Sustainability Data explained: this guide covers what it means, who it applies to, the step-by-step process, documents required, fees, due dates and penalties in India — so you can stay compliant with confidence and avoid costly mistakes.
Subsection 5601 permits sustainability data and information services affecting the assured information only for a non-public interest entity and only where they are routine or mechanical — the client having made every necessary judgment — and prohibits them outright for a public interest entity.
What management must retain over sustainability data
Paragraph 5601.2 A1 begins by fixing responsibility for sustainability data and the information built from it. Management is responsible for the preparation and presentation of the sustainability information in accordance with the applicable reporting framework, and those responsibilities include:
- determining sustainability reporting policies and the reporting treatment under them;
- preparing or changing source documents or originating data, electronic or otherwise, evidencing a transaction, event or matter included in the information;
- originating or changing sustainability data entries or records; and
- determining or approving sustainability information classifications.
The paragraph then recalls that R5400.20 prohibits a firm from assuming a management responsibility. So the four items above are the floor: whatever service the firm provides, these decisions must remain with the client.
What sustainability data and information services cover
Paragraph 5601.3 A1 describes sustainability data and information services as a broad range including:
- preparing sustainability data records or the information that is reported;
- recording data, events or other matters included in the information;
- resolving sustainability information inaccuracies;
- converting existing information from one sustainability reporting framework to another; and
- accounting and bookkeeping services that might affect the sustainability information on which the firm expresses an opinion.
The fourth item in 5601.3 A1 deserves attention because it is precisely the work firms are being asked for as reporting regimes change: converting existing sustainability information from one reporting framework to another. It sits in the middle of the list, with no qualification.
A conversion exercise is rarely routine or mechanical — it involves mapping disclosures, deciding what the new framework requires, and exercising judgment on treatment. So for a public interest entity client it will normally be prohibited outright by R5601.6, and for others it will normally fail the routine-or-mechanical test in R5601.5. A firm assuring a client's sustainability information should assume it cannot also be the one that migrates that client onto a new framework.
The threat, and the rule for non-public interest entities
Paragraph 5601.4 A1: providing these services creates a self-review threat — stated as a fact, not a possibility — when there is a risk that the results will affect the sustainability information on which the firm will express an opinion, or the underlying data or records.
Paragraph R5601.5: a firm or network firm shall not provide such services that might affect the assured information to a client that is not a public interest entity, unless:
- (a) the services are of a routine or mechanical nature; and
- (b) the firm addresses any threats that are not at an acceptable level.
Paragraph 5601.5 A1 defines the test. Services are routine or mechanical where they:
- (a) involve information, data or material in relation to which the client has made any judgments or decisions that might be necessary; and
- (b) require little or no professional judgment.
Firms usually read "routine or mechanical" as a statement about the difficulty of the task. Limb (b) does capture that. But limb (a) asks a different question: has the client already made any judgments or decisions that might be necessary?
So a task can be technically simple and still fail, because a judgment was left to the firm. Posting an entry is mechanical — unless the firm chose the classification. The five examples in 5601.5 A3 all show the same pattern: calculations or reports based on client or third-party data for client approval; recurring data easily determinable from source documents where the client determined or approved the classification; posting data coded by the client or received from third parties; preparing information based on client-approved records; and compiling factual data from client or third-party identified sources. In every one, the judgment sits with the client and the firm executes.
Paragraph 5601.5 A2 extends the test to automation. Services can either be manual or automated, and in determining whether an automated service is routine or mechanical, the factors include the activities performed by, and the output of, the technology, and whether the technology provides a service that is based on or requires the expertise or judgment of the firm or network firm.
Paragraph 5601.5 A3 closes with the reminder that such services may be provided to non-public interest entity clients provided the firm complies with R5400.21 so as not to assume a management responsibility, and with R5601.5(b). Paragraph 5601.5 A4 gives the two safeguards — professionals who are not assurance team members, and an appropriate reviewer not involved in providing the service.
Sustainability data services for a public interest entity
Paragraph R5601.6 is one sentence and admits no exception: a firm or network firm shall not provide sustainability data and information services that might affect the sustainability information on which the firm expresses an opinion to a sustainability assurance client that is a public interest entity.
There is no routine-or-mechanical carve-out here. The trigger is simply that the services might affect the assured information — which follows from R5600.17, since such services by definition create a self-review threat under 5601.4 A1.
Practical checklist for sustainability data services
- Confirm the client's status first — for a public interest entity, R5601.6 ends the analysis.
- Check that the four management responsibilities in 5601.2 A1 remain with the client.
- Apply both limbs of the routine-or-mechanical test, especially who made the judgments.
- Treat framework conversion as outside the routine-or-mechanical category.
- Assess automated services on the technology's activities and output, and on whose expertise it embeds.
- Comply with R5400.21 to avoid assuming a management responsibility.
- Apply a safeguard under 5601.5 A4 where any threat is not at an acceptable level.
- Record which client approvals were obtained, since they are what makes the service routine.
Common mistakes
- Reading "routine or mechanical" as a difficulty test only.
- Making a classification decision and treating the posting as mechanical.
- Assuming an automated tool is neutral when it embeds the firm's judgment.
- Offering framework conversion to an assurance client.
- Looking for a routine-or-mechanical exception for a public interest entity.
- Failing to evidence client approval of the underlying judgments.