CSJ June 2026 Article — Transcript

Full transcript

1. 0:00From custodian to architect, emerging
2. 0:02digital tools, analytical models and the
3. 0:05transformation of practicing company
4. 0:08secretaries work in India. Author CAS
5. 0:11Ishan Medar ACS abstract the profession
6. 0:14of the practicing company secretary PCs
7. 0:18in India has never stood still but the
8. 0:20pace of its current transformation is
9. 0:23qualitatively different from anything
10. 0:25the profession has experienced before.
11. 0:28The convergence of an increasingly dense
12. 0:31regulatory architecture with genuinely
13. 0:34powerful digital tools has created both
14. 0:36an unprecedented challenge and a
15. 0:38remarkable opportunity.
16. 0:41This article examines that convergence
17. 0:43honestly. What the tools are, what they
18. 0:46can and cannot do, how they intersect
19. 0:49with the company's act.
20. 0:522013 SCBI loader regulations the digital
21. 0:56personal data protection act 2023 and
22. 1:00MCA's continuing digitization agenda and
23. 1:03critically how a PC's professional can
24. 1:06move from passive adoption to active
25. 1:08deployment. The article gives particular
26. 1:12attention to interactive analytical
27. 1:14dashboards and compliance visualization
28. 1:17models as emerging instruments for
29. 1:19client advisory, governance diagnostics
30. 1:22and regulatory communication. Arguing
31. 1:25that the PCs who can translate a complex
32. 1:28market surveillance anomaly or a
33. 1:30compliance obligation matrix into a
34. 1:32dynamic visual model for a board is
35. 1:35delivering a categorically different
36. 1:37quality of professional service.
37. 1:40The underlying argument is
38. 1:42straightforward. Technology does not
39. 1:44replace the PCs.
40. 1:46But a PCs without technology is rapidly
41. 1:49being replaced by one who has it. One a
42. 1:53profession at a crossroads. And why this
43. 1:56moment is different. There is a telling
44. 1:58symmetry in how the profession of
45. 2:00company secretarship has evolved. The
46. 2:04first generation of company secretaries
47. 2:06in independent India occupied a largely
48. 2:09clerical terrain maintaining statutory
49. 2:11registers coordinating board meetings
50. 2:14and navigating a nassent corporate law
51. 2:17framework.
52. 2:18The second generation inherited the
53. 2:20company's act 1956 and gradually built a
54. 2:24professional identity rooted in
55. 2:26procedural mastery and statutory
56. 2:29compliance.
57. 2:30The third operating under the company's
58. 2:33act 2013 found themselves increasingly
59. 2:37recognized as governance professionals,
60. 2:40participants in audit committees,
61. 2:42signaries on secretarial audit reports,
62. 2:45advisers to boards on director
63. 2:47appointments and related party
64. 2:49transactions. The current generation is
65. 2:52confronting something more radical. The
66. 2:54simultaneous arrival of genuine
67. 2:56artificial intelligence tools. near
68. 2:59total digital regulatory infrastructure
69. 3:01and a data privacy regime that
70. 3:03fundamentally
71. 3:05changes the governance of personal
72. 3:07information.
73. 3:09This is not merely an upgrade of
74. 3:12existing tools. It is a structural shift
75. 3:15in the nature of compliance work itself
76. 3:18and it demands a correspondingly
77. 3:20structural response from practitioners.
78. 3:22What separates the present moment from
79. 3:24previous inflections is the simultenity
80. 3:27of the pressures. MCA's centralization
81. 3:30of processing through MCA2 version 3.0
82. 3:34zero SCBI's expanding continuous
83. 3:37disclosure obligations under loader, the
84. 3:40activation of the DPDP rules in November
85. 3:432025 with their 18month enforcement
86. 3:47clock and the progressive expansion of
87. 3:50BRSR core assurance requirements. All of
88. 3:53these are live and operational at the
89. 3:55same time, not sequential. A PC's
90. 3:59advising a midcap listed company in FY
91. 4:022025 to 26 is simultaneously managing
92. 4:06quarterly loader filings,
93. 4:09BRS core disclosures for the first time,
94. 4:12a DPDP compliance gap assessment and a
95. 4:15secretarial audit under section 204. All
96. 4:19while their client expects real-time
97. 4:21governance visibility rather than
98. 4:23quarterly paper reports. A company
99. 4:25secretary embracing AI and machine
100. 4:28learning is like a Formula 1 driver with
101. 4:31a finely tuned F1 car. Precision, speed,
102. 4:34and control. Without it, they are still
103. 4:38skilled, but racing with a road car on
104. 4:40the same track. The purpose of this
105. 4:43article is not to celebrate technology
106. 4:46for its own sake. Several of the tools
107. 4:49now available to PCs professionals carry
108. 4:52real risks of misplaced reliance, data
109. 4:55privacy exposure, professional
110. 4:57liability, and what one might call the
111. 5:00confident wrongness problem of AI
112. 5:02generated outputs that sound
113. 5:04authoritative but contain errors. The
114. 5:07purpose is to examine the tools
115. 5:09honestly, situate them within the
116. 5:12regulatory framework and offer a
117. 5:14practitioner level assessment of where
118. 5:16they genuinely add value to the
119. 5:19regulatory architecture complexity as
120. 5:22the new normal to point one the
121. 5:24company's act 2013 and the weight of
122. 5:28statutory responsibility. The company's
123. 5:30act 2013 is by any honest assessment
124. 5:35a formidable compliance instrument.
125. 5:38Its 470 sections, seven schedules and
126. 5:42accompanying rules create a compliance
127. 5:44universe that demands sustained
128. 5:46professional attention. For the PCs, the
129. 5:50most significant provisions are
130. 5:52simultaneously the most consequential
131. 5:55section 204 mandating secretarial audits
132. 5:58for prescribed companies. Section 205
133. 6:01defining the company secretaries
134. 6:03functions as a key managerial personnel
135. 6:06and the punel provisions under section
136. 6:08454 that can directly implicate the
137. 6:11professional for non-compliance. The
138. 6:14secretarial audit report in form MR3 has
139. 6:17emerged over the last decade as a proxy
140. 6:21document read by institutional
141. 6:23investors, lenders and increasingly by
142. 6:27SCBI itself
143. 6:29as an indicator of a company's
144. 6:31governance health. When a PCs signs that
145. 6:35report, the professional is not merely
146. 6:38certifying historical compliance.
147. 6:41They are in practice placing their
148. 6:43professional reputation on the quality
149. 6:45of the company's governance processes.
150. 6:48That weight has grown and the tools
151. 6:51available to discharge that
152. 6:53responsibility must grow with it to
153. 6:55point to SCBI loader, a framework of
154. 6:58continuous obligations for PC's
155. 7:01professionals advising listed entities.
156. 7:03The SCBI listing obligations and
157. 7:06disclosure requirements regulations 2015
158. 7:10as they have been amended through 2023
159. 7:13and 2024
160. 7:16constitute an intricate layer of ongoing
161. 7:19obligations that sit alongside not
162. 7:22beneath the company's act framework.
163. 7:25Quarterly compliance reports. The annual
164. 7:28secretarial compliance report under SEBI
165. 7:31circular dated 29th March 2019. Material
166. 7:36event disclosures within 24 hours and in
167. 7:40some cases 30 minutes of a board
168. 7:42decision and the increasingly detailed
169. 7:45related party transaction disclosure
170. 7:47norms together constitute a compliance
171. 7:50burden that simply cannot be managed
172. 7:52sustainably through manual systems.
173. 7:55The SEBI loader also brought the
174. 7:58business responsibility and
175. 8:00sustainability report into mandatory
176. 8:02territory for the top 1,000 listed
177. 8:05companies by market capitalization, a
178. 8:08disclosure requirement that has now
179. 8:11expanded into BRS core, a subset of key
180. 8:15performance indicators requiring
181. 8:17independent assurance. The applicability
182. 8:20of BRSR core assurance expanded from the
183. 8:23top 150 companies in FY2023
184. 8:28to 24 to the top 500 in FY 2025 to 26
185. 8:33with the full top 1,000 captured by FY
186. 8:372026 to 27. BRS core milestones
187. 8:41applicable entities key regulatory
188. 8:43scope. FY2023
189. 8:46to 24 top 150 listed companies mandatory
190. 8:50BRSR core assessment. FY 2024 to 25 top
191. 8:55to 50 listed companies BRSR core value
192. 8:58chain ESG disclosures. FY 2025 to 26 top
193. 9:03500 listed companies mandatory BRSR core
194. 9:06assessment. FY 2026 to 27 top 1,000
195. 9:11listed companies full BRSR core value
196. 9:15chain assurance sources times SCBI
197. 9:18circular no SCBI host CFD CFD set to
198. 9:23PCIR 2023/12
199. 9:26dated 12th July 2023 regarding BRS core
200. 9:31and ESG disclosures
201. 9:34times SCBI circular no SEBI host CFD CFD
202. 9:39pod to PCIR 2024/99
203. 9:43and related implementation guidance
204. 9:45times KPMG India emerging trends in BRSR
205. 9:49reporting by listed companies issue 115
206. 9:53to 0 to6 dot times Glossert
207. 9:56International BRSR core assurance
208. 9:58readiness guide for Indian companies
209. 10:012026
210. 10:03dot 2.3 the DPDP act 2023. A new
211. 10:08governance frontier, the Digital
212. 10:10Personal Data Protection Act 2023 and
213. 10:14the DPDP rules formally notified in
214. 10:17November 2025
215. 10:19represent the most consequential
216. 10:21addition to the PCS's responsibility
217. 10:23matrix in recent years.
218. 10:26The act establishes a data fiduciary
219. 10:29framework under which organizations
220. 10:31processing personal data bear absolute
221. 10:34accountability for collection,
222. 10:36processing, storage and deletion of that
223. 10:39data with financial penalties structured
224. 10:42to compel genuine compliance rather than
225. 10:44token gesture for the PCs. The DPDP act
226. 10:48has direct professional implications.
227. 10:51statutory registers, director
228. 10:54identification details, shareholder
229. 10:56records, KMP personal data and employee
230. 10:59information maintained under the
231. 11:01company's act are all personal data
232. 11:04within the acts definition. The PC's
233. 11:07advising on governance architecture must
234. 11:10now integrate data protection
235. 11:12considerations into every process. Board
236. 11:15minute drafting,
237. 11:17statutory register maintenance, document
238. 11:20retention policies, and the choice of
239. 11:22technology vendors who process client
240. 11:25data on the firm's behalf. DPDP
241. 11:27compliance timeline target milestone
242. 11:30significance for PCs. November 13th to
243. 11:3314th, 2025. Rules notification data
244. 11:37protection board activated. 18 month
245. 11:40clock begins. June to August 2026.
246. 11:44Integration readiness consent management
247. 11:46systems must be interoperable. November
248. 11:492026 legacy data revalidation historical
249. 11:53consent records must be revalidated. Q1
250. 11:572027 first SDF audit cycle. Independent
251. 12:01audits mandatory for significant data
252. 12:04fiduciaries May 2027 full enforcement
253. 12:08complete panel powers finds up to 250 cr
254. 12:12rupees active. sources times digital
255. 12:15personal data protection act
256. 12:182023
257. 12:20times DPDP rules 2025
258. 12:23notified on 13 to 14 November 2025
259. 12:28dot times ministry of electronics and
260. 12:31information technology matey
261. 12:34notifications implementation guidance
262. 12:37and stakeholder consultation documents
263. 12:39times industry and legal analyszis
264. 12:42interpreting the phased implementation
265. 12:44roadmap under the DPDP framework three
266. 12:48emerging tools and assessment 3.1
267. 12:51artificial intelligence and generative
268. 12:54AI in compliance work artificial
269. 12:56intelligence in its practical enterprise
270. 12:59manifestation is already embedded in
271. 13:02several compliance adjacent functions AI
272. 13:05powered contract analysis tools can
273. 13:08process hundreds of pages in minutes
274. 13:11flagging clauses that implicate
275. 13:13regulatory thresholds or related party
276. 13:16transaction norms. Natural language
277. 13:19processing systems monitor SEBI
278. 13:22circulars and MCA notifications in real
279. 13:25time, generating summarized compliance
280. 13:27implications for specific company
281. 13:30profiles within hours of a new
282. 13:32notifications release. Generative AI
283. 13:34tools, large language models accessible
284. 13:37via API or enterprise platform have
285. 13:40opened a specific and genuinely useful
286. 13:43channel for PC's professionals the
287. 13:46ability to draft, summarize and analyze
288. 13:49regulatory content at speed. A PCs who
289. 13:53needs to draft an initial AGM notice,
290. 13:56prepare a first cut analysis of a SEBI
291. 13:59circulars applicability or generate a
292. 14:02comparison of section 149 of the
293. 14:05company's act with regulation 17 of SCBI
294. 14:08loader on independent director
295. 14:11requirements
296. 14:12can use a well ststructured prompt to
297. 14:14accelerate that work from hours to
298. 14:17minutes. However, the profession must be
299. 14:19unambiguous about the limits. These
300. 14:22models predict the statistically
301. 14:24probable next word. They do not reason
302. 14:27from first principles of law. They can
303. 14:30confidently misquote a statutory
304. 14:33provision, cite a non-existent circular,
305. 14:36or miss a nuanced carveout in a SEBI
306. 14:39amendment. The professional
307. 14:41responsibility and the legal liability
308. 14:44remains with the PCs regardless of how
309. 14:47the first draft was generated. AI
310. 14:50accelerates the process. Professional
311. 14:52judgment determines whether the output
312. 14:55is usable critically. Working with
313. 14:57generative AI tools requires a skill
314. 15:00that is genuinely new for the
315. 15:02profession. Prompt engineering.
316. 15:04The utility of an AI tool is directly
317. 15:07proportional to the precision of the
318. 15:09instructions given to it. Three elements
319. 15:12determine the quality of any AI
320. 15:15generated output. Role assignment
321. 15:17explicitly telling the model it is a
322. 15:19legal researcher specializing in Indian
323. 15:22corporate governance. Task description
324. 15:24specifying the precise objective with
325. 15:27relevant context and constraints
326. 15:29defining the format. word limit,
327. 15:32regulatory sources to be cited, and the
328. 15:35level of technical detail required. A
329. 15:38PCs who has invested in developing this
330. 15:41skill has access to a research
331. 15:43accelerator of genuine power. One who
332. 15:47treats AI tools as autonomous unser
333. 15:49machines will predictably be
334. 15:52disappointed and potentially exposed
335. 15:54three point to robotic process
336. 15:56automation. the workhorse of digital
337. 15:59compliance. If generative AI captures
338. 16:01the imagination, robotic process
339. 16:04automation is the quiet engine running
340. 16:06beneath much of what digital compliance
341. 16:09has already become. RPA tools are
342. 16:12designed precisely for the structured
343. 16:15rules-based high volume tasks that
344. 16:18constitute a significant proportion of
345. 16:20PC's practice. population MCA21 forms
346. 16:24from internal data sources. Verifying
347. 16:27DIN details against the MCA register,
348. 16:31extracting board resolution data for
349. 16:33form filings, reconciling share capital
350. 16:36audit figures against depository records
351. 16:39for a PC's practice managing 60 to 100
352. 16:42client companies. A single RPA workflow
353. 16:45that extracts data from board minutes
354. 16:48and populates form MGT7 or DIR 12 can
355. 16:52reduce processing time from 3 hours to
356. 16:5530 minutes per client while
357. 16:57simultaneously generating an auditable
358. 16:59data tray. The aggregate efficiency gain
359. 17:03and the corresponding capacity to serve
360. 17:06more clients without proportional
361. 17:08headcount increase is material. More
362. 17:11importantly, RPA eliminates the category
363. 17:14of errors caused by manual
364. 17:16transcription, the wrong DIN, the
365. 17:18incorrect date, the msque pan. These
366. 17:22errors are not merely embarrassing.
367. 17:25Under MCA21's
368. 17:27centralized adjudication module, they
369. 17:30can trigger penalty proceedings, 3.3
370. 17:33compliance dashboards, and interactive
371. 17:36analytical models. The most
372. 17:38transformative tool available to the
373. 17:40modern PCs and the one least discussed
374. 17:43in professional literature is the
375. 17:45interactive compliance dashboard.
376. 17:48Not the static spreadsheet as tracker
377. 17:50that most practices still rely on, but
378. 17:53the dynamic realtime graphically rich
379. 17:56compliance intelligence platform that
380. 17:58converts regulatory complexity into
381. 18:00actionable visual information.
382. 18:03The distinction matters enormously both
383. 18:06operationally and in the advisory
384. 18:08relationship with clients. Consider a
385. 18:12scenario that will resonate with any PCs
386. 18:15advising a listed company. SCBI issues a
387. 18:18material amendment to the loader related
388. 18:21party transaction norms. The traditional
389. 18:24response is a written memorandum
390. 18:26circulated by email, reviewed
391. 18:29inconsistently, and filed in a folder
392. 18:31that no one revisits until the next
393. 18:34compliance review. The dashboard enabled
394. 18:37response is entirely different.
395. 18:40The amendment is mapped within 48 hours
396. 18:43against the specific company's existing
397. 18:45RPT framework, existing audit committee
398. 18:48charter, and upcoming board meeting
399. 18:50schedule, generating a visual action
400. 18:53tracker with color-coded urgency levels
401. 18:56and deadline alerts that the compliance
402. 18:59officer and CFO can access on any
403. 19:02device.
404. 19:03The value proposition extends beyond
405. 19:05operational efficiency into client
406. 19:08communication.
407. 19:09Boards are composed of individuals with
408. 19:12varying degrees of regulatory
409. 19:14familiarity.
410. 19:16An independent director joining from an
411. 19:19operational background may understand
412. 19:21their fiduciary obligations in principle
413. 19:24but struggle to navigate the procedural
414. 19:26sequence of an RPT approval process
415. 19:29across sections 177 and 188 of the
416. 19:33company's act the load norms and the
417. 19:36specific timeline requirements for
418. 19:39shareholder approval at prescribed
419. 19:41thresholds
420. 19:42a PCs who presents this as a dense Legal
421. 19:46memorandum is delivering information a
422. 19:49PCs who presents it as a clear
423. 19:52interactive process flow color-coded by
424. 19:54regulatory source annotated with
425. 19:57threshold values linked to the company's
426. 20:00specific upcoming compliance calendar is
427. 20:03delivering understanding the company
428. 20:05secretary who can turn regulatory
429. 20:07complexity into actionable intelligence
430. 20:10is not just a compliance officer. They
431. 20:13are a strategic partner competing with
432. 20:15global advisory giants.
433. 20:183.4 SCBI market surveillance models and
434. 20:22anomaly detection. A particularly
435. 20:24sophisticated application of analytical
436. 20:27modeling in the PC's context is the
437. 20:29deployment of market surveillance
438. 20:32and anomaly detection frameworks. tools
439. 20:35that until recently were the exclusive
440. 20:38preserve of SEBI itself and large
441. 20:41institutional compliance teams. The
442. 20:44democratization of such capabilities
443. 20:47through modern data platforms has opened
444. 20:50a genuinely important opportunity for
445. 20:52PC's professionals advising listed
446. 20:55entities on insider trading compliance.
447. 20:58The SCBI prohibition of insider trading
448. 21:01regulations 2015 specifically
449. 21:05regulations 3 5 and 3 six impose a
450. 21:09non-negotiable obligation on listed
451. 21:11entities to maintain a structured
452. 21:14digital database recording all
453. 21:16individuals with access to unpublished
454. 21:18price sensitive information. The nature
455. 21:21of that information and the recipient
456. 21:24span details
457. 21:26SCBI mandates cryptographic timestamping
458. 21:30internal hosting complete tamperproofing
459. 21:32and an 8-year retention minimum.
460. 21:35Managing this through standard office
461. 21:37software is not merely impractical. It
462. 21:41is legally indefensible. Certified SDDD
463. 21:44software platforms now incorporate
464. 21:46anomaly detection logic that tracks the
465. 21:49flow of oopsy autonomously.
466. 21:51When a listed company's board begins
467. 21:54deliberating a merger, the system logs
468. 21:57every internal and external transmission
469. 21:59of that information without manual
470. 22:02intervention, enforcing role-based
471. 22:04access controls and generating an
472. 22:07alterable audit tray. More sophisticated
473. 22:10implementations layer trading pattern
474. 22:13analysis at top the oopsy tracking
475. 22:15flagging instances where a director's
476. 22:18personal trading activity shows
477. 22:20statistical correlation with oopsy
478. 22:22access events in ways that would concern
479. 22:25a SCBI examination team. This is
480. 22:29precisely the domain where the market
481. 22:31surveillance dashboard model becomes
482. 22:34professionally relevant for the PCs. A
483. 22:37compliance officer reviewing a
484. 22:39color-coded anomaly heat map of insider
485. 22:42trading flags, showing visually the
486. 22:44temporal relationship between oopsy
487. 22:46events and trading activity can identify
488. 22:50and escalate a potential violation far
489. 22:52more reliably than one reviewing a flat
490. 22:55data log. The PCs who builds such a
491. 22:58dashboard for a client or who deploys a
492. 23:02platform that generates one is providing
493. 23:05assurance at a level that the
494. 23:07traditional secretarial audit cycle
495. 23:09simply cannot match 3.5 client
496. 23:12segmentation analytics a practice
497. 23:15management tool a less discussed but
498. 23:17practically significant application of
499. 23:20analytical modeling for the PCs is
500. 23:22within practice management itself
501. 23:24specifically the use of client
502. 23:26segmentation analytics to differentiate
503. 23:29advisory offerings and resource
504. 23:31allocation across a heterogeneous client
505. 23:34portfolio. A typical multiclient PC's
506. 23:38practice serves entities that range in
507. 23:41their governance complexity and
508. 23:43compliance burden from dormant shell
509. 23:45companies to listed entities with active
510. 23:48SEBI compliance obligations.
511. 23:51startup founders preparing for series A
512. 23:54governance audits and unlisted public
513. 23:57companies navigating the recently
514. 23:59expanded demand compliance requirements.
515. 24:02Treating all of these clients with the
516. 24:04same advisory model, periodic visits,
517. 24:07standard checklists, reactive responses
518. 24:10is an inefficient deployment of
519. 24:12professional capacity and more
520. 24:15importantly a disservice to clients
521. 24:17whose actual governance needs are poorly
522. 24:20understood. K means clustering and
523. 24:22related segmentation models applied to a
524. 24:25firm's client portfolio data company
525. 24:28type listing status annual turnover
526. 24:31compliance history sector specific
527. 24:33regulatory exposure can generate
528. 24:36meaningful client clusters that allow
529. 24:39the PCs to differentiate service
530. 24:41intensity
531. 24:43anticipate regulatory transitions before
532. 24:46they become crisis and present
533. 24:48datadriven recommendations on
534. 24:50governance. investments that clients in
535. 24:52each segment should be making. This is
536. 24:56not an exotic academic exercise. It is
537. 24:59the application of standard data
538. 25:01analysis to the practical challenge of
539. 25:03running an intelligent professional
540. 25:06services firm. Four case studies
541. 25:09governance failures as professional
542. 25:11benchmarks. No discussion of emerging
543. 25:14tools in PC's practice would be
544. 25:16professionally responsible without an
545. 25:18examination of what happens when
546. 25:21governance architecture digital or
547. 25:24otherwise fails. The Indian corporate
548. 25:28and startup landscape has provided
549. 25:30instructive if painful case studies in
550. 25:33recent years. the absence of governance
551. 25:36structures capable of using information
552. 25:39any information to hold executive
553. 25:42decisionmaking to account. In several of
554. 25:45these cases, board minutes reflected a
555. 25:48sanitized narrative that board limited
556. 25:50relationship to the actual substance of
557. 25:53board deliberations.
558. 25:55Audit committee compositions met the
559. 25:57letter of independence requirements
560. 25:59while failing their spirit. Related
561. 26:02party transactions were disclosed
562. 26:04selectively and the individuals
563. 26:07responsible for governance certification
564. 26:09were either complicit or inadequately
565. 26:12equipped to identify what they were
566. 26:14certifying.
567. 26:16The lesson for the PCs is double-edged
568. 26:20can prevent the category of failures
569. 26:22caused by process breakdown, missed
570. 26:25deadlines, incomplete disclosures,
571. 26:27administrative oversightes.
572. 26:30It cannot prevent the category of
573. 26:32failures caused by deliberate
574. 26:34circumvention or captured governance.
575. 26:37What it can do, however, is make
576. 26:40deliberate circumvention harder to
577. 26:42sustain. An SDD system that timestamps
578. 26:46every oopsy access event creates a
579. 26:48forensic record that is extremely
580. 26:50difficult to explain away. A compliance
581. 26:54dashboard that flags the non-execution
582. 26:56of an audit committee meeting before a
583. 26:59board decision makes the sequence of
584. 27:01governance events visible in a way that
585. 27:03a manually maintained calendar does not.
586. 27:07A market surveillance anomaly detection
587. 27:09model that identifies statistical
588. 27:12irregularities in trading patterns
589. 27:14provides an early warning capability
590. 27:16that changes the conversation from
591. 27:18postfacto investigation to preemptive
592. 27:21escalation. The PCs's role in this
593. 27:24context is unambiguous. Build governance
594. 27:27structures early. Ensure independent
595. 27:29director appointments carry substance
596. 27:32rather than form. And use technology to
597. 27:35make the governance record more
598. 27:37transparent, more complete and more
599. 27:39defensible. Not to make non-compliance
600. 27:43easier to camouflage.
601. 27:45Five legal and ethical dimensions of
602. 27:48technology adoption. 5.1. Statutory
603. 27:51duties and the limits of delegation to
604. 27:54algorithms. Section 2051
605. 27:57of the company's act 2013 imposes a
606. 28:01non-deligible duty on the company
607. 28:03secretary to report to the board
608. 28:05regarding the company's compliance with
609. 28:07applicable laws. Section 204 mandates
610. 28:11the secretarial audit. Neither provision
611. 28:14contemplates an algorithmic co-author.
612. 28:17both place the professional
613. 28:19responsibility squarely on the
614. 28:21individual holding the designation. This
615. 28:23has a specific implication for AI
616. 28:26generated compliance outputs. They
617. 28:28constitute research assistance, not
618. 28:31professional conclusions. A genai tool
619. 28:34that drafts a preliminary analysis of a
620. 28:37SCBI amendment's implications is
621. 28:39providing a first document,
622. 28:42not a legal opinion. The PCs who
623. 28:45presents that output to a client board
624. 28:48without independent verification is not
625. 28:50merely taking a professional risk. They
626. 28:53are potentially misrepresenting the
627. 28:55quality of the advice being delivered.
628. 28:57Digital records generated by compliance
629. 29:00platforms must also be capable of
630. 29:02withstanding legal scrutiny. The
631. 29:06information technology act and the
632. 29:08Indian evidence act as adapted through
633. 29:11the Bhartya Sakia Adinium 2023
634. 29:14impose specific standards on the
635. 29:17admissibility of electronic records. an
636. 29:20AI generated compliance report whose
637. 29:23algorithmic logic is opaque whose data
638. 29:26inputs cannot be traced and whose
639. 29:28outputs lack non-repudiable digital
640. 29:31authentication may simply not survive
641. 29:33regulatory adjudication
642. 29:36the concept of explainable AI the
643. 29:39ability to articulate in human
644. 29:41understandable terms precisely how an
645. 29:44algorithm reached a conclusion is not
646. 29:46merely a technical aspiration it is a
647. 29:49legal Necessity for evidence-grade
648. 29:51digital compliance records. 5 point to
649. 29:54data privacy and the DPDP obligations of
650. 29:57the PC's firm. The DPDP acts 2023. Data
651. 30:02fiduciary framework applies to the PC's
652. 30:05firm itself, not merely to the companies
653. 30:08it advises.
654. 30:10When a PC's practice processes personal
655. 30:12data of client directors, shareholders
656. 30:15or employees,
657. 30:17which it does as a matter of routine in
658. 30:20maintaining statutory records and
659. 30:23preparing compliance filings, the firm
660. 30:25is a data fiduciary and bears the
661. 30:28associated obligations. This has an
662. 30:30immediate practical implication for the
663. 30:33use of cloud-based compliance platforms
664. 30:35and AI tools. Uploading unredacted board
665. 30:39minutes, KMP personal details or pan
666. 30:42data to a public AI model constitutes a
667. 30:45data privacy breach under the DPDP
668. 30:48framework. The PCs must establish clear
669. 30:51internal policies. AI tools used for
670. 30:54drafting and analysis should receive
671. 30:57anonymized or hypothetical data, never
672. 31:00clientspecific personal information.
673. 31:03Cloud platforms processing client data
674. 31:06must be vetted for data residency,
675. 31:08access control and breach notification
676. 31:12protocols and this vetting must be
677. 31:15contractually embedded not merely
678. 31:17assumed. 5.3 professional disclosure and
679. 31:21the ethics of AI assisted practice. A
680. 31:23question the profession has only begun
681. 31:26to engage with is whether a PCs should
682. 31:28disclose to clients that AI tools were
683. 31:31used in preparing compliance filings or
684. 31:34governance reports. There is currently
685. 31:37no statutory requirement for such
686. 31:40disclosure under Indian law. However,
687. 31:43the ICSI's code of professional conducts
688. 31:46principles of transparency and
689. 31:48professional integrity would support a
690. 31:50disclosure framework, particularly where
691. 31:53AI tools have processed the client's
692. 31:55confidential information. The profession
693. 31:58would benefit from proactive engagement
694. 32:00with the ICSI on developing explicit
695. 32:03guidelines for AI tool usage, disclosure
696. 32:07standards, and vendor due diligence
697. 32:09protocols.
698. 32:11Waiting for a governance incident to
699. 32:13precipitate reactive regulation is not a
700. 32:16strategy the profession can afford given
701. 32:18the speed at which AI capabilities are
702. 32:21advancing. Six, the future from
703. 32:25compliance calendar to realtime
704. 32:26governance architecture. 6.1 the
705. 32:29dashboard as a governance instrument.
706. 32:32The compliance dashboard of the near
707. 32:34future will not merely track filing
708. 32:36deadlines.
709. 32:38It will integrate live data from the
710. 32:40MCA21 portal, SCBI scores to point.0
711. 32:44zero platform internal document
712. 32:47management systems and market
713. 32:49surveillance feeds to present a
714. 32:50comprehensive real-time picture of a
715. 32:53company's governance health on a single
716. 32:55interface board composition against
717. 32:58company's act and loader requirements
718. 33:01pending investor grievances on scores
719. 33:04overdue committee recommendations BRS
720. 33:07performance metrics against disclosed
721. 33:09targets and DPD compliance status all
722. 33:13visible simultaneously ly updated
723. 33:15continuously for the PCs providing
724. 33:18governance advisory services. The
725. 33:20ability to offer a client this kind of
726. 33:23real-time governance dashboard not as a
727. 33:26periodic deliverable but as a live
728. 33:28instrument changes the nature of the
729. 33:30advisory relationship.
730. 33:34The PCs becomes a governance monitor
731. 33:36rather than a periodic report preparer.
732. 33:40This is not a dimmonition of the
733. 33:42professional role. It is its elevation.
734. 33:45The professional judgment required to
735. 33:47design such a system, calibrate its
736. 33:50thresholds and interpret its outputs for
737. 33:53a board is considerably more
738. 33:55sophisticated than the judgment required
739. 33:57to compile a quarterly compliance
740. 33:59checklist. Six point to predictive
741. 34:01analytics and forward-looking risk
742. 34:03management. The next evolution of legal
743. 34:06technology for PC's practice will move
744. 34:09beyond historical tracking into
745. 34:11predictive risk assessment. For the PCs
746. 34:14conducting a secretarial audit, an AI
747. 34:18assisted audit tool trained on the
748. 34:20parameters of form MR3 and ICSI's
749. 34:23guidance notes can flag variances
750. 34:25between disclosed information and
751. 34:28regulatory requirements systematically.
752. 34:31covering a larger sample with greater
753. 34:34consistency than a manual review
754. 34:36permits. The professional's contribution
755. 34:39then shifts from data collection, which
756. 34:42is where most audit time currently goes
757. 34:44to the analytical interpretation of
758. 34:46flagged findings and the professional
759. 34:49judgment required to reach a defensible
760. 34:51conclusion. 6.3 visual governance
761. 34:54communication as a core PC's competency.
762. 34:57There is one underappreciated competency
763. 35:00that will differentiate
764. 35:02the effective PCs of the next decade.
765. 35:05The ability to translate regulatory
766. 35:08complexity into visual clarity for
767. 35:10non-speist audiences.
768. 35:13Boards are composed of professionals
769. 35:15from diverse backgrounds. A newly
770. 35:18appointed independent director from an
771. 35:21engineering or medical background may
772. 35:23have excellent judgment on operational
773. 35:25matters and genuine commitment to
774. 35:28governance responsibilities
775. 35:30while finding the procedural
776. 35:31architecture of the SCBI loader its
777. 35:34committee structures disclosure
778. 35:36timelines and approval sequences
779. 35:39genuinely bewildering in written form. A
780. 35:42PCs who responds to this challenge with
781. 35:44a dense legal memorandum is delivering
782. 35:47technically accurate information in a
783. 35:50format that may not produce
784. 35:53understanding.
785. 35:54one who uses an interactive process flow
786. 35:57showing visually the RPT approval
787. 36:00workflow from audit committee
788. 36:02pre-clarance through board approval to
789. 36:04shareholder resolution color-coded by
790. 36:07regulatory source and annotated with
791. 36:10specific threshold values is delivering
792. 36:12regulatory compliance in a form that a
793. 36:15board member can internalize and act on.
794. 36:19Similarly, ISCBI market surveillance
795. 36:21anomaly heat map, a DPDP compliance
796. 36:24status wheel or an ESG metric tracker
797. 36:27linked to the company's BRSR
798. 36:29commitments. These are not merely
799. 36:32aesthetic choices. They are
800. 36:34communication tools that determine
801. 36:36whether governance information produces
802. 36:39governance action. Seven conclusion. The
803. 36:42transformation underway in PC's practice
804. 36:45is not a gradual upgrade of familiar
805. 36:48tools. It is a structural shift in what
806. 36:51it means to practice company
807. 36:53secretarship competently in India's
808. 36:55current regulatory environment. The
809. 36:58convergence of AI powered compliance
810. 37:01tools, real-time digital regulatory
811. 37:03infrastructure, data privacy obligations
812. 37:06and ESG assurance requirements has
813. 37:09created a professional landscape where
814. 37:11the PCs with only traditional skills is
815. 37:14operating at a material disadvantage.
816. 37:16And yet the tools for all their genuine
817. 37:19power do not diminish the importance of
818. 37:22professional judgment. They raise its
819. 37:24stakes.
820. 37:26An AI that drafts a board resolution
821. 37:29faster than any human can still produce
822. 37:32a legally defective document if the
823. 37:34professional who directed it did not
824. 37:36understand the statutory requirements.
825. 37:39A compliance dashboard that tracks 300
826. 37:42regulatory obligations in real time is
827. 37:45worthless if the PCs cannot interpret a
828. 37:48red flag and advise a board on its
829. 37:50implications.
830. 37:52A market surveillance anomaly model that
831. 37:55identifies a suspicious trading pattern
832. 37:57cannot escalate that finding to the
833. 38:00right person without a professional who
834. 38:02understands both what the model is
835. 38:04detecting and what the regulatory
836. 38:06consequences of that detection are. The
837. 38:09PCs of this generation has an
838. 38:11opportunity that no previous generation
839. 38:14of the profession has had to move from
840. 38:16the compliance engine room of Indian
841. 38:19corporate governance to its bridge. The
842. 38:22tools exist. The regulatory environment
843. 38:25demands their deployment. The question
844. 38:28is whether the profession will engage
845. 38:31with that opportunity deliberately with
846. 38:34intellectual seriousness and
847. 38:35professional rigor or whether it will
848. 38:38arrive at digital practice by default
849. 38:40reactive inadequately trained and
850. 38:43playing permanent catchup with a
851. 38:45regulatory architecture that does not
852. 38:47wait the seven decades of professional
853. 38:49tradition that ICSI has built argue for
854. 38:52the former. This moment deserves no less
855. 38:56references. Brief sources. One BRS core
856. 39:00assurance readiness guide for Indian
857. 39:02companies. Glossert International 20126.
858. 39:06Two Companies Act 2013 sections 2 24 118
859. 39:14129
860. 39:16149
861. 39:18177
862. 39:20184
863. 39:22185
864. 39:24188 204 205
865. 39:28454 and rules there. Ministry of
866. 39:33Corporate Affairs, Government of India
867. 39:353, Digital Personal Data Protection Act
868. 39:392023 and DPDP Rules 2025
869. 39:44notified November 13th to 14th, 2025.
870. 39:49Ministry of Electronics and Information
871. 39:52Technology, Government of India 4, GRI
872. 39:56Standards 2021
873. 39:59Global Reporting Initiative
874. 40:02Sus Standards Sustainability Accounting
875. 40:05Standards Board 5 KPMG India Emerging
876. 40:09Trends in BRSR Reporting by listed
877. 40:12companies accounting and auditing update
878. 40:15issue 115 to 0 to6
879. 40:18available at assets.kpmg.com kpmg.com
880. 40:22six prompting for productivity a guide
881. 40:24for company secretaries chartered
882. 40:27secretary journal October 20125
883. 40:31institute of company secretaries of
884. 40:33India 7BI
885. 40:36listing obligations and disclosure
886. 40:38requirements regulations 2015 as amended
887. 40:43up to 2024
888. 40:46securities and exchange board of India
889. 40:49Eight. SCBI prohibition of insider
890. 40:52trading regulations 2015 as amended.
891. 40:57Regulations 3 5 and 3 six on structured
892. 41:02digital database 9. SEBI circular on
893. 41:06annual secretarial compliance report
894. 41:09SEBI host CFD CMDCP
895. 41:122019/47
896. 41:14dated 29th March 201910
897. 41:19SEBI circular on business responsibility
898. 41:22and sustainability report BRS SCBI host
899. 41:26CFD CMD to PCIR 2021/562
900. 41:31dated 10th May 2021 111.
901. 41:35The algorithmic witness, company
902. 41:37secretary as architect of AI governance,
903. 41:41chartered secretary journal, July 2025.
904. 41:45Institute of company secretaries of
905. 41:48India 12. Udot committee report on
906. 41:51corporate governance, securities and
907. 41:54exchange board of India October 2017.