Prohibited Non-Audit Services Under Auditor Independence Rules

Prohibited non-audit services under auditor independence rules fall into nine categories that a registered audit firm cannot provide to a public company whose financial statements it audits. The Sarbanes-Oxley Act of 2002 established the list, and the SEC enforces it through Rule 2-01 of Regulation S-X.¹ The reasoning behind every category is the same: an auditor cannot credibly evaluate work it created, managed, or advocated for. Some services are flatly off-limits. Others are permitted only with audit committee approval and specific safeguards.

Bookkeeping and Financial Statement Preparation

The audit firm cannot maintain accounting records, prepare financial statements, or generate the source data feeding those statements.² No recording transactions, no drafting journal entries, no reconciling accounts. An auditor who built the books has every reason to confirm they are correct rather than dig for errors.

There is no emergency exception. The SEC eliminated older carve-outs when it strengthened the independence rules, leaving only a narrow safe harbor for work that will not be subject to the firm’s own audit procedures.³ In practice, that exception is nearly impossible to satisfy for any meaningful accounting task.

Financial Information Systems Design and Implementation

The firm cannot design or build the hardware or software systems a client uses to track financial data, including any system that aggregates source data or generates information significant to the financial statements.² Choosing how data flows through the accounting infrastructure is a management decision. When the auditor makes that decision, it loses the distance needed to independently test whether the system and its controls work.

Appraisal, Valuation, and Actuarial Services

Valuation work and actuarial calculations are off-limits whenever their results are reasonably likely to be material to the financial statements.² Estimating asset values in a merger, calculating pension obligations, or issuing a fairness opinion all fall within the prohibition.¹ These tasks turn on subjective assumptions, and an auditor who picked those assumptions is unlikely to second-guess them months later.

A narrow exception exists for valuations performed solely for purposes that do not touch the financial statements, such as a valuation done only for a tax filing.² The firm must document why the work stays outside the audit’s scope.

Internal Audit Outsourcing

The external auditor cannot also serve as the company’s internal audit function.² If one firm handles both roles, it ends up auditing controls it helped monitor throughout the year. Management is responsible for maintaining an internal audit function and cannot hand that responsibility to the outside auditor.

Management Functions

The auditor cannot act as a director, officer, or employee of the audit client, or make decisions that belong to management.² Informal arrangements that blur the line create the same problem. When more than half the hours on an audit engagement come from people who are not the firm’s own full-time employees, the company must disclose that fact in its proxy statement.⁴

Human Resources Services

The auditor cannot recruit, interview, or recommend candidates for senior leadership positions at the audit client.² Psychological testing and background screening of job candidates are also prohibited. An auditor who helped select the CFO is poorly positioned to objectively evaluate that CFO’s financial reporting choices.

Broker-Dealer, Investment Adviser, and Investment Banking Services

The firm cannot act as a broker-dealer, investment adviser, or underwriter for the securities of a company it audits.² If the auditor profits from selling or promoting the company’s stock, its financial interest runs directly counter to its obligation to report problems.

Legal Services

The auditor cannot serve as the company’s legal advocate or perform any work that would require a law license.² A lawyer advances the client’s position; an auditor assesses that position without favoritism. Combining the two roles creates an irreconcilable conflict.

Expert Services Unrelated to the Audit

The auditor cannot serve as an expert witness or provide expert opinions on behalf of the audit client in litigation, regulatory proceedings, or investigations.² Offering an expert opinion in a courtroom means advocating for the company’s position, and advocacy is incompatible with independence.

The firm can still give a factual account of work it actually performed, including testimony about positions it took or conclusions it reached during the audit or other services.² The line falls between explaining your own work and championing the client’s interests on a separate matter.

Contingent Fees Are Separately Prohibited

Beyond the nine service categories, any contingent fee arrangement between the auditor and the audit client is barred.² A contingent fee is one that is paid only if a particular result is achieved, or that varies based on the outcome. The ban covers every product and service the firm sells, not only prohibited engagements. If the paycheck depends on a specific finding, the auditor has an incentive to reach it regardless of the evidence.

A limited exception applies to tax matters where the fee is determined by the outcome of a judicial proceeding or the findings of a government agency. Fees that vary with complexity are not treated as contingent, provided the amount does not hinge on a specific result.²

Where Tax Services Stand

Tax compliance, tax advice, and tax planning are not among the nine prohibited categories, so they are generally permissible. They are not a free pass. Any tax engagement still requires advance approval from the audit committee.² The PCAOB has layered on additional restrictions that narrow the field considerably.

PCAOB Rule 3522 prohibits an audit firm from marketing aggressive tax positions to audit clients. A position counts as aggressive when tax avoidance is a significant purpose and the position is more likely than not to fail under applicable tax law. Confidential tax transactions, which the promoter requires the client to keep secret, are also banned. Rule 3523 separately bars the firm from providing personal tax services to individuals in financial reporting oversight roles at the audit client, along with their immediate family members, during the audit engagement period.⁵ Preparing a CFO’s personal return creates a personal relationship that could compromise the auditor’s willingness to challenge that same CFO’s reporting decisions.

When the firm seeks approval for a tax engagement, PCAOB Rule 3524 requires it to describe the scope and fee structure in writing, disclose any referral fees or fee-sharing arrangements with third parties, and discuss with the audit committee how the work could affect independence.⁶

Audit Committee Pre-Approval Is Required

Even for services that are not prohibited, the audit committee must approve the engagement before work begins. Section 202 of Sarbanes-Oxley requires pre-approval of all audit and non-audit services provided by the company’s audit firm.⁷ The committee can delegate authority to one or more independent members, but delegated approvals must be reported to the full committee at its next meeting.

A small de minimis exception applies only when three conditions are all met: the total fees for the non-audit services do not exceed five percent of what the company paid its auditor that year, the company did not recognize the services as non-audit services at the time of the engagement, and the services are brought to the audit committee’s attention and approved before the audit concludes.⁷ Outside that window, pre-approval is absolute.

Consequences When the Line Is Crossed

The penalties reach both the firm and the company. The PCAOB can censure a firm, impose civil money penalties, and order remedial training and policy overhauls.⁸ State licensing boards can impose separate discipline on individual accountants, from license suspensions to monetary fines, independent of any federal action.

For the company, the fallout can run deeper. If the auditor’s independence is retroactively found to be impaired, the company may need to engage a new firm and have prior financial statements reaudited. A company preparing for an initial public offering has in some cases been forced to either replace its auditor, delay its registration by up to three years, or demonstrate to the SEC staff that the violation did not actually compromise the auditor’s objectivity.⁹

1
Office of the Law Revision Counsel. 15 U.S. Code 78j-1 – Audit Requirements
2
eCFR. 17 CFR 210.2-01 – Qualifications of Accountants
3
U.S. Securities and Exchange Commission. Strengthening the Commission’s Requirements Regarding Auditor Independence
4
U.S. Securities and Exchange Commission. Revision of the Commission’s Auditor Independence Requirements
5
U.S. Securities and Exchange Commission. Notice of Filing and Immediate Effectiveness of Proposed Rule Change Adjusting Implementation Schedule of Rule 3523
6
Public Company Accounting Oversight Board. Section 3 – Auditing and Related Professional Practice Standards
7
Public Company Accounting Oversight Board. Sarbanes-Oxley Act of 2002
8
Public Company Accounting Oversight Board. PCAOB Fines PwC $2.75 Million for Quality Control Violations Relating to Independence
9
U.S. Securities and Exchange Commission. SEC Updates Auditor Independence Rules