Regulatory Compliance

Frequently asked questions

How do you scope a compliance review?

By operations, not by industry label — we look at where you manufacture, who you employ, what you import or export, and what data you hold, and derive obligations from that.

Can historical non-compliance be regularised?

Frequently yes, through compounding, condonation or voluntary disclosure. Doing it proactively is almost always cheaper than being found out.

Which regulators are most relevant to our business?

It depends on sector and structure — typically the RBI and FEMA framework for cross-border flows, SEBI for listed and funded entities, sectoral regulators for licensed activities, plus labour, environmental and data-protection obligations. We start with a mapping exercise before advising on process.

What are the consequences of non-compliance?

They range from monetary penalties and compounding applications to licence conditions, director disqualification and, for some contraventions, prosecution. Voluntary disclosure and compounding are usually far cheaper than a regulator-initiated action.

Can historic non-compliance be regularised?

Often yes. FEMA contraventions can be compounded with the RBI and many Companies Act defaults can be cured through adjudication or condonation. We quantify exposure first, then run the remediation.

Do you handle data-protection and privacy obligations?

Yes — privacy notices, consent and processing records, vendor data-processing terms, and readiness for the Digital Personal Data Protection framework and its cross-border transfer rules.