Compliance for Private Ltd Companies

Compliance for Private Ltd Companies

A private limited company registered under the Companies Act, 2013 carries a fixed compliance rhythm every financial year — board meetings, AGM, ROC filings, tax returns, and director-level obligations. For FY 2026-27 (April 2026 to March 2027), missing even one filing triggers Rs. 100 per day in late fees with no upper ceiling. Three consecutive years of default disqualifies every director under Section 164(2). This guide maps the complete compliance calendar — deadlines, form names, penalties, and the exact steps to stay clean.

Board and Governance: The Foundation Layer

Before any ROC form is filed, a private limited company must run its governance correctly. The Ministry of Corporate Affairs (MCA) audits this through the minutes and resolutions you attach to filings, and adjudication officers increasingly ask for proof of board compliance during penalty proceedings.

Board Meetings

The Companies Act, 2013 requires a minimum of four board meetings per calendar year, with a maximum gap of 120 days between any two consecutive meetings. Note that the 120-day rule applies between meetings, not to the calendar year split. A company that holds meetings on 5 April 2026, 30 July 2026, 28 November 2026, and 15 March 2027 satisfies both the frequency and the gap rule for FY 2026-27.

Every board meeting must have a valid notice — at least seven days in advance (shorter notice is valid if all directors consent in writing). The agenda must be circulated with the notice. Minutes must be recorded and signed by the Chairperson within 30 days of the meeting, then entered in the Minutes Book maintained at the registered office or a pre-notified alternative location.

At the first board meeting of each financial year, every director must disclose their interest in other entities using Form MBP-1. This disclosure is not optional. Any director who participates in a transaction without giving a fresh MBP-1 at the year's first meeting exposes the company to a challenge on that contract under Section 184.

Annual General Meeting (AGM)

For a company whose financial year closes on 31 March 2027, the AGM must be held on or before 30 September 2027 — within six months of year-end. There is a second constraint: the AGM cannot be held more than 15 months after the previous AGM. If your last AGM was on 30 September 2026, the next must be held no later than 31 December 2027 — the 6-month rule is more restrictive and governs.

The AGM is the trigger for most annual ROC filings. Get this date wrong and every downstream filing date shifts.

Statutory Registers

Section 88 requires a Register of Members, Section 170 a Register of Directors and Key Managerial Personnel (KMP), and Section 188 a Register of Contracts or Arrangements in which Directors are Interested. These must be kept at the registered office, available for inspection, and updated within the prescribed timelines whenever a change occurs. Failure to maintain these registers is itself a punishable default under Section 134(8) and Section 88(5).

Annual ROC Filings: Deadlines You Cannot Negotiate

The table below reflects the typical timeline for a company with a 31 March year-end and an AGM held on 30 September 2026. Adjust proportionally if your AGM falls on a different date.

AOC-4 must be filed in XBRL format if your company meets the threshold — paid-up capital of Rs. 5 crore or more, or turnover of Rs. 100 crore or more. For most early-stage private limited companies, the standard AOC-4 form on MCA V3 applies. Attach audited financial statements, the Director's Report (under Section 134), the Auditor's Report, and the Notice of AGM.

MGT-7A is the abbreviated annual return available to small companies — defined as companies with paid-up capital not exceeding Rs. 4 crore and turnover not exceeding Rs. 40 crore. If your company exceeds either threshold, you must file the full MGT-7. Do not file MGT-7A incorrectly; the MCA's system may accept it, but an incorrect form opens a penalty notice during scrutiny.

DPT-3 is routinely misunderstood. It is not only for companies that accept public deposits (which private limited companies cannot). Every private limited company that has any outstanding receipt of money — including shareholder loans, director loans, or inter-corporate deposits — must file DPT-3 by 30 June each year, disclosing the amount outstanding as of 31 March. Companies with nil outstanding must still verify their position and file if applicable.

Worked Example: How a 7-Month Filing Delay Becomes Rs. 74,600 in Penalties

Scenario: Apex Innovations Pvt Ltd holds its FY 2025-26 AGM on 30 September 2026. Due to a delayed audit, the company files AOC-4 and MGT-7 only on 31 March 2027. The company also missed its DPT-3 for FY 2025-26 (due 30 June 2026) and its MSME-1 for H1 FY 2026-27 (due 31 October 2026), filing both on 31 March 2027.

Add ADT-1 (if delayed by the same 152 days as AOC-4): Rs. 15,200 more. The company is now looking at Rs. 85,000 in pure late filing fees — before any adjudication penalty. If the delay had stretched to 300 days, the DPT-3 component alone would hit Rs. 30,000. None of these amounts are tax-deductible. They are pure cash drain, entirely avoidable.

A startup with three founders each drawing a director salary would also be exposed to director disqualification risk if this pattern repeats for two more consecutive years.

Director-Level and Half-Yearly Filings

DIR-3 KYC

Every individual who holds a Director Identification Number (DIN) — whether or not they are currently active in any company — must complete KYC by 30 September each year. For FY 2026-27, the deadline is 30 September 2026.

The process:

1. Log in to MCA V3 with the director's credentials.
2. If no details have changed, use DIR-3 KYC Web — a web-based one-click confirmation with OTP on the registered mobile and email. There is no filing fee if filed on time.
3. If any detail has changed (address, mobile, email), file Form DIR-3 KYC with a digital signature. A government fee of Rs. 500 applies.
4. If filed after 30 September, the late fee jumps to Rs. 5,000 flat, and the DIN remains deactivated until payment.

When a DIN is deactivated, the company cannot file any form that lists that director — including AOC-4 and MGT-7. This creates a forced queue: pay the DIR-3 KYC late fee first, reactivate the DIN, then file the ROC forms with their own accumulated late fees. Directors of multiple companies multiply this problem.

MSME-1

Under the MSME Development Act 2006 read with Companies (Furnishing of Information about Payment to Micro and Small Enterprise Suppliers) Rules, 2019, every company that has received goods or services from an MSME supplier and has an outstanding payment exceeding 45 days must file a half-yearly return.

• Period April – September 2026: file MSME-1 on MCA V3 by 31 October 2026
• Period October 2026 – March 2027: file MSME-1 by 30 April 2027

The common mistake is assuming MSME-1 applies only to companies that have made late payments. The obligation arises the moment you have any outstanding dues to an MSME supplier beyond 45 days at the end of the reporting half-year — whether or not you dispute the invoice. Build a vendor master that flags MSME registration certificates to catch this automatically.

Event-Based Filings: The Unpredictable Part of Your Calendar

Annual filings happen on a schedule you can plan. Event-based filings happen when corporate actions occur, and the 30-day clock starts on the date of the event — not the date you realize you needed to file.

CHG-1 deserves special attention. If you create a charge — a mortgage, hypothecation, or pledge on company assets — and fail to register it within 30 days, the charge becomes unenforceable against a liquidator or creditor in insolvency. This is not merely a penalty issue; it destroys the security interest itself. The MCA's condonation window stretches to 300 days on payment of 10 times the standard fee, but beyond 300 days you need a court order under Section 87.

MGT-14 is the other form companies routinely forget. Any resolution passed under Section 179(3) — including decisions to borrow money, invest funds, grant loans or guarantees, or buy/sell investments — must be filed within 30 days even if it is only a board resolution. For special resolutions (shareholder level), MGT-14 is mandatory without exception.

Income Tax Compliance: AY 2027-28 Deadlines

Every private limited company files ITR-6 for AY 2027-28 (FY 2026-27). There are no exemptions from filing based on turnover or profit.

Tax audit under Section 44AB is mandatory if:

• Total turnover exceeds Rs. 1 crore in FY 2026-27, or
• Total turnover exceeds Rs. 10 crore where cash receipts and payments are each below 5% of total receipts and payments respectively (the digital-transaction threshold).

The audit must be conducted by a Chartered Accountant and the report filed in Form 3CA/3CB with 3CD on the Income Tax portal before the ITR-6 is filed.

Key due dates for AY 2027-28:

• Tax audit report (Form 3CA/3CB-3CD): 30 September 2027
• ITR-6 (with tax audit): 31 October 2027
• Transfer Pricing Audit (Form 3CEB, if applicable): 31 October 2027; ITR-6 deadline shifts to 30 November 2027

TDS obligations run throughout the year:

• Monthly TDS deposit: 7th of the following month (April through February); TDS for March is due by 30 April 2027
• Quarterly TDS returns: Form 26Q (non-salary), Form 24Q (salary), Form 27Q (NRI payments)
• Q1 (Apr–Jun): 31 July 2026
• Q2 (Jul–Sep): 31 October 2026
• Q3 (Oct–Dec): 31 January 2027
• Q4 (Jan–Mar): 31 May 2027

Late TDS deposit attracts interest at 1% per month (or part thereof) for non-deduction and 1.5% per month for deduction but non-deposit. Late filing of TDS returns attracts Rs. 200 per day under Section 234E, subject to a cap equal to the TDS amount.

GST Compliance for FY 2026-27

A private limited company registered under the Central Goods and Services Tax Act, 2017 (CGST Act) must maintain a parallel compliance rhythm on the GST portal (www.gst.gov.in).

Monthly filers (turnover above Rs. 5 crore in the preceding FY, or those who opt out of QRMP):

• GSTR-1: 11th of the following month
• GSTR-3B: 20th of the following month

QRMP scheme filers (turnover up to Rs. 5 crore):

• GSTR-1 (IFF for M1 and M2 of the quarter): 13th of following month
• GSTR-3B: 22nd or 24th of the month following quarter-end, depending on state category

GSTR-9 (annual return) for FY 2026-27 is due by 31 December 2027. For businesses with aggregate turnover up to Rs. 2 crore, filing GSTR-9 has been optional in recent years through government notifications; confirm the applicability for FY 2026-27 based on the notification issued by CBIC for that year, as the threshold has historically been revised annually.

GSTR-9C (reconciliation statement, self-certified) applies if turnover exceeds Rs. 5 crore.

The Input Tax Credit (ITC) reconciliation between your books and GSTR-2B must be done monthly. Unreconciled differences left to year-end create a cascading GSTR-9 problem that is far harder to resolve than catching it month by month.

Statutory Audit and Financial Statements: What the Law Actually Requires

A statutory audit is mandatory for every private limited company, regardless of turnover or profit. There is no small-company exemption from statutory audit under the Companies Act, 2013.

Auditor appointment:

• The first auditor is appointed by the board within 30 days of incorporation (or by members within 90 days if the board fails to act), to hold office until the conclusion of the first AGM.
• Thereafter, the auditor is appointed at the AGM for five consecutive years. The appointment is communicated to the MCA via ADT-1 within 15 days of the AGM.
• A private limited company that is not required to constitute an Audit Committee is not subject to mandatory auditor rotation, but voluntary rotation is considered good governance.

Financial statements under Schedule III:

• Prepared as per Schedule III of the Companies Act, 2013.
• Smaller companies follow Accounting Standards (AS) issued by ICAI.
• Companies meeting the size thresholds (net worth ≥ Rs. 250 crore, or turnover ≥ Rs. 500 crore, or listed debt securities, or subsidiary/holding of a listed entity) follow Ind AS.
• The Director's Report under Section 134 must be attached to the financial statements. It must include extracts of the annual return, dividend declared (if any), material changes between year-end and the Board's Report date, conservation of energy disclosures (if applicable), CSR report (if turnover or net worth or net profit crosses the threshold under Section 135), and declarations on internal financial controls.

Common Mistakes and Pitfalls to Avoid

1. Treating the AGM date as flexible. Directors often push the AGM to the last week of September without planning the audit timeline backwards. If the statutory audit is not complete, you cannot table financial statements, which means the AGM itself may be held with incomplete or improperly approved accounts. Schedule your audit completion no later than the second week of September for a 30 March year-end.

2. Confusing the AOC-4 deadline with the AGM deadline. AOC-4 is due 30 days after the AGM, not 30 days after the year-end. Companies routinely calculate from 31 March and miss the actual post-AGM window.

3. Skipping DPT-3 for "internal" loans. Loans from directors, shareholders, or related parties are subject to DPT-3 disclosure unless they fall within the specific exemptions under the Companies (Acceptance of Deposits) Rules, 2014. Filing DPT-3 to disclose is not the same as accepting deposits — it is a reporting obligation on outstanding amounts.

4. Ignoring MSME-1 because "we always pay on time." The MSME-1 obligation kicks in the moment the payable has been outstanding beyond 45 days at the reporting date. Even a temporarily delayed invoice can trigger the disclosure requirement for that half-year.

5. Letting a director's DIN lapse into deactivation. A deactivated DIN creates a gridlock: no ROC form listing that director can be processed until the DIN is reactivated. During the gridlock period, late fees continue to accumulate on all pending annual filings.

6. Missing MGT-14 for board-level borrowing resolutions. Section 179(3) resolutions are passed in board meetings — not at the AGM — and must be filed within 30 days. Many companies file MGT-14 only for shareholder resolutions, missing the board-resolution category entirely.

7. Filing MGT-7A when MGT-7 is required. If your company crossed Rs. 40 crore in turnover mid-year and you filed MGT-7A (for small companies), the filing is non-compliant. MCA may issue a notice requiring re-filing with applicable late fees calculated from the original due date.

Key Takeaways

• Hold four board meetings per FY 2026-27, ensuring no two consecutive meetings are more than 120 days apart; hold your AGM by 30 September 2026 for a 31 March year-end.
• AOC-4 is due 30 days after the AGM, MGT-7/MGT-7A is due 60 days after — both carry Rs. 100 per day late fees with no ceiling; a 200-day delay on a single form costs Rs. 20,000.
• DIR-3 KYC must be completed by 30 September 2026 for every director; missing the deadline deactivates the DIN and creates a filing gridlock across all pending ROC forms.
• DPT-3 (due 30 June) and MSME-1 (due 31 October and 30 April) are the two annual forms most commonly missed; neither requires a deposit or late payment to be applicable — the obligation is triggered by outstanding amounts, not defaults.
• Event-based filings (PAS-3, DIR-12, MGT-14, CHG-1) run on their own 30-day clocks from the date of the corporate action; build a checklist trigger into every board decision rather than batching reviews quarterly.
• ITR-6 for AY 2027-28 is due 31 October 2027 (31 May 2027 for advance tax Q4 payment); tax audit completion must precede this, practically requiring audit sign-off by mid-October 2027 at the latest.
• Three consecutive years of default on AOC-4 or MGT-7 disqualifies every director under Section 164(2) for five years — the most severe consequence of a missed filing rhythm, and entirely avoidable with a shared, board-level compliance calendar reviewed at every board meeting.