## SA 250 – Consideration of Laws and Regulations in an Audit of Financial Statements
### Two Categories of Laws
| Type A | Type B |
|---|---|
| Direct effect on material amounts and disclosures in FS | Fundamental impact on operations and going concern |
| Obtain SAAE (Sufficient Appropriate Audit Evidence) regarding compliance | Undertake specified procedures to identify non-compliance that may impact FS |
---
### Management's Role in Prevention & Detection
Management may implement the following to prevent and detect non-compliance:
- Monitor legal requirements
- Operate appropriate systems of internal control
- Develop, publicise, and follow a code of conduct
- Monitor compliance with the code; discipline non-compliant employees
- Engage legal advisors to monitor legal requirements
- Maintain a register of significant laws and regulations applicable to the entity
- Ensure employees are trained and understand the code of conduct
---
### Auditor's Responsibilities by Law Type
| For Laws Directly Affecting FS (Type A) | For Laws Affecting Going Concern (Type B) |
|---|---|
| Obtain SAAE regarding compliance | (a) Inquire of management |
| (b) Inspect correspondence with regulatory authorities |
In all cases, the auditor must:
1. Obtain a general understanding of the legal and regulatory framework
2. Exercise Professional Skepticism
3. Obtain written representation from management
---
### Indicators of Non-Compliance
1. Investigation by regulatory organizations
2. Payment of fines, additional taxes, or penalties
3. Unusual payments in cash
4. Unusual payments toward legal fees
5. Unusual transactions with companies registered in tax havens
6. Adverse media comment
---
### Reporting Responsibilities
#### To TCWG
Communicate all matters of non-compliance with laws and regulations that come to the auditor's attention.
#### In the Audit Report
| Situation | Audit Report Response |
|---|---|
| Non-compliance inadequately reflected in FS | Qualified Opinion / Adverse Opinion |
| Non-compliance adequately reflected in FS | Emphasis of Matter paragraph |
#### To Regulators
- Client confidentiality may be an issue — but law may override confidentiality requirements
- Auditor should consider seeking legal advice before reporting to regulators