Federal law requires GAAP in two situations: your company sells securities to the public, or your institution carries FDIC deposit insurance. Outside those two mandates, no federal statute makes Generally Accepted Accounting Principles compulsory. Whether GAAP is required by law for your organization then depends on the type of entity you run, the state you operate in, and the contracts you have signed. Private companies, non-profits, state and local governments, and insurance companies each sit under a different set of rules, and some of those rules point to a framework other than GAAP entirely.
Public Companies
If your company has securities registered under the Securities Exchange Act of 1934, GAAP compliance is effectively a legal requirement. SEC Regulation S-X states that financial statements not prepared in accordance with GAAP “will be presumed to be misleading or inaccurate, despite footnote or other disclosures.”1eCFR. 17 CFR Part 210 – Form and Content of and Requirements for Financial Statements That presumption applies to every annual 10-K and quarterly 10-Q a public company files.2SEC.gov. Investor Bulletin: How to Read a 10-K
The SEC has statutory authority to write accounting standards itself but has delegated the job. A 2003 policy statement issued under Section 108 of the Sarbanes-Oxley Act formally recognized FASB standards as “generally accepted” for purposes of federal securities law.3U.S. Securities and Exchange Commission. Policy Statement: Reaffirming the Status of the FASB as a Designated Private-Sector Standard Setter When FASB updates a standard, public companies are legally bound to follow it.
One narrow exception applies to foreign companies listed on U.S. exchanges. Foreign private issuers may file statements prepared under International Financial Reporting Standards without any reconciliation to U.S. GAAP.4U.S. Securities and Exchange Commission. Acceptance From Foreign Private Issuers of Financial Statements Prepared in Accordance With International Financial Reporting Standards Domestic public companies do not have that option.
What Happens If a Public Company Gets It Wrong
Section 32 of the Securities Exchange Act carries fines of up to $5 million and 20 years in prison for individuals who willfully file materially false statements. For a corporation, the maximum fine is $25 million.5Office of the Law Revision Counsel. 15 U.S. Code 78ff – Penalties These are criminal penalties requiring proof of willfulness; the SEC can also pursue civil enforcement with financial penalties and officer-and-director bars.
The Sarbanes-Oxley Act layers personal liability on top. Section 906 requires the CEO and CFO to certify that each periodic report fairly presents the company’s financial condition. A knowing false certification carries up to $1 million in fines and 10 years in prison; a willful one, up to $5 million and 20 years. The exposure runs per filing.6Office of the Law Revision Counsel. 18 U.S. Code 1350 – Failure of Corporate Officers to Certify Financial Reports
Banks and FDIC-Insured Institutions
Banks face their own federal GAAP mandate that has nothing to do with whether they are publicly traded. FDIC regulations require every insured depository institution to prepare annual financial statements in accordance with GAAP and have them audited by an independent public accountant.7eCFR. 12 CFR Part 363 – Annual Independent Audits and Reporting Requirements Community banks, federally insured credit unions, and the largest multinational banks all fall under this rule.
The obligation reaches into regulatory filings as well. Call reports that banks submit to their regulators must conform to GAAP for recognition and measurement, so a bank cannot maintain non-GAAP books for one purpose and GAAP books for another.
Private Companies
No federal law requires a private company to keep its books under GAAP. If you do not sell securities to the public and do not hold federal deposit insurance, you can use cash-basis, tax-basis, or any other reasonable method.
That freedom usually shrinks as soon as outside money is involved. Commercial lenders routinely write GAAP covenants into loan agreements, turning compliance into a contractual duty. Drift from GAAP and the lender can declare a technical default and call the loan. Venture capital and private equity investors impose similar terms, typically requiring monthly or quarterly GAAP-compliant reporting as a condition of funding.
Tax rules push in the same direction, though they do not require GAAP outright. Corporations with total assets of $10 million or more must file Schedule M-3 with Form 1120, reconciling financial statement income to taxable income line by line.8Internal Revenue Service. Instructions for Schedule M-3 (Form 1120) Under IRC Section 448, C corporations and partnerships with a corporate partner must use the accrual method once their average annual gross receipts over the prior three years exceed $32 million (the inflation-adjusted threshold for tax years beginning in 2026).9Internal Revenue Service. Rev. Proc. 2025-32 That does not equal a GAAP mandate, but it takes cash-basis accounting off the table for larger businesses.
Non-Profit Organizations
The IRS does not explicitly require GAAP for tax-exempt organizations. Public charities file Form 990 annually, and the full Form 990 kicks in at $200,000 in gross receipts or $500,000 in total assets.10Internal Revenue Service. Compliance Guide for 501(c)(3) Public Charities Cash or accrual is permitted, but the detail the full form demands pushes larger organizations toward accrual-basis GAAP.
Two outside pressures are stronger than the IRS on this point. First, many state Attorneys General require audited GAAP financial statements as a condition for a charitable solicitation registration, the license that lets an organization fundraise in that state.11Internal Revenue Service. Charitable Solicitation – State Requirements A charity soliciting across multiple states may need to satisfy a dozen regulators, most of whom expect GAAP-audited financials.
Second, any non-federal entity that spends $1 million or more in federal awards during a fiscal year must undergo a single audit under the Uniform Guidance.12eCFR. 2 CFR 200.501 – Audit Requirements That threshold rose from $750,000 in April 2024 and applies to fiscal years beginning on or after October 1, 2024. A single audit requires GAAP-compliant statements, and failure can trigger suspended funding or demands to return money already spent.
State and Local Governments
Governments follow standards issued by the Governmental Accounting Standards Board (GASB), not FASB. Whether a specific government must follow GASB standards is a matter of state law. About half of all states require their counties to follow GAAP, and a similar proportion require it for cities and towns. Around two-thirds of states require GAAP for independent school districts.13Financial Accounting Foundation. GAAP and State and Local Governments
GASB itself has no enforcement authority; it writes the standards, and legislatures decide whether to make them mandatory. Where they do, local governments produce Annual Comprehensive Financial Reports built on GASB Statement No. 34, which calls for government-wide statements on the accrual basis, fund-level statements, management’s discussion and analysis, and notes.14GASB. Summary of Statement No. 34 – Basic Financial Statements and Management’s Discussion and Analysis for State and Local Governments
Enforcement varies. States commonly withhold shared revenues from municipalities that fail to submit timely, GAAP-compliant audits, and some can appoint a financial receiver. Municipal bondholders rely on these reports too, so a government that cannot produce them may struggle to borrow at reasonable rates.
Insurance Companies
Insurance companies sit outside the general GAAP picture. State insurance regulators require authorized insurers to file under Statutory Accounting Principles (SAP), a framework developed by the National Association of Insurance Commissioners that prioritizes solvency measurement. SAP is more conservative than GAAP: it generally requires insurers to expense acquisition costs immediately rather than spreading them across a policy’s life, and it values some assets at lower amounts. The goal is to show a regulator whether the insurer can pay claims in a downside scenario.
Publicly traded insurers still must file GAAP statements with the SEC, so they maintain both sets of books: SAP for the state regulator and GAAP for investors.
Alternatives When GAAP Is Not Required
If none of the mandates above reach your organization, several other frameworks are available.
Tax-basis accounting uses the same rules as your federal income tax return. It is popular with small businesses whose primary users of financial statements are the owners themselves and the IRS, because it eliminates the cost of maintaining separate books.
Cash-basis accounting records revenue when cash comes in and expenses when cash goes out. It is simple, though it can distort the picture of a business with significant receivables or payables. Corporations and partnerships above the $32 million gross receipts threshold cannot use it for tax purposes.
The AICPA’s Financial Reporting Framework for Small and Medium-Sized Entities (FRF for SMEs) is a simplified set of principles for privately held businesses whose statements are used mainly by owners, managers, and lenders. It is optional and has no effective date.
IFRS is available to foreign private issuers filing with the SEC, and a small number of domestic private companies adopt it voluntarily for consistency with foreign parents or subsidiaries.
Framework choice matters most when someone else needs to rely on your numbers. Lenders, investors, and acquirers almost always prefer GAAP because it lets them compare your figures with other companies on the same measurement basis. Converting from an alternative framework to GAAP later, particularly during a sale or IPO, can be expensive. If you expect to raise outside capital or sell within a few years, starting with GAAP is usually cheaper than switching to it.