Auditor Independence Declaration: Forms, Rule 3526, and Filing

An auditor independence declaration is a written statement from an audit firm confirming it has no conflicts of interest with the company whose financial statements it examined. In practice it is not one document but three, depending on the engagement: a formal written affirmation delivered to an audit committee under PCAOB Rule 3526, an independence statement embedded in the auditor’s report under PCAOB AS 3101, or a standalone certification signed by each team member on a government audit. What the declaration says, who signs it, and where it goes all follow from which of those three you are producing.

The Three Forms the Declaration Takes

For a public company audit, the declaration exists in two places at once. The audit firm sends a written affirmation to the client’s audit committee under PCAOB Rule 3526, and a shorter independence statement appears inside the auditor’s report itself under PCAOB AS 3101.¹ The audit committee version is detailed and lists relationships; the report version is a short affirmation the outside world sees.

For a non-public company audit or other attestation work, the AICPA Code of Professional Conduct governs. There is no single AICPA boilerplate. The auditor works through the conceptual framework, evaluates threats, and documents that analysis in the engagement file.

For a government audit conducted under Government Auditing Standards, each individual auditor signs a personal certification before beginning work. The Department of Commerce OIG template, for example, has the auditor certify they are “free from all personal and external impairments” and that their most recent OGE Form 450 does not reveal any conflict with the assignment.²

Who Has to Issue One

Any registered public accounting firm that audits a company filing with the SEC must be independent throughout the audit and professional engagement period. PCAOB Rule 3520 states it directly: the firm and its associated persons “must be independent of the firm’s audit client throughout the audit and professional engagement period.”³ That obligation covers every public company traded on a U.S. exchange, regardless of size, and extends to broker-dealer audits under PCAOB oversight.

The audit committee, not management, is the recipient. Under Sarbanes-Oxley, the audit committee appoints and oversees the external auditor, so the written affirmation flows to that committee as part of the engagement relationship.⁴

What the Declaration Must Contain

There is no single universal template, but a Rule 3526 written affirmation needs the following components to be complete.

The full legal name of the audit firm and the name of the audit client. On government forms, the individual auditor’s printed name and title.
The fiscal period covered and the date of issue. The PCAOB “audit and professional engagement period” runs from signing the engagement letter through issuance of the audit report.
An explicit affirmation. Rule 3526 requires the firm to state that it “is independent in compliance with Rule 3520” as of the communication date.³
A written description of all relationships between the firm (including its affiliates) and the audit client or persons in financial reporting oversight roles that could reasonably be thought to bear on independence.
If any independence breach occurred during the period, a summary of each instance, an explanation of why objectivity was not impaired, and the resolution. A firm cannot issue a clean affirmation on top of a known breach.
A signature from an authorized representative of the firm and the date.

The auditor’s report version is much shorter. AS 3101 requires the report to carry the title “Report of Independent Registered Public Accounting Firm” and to state that the firm “is required to be independent with respect to the company in accordance with the U.S. federal securities laws and the applicable rules and regulations of the SEC and the PCAOB.”¹ That language is standard and non-negotiable.

The Rule 3526 Process for Public Company Audits

Rule 3526 sets up two communications: one before accepting a new client, and another at least annually for continuing clients.

Before Accepting a New Client

The firm gives the prospective client’s audit committee a written description of all relationships that could bear on independence, discusses the potential effects of those relationships with the committee, and documents the substance of that discussion.³

The Annual Communication

For each existing audit client, at least once a year the firm must:

Describe in writing all relationships between the firm or its affiliates and the audit client or persons in financial reporting oversight roles.
Discuss with the audit committee how those relationships could affect independence.
Affirm in writing that the firm is independent in compliance with Rule 3520 as of the date of the communication.
Document the substance of the discussion.

If an independence breach occurred during the year, the firm summarizes each instance, explains why objectivity was not impaired, and works through that analysis with the audit committee before issuing a modified affirmation.³

Permissible tax services carry a separate step. Under PCAOB Rule 3524, before beginning any tax service for an issuer audit client, the firm must describe the scope and fee structure in writing, discuss potential effects on independence, and document the discussion for audit committee pre-approval.³

Relationships That Would Prevent a Clean Declaration

Before signing anything, walk through the categories that impair independence under SEC Regulation S-X Rule 2-01 and PCAOB standards.

Financial interests. The firm, any covered person, and their immediate family members cannot hold any direct investment in the audit client, whether stocks, bonds, options, or other securities. Material indirect investments are also a problem. Holding client securities through an intermediary impairs independence if the intermediary is not a diversified investment company and the client’s securities make up 20 percent or more of the intermediary’s total investments.⁵

Employment relationships. Section 206 of Sarbanes-Oxley bars a firm from auditing a company if the client’s CEO, CFO, controller, or chief accounting officer worked at the firm and participated in the client’s audit within the preceding year.⁴

Prohibited non-audit services. Sarbanes-Oxley and SEC rules bar the audit firm from providing these services to an audit client at the same time:

Bookkeeping or preparation of the client’s accounting records or financial statements.
Design or implementation of financial information systems.
Appraisal, valuation, or fairness opinions.
Actuarial services affecting amounts recorded in the financial statements.
Outsourced internal audit work related to accounting controls or financial statements.
Any management function, including acting as a director, officer, or employee.

⁶

If any of these apply, the firm cannot issue a clean independence affirmation. The path forward is to remove the impairment or decline the engagement.

Where the Declaration Goes

The independence declaration is not filed as a standalone document with any regulator. The Rule 3526 written affirmation and relationship description go directly to the audit committee. Both the firm and the company should retain the records; PCAOB inspectors review them during periodic inspections, and the SEC can request them during investigations.

The report version reaches the public. It appears inside the auditor’s report attached to the company’s Form 10-K, filed through the SEC’s EDGAR system. The AS 3101 title and independence statement are what a reader of the 10-K actually sees.¹

Government audit declarations stay in the engagement file. Each auditor signs one before starting work, and the signed form is retained as part of the working papers.

What Getting It Wrong Costs

The PCAOB treats independence violations as a priority enforcement matter. It can censure firms and individuals, impose monetary penalties, and limit or revoke the ability to audit public companies or broker-dealers.⁷ The PCAOB fined PricewaterhouseCoopers $2.75 million for quality control violations relating to independence and required remedial undertakings.⁸

The SEC pursues the same conduct through its own enforcement track. In one matter, PwC agreed to pay over $3.8 million in disgorgement plus $613,842 in prejudgment interest and a $3.5 million civil penalty for violating auditor independence rules related to non-audit services, and an individual partner was fined $25,000 and suspended from practicing before the SEC for four years.⁹

Beyond fines, an independence violation can invalidate the audit and force the client to restate its financial statements, trigger shareholder litigation, and cost the firm its PCAOB registration. A firm that discovers a breach mid-engagement should consult with the SEC’s Office of the Chief Accountant before the situation escalates.⁵

1
Public Company Accounting Oversight Board. AS 3101 – The Auditor’s Report on an Audit of Financial Statements When the Auditor Expresses an Unqualified Opinion
2
U.S. Department of Commerce OIG. Independence Declaration
3
Public Company Accounting Oversight Board. Section 3 – Auditing and Related Professional Practice Standards
4
U.S. Department of Labor. Sarbanes-Oxley Act of 2002
5
eCFR. 17 CFR 210.2-01 – Qualifications of Accountants
6
Securities and Exchange Commission. Commission Adopts Rules Strengthening Auditor Independence
7
Public Company Accounting Oversight Board. Enforcement
8
Public Company Accounting Oversight Board. PCAOB Fines PwC $2.75 Million for Quality Control Violations Relating to Independence
9
Securities and Exchange Commission. SEC Charges PwC LLP With Violating Auditor Independence Rules