised above the ceiling mid-period.

Section 7Q empowers EPFO to charge interest on any amount due but not paid within the prescribed time — currently at 12% per annum, computed from the date it fell due until actual payment. Section 14B empowers EPFO to levy damages (a penalty, distinct from interest) on delayed payment, computed on a graded scale that increases with the length of the delay. Both can be levied together — interest compensates for the time value of the delayed amount; damages penalise the default itself.

Yes. Amounts deducted from an employee's wages towards their PF contribution are held by the employer in a fiduciary capacity — they are not the employer's money. Failure to deposit deducted employee contributions can attract prosecution under Section 316 of the Bharatiya Nyaya Sanhita (BNS) 2023 — the criminal breach of trust offence that replaced Sections 405/406/409 of the erstwhile Indian Penal Code with effect from 1 July 2024 — in addition to the civil recovery, interest, and damages proceedings under the EPF&MP Act itself. This is treated far more seriously by enforcement authorities than a case where the employer simply failed to compute or remit its own employer-share contribution correctly.

Under the contract labour licensing framework (now part of the Occupational Safety, Health and Working Conditions Code 2020, which has consolidated and repealed the erstwhile Contract Labour (Regulation and Abolition) Act 1970) and the EPF&MP Act, the principal employer can be held liable to ensure PF and social-security compliance for contract workers deployed on its premises if the contractor defaults — EPFO can proceed directly against the principal employer for recovery in such cases. This is a commonly underestimated exposure for services companies that treat contract staffing purely as a commercial vendor relationship without ongoing compliance verification.

It depends on the purpose. For a routine assurance or governance exercise, 2–3 years is common. For pre-transaction due diligence, the buyer's or investor's legal team often specifies the look-back period, sometimes matching the limitation period relevant to potential EPFO recovery action, which in practice can extend well beyond a typical 3-year statutory audit cycle since EPFO recovery proceedings are not always time-barred in the same way as other claims. For a notice-response engagement, the audit period matches the specific period under departmental inquiry.

Broadly two paths: voluntary disclosure to EPFO/ESIC with a self-computed shortfall, interest, and damages payment, or waiting for the department to identify the gap through its own inspection or a Section 7A inquiry. Voluntary disclosure generally results in a more predictable and often more favourable outcome — EPFO retains discretion on damages assessment under Section 14B, and cooperative, self-reported compliance is typically viewed more favourably than a department-discovered default, though EPFO's ultimate assessment is never guaranteed in advance.

The core scope is PF, ESI, and labour law compliance — wage classification, contribution accuracy, filing timeliness, contract labour exposure, and statutory registers. TDS on salary under Section 192 of the Income-tax Act is a related but distinct compliance area, generally covered under a separate TDS compliance review, though PNPC can combine both into a single payroll compliance engagement where that is more efficient for the client.

This is one of the more sensitive areas of the audit. Where an individual is engaged as a 'consultant' but works exclusively for the establishment, under its direction and control, with fixed hours and no independent business risk, EPFO and ESIC authorities can — and do — reclassify the relationship as employment for PF/ESI purposes, regardless of the label used in the engagement letter. We test the substance of these arrangements against established tests for employer-employee relationship, not just the contractual label.

An 'International Worker' under the PF scheme is broadly either a foreign national working in India for an establishment covered under the EPF&MP Act, or an Indian employee who has worked or will work in a country with which India has a Social Security Agreement (SSA) and is eligible for benefits there. International Workers are generally covered under PF without the standard wage ceiling exemption — full salary is typically subject to contribution — unless a valid Certificate of Coverage under an applicable SSA exempts them from Indian PF for a defined period.

The Code on Wages 2019, in force nationally since 21 November 2025, applies a uniform definition of 'wages' that requires excludable components (allowances such as HRA, conveyance, and similar items not treated as wages) to be capped at 50% of an employee's total remuneration. If excluded components exceed that cap, the excess is added back to 'wages' for the purpose of computing gratuity and bonus — meaning many CTC structures with a low basic-to-gross ratio now carry a materially higher gratuity and bonus cost than before the Codes took effect. Provident Fund itself is a partial exception for now: the EPF&MP Act 1952 has not yet been fully repealed, and full migration of PF to Chapter III of the Code on Social Security awaits a further notification and transition period, so PF contribution currently continues to be tested under the EPF&MP Act's existing wage-classification standard (including the Vivekananda Vidyamandir test) rather than the Code's 50% cap.

A payroll vendor processes what it is instructed to process, based on the wage structure and inputs the client provides — it does not independently audit whether the CTC structure is legally compliant, whether contract labour exposure exists, or whether historical filings were accurate. Statutory liability for PF, ESI, and labour law compliance rests with the establishment and its officers in default, not the payroll vendor, regardless of the vendor's own service-level commitments.

At minimum: monthly payroll registers for the audit period, PF ECR and ESI contribution filings with proof of deposit, employee master data with CTC break-up, contractor agreements and licences if contract labour is used, and any prior EPFO/ESIC correspondence. The full document checklist is shared and reviewed at the scoping consultation, tailored to your specific business and the audit's purpose.

A full audit covering 2–3 years for a mid-sized establishment (roughly 100–500 employees) typically takes 5–6 weeks from data receipt to final report. A narrower pre-transaction diligence scope, covering a shorter period with headline findings only, can often be completed in 2–3 weeks against a tighter deadline. Multi-location establishments, larger contract labour populations, or incomplete historical records extend the timeline.

Fees are scoped based on headcount, audit period length, number of locations, and whether contract labour exposure needs to be separately mapped. PNPC provides a written scope and fixed fee quote after the initial scoping consultation — there is no standard published rate because the effort varies significantly between a 50-employee single-location services company and a 500-employee multi-state manufacturing operation with extensive contract staffing.

Yes — this is one of the most common triggers for the engagement. Investor and acquirer legal teams routinely include PF/ESI/labour law compliance as a diligence checklist item, and an independently commissioned audit report, prepared ahead of the transaction rather than reactively during diligence, materially strengthens the seller's or target company's negotiating position and reduces the risk of last-minute price adjustment or escrow holdback tied to labour compliance findings.

Yes, as part of the broader labour law scope. We test bonus computation against the eligibility and minimum percentage requirements now carried under the Code on Wages 2019 (which has consolidated and repealed the erstwhile Payment of Bonus Act 1965), verify the applicable annual return filing, and review gratuity provisioning under the Code on Social Security 2020 (which has consolidated and repealed the erstwhile Payment of Gratuity Act 1972) — including whether an actuarial valuation is being obtained where required and whether the gratuity fund (if maintained through a trust) is being managed correctly.

A Section 7A inquiry is a formal, quasi-judicial proceeding initiated by the EPFO Regional Provident Fund Commissioner to determine the amount of PF dues payable by an establishment — it is an adversarial, department-led process with statutory notice, hearing, and appeal rights. PNPC's audit is a voluntary, client-commissioned, non-adversarial review conducted before any such proceeding begins (or, if a Section 7A notice has already been received, to prepare a considered response to it).

Yes. Beyond Section 7Q interest and Section 14B damages, the EPF&MP Act and the Code on Social Security 2020 (which now houses the ESI framework) both provide for prosecution of the employer and, in the case of a company, every officer in default, for continued or wilful non-compliance — with imprisonment and fine as possible consequences in serious or repeated cases. Directors, particularly those designated as 'occupier' or responsible officer under the applicable statute, carry personal exposure that is not limited by the corporate veil in these specific statutory contexts.

A department inspection is adversarial by design — its purpose is to identify recoverable dues on behalf of the fund, not to advise the establishment. PNPC's audit applies the same statutory tests an inspector would apply, but from an advisory posture: we identify gaps before the department does, quantify exposure honestly (including items an inspector might miss), and — critically — help design the remediation and disclosure strategy, which a department inspector has no role or incentive to do.

Yes. Minimum wage compliance now sits under the Code on Wages 2019 (in force since 21 November 2025, which has consolidated and repealed the erstwhile Minimum Wages Act 1948) and introduces, for the first time, a national floor wage below which no state can set its minimum wage. We verify that wages paid to each employee category meet or exceed the applicable state-notified minimum wage for the relevant scheduled employment and skill category, and that wage revisions notified periodically by the state government have been correctly implemented and are not lagging behind the current notification or the national floor wage.

The ESI framework — now administered under the Code on Social Security 2020, which has consolidated and repealed the standalone ESI Act 1948 — defines two fixed contribution periods each year: 1 April to 30 September, and 1 October to 31 March. An employee whose wages are within the ESI ceiling at the start of a contribution period remains covered for that entire period even if a wage revision takes them above the ceiling mid-period; coverage and contribution obligations only change at the start of the next contribution period. Payroll systems that stop ESI deduction the exact month wages cross the ceiling, rather than at the end of the contribution period, are non-compliant.

PF, ESI, and the Indian labour law framework tested in this audit apply specifically to establishments operating in India under Indian statute — the UAE has its own distinct labour law, WPS (Wage Protection System), and end-of-service gratuity framework governed by UAE Labour Law and, for Free Zone entities, the relevant Free Zone Authority's employment regulations. PNPC's Dubai office conducts an analogous payroll and labour compliance review under UAE rules, coordinated with the India-side audit for group entities operating in both jurisdictions.

The absence of a departmental inspection is not evidence of compliance — EPFO and ESIC inspect a relatively small proportion of registered establishments in any given period, and wage misclassification in particular can persist undetected for years precisely because it does not trigger an obvious filing discrepancy; the ECR is filed correctly against whatever wage base is fed into it, it is simply the wrong base.

The Code on Social Security 2020, in force since 21 November 2025, introduces a distinct statutory category for gig workers and platform workers, with a framework for social security contributions from aggregators — separate from the traditional employee-employer contribution model. Where a client engages gig or platform-style workers, we assess the arrangement both for potential employee misclassification risk (where a 'gig' arrangement is in substance a disguised employment relationship) and for the aggregator's compliance posture against the Code's gig-worker social security framework.

The engagement is governed by a signed engagement letter with explicit confidentiality terms, consistent with the professional and ethical standards Chartered Accountants are bound by under the Chartered Accountants Act 1949 and ICAI's Code of Ethics. Payroll and employee personal data shared with us is used solely for the audit engagement and is not disclosed to any third party without client authorisation, except where legally compelled.

Section 14B damages are a specific, EPF&MP Act-defined civil consequence for delayed payment of dues, computed on a graded scale based on the period of default — they are compensatory-punitive in nature but distinct from criminal penalties. Separately, both the EPF&MP Act and the Code on Social Security 2020 (which now houses the ESI framework) provide for prosecution — fine and/or imprisonment — as a criminal consequence for wilful default, false statements, or obstruction, which is a different legal track entirely and generally reserved for more serious or repeated non-compliance.

Many well-governed companies do, on an annual or biennial cycle, precisely because payroll systems, CTC structures, headcount, and contractor relationships change continuously, and each change is a fresh opportunity for a compliance gap to be introduced even where the baseline was clean. Boards and Audit Committees increasingly treat this as good governance practice alongside — not instead of — the statutory internal audit.

A well-documented, self-conducted audit with a transparent, voluntary disclosure to EPFO puts the establishment in a materially stronger position during any subsequent Section 7A hearing or damages assessment than an establishment with no independent analysis, since it demonstrates good-faith compliance effort and provides a defensible computation basis. That said, the final quantum of damages assessed under Section 14B remains within EPFO's statutory discretion and is not something PNPC or any advisor can guarantee in advance.

The 'occupier' concept — originally defined under the Factories Act 1948 and now carried forward into the Occupational Safety, Health and Working Conditions Code 2020, which has consolidated and repealed that Act — is the person who has ultimate control over the affairs of the factory, typically a designated director for a company, and carries personal statutory responsibility for compliance with the applicable provisions, including registers relevant to this audit (overtime, leave with wages, accident records). For manufacturing clients, we specifically verify the occupier is correctly and currently designated, since an outdated or incorrect occupier designation is itself a compliance gap independent of the payroll findings.

Both, if the client wants it. The audit itself is a diagnostic report, but PNPC works directly with the client's payroll team or vendor to correct wage component classification, ECR filing workflows, and contractor compliance monitoring processes identified as gaps — and many clients transition onto PNPC's ongoing payroll processing retainer afterward for continuous assurance rather than repeating a full audit each year.

A payroll vendor's self-certification tests whether the vendor processed what it was told to process correctly — it does not independently test whether the wage structure itself, the contract labour arrangements, or the historical filing discipline comply with the underlying law. PNPC has represented manufacturing and services clients before EPFO, ESIC, and state labour authorities since 1986; our audit is conducted by practising Chartered Accountants who understand both the statutory framework and how enforcement authorities actually apply it in practice.