Sustainability Data and Information Services Under Subsection 5601

Sustainability Data explained: this guide covers what it means, who it applies to, the step-by-step process, documents required, fees, due dates and penalties in India — so you can stay compliant with confidence and avoid costly mistakes.

Subsection 5601 permits sustainability data and information services affecting the assured information only for a non-public interest entity and only where they are routine or mechanical — the client having made every necessary judgment — and prohibits them outright for a public interest entity.

What management must retain over sustainability data

Paragraph 5601.2 A1 begins by fixing responsibility for sustainability data and the information built from it. Management is responsible for the preparation and presentation of the sustainability information in accordance with the applicable reporting framework, and those responsibilities include:

• determining sustainability reporting policies and the reporting treatment under them;
• preparing or changing source documents or originating data, electronic or otherwise, evidencing a transaction, event or matter included in the information;
• originating or changing sustainability data entries or records; and
• determining or approving sustainability information classifications.

The paragraph then recalls that R5400.20 prohibits a firm from assuming a management responsibility. So the four items above are the floor: whatever service the firm provides, these decisions must remain with the client.

What sustainability data and information services cover

Paragraph 5601.3 A1 describes sustainability data and information services as a broad range including:

• preparing sustainability data records or the information that is reported;
• recording data, events or other matters included in the information;
• resolving sustainability information inaccuracies;
• converting existing information from one sustainability reporting framework to another; and
• accounting and bookkeeping services that might affect the sustainability information on which the firm expresses an opinion.

The threat, and the rule for non-public interest entities

Paragraph 5601.4 A1: providing these services creates a self-review threat — stated as a fact, not a possibility — when there is a risk that the results will affect the sustainability information on which the firm will express an opinion, or the underlying data or records.

Paragraph R5601.5: a firm or network firm shall not provide such services that might affect the assured information to a client that is not a public interest entity, unless:

• (a) the services are of a routine or mechanical nature; and
• (b) the firm addresses any threats that are not at an acceptable level.

Paragraph 5601.5 A1 defines the test. Services are routine or mechanical where they:

• (a) involve information, data or material in relation to which the client has made any judgments or decisions that might be necessary; and
• (b) require little or no professional judgment.

Paragraph 5601.5 A2 extends the test to automation. Services can either be manual or automated, and in determining whether an automated service is routine or mechanical, the factors include the activities performed by, and the output of, the technology, and whether the technology provides a service that is based on or requires the expertise or judgment of the firm or network firm.

Paragraph 5601.5 A3 closes with the reminder that such services may be provided to non-public interest entity clients provided the firm complies with R5400.21 so as not to assume a management responsibility, and with R5601.5(b). Paragraph 5601.5 A4 gives the two safeguards — professionals who are not assurance team members, and an appropriate reviewer not involved in providing the service.

Sustainability data services for a public interest entity

Paragraph R5601.6 is one sentence and admits no exception: a firm or network firm shall not provide sustainability data and information services that might affect the sustainability information on which the firm expresses an opinion to a sustainability assurance client that is a public interest entity.

There is no routine-or-mechanical carve-out here. The trigger is simply that the services might affect the assured information — which follows from R5600.17, since such services by definition create a self-review threat under 5601.4 A1.

Practical checklist for sustainability data services

• Confirm the client's status first — for a public interest entity, R5601.6 ends the analysis.
• Check that the four management responsibilities in 5601.2 A1 remain with the client.
• Apply both limbs of the routine-or-mechanical test, especially who made the judgments.
• Treat framework conversion as outside the routine-or-mechanical category.
• Assess automated services on the technology's activities and output, and on whose expertise it embeds.
• Comply with R5400.21 to avoid assuming a management responsibility.
• Apply a safeguard under 5601.5 A4 where any threat is not at an acceptable level.
• Record which client approvals were obtained, since they are what makes the service routine.

Common mistakes

• Reading "routine or mechanical" as a difficulty test only.
• Making a classification decision and treating the posting as mechanical.
• Assuming an automated tool is neutral when it embeds the firm's judgment.
• Offering framework conversion to an assurance client.
• Looking for a routine-or-mechanical exception for a public interest entity.
• Failing to evidence client approval of the underlying judgments.