INTRODUCTION
Auditor independence has been a priority for the Securities and Exchange Commission (“SEC”) under the leadership of both the Trump Administration and the Biden Administration. In 2020, former SEC Chair, Jay Clayton, pointed out that in the United States “auditor independence rules are far-reaching and restrictive,” which could have “unintended, negative consequences.”1Jay Clayton, Promoting an Effective Auditor Independence Framework, U.S. Secs. & Exch. Comm’n (Oct. 16, 2020), https://www.sec.gov/news/public-statement/clayton-promoting-effective-auditor-independence-framework-101620 [https://perma.cc/KZS5-WPMY]. Shortly thereafter, the SEC issued new regulation that lowered auditor independence requirements and brought the SEC’s independence rules closer to the rules set forth by the Public Company Accounting Oversight Board (“PCAOB”) and American Institute of Certified Public Accountants (“AICPA”), the other two regulatory entities responsible for auditor independence.2Press Release, U.S. Secs. & Exch. Comm’n, SEC Updates Auditor Independence Rules (Oct. 16, 2020), https://www.sec.gov/news/press-release/2020-261 [https://perma.cc/4Q63-BQEW]. Meanwhile, the current chair, Gary Gensler, has signaled that auditor independence remains a “perennial problem area,” indicating that a tightening of the auditor independence requirements is soon to be seen.3Gary Gensler, Chair, U.S. Secs. & Exch. Comm’n, Prepared Remarks at Center for Audit Quality “Sarbanes-Oxley at 20: The Work Ahead” (July 27, 2022), https://www.sec.
gov/news/speech/gensler-remarks-center-audit-quality-072722 [https://perma.cc/Y6QB-XJ4S].
While the future of auditor independence regulations remains up in the air, the problems associated with a lack of auditor independence continue. In 2019, the SEC alleged that PricewaterhouseCoopers LLP, one of the “Big Four” accounting firms, had violated auditor independence rules in connection with nineteen service engagements for fifteen publicly traded companies by providing prohibited non-audit services that could have impaired the firm’s objectivity.4Press Release, U.S. Secs. & Exch. Comm’n, SEC Charges PwC LLP with Violating Auditor Independence Rules and Engaging in Improper Professional Conduct (Sept. 23, 2019), https://www.sec.gov/news/press-release/2019-184 [https://perma.cc/MH4R-YR5Q]. Non-audit services are ancillary services, such as reviews of accounting software or tax advice, that do not assist in the goal of auditing, which is reviewing the financial statements for fraud or error. The SEC also alleged that another Big Four accounting firm, Ernst & Young LLP, had violated auditor independence standards, along with one of its partners and two of its former partners.5Press Release, U.S. Secs. & Exch. Comm’n, SEC Charges Ernst & Young, Three Audit Partners, and Former Public Company CAO with Audit Independence Misconduct (Aug. 2, 2021), https://www.sec.gov/news/press-release/2021-144 [https://perma.cc/HE8Q-MG2A]. The Chief Accounting Officer for Ernst & Young’s client on this engagement was also allegedly involved with this misconduct, indicating how far-reaching auditor independence violations can be.6Id.
Auditor independence is governed by a self-regulatory model, in which the SEC, in partnership with the PCAOB, the specialized non-profit corporation created by the Sarbanes-Oxley Act of 2002,7Further discussion of the Sarbanes-Oxley Act of 2002, including the sweeping reforms it encompassed, will be provided in Part I. provides oversight over the AICPA, which is a private industry professional organization charged with setting substantive auditor regulation. Despite the importance of auditor independence regulation in investor protection and the existence of this self-regulatory model, the regulatory framework in this area remains entangled.
While the SEC and PCAOB provide oversight over the AICPA, they also issue their own auditor independence regulation and have enforcement practices associated with auditors.8See infra Part III. Among the SEC, PCAOB, and AICPA, each standard-setter has rules that overlap with the others in the same subject-matter and some rules that defer to the rules set by the other organizations.9See infra Part III. This leads to a waterfall effect, in which all three entities have to change their regulations any time one of the other two does, in order to ensure that the rules are not in conflict.10See, e.g., Pub. Co. Acct. Oversight Bd., PCAOB Release No. 2020-003, Amendments to PCAOB Interim Independence Standards and PCAOB Rules to Align with Amendments to Rule 2-01 of Regulation S-X 3 (Nov. 19, 2020), https://pcaob-assets.azureedge.net/pcaob-dev/docs/default-source/rulemaking/docket-047/2020-003-independence-final-rule.pdf [https://perma.
cc/NW28-LB49]. This effort has been called “harmonization,” and has the goal of ensuring that all regulatory frameworks in this area are made consistent with each other, to provide more certainty to the accounting firms and other stakeholders involved in audits, including public company boards of directors.11See, e.g., Deloitte & Touche, Comment Letter on the Proposed Revision of the SEC’s Auditor Independence Requirements Regarding Scope of Services (Sept. 25, 2000), https://www.sec.gov/
rules/proposed/s71300/deloit1a.htm [https://perma.cc/WS68-UCEQ]. However, an alternative solution to harmonization may be “simplification,” in which instead of expending effort to harmonize the regulation of the three entities each time one of them makes a change, the existing self-regulatory model could be streamlined so that the AICPA is the primary or sole standard setter, with the SEC and PCAOB providing government oversight.
To explore whether simplification is a compelling alternative to harmonization, this paper turns to federal judicial decisions by conducting a novel case study of all auditor independence cases decided after the passage of the Sarbanes-Oxley Act of 2002. These decisions indicate that the courts largely use AICPA standards and case law requirements in assessing auditor independence, rather than SEC or PCAOB standards. This new finding suggests that simplification of the regulatory framework by relying solely on AICPA rulemaking is a viable solution, given that the federal courts already rely on AICPA rules.12See infra Parts IV and V.
This paper will proceed as follows. First, Part I provides a brief summary of the business of public company audits to preview how the structure of the audit industry gives rise to unique incentivizes and pressures that may impact auditor independence. Next, Part II includes an overview of the impact of the Sarbanes-Oxley Act of 2002 on the audit industry and highlights the debate over auditor independence, including the ways that various stakeholders have argued whether auditor independence is a worthy goal, or if auditors’ role as gatekeepers is unnecessary. Thereafter, Part III provides an overview of the self-regulatory model that governs auditor regulation, as well as regulations promulgated by the SEC, PCAOB, and AICPA in the area of auditor independence, including a summary of recent efforts to harmonize the standards set by each entity. The core of the paper’s contribution to the literature on auditor independence regulation is in Part IV, which a presents a novel case study that examines which body of regulation, between the SEC, PCAOB, and AICPA, is preferred by the federal courts when determining whether there have been auditor independence violations. This leads to the key finding that, in determining whether auditor independence violations have occurred, the federal courts rely almost exclusively on AICPA standards and case law requirements developed by the courts, rather than SEC or PCAOB standards. Accordingly, the paper then briefly examines in Part V whether this finding indicates that rule-making authority should be consolidated by giving the AICPA authority to set substantive auditor independence regulation, with the SEC and PCAOB providing oversight, given that there is already a self-regulatory model in place. Put differently, the paper concludes by considering whether the three regulatory frameworks should be simplified into that of the AICPA, the standard setter that is the most comprehensive, and the one that has been most acknowledged by the courts.
I. THE BUSINESS OF PUBLIC COMPANY AUDITS
The role of auditors in public company financial reporting is to provide third-party reasonable assurance to investors that the financial statements of their client companies “are free of material misstatement, whether caused by error or fraud,” in the form of a formally issued audit opinion, which is appended to the clients’ public company SEC filings.13Auditing Standards § 1001.02 (Pub. Co. Acct. Oversight Bd. 2020). Audit opinions state whether the auditor believes that the financial statements included in the filings are free, in all material respects, from error or fraud.
Generally, auditors are viewed as “gatekeepers,” meaning individuals who are “reputational intermediaries who provide verification and certification services to investors.”14John C. Coffee Jr., Understanding Enron: “It’s About the Gatekeepers, Stupid,” 57 Bus. Law. 1403, 1408 (2002). As gatekeepers, auditors have incentives to signal to outsiders that they are credible because their reputation of trustworthiness is what allows them to attract future clients and remain in business by giving credibility to their audit opinions.15Ronald J. Gilson & Reinier H. Kraakman, The Mechanisms of Market Efficiency, 70 Va. L. Rev. 549, 607 n.166 (1984). The reputation of auditors is also partially what enables them to provide verification services because investors recognize that auditors have fewer incentives than their clients’ management teams to mislead investors because the management teams are corporate insiders whereas auditors are objective third parties.16Coffee, supra note 14, at 1406. A traditional understanding of the audit profession puts forth the proposition that auditors are trustworthy because they are not incentivized to risk their reputation by assisting one client with fraud, which could lose them many additional clients and destroy their reputational capital.17Id.
Additionally, auditors have built up years of expertise that demonstrates to third parties that their services and opinions can be trusted.18Id. at 1408. The utility of auditors extends from the fact that they have specialized technical expertise in the area of accounting. Members of accounting firms that conduct audits are generally expected to hold state licenses as Certified Public Accountants, which give them both reputational capital and technical expertise.19See Auditing Standards § 1010 (Pub. Co. Acct. Oversight Bd. 2020). Additionally, these accounting firms are typically well staffed with local and global teams to address the audit needs of multinational companies that are listed on exchanges in the United States, despite the complexity and geographical scope of the audit procedures that may be required.20Pub. Oversight Bd., Panel on Audit Effectiveness, Report and Recommendations 157 (2000), https://egrove.olemiss.edu/cgi/viewcontent.cgi?article=1351&context=aicpa_assoc [https://
perma.cc/TH2E-YLG2] [hereinafter Panel on Audit Effectiveness].
It is widely known that auditing is part of an oligopoly, in which the “Big Four” accounting firms—PricewaterhouseCoopers LLP (“PwC”), Ernst & Young Global Limited (“Ernst & Young”), Deloitte Touche Tohmatsu Limited (“Deloitte”), and KPMG International Limited (“KPMG”)—dominate the market. The Big Four were responsible for the audits of 88% of SEC large accelerated filers—which are companies with a public float of larger than $700 million that are required by the SEC to submit securities filings on a shorter timeline than other filers—and 44.7% of all public companies in 2022.21Nicole Hallas, Who Audits Public Companies – 2022 Edition, Audit Analytics (June 28, 2022), https://blog.auditanalytics.com/who-audits-public-companies-2022-edition [https://perma.cc/
4QSY-XMJ7; 17 C.F.R. § 240.12b-2(2) (2022). There are several smaller players in the market as well, including RSM US LLP, BDO USA LLP, and Grant Thornton LLP; however, the largest of these entities produces less than a third of the revenue produced by the smallest Big Four accounting firm, leaving the market substantially dominated by the Big Four accounting firms, which have offices globally.22The 2021 Top 100 Firms, Acct. Today, https://www.accountingtoday.com/the-2021-top-100-firms-data [https://perma.cc/J5WV-7QVV].
Auditors for public companies are required to examine their clients’ financial statements and notes to the financial statements, which provide supplemental information. Auditors use a variety of mechanisms, including inspecting records, confirming balances with third parties, checking compliance with internal policies, and completing detailed tests of transactions to ensure the financial statements are free from material error or fraud.23See, e.g., Codification of Acct. Standards & Procs., Statement on Auditing Standards No. 110, § 318.79 (Am. Inst. of Certified Pub. Accts. 2006). Auditors also often test the robustness of management’s internal controls over financial reporting. Internal controls over financial reporting are policies and procedures surrounding accounting and reporting that are designed to limit the risk of fraud and error in the financial statements. All of this testing is done with an expectation of independence—that the auditors are not personally invested in the entity they are auditing, do not have conflicts of interests, and are reviewing the information with an air of “professional skepticism.”24See, e.g., Auditing Standards § 1015.07–09 (Pub. Co. Acct. Oversight Bd. 2020).
II. THE DEBATE OVER AUDITOR INDEPENDENCE
When discussing auditor independence, much emphasis has been placed on the fact that each of the large public accounting firms have three lines of business: audit, tax, and consulting services. In the wake of the Enron scandal, debate over whether these three lines of business lead to inherent conflicts within public accounting firms that obstruct independence. Enron was a publicly traded energy company based in Texas that went bankrupt in 2001, partially as a result of a major decline in stock price after accounting irregularities were discovered at the company.25William W. Bratton, Enron and the Dark Side of Shareholder Value, 76 Tul. L. Rev. 1275, 1276, 1305–09 (2002). At the time, Enron was the seventh-largest company in the United States based on market capitalization, and its bankruptcy was the largest in United States history.26Id. at 1276. The accounting irregularities alleged were largely technical in nature, involving the use of (1) mark-to-market accounting, a practice that can lead to the overstatement of the value of assets by recording them at their current market value rather than their historical cost; (2) improper recognition of liabilities within “special purpose entities” that were owned by the company, which reduced the liabilities that were attributed to Enron; as well as (3) alleged improper payments to company officers, all of which were not in accordance with Generally Accepted Accounting Principles (“GAAP”) that are set by the AICPA and required to be followed by public companies.27Id. at 1282, 1305–09, 1348. Arthur Andersen LLP (“Arthur Andersen”), the public accounting firm responsible for Enron’s audit, did not, however, note any of these issues with GAAP in the audit opinions it issued about the accuracy of Enron’s financial statements, which led to surprise when the company collapsed.28See, e.g., Enron Corp., Annual Report (Form 10-K) (Mar. 30, 2001).
In the wake of the Enron scandal, many stakeholders argued that one of the main contributing factors to Enron’s collapse was that the company’s auditor, Arthur Andersen, was receiving more revenue from its consulting engagement with Enron than it was from its audit engagement, to a factor of 1.08 times.29Jonathan D. Glater, Enron’s Many Strands: Accounting; 4 Audit Firms Are Set to Alter Some Practices, N.Y. Times (Feb. 1, 2002), https://www.nytimes.com/2002/02/01/business/enron-s-many-strands-accounting-4-audit-firms-are-set-to-alter-some-practices.html [https://perma.cc/WHJ3-4QC9]. Arthur Andersen received approximately $27 million in annual non-audit fees and $25 million in annual audit fees from Enron in 2000 and expected to grow the overall fees to approximately $100 million annually, which some alleged was why Arthur Andersen did not disclose Enron’s lack of compliance with GAAP.30Id.; Thaddeus Herrick & Alexei Barrionuevo, Were Enron, Anderson Too Close to Allow Auditor to Do Its Job?, Wall St. J. (Jan. 21, 2002, 12:01 AM), https://www.wsj.com/
articles/SB1011565452932132000 [https://perma.cc/8FF9-H6CV]. Arthur Andersen was exonerated of any liability; however, the court did not reach the issue of whether the firm was conflicted and what effect that may have had on the audit.31Arthur Andersen LLP v. United States, 544 U.S. 696, 708 (2005).
Enron was used as an example of how pressure on accounting firms to maximize revenue from consulting engagements prevents accounting firms from robustly auditing financial statements. Primarily, stakeholders worried that accounting firms would fail to report material misstatements or fraud in financial statements in order to preserve relationships with management of the companies they were auditing or to sell them consulting services; in extreme cases such as Enron’s, the concern was that this failure to report could collapse the company entirely and thus completely eliminate a revenue-generating client.32Herrick & Barrionuevo, supra note 30.
The furor and fallout over Enron and implications on the weaknesses of accounting firms was used as a major justification for Congress’s passage of the Sarbanes-Oxley Act of 2002, given that investors lost billions upon Enron’s collapse.33Jeff Lubitz, 20 Years Later: Why the Enron Scandal Still Matters to Investors, Inst. S’holder Servs. Insights (Oct. 20, 2021), https://insights.issgovernance.com/posts/20-years-later-why-the-enron-scandal-still-matters-to-investors [https://perma.cc/A2DS-L7KR]. Specifically, the social costs of the Enron collapse were high because pension funds that supported teachers, firefighters, and government employees were endangered from the losses, leading to outcries for reform.34Steven Greenhouse, Enron’s Many Strands: Retirement Money; Public Funds Say Losses Top $1.5 Billion, N.Y. Times (Jan. 29, 2002), https://www.nytimes.com/2002/01/29/business/enron-s-many-strands-retirement-money-public-funds-say-losses-top-1.5-billion.html [https://perma.cc/H728-T2P8]; Legislative History of Title VIII of H.R. 2673, 148 Cong. Rec. S7419–20 (daily ed. July 26, 2002). William Donaldson, the SEC Chair during the time of the passage of Sarbanes-Oxley, testified before Congress that Enron was a major event leading to the reforms that were implemented in Sarbanes-Oxley.35Implementation of the Sarbanes–Oxley Act of 2002 Hearing Before the S. Comm. on Banking, Hous. and Urban Affairs, 108th Cong. 33–47 (2003) (statement of William H. Donaldson, Chair, Securities & Exchange Commission).
Sarbanes-Oxley included sweeping regulatory changes designed, in part, to “restor[e] public confidence” in the accounting profession, emphasizing for the first time in Congressional legislation the importance of auditor independence.36Id. The Act created the PCAOB to inspect accounting firms and set auditing regulations, departing from the prior regulatory structure in which the accounting profession was almost entirely self-regulated by the AICPA.37Id. Sarbanes-Oxley also created a slew of additional auditor independence rules, such as requiring audit committees to pre-approve all audit and non-audit services provided by an auditor, reducing the consulting services that could be provided by an auditor, requiring that certain auditors rotate off an audit engagement on a regular schedule, requiring that independence concerns be raised to the audit committee when auditors identified them, and requiring disclosure to investors of non-audit and audit services provided by accounting firms.38Id. The stated purpose of these reforms was not only to “restor[e] public confidence in the independence and performance of auditors of public companies’ financial statements,” but also to “enhance the integrity of the audit process and the reliability of audit reports.”39Id.
While Sarbanes-Oxley seemed to significantly reduce the opportunity for accounting firms to provide both audit services and consulting services to their clients, there exists a gray area in which accounting firms are able to provide certain “non-audit services” to their audit clients.40Office of the Chief Accountant: Application of the Commission’s Rules on Auditor Independence, U.S. Secs. & Exch. Comm’n, https://www.sec.gov/info/accountants/
ocafaqaudind080607#nonaudit [https://perma.cc/QC62-KZKF]. Accounting firms have found that these non-audit services can be a profitable substitute for revenue lost from consulting services, and according to a study that reviewed audit revenue as compared to non-audit revenue disclosures in annual proxy statements—which require public companies to disclose certain matters prior to their annual shareholder meetings—non-audit revenue represented 18% of the fees paid to auditors by public companies in 2021.41Nicole Hallas, Twenty Year Review of Audit & Non-Audit Fee Trends Report, Audit Analytics (Oct. 11, 2022), https://blog.auditanalytics.com/twenty-year-review-of-audit-non-audit-fee-trends-report [https://perma.cc/LT4F-32KW]. These non-audit services allow public company auditors to provide a number of ancillary services to their audit clients, such as, (1) audits over accounting and information systems, including payroll software and human resources software, (2) “carve-out” audits that evaluate portions of the business that are set to be divested, (3) tax services, (4) statutory audits, which are audits that comply with local governmental audit requirements, especially in foreign countries, and (5) employee benefit plan audits, typically meaning audits over pension plans. All of these services can be provided without impairing independence under the SEC, PCAOB or AICPA rules, and several of them are repeat, annual services, making them especially lucrative and enticing to accounting firms.42See Our Point of View on Non-Audit Services Restrictions, PricewaterhouseCoopers (2016), https://www.pwc.com/gx/en/about/assets/gra-non-audit-services-our-point-of-view.pdf [https://
perma.cc/PR9L-X8W2].
The oligopoly presented by the Big Four accounting firms also puts significant cost pressure on accounting firms to lower audit costs to attract and retain clients, while still maximizing revenue and market share.43Martin Gelter & Aurelio Gurrea-Martinez, Addressing the Auditor Independence Puzzle: Regulatory Models and Proposal for Reform, 53 Vand. J. Transnat’l L. 787, 798–99 (2020). This balance is primarily struck by the accounting firms in two ways.
First, the accounting firms can look to drive efficiencies in the audit process to lower the cost of annual audits to clients.44Id. at 803. This is often accomplished by retaining clients and using institutional knowledge gained over years of repeat audits to streamline audit processes and thus reduce hours and audit costs.45Id. at 808–09. However, this has the added effect of lowering auditor independence as auditors become entrenched in relationships with their clients over a number of years.46Richard L. Kaplan, The Mother of All Conflicts: Auditors and Their Clients, 29 J. Corp. L. 363, 367 (2004). For this reason, mandatory rotation of audit firms has been adopted in a number of foreign jurisdictions, including in Europe.47EU Audit Reform – Mandatory Firm Rotation, PricewaterhouseCoopers (2015), https://www.pwc.com/gx/en/audit-services/publications/assets/pwc-fact-sheet-1-summary-of-eu-audit-reform-requirements-relating-to-mfr-feb-2015.pdf [https://perma.cc/PY7R-9Q4D]. Some have also argued that mandatory audit firm rotations should be adopted in the United States, in addition to the existing United States requirement of rotation of the individuals who lead each audit project, known as audit engagement partners and who are usually equity partners in the accounting firms.4817 C.F.R. § 210.2-01(f)(7)(ii) (2023); see, e.g., Clive S. Lennox, Xi Wu & Tianyu Zhang, Does Mandatory Rotation of Audit Partners Improve Audit Quality?, 89 Acct. Rev. 1775, 1801 (2014).
Alternatively, accounting firms can look to increase revenue from ancillary, non-audit services.49Sean M. O’Connor, Strengthening Auditor Independence: Reestablishing Audits as Control and Premium Signaling Mechanisms, 81 Wash. L. Rev. 525, 559 (2006). This method of increasing revenue by cross-selling non-audit services along with public company audits is seen as a positive to many because efficiencies are driven by the institutional knowledge that auditors already have as a result of their financial statement testing, lowering the costs for both the audit and the non-audit services. For example, an accounting firm that is performing both a public-company financial statement audit and a report on internal controls for the same client can use some of the testing done for the financial statement audit to satisfy testing requirements for internal controls, thus lowering the costs for the combined services.50Auditing Standard § 2315.44 (Pub. Co. Acct. Oversight Bd. 2020).
Many argue that this bundling is a positive development, and given that audit services are fungible, lower transaction costs for companies in the form of reduced fees to accounting firms increase shareholder value.51O’Connor, supra note 49, at 542. Additionally, tracking independence over each and every ancillary service would increase transaction costs without providing shareholder value, given that some of these non-audit services can be provided without impairing auditor independence, and especially because some argue that accounting firms are already conflicted by virtue of the fact that they are paid for audit services provided.52Coffee, supra note 14, at 1411. Further, proponents of bundling argue that auditors are still incentivized to provide quality audits because despite the pressure to increase non-audit service revenue, auditors would not want to risk their reputational capital, which allows them to stay in business and attract other clients.53Gilson & Kraakman, supra note 15, at 607.
However, others argue that fee dependence on non-audit services poses the same problems as those that existed prior to Sarbanes-Oxley, in which instead of sacrificing audit quality to retain consulting revenue, firms are now sacrificing audit quality to retain other non-audit service revenue.54Paul Munter, The Importance of High Quality Independent Audits and Effective Audit Committee Oversight to High Quality Financial Reporting to Investors, U.S. Secs. & Exch. Comm’n (Oct. 26, 2021), https://www.sec.gov/news/statement/munter-audit-2021-10-26 [https://perma.cc/4P5E-UBX6]. This leads to concerns that auditor independence will be impaired in a way that increases costs to investors because material misstatements are less likely to be caught, and this outweighs the costs saved from efficiencies by the same accounting firm providing both audit and non-audit services.55Id.
While this paper reserves judgment on these questions of how non-audit services effect auditor independence, the primary view of auditor regulation since the accountings scandals of the early-2000s and Sarbanes-Oxley has been that auditor independence is of paramount importance to the audit industry in order to protect investors from fraud or inadvertent material errors from management.56Gensler, supra note 3. In the following Part, this paper will explore the existing regulation surrounding auditor independence, including identifying the many agencies and self-regulatory organizations that promulgate such regulations, and untangle the many requirements for independence as they have appeared over time.
III. SELF-REGULATION AND THE TANGLED REGULATORY FRAMEWORK OF AUDITOR INDEPENDENCE
Modern third party audits have existed since approximately the 1920s and have varied widely in their form and requirements.57O’Connor, supra note 49, at 526–28. However, it was not until the Securities Act of 1933 that companies were required to have their financial statements certified by an independent accountant before they could register on the public markets.58Id. at 530, 535. This requirement was expanded with the passage of the Securities Exchange Act of 1934, which mandated annual and quarterly financial reporting for public companies, as well as reporting on material events, all of which were required to be certified by “independent public accountants.”59Panel on Audit Effectiveness, supra note 20, at 109. The Federal Trade Commission and SEC subsequently passed rulemaking that defined “independent public accountants” as those who had neither served as officers or directors of the company to be audited, nor had a “substantial financial interest” in the company, which was defined as more than one percent of the auditor’s net worth.60Id.
While the SEC retained statutory authority over auditor independence regulations, eventually the AICPA formed its own auditor independence requirements and in 1977 created the Public Oversight Board (“POB”) to serve as a self-regulatory organization over the accounting profession.61About the POB, Pub. Oversight Bd., https://www.publicoversightboard.org [https://
perma.cc/WC69-ALWN]. The AICPA is independently funded by membership dues from members, which include individual accountants who are certified public accountants.62Bylaws and Implementing Resolutions of Council § 2.3.1, Am. Inst. of Certified Pub. Accts. (May 19, 2022), https://www.aicpa.org/resources/download/aicpa-bylaws-and-implementing-resolutions-of-council [https://perma.cc/A8QH-CTUU]. The AICPA is governed by a council consisting of AICPA members elected by their fellow members in each state, representatives of state CPAs, and members-at-large of the AICPA, among others.63Id. § 3.3.1. However, in the wake of the accounting scandals of the early 2000s, the SEC issued additional independence rules to move away from complete industry self-regulation by the AICPA and POB without public oversight, and these rules were then amended to coincide with the sweeping reforms passed by Congress in the Sarbanes-Oxley Act.64Press Release, U.S. Secs. & Exch. Comm’n, SEC Adopts Rules on Provisions of Sarbanes-Oxley Act (Jan. 15, 2003), https://www.sec.gov/news/press/2003-6.htm [https://perma.cc/QTX5-T8CB]. Sarbanes-Oxley required the formation of the PCAOB—a nonprofit corporation under the oversight of the SEC—but still allowed the AICPA to issue auditor independence standards.65See 15 U.S.C. § 7211(a). The membership of the PCAOB, which consists of a five person Board, is determined by appointment from the Chair of SEC and a vote of the five SEC commissioners.66The Board, Pub. Co. Acct. Oversight Bd., https://pcaobus.org/about/the-board [https://perma.cc/KP8Q-VJ2G]. The PCAOB is funded by mandatory fees from public companies who are subject to audit requirements under the Exchange Act as well as fees from brokers and dealers subject to SEC regulation.67Accounting Support Fee, Pub. Co. Acct. Oversight Bd., https://pcaobus.org
/about/accounting-support-fee#:~:text=The%20largest%20source%20of%20funding,audited%20by%20
PCAOB%2Dregistered%20firms [https://perma.cc/34FM-75AH]. As a result, since 2003, when Sarbanes-Oxley took effect, the accounting profession has been governed by three primary sets of auditor independence standards, those set by the SEC, PCAOB, and the AICPA.68See O’Connor, supra note 49, at 559. A summary of the interaction of the regulations set by the AICPA, SEC, and PCAOB is provided below and will be discussed further in the following sections:
Figure 1.
A. Self-Regulatory Models in United States Financial Regulation
The diffuse structure that contains SEC, PCAOB, and AICPA involvement in auditor independence regulation is not unheard of within United States financial services regulation. The SEC is involved in several self-regulatory models in which the SEC provides oversight to an industry organization that sets standards, and, in some cases, enforces those standards. For example, the Financial Industry Regulatory Authority (“FINRA”) sets regulation for registered broker-dealer firms and registered brokers69Broker-dealer firms and brokers are organizations and individuals, respectively, who purchase and sell securities on behalf of their customers. and enforces those rules.70What We Do, Fin. Indus. Regul. Auth., https://www.finra.org/about/what-we-do [https://perma.cc/VX74-AZ7J]. The Exchange Act gives the SEC the authority to approve any rule changes made by FINRA7115 U.S.C. § 78s (b)(2). as well as revoke the authority of FINRA or issue sanctions against FINRA.72See id. § 78s (g)–(h).
The SEC is also part of self-regulatory frameworks with national securities exchanges.73National securities exchanges are exchanges for securities that have registered with the SEC under Section 6 of the Securities and Exchange Act of 1934. The self-regulatory framework between the national securities exchanges and the SEC works much in the same way as SEC’s oversight of FINRA, in which the SEC provides oversight over and approval of the rulemaking of each securities exchange and issues sanctions for violations of the Securities Act of 1933, the Investment Advisers Act of 1940, and the Investment Company Act of 1940.7415 U.S.C. § 78s(h)(2)(A).
The SEC also has a self-regulatory model with respect to credit rating agencies.75Under the Credit Rating Agency Reform Act of 2006, credit rating agencies are organizations that are engaged in the business of issuing an assessment of the creditworthiness of an obligor, using qualitative or quantitative models, and receiving fees for those services. Pursuant to Section 15E of the Securities and Exchange Act of 1934, each credit rating agency was required to set internal controls and policies to ensure accurate credit ratings,7615 U.S.C. § 78o–7(c)(3)(A). and the SEC was required to review such policies to ensure they were robust.77Id. § 78o–7(c)(1), (d)(1). Additionally, prior to the passage of the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (“Dodd-Frank Act”), the SEC relied on credit agencies to provide a measure of credit-worthiness in SEC rules.78See U.S. Secs. & Exch. Comm’n, Report on the Review of Reliance on Credit Ratings 1–2 (2011), https://www.sec.gov/files/939astudy.pdf [https://perma.cc/A5RR-BF5P]. However, Section 939A of the Dodd-Frank Act required that the SEC remove such references to the credit agencies within its rules and instead create its own independent standards.79Id.; Dodd-Frank Act, Pub. L. No. 111-203, § 939A, 124 Stat. 1887 (2010).
Although the examples above illustrate that the self-regulatory model has been widely used, the model has also been subject to debate over its merits.80See, e.g., A Review of Self-Regulatory Organizations in the Securities Markets Hearing Before the S. Comm. on Banking, Housing, and Urban Affairs, 109th Cong. (2006), https://www.
govinfo.gov/content/pkg/CHRG-109shrg39621/html/CHRG-109shrg39621.htm [https://perma.cc/93P2-45PD]. Supporters of the model argue it is beneficial because the knowledge of industry participants enhances the usefulness of rulemaking,81Andrew F. Tuch, The Self-Regulation of Investment Bankers, 83 Geo. Wash. L. Rev. 101, 112–13 (2014). places the costs of enforcement on industry,82See, e.g., Accounting Support Fee, Pub. Co. Acct. Oversight Bd., https://pcaobus.org
/about/accounting-support-fee#:~:text=The%20largest%20source%20of%20funding,audited%20by%20
PCAOB%2Dregistered%20firms [https://perma.cc/34FM-75AH]. and is more adaptive than the state-driven model because industry entities have the experience and ability to focus on specialized regulations in a way that public entities with vast oversight responsibilities may not.83Tuch, supra note 81, at 112. However, others believe that the self-regulatory model is not as beneficial as the European state-driven model, in which public entities are the singular or primary regulators with little or no input from industry organizations, because the self-regulatory model can result in conflicts of interest in terms of funding and regulatory capture, given that individual standard setters may be members of the group facing regulation and may seek to avoid restrictions.84See Saule T. Omarova, Bankers, Bureaucrats, and Guardians: Toward Tripartism in Financial Services Regulation, 37 J. Corp. L. 621, 628–29 (2012). In response, proponents of self-regulation may argue that the oversight of the public entities is sufficient to mitigate these conflicts and harness the benefits of a specialized industry standard-setter working hand-in-hand with a public oversight agency, especially when safeguards such as individual term limits for regulators, or limitations on the ability of individual regulators to participate in a “revolving door” in which they rotate between industry and regulatory entity, are put in place.85See Revolving Door Rules, Fin. Indus. Regul. Auth., https://www.finra.org/
careers/alumni/revolving-door-rules [https://perma.cc/Y2QH-NQL7].
While the self-regulatory model is not unique to auditor regulation, what is somewhat distinctive about the auditor regulation self-regulatory model is that the SEC and PCAOB not only provide oversight over the AICPA, which is the industry organization run by accountants, but the SEC and PCAOB also have concurrent jurisdiction to set independence standards and have set their own standards for auditor independence in addition to those of the AICPA.86Pub. Co. Acct. Oversight Bd., Release No. 2020-003, Docket No. 047, Amendments to PCAOB Interim Independence Standards and PCAOB Rules to Align with Amendments to Rule 2-01 of Regulation S-X 2–3 (Nov. 19, 2020), https://pcaob-assets.azureedge.net/pcaob-dev/docs/
default-source/rulemaking/docket-047/2020-003-independence-final-rule.pdf?sfvrsn=43d58c7e_6 [https
://perma.cc/GGD3-LTLC]. While there are additional organizations that set auditor independence standards, including state boards of accountancy, state CPA societies, federal and state agencies, and the International Ethics Standards Board, the standards set by these entities are heterogeneous and are generally superseded by the SEC, PCAOB, and AICPA rules.87Am. Inst. of Certified Pub. Accts., Plain English Guide to Independence 3 (2021), https://us.aicpa.org/content/dam/aicpa/interestareas/professionalethics/resources/tools/downloadabledocuments/plain-english-guide.pdf [https://perma.cc/N4AS-E3NG]. See generally O’Connor, supra note 49. Therefore, the regulation promulgated by these entities will not be examined in this paper. In order to assess the current landscape of auditor regulation, this paper will examine the regulations passed by the SEC, PCAOB, and AICPA in Sections III.B–D.
B. SEC Independence Rules
Under the current SEC independence rules:
The [SEC] will not recognize an accountant as independent . . . if the accountant is not, or a reasonable investor with knowledge of all relevant facts and circumstances would conclude that the accountant is not, capable of exercising objective and impartial judgment on all issues encompassed within the accountant’s engagement. In determining whether an accountant is independent, the [SEC] will consider all relevant circumstances, including all relationships between the accountant and the audit client.8817 CFR § 210.2-01(b).
The SEC independence rules then set forth a non-exhaustive list of instances in which an auditor would not be independent, primarily consisting of eight categories: (1) lack of financial independence, (2) client investment in the accounting firm, (3) employment by client, (4) non-audit services, (5) contingent fees,89Contingent fees are:
[A]ny fee established for the sale of a product or the performance of any service pursuant to an arrangement in which no fee will be charged unless a specified finding or result is attained, or in which the amount of the fee is otherwise dependent upon the finding or result of such product or service.
Id. § 210.2-01(f)(10). In the context of the audit, contingent fees are generally understood to be fees made conditional on the finding of an “unqualified” audit opinion, in which the accounting firm certifies that the financial statements are reasonably and fairly presented. (6) improper partner rotation, (7) lack of audit committee approval,9015 U.S.C. § 78c(a)(58)(A). Audit committees are committees established by the Boards of Directors of public companies which are charged with the oversight of financial reporting and audits. and (8) improper compensation.9117 CFR § 210.2-01(c). Perhaps the most important of these rules are those defining financial independence because without financial independence, an auditor may have conflicts of interest that prevent them from conducting a robust audit.92Auditor Independence Matters, U.S. Secs. & Exch. Comm’n, https://www.sec.gov/page/oca-auditor-independence-matters [https://perma.cc/8F2S-B7TB] (“Ensuring auditor independence is as important as ensuring that revenues and expenses are properly reported and classified.”). Accordingly, a summary of these rules is given below, along with a brief summary of the independence restrictions posed by the remainder of the SEC independence rules.
1. Financial Interests
SEC Independence Rule 2-01 states that independence is impaired when (1) the accountant has a direct financial interest or material indirect financial interest in their client;9317 C.F.R. § 210.2-01(c)(1). (2) the accounting firm, a covered person in the firm, or any of the covered person’s immediate family members have a direct investment in the client, in which “covered person” includes individual accountants within a firm that provide services to a client;94Id. § 210.2-01(c)(1)(i)(A). (3) any partner or employee in the firm, including their close family, has more than 5% beneficial ownership of the client’s securities or controls the client;95Id. § 210.2-01(c)(1)(i)(B). or (4) the accounting firm, a covered person in the firm, or any of the covered person’s immediate family members have loans, savings accounts, checking accounts, broker-dealer accounts, insurance products, futures commission merchant accounts, consumer loans, or financial interests in investment companies that own the client.96Id. § 210.2-01(c)(1)(ii)(A)–(E).
In addition to the requirements of financial independence listed above, the SEC independence rules also prohibit the audit client from investing in the accounting firm or underwriting an accounting firm’s securities.97Id. § 210.2-01(c)(1)(iv). Moreover, the SEC independence rules place limits on accounting firm employees from being employed at the client both during and after the audit engagement.98Id. § 210.2-01(c)(2).
2. Audit Conduct
The SEC independence rules also mandate certain conduct during the audit. For example, auditors are not allowed to provide non-audit services that could impair their independence, such as bookkeeping services, financial information systems design and implementation, appraisal or valuation services, actuarial services, management functions, human resources, investment advising, legal services, or expert services unrelated to the audit.99Id. § 210.2-01(c)(4)(i)–(x). Much of the intent behind this regulation is to reduce the types of conflicts discussed in Part II, in which auditors are incentivized to ignore errors in the audit in order to receive revenue for these non-audit services.100Paul Munter, The Importance of High Quality Independent Audits and Effective Audit Committee Oversight to High Quality Financial Reporting to Investors, U.S. Secs. & Exch. Comm’n (Oct. 26, 2021), https://www.sec.gov/news/statement/munter-audit-2021-10-26 [https://perma.cc/4P5E-UBX6]. Additionally, audit partners are required to rotate every five years if they are the lead partner on the engagement or every seven years otherwise, to avoid forming ties with clients that may impair independence.10117 C.F.R. § 210.2-01(c)(6)(i)(A)(1)–(2). Auditors are also not allowed to receive contingent fees or have partners compensated for any services other than audit services.102Id. § 210.2-01(c)(5). The audit engagement, typically including fees and non-audit services, must also be approved by the client’s audit committee to ensure independence.103Id. § 210.2-01(c)(7).
3. Enforcement and Entanglement
The SEC’s enforcement mechanism for auditor independence violations is relatively straightforward. Under the SEC independence rules, the SEC can “censure a person or deny, temporarily or permanently, the privilege of appearing or practicing before [the SEC] in any way to any person who is found by the Commission after notice and opportunity for hearing”104Id. § 201.102(e)(1). to have “engaged in unethical or improper professional conduct.”105Id. § 201.102(e)(1)(ii). What is interesting about this mechanism is that it defers to “applicable professional standards” in determining whether there has been “unethical or improper professional conduct.”106Id. § 201.102(e)(1)(iv)(A), (e)(1)(ii). As a result, the SEC defers the determination of the standard for violations of independence standards to the body that sets the professional standards, which has often been interpreted, both by the SEC’s Administrative Law Judges and the federal courts, to be the AICPA.107For a discussion of cases that defer to AICPA auditor independence standards, see infra Part IV. This is one instance in which the auditor independence regulations are entangled between two different standard setters—the SEC and the AICPA.
One other instance in which the auditor independence rules are entangled between regulators is that although the SEC has delegated the authority to the PCAOB to set auditor independence standards, the SEC independence rules passed in the wake of Sarbanes-Oxley in 2003 are still effective.108O’Connor, supra note 49, at 565. Aside from some minor updates to debtor-creditor relationships passed in 2019, the SEC independence rules remained largely untouched until 2020,109Qualifications of Accountants, 85 Fed. Reg. 80508 (Dec. 11, 2020) (codified at 17 C.F.R. pt. 210). at which point the SEC, along with making minor updates to the independence rules, brought the PCAOB rules into harmony with the SEC rules where they conflicted, acknowledging that for several years there had been a period in which the SEC and PCAOB rules surrounding auditor independence were not consistent.110Id. This inconsistency is explored further in the sections below, including analyzing the frequency with which the courts used the SEC and PCAOB standards during this time, or the AICPA standards, which are defined in Part III.D.
C. PCAOB Standards
The PCAOB sets forth “Ethics and Independence” standards for accounting firms and their associated persons.111Ethics & Independence, Pub. Co. Acct. Oversight Bd., https://pcaobus.org/oversight/
standards/ethics-independence-rules [https://perma.cc/WP6J-2LLD]. While several of these rules set forth additional requirements when compared to the SEC rules, several are similar or aligned with the SEC independence rules and AICPA standards.112See, e.g., Professional Standards, Rule 3521 (Pub. Co. Acct. Oversight Bd. 2006). First, accounting firms and their employees are required to “comply with all applicable auditing and related professional practice standards,” which implies that SEC and AICPA standards are binding.113Professional Standards, Rule 3100 (Pub. Co. Acct. Oversight Bd. 2003). However, in 2003, the PCAOB released a note to PCAOB Rule 3500T, which states that the “[PCAOB’s] Interim Independence Standards do not supersede the [SEC’s] auditor independence rules” and that in situations when the SEC Rules are more or less restrictive than the PCAOB rules, the more restrictive rule is to be followed.114Professional Standards, Rule 3500T (Pub. Co. Acct. Oversight Bd. 2003). Additionally, the PCAOB explicitly requires that accounting firms and their employees comply with AICPA Code of Professional Conduct Rules 101 and 102, including any interpretations and rulings under these rules.115Id. Rule 3500T(a), (b)(1). Further analysis of the AICPA rules will be provided in Section III.C.
The PCAOB independence rules extend beyond the SEC independence rules in three areas: (1) limiting auditors’ ability to provide audit clients with tax services,116Professional Standards, Rule 3522 (Pub. Co. Acct. Oversight Bd. 2006); Professional Standards, Rule 3523 (Pub. Co. Acct. Oversight Bd. 2006). (2) requiring auditors to communicate with the client Board’s audit committee about certain independence-related matters,117Professional Standards, Rule 3524 (Pub. Co. Acct. Oversight Bd. 2006); Professional Standards, Rule 3525 (Pub. Co. Acct. Oversight Bd. 2007); Professional Standards, Rule 3526 (Pub. Co. Acct. Oversight Bd. 2008). and (3) requiring auditors to submit a form to the PCAOB that summarizes audit hours by partner (“Form AP”).118Professional Standards, Rule 3211(a) (Pub. Co. Acct. Oversight Bd. 2016).
1. Tax Services
Generally, the PCAOB rules extend beyond the SEC rules by maintaining that an accounting firm is not independent of its audit client if the firm provides “marketing, planning, or opining in favor of the tax treatment of” confidential transactions or aggressive tax position transactions, or if the firm provides “tax service to a person in a financial reporting oversight role” at the client, which generally prohibits providing tax advice or preparation services to management and finance employees of the audit client.119Professional Standards, Rule 3522 (Pub. Co. Acct. Oversight Bd. 2006); Id. Rule 3523.
2. Audit Committee Communication
Further, the PCAOB goes beyond the SEC rules and requires accounting firms to seek audit committee pre-approval before the firms perform any permissible tax service or non-audit service related to internal controls.120Id. Rule 3524; Professional Standards, Rule 3525 (Pub. Co. Acct. Oversight Bd. 2007); Professional Standards, Rule 3526 (Pub. Co. Acct. Oversight Bd. 2008). Part of the intent of these rules is to present to the audit committee the ways that it might impair the accounting firm’s independence to provide both tax and non-audit services to the client.121See Professional Standards, Rule 3524(b) (Pub. Co. Acct. Oversight Bd. 2006); Professional Standards, Rule 3525(b) (Pub. Co. Acct. Oversight Bd. 2007). In line with this requirement, accounting firms are required to describe to the audit committees of their clients “all relationships between the registered public accounting firm . . . and the audit client or persons in financial reporting oversight roles at the potential audit client that . . . may reasonably be thought to bear on independence” both prior to beginning the audit and annually thereafter, including an annual affirmation of independence to the audit committee, which essentially requires accounting firms to disclose personal relationships that may impair independence.122Professional Standards, Rule 3526(a)(1) (Pub. Co. Acct. Oversight Bd. 2008); Professional Standards, Rule 3526(b)(2)–(3) (Pub. Co. Acct. Oversight Bd. 2008).
3. Form AP Filing Requirements
Finally, the PCAOB requires that accounting firms file a “Form AP” with the PCAOB for each audit report it issues for a client.123Professional Standards, Rule 3211 (Pub. Co. Acct. Oversight Bd. 2016). The Form AP lists the lead engagement partner for the audit and notes the hours they have completed on the audit engagement, with the goal of providing users of financial statements information about the “independence of the specific individuals and firms that participate in the audit.”124Pub. Co. Acct. Oversight Bd., Supplemental Request for Comment: Rules to Require Disclosure of Certain Audit Participants on a New PCAOB Form A2–2 (2015), https://pcaob-assets.azureedge.net/pcaob-dev/docs/default-source/rulemaking/docket029/release_2015_
004.pdf [https://perma.cc/U3D4-2X49] .
D. AICPA Standards
The AICPA promulgates what is the most rigorous standard of independence requirements for auditors, when compared to the SEC and PCOAB. The AICPA Code of Professional Conduct begins by setting forth a single independence rule: “A member in public practice shall be independent in the performance of professional services as required by standards promulgated by bodies designated by [the AICPA Governing] Council.”125Am. Inst. Certified Pub. Accts., Code of Professional Conduct, Rule 1.200.001.01. Stemming from this rule, the AICPA has then set forth hundreds of interpretations,126Id. Rule 1.200.001–1.298.010. which are binding on accounting firms and accountants performing “attest engagements,” which are any services to a client requiring independence from the client, including audits.127Am. Inst. Certified Pub. Accts., Plain English Guide to Independence 2 (2021), https://us.aicpa.org/content/dam/aicpa/interestareas/professionalethics/resources/tools/downloadabledocuments/plain-english-guide.pdf [https://perma.cc/N4AS-E3NG].
Given the complexity of the interpretations to the independence rule and the many scenarios effecting independence that they address, it would be impractical to describe all interpretations within this paper. However, to summarize, the interpretations to the independence rule cover a variety of situations regarding the independence of individual accountants, such as how to handle the employment of a family member at an audit client128Am. Inst. Certified Pub. Accts., Code of Professional Conduct, Rule 1.270.020.01–.03. and how to address whether an individual accountant’s financial investments in a client’s securities impair their independence.129Id. Rule 1.240.010.01–.03. The interpretations also cover more complex situations regarding the independence of accounting firms as a whole, such as how to maintain independence in situations in which a nonclient acquires a current client130Id. Rule 1.224.010.05–.08. or how “network firms” with multiple offices should each remain independent of each other’s clients.131Id. Rule 1.220.010.04.
In the absence of any relevant interpretation, accounting firms and accountants are expected to apply the AICPA’s “Conceptual Framework for Independence.”132Id. Rule 1.200.005.01. The Conceptual Framework for Independence requires that accountants evaluate whether a particular “relationship or circumstance” would lead a reasonable person “to conclude that there is a threat to . . . independence . . . that is not at an acceptable level.”133Id. Rule 1.210.010.01. The Conceptual Framework then lists potential “threats” to independence, such as holding an adverse interest from the client, advocating for the client, familiarity with the client, auditor participation in management of the client, self-interest, self-review, and undue influence by the client or a third party.134Id. Rule 1.210.010.10–.18. Following the potential threats, the Conceptual Framework identifies “safeguards” which can reduce threats to an acceptable level that will ensure independence, such as external review, competency requirements for professional licensing, analysis of an accounting firm’s revenue dependence on one client, and accounting firm policies for engagement quality control, such as external review.135Id. Rule 1.000.010.21–.23. By ensuring threats are low or nonexistent or by balancing them with safeguards, accounting firms and accountants can ensure compliance with independence standards under the Conceptual Framework in situations in which there is no authoritative interpretation set forth by the AICPA.136Id. Rule 1.210.010.07.
The AICPA also has a senior committee, the Auditing Standards Board, that sets forth Generally Accepted Auditing Standards (“GAAS”).137Clarified Statements on Auditing Standards, Am. Inst. Certified Pub. Accts. (Nov. 9, 2022), https://us.aicpa.org/research/standards/auditattest/clarifiedsas.html [https://perma.cc/7DN3-Q2CS]. GAAS sets forth specific testing requirements and procedures for auditors as they undertake audit engagements for clients.138Id. In addition to these audit testing requirements—which are largely technical in nature and outside of the scope of this paper—GAAS also sets for ethical requirements relating to audits of financial statements, stating that an “auditor must be independent of [a client] when performing an engagement in accordance with GAAS.”139Codification of Statements on Auditing Standards, AU-C § 200.15 (Am. Inst. of Certified Pub. Accts. 2012). GAAS then defers to the Code of Professional Conduct’s Conceptual Framework, which was discussed previously.140Id. § 200.17 (Am. Inst. of Certified Pub. Accts. 2012). GAAS is often referenced more frequently than the Code of Professional Conduct, as will be discussed in Part IV, because GAAS includes not only ethical requirements for auditors, but substantive guidance for how audits are to be conducted in practice.141Id.
Overall, there is significant overlap between the regulations set forth by the AICPA and the SEC and PCAOB.142See Plain English Guide to Independence, supra note 127. The AICPA standards set forth detailed guidance for accounting firms to ensure they comply with the broader standards set forth by the SEC and PCAOB. For example, while the SEC and PCAOB rules prevent auditors from receiving contingent fees from their clients, the AICPA rules state that same proposition and provide guidance that states contingent fees include finder’s fees, fees based on cost-savings achieved by the client, and exclude fees based on the results of judicial proceedings in tax matters.143Id. at 42. This level of detailed guidance means that practitioners often consult the AICPA standards, as they set forth a more restrictive set of guidelines and also a more informative set of interpretations that can be applied to specific circumstances. This delegation of substantive regulation to the private industry organization—AICPA—is also consistent with other self-regulatory models.
E. Harmonization Efforts
In October 2020, the SEC issued updates to the auditor independence rules set forth in SEC Independence Rule 2-01.144Press Release, U.S. Secs. & Exch. Comm’n, SEC Updates Auditor Independence Rules (Oct. 16, 2020), https://www.sec.gov/news/press-release/2020-261 [https://perma.cc/N4AS-E3NG]. These updates covered a variety of miscellaneous matters in the SEC independence rules, including refining the definition of affiliates of audit clients, amending the definition of an “audit and professional engagement period,” excluding some student loans from causing independence violations, and addressing inadvertent violations of the independence rules due to mergers and acquisitions, among other matters.145Id.
As a result, stakeholders raised concerns that the PCAOB rules, particularly those related to affiliates of audit clients, such as subsidiaries, were no longer consistent with the SEC independence rules.146Pub. Co. Acct. Oversight Bd., PCAOB Release No. 2020-003, Amendments to PCAOB Interim Independence Standards and PCAOB Rules to Align with Amendments to Rule 2-01 of Regulation S-X 3 (Nov. 19, 2020), https://pcaob-assets.azureedge.net/pcaob-dev/docs/default-source/rulemaking/docket-047/2020-003-independence-final-rule.pdf [https://perma.cc/NW28-LB49]. In response, and to “provide greater regulatory certainty,” the PCAOB amended its rules to align with the SEC independence rule changes.147Id. Additionally, several of the PCAOB rules that needed realignment with the new SEC rules were those that the PCAOB adopted directly from the AICPA or had interpreted based on the AICPA rules.148Id. at 10. As a result, the AICPA issued a temporary policy statement as a stop-gap measure that stated to accounting firms and accountants that they would be considered in compliance with the AICPA Code of Professional Conduct if they complied with the updated SEC independence rules.149Temporary Policy Statement Related to Amendments of Rule 2-01 of Regulation S-X 4, Am. Inst. Certified Pub. Accts. (Dec. 21, 2020), https://us.aicpa.org/content/dam/aicpa/interestareas/
professionalethics/community/exposuredrafts/downloadabledocuments/2021/2021JanuaryOfficialReleaseTemporaryPolicyStatement.pdf [https://perma.cc/BJ8J-RRTT]. Soon thereafter, the AICPA put forth a proposal to change its rules and definitions to align with the SEC and PCAOB changes.150Am. Inst. Certified Pub. Accts., Proposed Revised Interpretations and Definition of Loans, Acquisitions, and Other Transactions 2–3 (2021), https://us.aicpa.org/content/dam/
aicpa/interestareas/professionalethics/community/exposuredrafts/downloadabledocuments/2021/2021-october-sec-loans-convergence.pdf [https://perma.cc/PR6C-9RJJ]. This proposal has not been adopted as of the time of this paper, but it seems likely that the AICPA will bring its standards into alignment with the current SEC and PCAOB independence rules.
Overall, this amendment waterfall that began with the SEC proposing changes in October 2020 that were then adopted by the PCAOB, and which still have not been adopted by the AICPA two years later, shows that the regulatory framework for auditor independence remains entangled. This entanglement may be occurring because the Sarbanes-Oxley Act created the PCAOB, which is allowed to pass audit regulations subject to the oversight of the SEC; and the Sarbanes-Oxley Act also allowed the SEC to become more involved in rule-setting for auditors, which had previously been handled entirely by the AICPA.15115 U.S.C. §§ 7211(a), 7233(a). While some argue that harmonization between these three entities is a worthy goal to disentangle regulations that are not consistent between the three entities,152See William D. Duhnke, Statement on Amendments to PCAOB Interim Independence Standards to Align with Amendments to Rule 2-01 of Regulation S-X, Pub. Co. Acct. Oversight Bd. (Nov. 19, 2020), https://pcaobus.org/news-events/speeches/speech-detail/statement-on-amendments-to-pcaob-interim-independence-standards-to-align-with-amendments-to-rule-2-01-of-regulation-s-x [https:
//perma.cc/7FDK-CWTT]. one might also consider whether harmonization is the answer, or rather whether simplification is a better goal, to avoid having to involve three regulatory agencies in rule changes, in order to ensure clear standards for accounting firms, clients, and stakeholders in the market. The following section of the paper will explore whether one regulatory entity is dominant over the others, and whether this agency should be favored for simplification that centers around focusing auditor independence on this agency and its rules exclusively, rather than the standards set across all three entities.
IV. CASE STUDY
As discussed, the following case study will assess published federal court opinions in which auditor independence was at issue in a civil litigation to determine whether SEC, PCAOB, or AICPA standards were used in the courts’ reasoning.153For a full listing of cases reviewed, see infra APPENDIX. While a study of administrative law decisions from the SEC was considered, federal court decisions were deemed to be a more relevant indicator of which body of regulation is used in deciding civil matters because SEC administrative law decisions rely almost exclusively on a single, broad rule, SEC Rule 102(e)(1)(ii), which “censure[s] a person . . . after finding that a person engaged in improper professional conduct.”154See, e.g., Order Instituting Public Administrative and Cease and Desist Proceedings, In the Matter of Alan C. Greenwell, CPA, U.S. Secs. & Exch. Comm’n (Dec. 10, 2021), https://www.sec.gov/litigation/admin/2021/34-93750.pdf [https://perma.cc/44M7-22PR].
There were fifteen cases decided by federal courts in which auditor independence was at issue in civil litigation, and which were used to comprise the population for this case study.155For a full listing of cases reviewed, see infra APPENDIX. The population of cases includes only cases in which auditors were performing financial statement audits, and therefore excludes government and internal audit services, as these non-financial statement audits are typically not part of the debate over auditor independence because they involve different monetary incentives, risks for auditors and investors, and different auditing standards. Additionally, cases were only observed after May 6, 2003, which was the effective date of the Sarbanes-Oxley legislation, given that Sarbanes Oxley completely changed the landscape of auditor independence, giving the SEC broad authority to issue rulemaking in this area and effectively creating the PCAOB.156Strengthening the Commission’s Requirements Regarding Auditor Independence, Release No. 33-8183, 68 Fed. Reg. 6005 (codified as 17 C.F.R. §§ 210, 240, 249, 274 (2003)). Finally, cases that relied on state regulations over auditor licensing and independence were excluded, as they do not address the relevant issue of federal regulatory structure.157There was only a single case that relied on state professional licensing requirements, Rahl v. Bande, 328 B.R. 387 (S.D.N.Y. 2005). Given that this analysis is focused on federal regulation and this case is an outlier in that it is the only federal case that relies on state professional licensing regulation in its reasoning, it has been excluded from the population.
This case study aims to examine which body of regulatory law federal courts rely on in making determinations over whether auditors have breached their independence obligations. Each of the AICPA, SEC, and PCAOB have their own enforcement mechanisms to sanction auditors who do not adhere to independence requirements, and each enforcement division uses their own regulation as well as occasionally relies on the regulation of the other entities to sanction auditors.158See Professional Standards, Rules 50005501 (Pub. Co. Acct. Oversight Bd. 2004); Ethics Enforcement, Am. Inst. Certified Pub. Accts., https://us.aicpa.org/interestareas/
professionalethics/resources/ethicsenforcement [https://perma.cc/YDV6-X4S8]; Accounting and Auditing Enforcement Releases, U.S. Secs. & Exch. Comm’n, https://www.sec.gov/
divisions/enforce/friactions.htm [https://perma.cc/YDV6-X4S8]. However, the civil courts do not have a requirement to adhere to the regulations of any particular standard-setter under the requirements of Sarbanes-Oxley or the Securities and Exchange Act of 1934. Given this lack of constraints, the standard used by the federal courts in determining independence violations has not been examined and is ripe for analysis to determine whether one set of standards (that is, those of the AICPA, SEC, or PCAOB) is preferred over the others. Therefore, this study will examine all fifteen federal court decisions to determine what standards have been used by the courts in the area of auditor independence as well as whether the result was in favor of the auditor or against the auditor in each scenario.
There are three major areas in which auditor independence has been examined by the federal courts. First, individuals who have been sanctioned by the SEC for violations of auditor independence standards can appeal to the federal courts for a review of the SEC’s decisions under a broad “abuse of discretion” standard to argue that the agency acted arbitrarily and capriciously in a way that requires the SEC’s decision to be overturned under 5 U.S.C. 706(2)(A).159Ponce v. U.S. Secs. & Exch. Comm’n, 345 F.3d 722, 728–29 (9th Cir. 2003).
Next, auditor independence is frequently at issue in Securities and Exchange Act Section 10(b) and SEC Rule 10b-5 claims, which are often brought as class-actions.160See, e.g., In re WorldCom, Inc. Sec. Litig., 352 F. Supp. 2d 472, 497 (S.D.N.Y. 2005). To prevail on these claims, plaintiffs must prove scienter, meaning that the defendant employed a “device, scheme, or artifice to defraud,” in addition to proving the elements of a material misstatement or omission, on which the plaintiff relied, and was the proximate cause of the plaintiff’s loss.16117 C.F.R. § 240.10b-5(a)–(c); 4 James D. Cox & Thomas Lee Hazen, Treatise on the Law of Corporations § 27:19 (3d ed. 2022). Plaintiffs often allege that auditors’ violations of independence rules are evidence of scienter for purposes of satisfying this element to bring a successful 10(b) or 10b-5 claim.162See, e.g., In re WorldCom, Inc., 352 F. Supp. 2d at 497. However, this practice has been complicated by the heightened pleading requirements for Section 10(b) and Rule 10b-5 claims established in the Private Securities Litigation Reform Act of 1995 (“PSLRA”), which was passed in part to reduce the number of non-meritorious securities class action claims raised by plaintiffs and requires that plaintiffs “state with particularity facts giving rise to a strong inference that the defendant acted with the required state of mind.”16315 U.S.C. § 78u-4(b). The PSLRA has resulted in different pleading standards for scienter among and within circuits, however, many courts find “scienter [is] plead with particularity by facts supporting a ‘motive or opportunity’ to commit fraud.” 164Cox & Hazen, supra note 161. As will be discussed in Section IV.B, this heightened pleading standard has reduced the circumstances in which courts have viewed violations of auditor independence rules to be sufficient to show scienter.
Finally, plaintiffs also bring state law claims—including negligent misrepresentation, professional negligence, and fraud suits—against auditors who have violated auditor independence standards, using the alleged violations of these standards as de facto evidence of a breach of duty.165See, e.g., New Jersey v. Sprint Corp., 314 F. Supp. 2d 1119, 1126, 1134 (D. Kan. 2004); In re Parmalat Sec. Litig., 501 F. Supp. 2d 560, 566 (S.D.N.Y. 2007); Newby v. Enron Corp. (In re Enron Corp. Secs., Derivative & ERISA Litig.), 762 F. Supp. 2d 942, 954 (S.D. Tex. 2010). In one instance, a plaintiff also attempted to bring a state law breach of fiduciary duty claim against an auditor who allegedly did not comply with auditor independence standards.166In re SmarTalk Teleservices, Inc. Secs. Litig., 487 F. Supp. 2d 928, 931 (S.D. Ohio 2007).
Given the heterogeneity of the claims within these cases, this paper examines the cases within these three groups—reviews of SEC administrative decisions, federal securities law claims, and state law tort claims—to identify developments in the case law regarding auditor independence and to examine when courts apply SEC, PCAOB, or AICPA standards in determining whether there has been an independence violation sufficient to warrant a judgment against auditors.
A. Appeals of SEC Administrative Decisions
In Ponce v. SEC, the Ninth Circuit reviewed an appeal from a decision that the SEC made to bar a plaintiff accountant from practice, and the court acknowledged that as part of the SEC’s decision, the accountant had been held in violation of SEC Independence Rule 102(e)(1)(ii), which means he engaged in “improper professional conduct.”167Ponce v. U.S. Secs. & Exch. Comm’n, 345 F.3d 722, 739 (9th Cir. 2003). In order to determine whether there was truly “improper professional conduct,” the court turned to AICPA standards and ruled that the auditor failed to maintain his independence because he allowed his clients to run up a substantial balance of unpaid fees, which under AICPA guidance, resulted in a presumed lack of independence because the AICPA standards set forth that “independence is considered to be impaired if fees for all professional services rendered for prior years are not collected before the issuance of the member’s report for the current year.”168Id. at 728.
Similarly, in Dearlove v. SEC, the Court of Appeals for the District of Columbia Circuit used the same approach as Ponce, albeit six years after the decision169Dearlove v. U.S. Secs. & Exch. Comm’n, 573 F.3d 801, 804 (D.C. Cir. 2009). and six years after the implementation of Sarbanes-Oxley, including its resulting reform of SEC independence rules and the formation of the PCAOB. In Dearlove, the court concluded that “the appropriate standard of care . . . is supplied by . . . GAAS” when reviewing whether the SEC had abused its discretion in determining that an accountant violated SEC Independence Rule 102(e)(1)(ii) by failing to maintain independence from their audit client.170Id.
Ponce and Dearlove are indicators of how the federal courts have given credibility to the AICPA standards, including GAAS, in determining whether there has been a violation of auditor independence. The court’s opinion in Dearlove references SEC Independence Rule 102(e)(1)(ii), but it does so only to note that the SEC rule states “improper professional conduct” will warrant sanctions, before deferring to the AICPA GAAS standards to assess what improper conduct is.171Id. at 803–804. The court also stated that “the SEC need not establish a standard of care separate from the GAAS in order to give meaning to” what SEC Independence Rule 102(e)(1)(iv)(B)(2) describes as “unreasonable conduct,” showing further deference to AICPA standards.172Id. at 805–06. The fact that this decision came more than six years after the implementation of Sarbanes-Oxley, when the court had the ability to reference the updated SEC independence rules or PCAOB rules, but chose not to, shows even more significant reliance on the standards set by the AICPA.
B. Determinations of Scienter in Securities Claims
Similarly, in In re WorldCom, Inc. Securities Litigation, defendants moved for summary judgment on the matter of whether Arthur Andersen, the auditors at the helm of both the Enron, and in this case, WorldCom accounting scandals, had the requisite scienter to be in violation of Section 10(b) of the Securities and Exchange Act and SEC Rule 10b-5 because they allegedly recklessly issued false audit opinions.173In re WorldCom, Inc., 352 F. Supp. 2d at 494–95. The plaintiff alleged that violations of the AICPA’s GAAS were sufficient to prove scienter, even under the heightened pleading standards required by the PSLRA, which required the plaintiffs to plead recklessness in order to avoid their claim being dismissed.174Id. at 495, 497. The court recognized the importance of violations of GAAS in proving scienter, but ultimately denied summary judgment due to conflicting expert reports on whether GAAS was violated.175Id. at 499–500. Although the claim survived the motion for summary judgment due to unresolved questions of fact, this case was another high profile example of the federal courts giving credence to AICPA standards in determining whether there was auditor wrongdoing.176Id.
In re WorldCom, Inc. Securities Litigation also included a Securities Act claim, in which the plaintiffs alleged that Arthur Andersen was in violation of Section 11 of the Securities Act, which states that a “preparing or certifying accountant . . . may be liable ‘if any part of the registration statement . . . contained an untrue statement of a material fact.’ ”177Id. at 490–91 (quoting 15 U.S.C. § 77k(a)). Arthur Andersen attempted to assert a due diligence defense, in which it claimed that it “had, after reasonable investigation, reasonable ground to believe and did believe, at the time . . . the registration statement became effective, that the statements therein were true,” and then moved for summary judgment.178Id. at 491–92. In deciding whether summary judgment was appropriate on this issue, the court issued an even stronger affirmance of the relevance of AICPA standards, concluding that a “reasonable investigation” that would support a due diligence defense, like that raised by Arthur Andersen, must be a “GAAS-compliant audit.”179Id. at 492. Because the plaintiff presented sufficient evidence to rebut the argument that the audit was “GAAS-compliant,” Arthur Andersen’s motion for summary judgment was denied. While this second issue is not directly related to auditor independence rules, it shows the courts’ general deference to the AICPA’s GAAS.
However, not all courts have agreed with the Southern District of New York’s decision in WorldCom, which may be in part due to differing interpretations of the heightened pleading requirements of the PSLRA. In In re Cardinal Health, Inc. Securities Litigations, the Southern District Court of Ohio ruled that Ernst & Young’s failure to adhere to the AICPA’s GAAS requirements for auditor independence did not establish the requisite scienter for a plaintiff’s claim to survive Ernst & Young’s motion to dismiss on a Rule 10b-5 claim.180In re Cardinal Health, Inc. Sec. Litigs., 426 F. Supp. 2d 688, 697–98 (S.D. Ohio 2006). The Court reasoned that while recklessness is generally sufficient to meet the pleading standard under the PSLRA, claims brought against auditors were subject to the even more heightened pleading standard of “a mental state ‘so culpable that it approximate[s] an actual intent to aid in the fraud being perpetrated by the audited company,’ ” which was not met in this case based merely on the alleged failure of Ernst & Young to adhere to AICPA GAAS requirements.181Id. at 763 (quoting Fidel v. Farley, 392 F.3d 220, 227 (6th Cir. 2004)) (internal quotations omitted).
Further, the court opined that an auditor’s past sanctions in SEC administrative proceedings were insufficient to prove scienter.182Id. at 778–79. In this case, the court also noted that SEC administrative decisions were not dispositive in determining scienter for Rule 10b-5 claims, perhaps suggesting that judicial interpretation of independence violations supersedes determinations by regulatory bodies.183See id. This is in line with existing administrative law doctrines that do not require federal courts to defer to the SEC’s interpretations of the Exchange Act.184U.S. Secs. & Exch. Comm’n v. McCarthy, 322 F.3d 650, 654 (9th Cir. 2003).
Similarly, in In re Royal Ahold N.V. Securities and ERISA Litigation, the United States District Court for the District of Maryland ruled that alleged violations of AICPA’s GAAS standards on independence—in which the only allegations from the plaintiff were that auditor independence was impaired due to the auditor providing audit and non-audit services—were not sufficient to establish scienter for a Rule 10b-5 claim against an auditor.185In re Royal Ahold N.V. Sec. & ERISA Litig., 351 F. Supp. 2d 334, 390–92 (D. Md. 2004). However, the court did note that violations of AICPA’s GAAS can be sufficient to plead scienter when they are coupled with allegations that show that “the nature of the violations of those violations was such that scienter is properly inferred.”186Id. at 386. Likewise, in New Jersey v. Sprint Corp., a group of class action plaintiffs brought Rule 10b-5 claims against Sprint Corporation and Ernst & Young for filing false and misleading registration statements, prospectus supplements, and proxy statements that did not disclose that the company had considered dismissing their auditor, Ernst & Young, and that there were conflicts between executives at the company and the auditor, which resulted in auditor independence violations under AICPA’s GAAS.187New Jersey v. Sprint Corp., 314 F. Supp. 2d 1119, 1126, 1123, 1126, 1134 (D. Kan. 2004). The court relied on the AICPA’s GAAS to assess independence, noting that the plaintiffs did not plead sufficient facts to show that Ernst & Young lacked the independence in “mental attitude” required by GAAS, and even if sufficient facts were pled to show that Ernst & Young violated GAAS, this would not be sufficient under the PSLRA to establish scienter because the standard for scienter is recklessness, that is “so obvious that the defendant must have been aware of it” which goes beyond a mere violation of GAAS. 188Id. at 1134–35, 1147–48. Therefore, the motion to dismiss was granted in favor of Ernst & Young.189Id. at 1149.
While the varied interpretations in different jurisdictions over whether violations of the AICPA’s GAAS standards is sufficient to plead scienter persists, some courts have ruled that merely “articulating violations of GAAS and GAAP alone is insufficient” to satisfy the element of scienter under the PSLRA’s heightened pleading requirements and instead imposed additional requirements to plead scienter through case law.190Grand Lodge of Pa. v. Peters, 550 F. Supp. 2d 1363, 1372 (M.D. Fla. 2008). For example, the court in Grand Lodge of Pennsylvania v. Peters determined that in order to prove scienter, violations of GAAS must be accompanied by “red flags” that would put a reasonable auditor on notice that their client was committing fraud.191Id. at 1372. Therefore, the plaintiff’s allegations in this case that the auditor was conflicted by providing consulting services to the client in violation of GAAS were insufficient to establish scienter for a Rule 10b-5 claim.192Id at 1372–73. Additionally, the court in In re Williams Securities Litigation ruled that “GAAS violations must be coupled with evidence that the violations were the result of the auditor’s fraudulent intent to mislead investors,” in order to have a sufficient pleading of scienter.193In re Williams Sec. Litig., 496 F. Supp. 2d 1195, 1289 (N.D. Okla. 2007). This supports the idea that some courts grant credibility to the AICPA standards, however, they impose additional burdens on plaintiffs that are developed through case law.
This case law has developed in the years since the passage of the PSLRA. The Ninth Circuit Court of Appeals summarized the development of the additional requirements to prove scienter, other than GAAS violations, in New Mexico State Investment Council v. Ernst & Young LLP.194N.M. State Inv. Council v. Ernst & Young LLP, 641 F.3d 1089, 1097–98 (9th Cir. 2011). The court ruled that failing to “maintain independence in mental attitude during an audit,” in violation of GAAS and PCAOB standards, is not sufficient to prove scienter.195Id. at 1097. Rather, there should be “red flags” that a reasonable auditor would have investigated as well as a showing that there were violations that amount to more than “alleging a poor audit.”196Id. at 1098. New Mexico State Investment Council indicates how the courts’ reliance solely on AICPA standards has lessened slightly over the years, as the burden to meet additional case law requirements for scienter has increased due to the passage of the PSLRA and its heighted pleading requirements, which require that plaintiffs “state with particularity facts giving rise to a strong inference that the defendant acted with the required state of mind.”19715 U.S.C. § 78u-4(b)(2)(A).
While the discussion above indicates that courts have largely relied on violations of AICPA’s GAAS and case law requirements in determining whether auditor independence violations are sufficient to show scienter, other courts have discussed Sarbanes-Oxley in determining whether an auditor independence violation is sufficient to show scienter as an element of a Rule 10b-5 violation.198Brody v. Stone & Webster, Inc. (In re Stone & Webster, Inc., Sec. Litig.), 414 F.3d 187, 215 (1st Cir. 2005). In Brody v. Stone Webster, Inc., the First Circuit Court of Appeals examined whether scienter could be presumed on the part of PwC in connection with a 10b-5 claim because PwC allegedly turned a blind eye toward accounting irregularities to protect its accounting and consulting revenue from a client.199Id. The court determined that “turn[ing] a bind [sic] eye” to misleading accounting for a “profit motive” may have been a rationale for the passage of Sarbanes Oxley, but it is not enough in itself to prove scienter sufficient for a valid Rule 10b-5 claim under the PSLRA without specific allegations that the auditor ignored “red-flags” that were signs of fraud.200Id.
Courts have also been reluctant to find that scienter has been sufficiently pled in accordance with the PSLRA when plaintiffs allege auditor independence violations on the basis of general policy arguments against auditors depending on fees from clients.201See In re ArthroCare Corp. Secs. Litig., 726 F. Supp. 2d 696, 733 (W.D. Tex. 2010). In In re ArthoCare Corporation Securities Litigation, plaintiffs alleged that PwC was not independent in its audit because the firm had a longstanding relationship with its client and was dependent on the client’s audit fees.202Id. The United States District Court for the Western District of Texas found that general allegations based on a perceived lack of independence or violations of GAAS due to fee dependence or long-standing relationships, which are allegedly against public policy, are not sufficient to establish scienter on the part of auditors under the PSLRA.203Id. Similarly, in Ley v. Visteon Corporation, the Sixth Circuit determined that an allegation that Ernst & Young was not independent during an audit because it sought to preserve revenue from a client by not pointing out the client’s alleged accounting irregularities was not sufficient to plead scienter on the part of the auditors under the PSLRA’s requirements because it was merely an allegation of a “motive.”204Ley v. Visteon Corp., 543 F.3d 801, 815 (6th Cir. 2008).
On the whole, these cases show a broad trend of the courts giving credibility to the AICPA’s standards, as compared to SEC or PCAOB standards. As the case law has developed, violation of AICPA standards has been shown as one of the avenues plaintiffs can use to establish scienter for Securities and Exchange Act Section 10(b) and SEC Rule 10b-5 claims, when additional case law requirements are met. Notably, neither violations of the PCAOB independence rules nor the SEC independence rules have been used by the federal courts to assess whether there has been scienter for the purposes of a Section 10(b) or Rule 10b-5 claim that has been sufficiently pled in accordance with the PSLRA. Instead, the courts have relied on the AICPA rules as one factor for establishing scienter, and then have developed additional case law standards, such as finding “red flags” and alleging more than a poor audit, in order for plaintiffs to prevail on Section 10(b) and Rule 10b-5 claims against auditors. This focus on the AICPA rules is aligned with the deference given by the courts to AICPA standards in appeals of SEC enforcement decisions, discussed in Section IV.A.
C. Fraud, Negligence, and Other State Law Causes of Action
In state law actions for fraud, courts have required a heightened standard for liability that extends beyond a violation of the AICPA’s GAAS independence standards in order to hold auditors liable. For example, in In re Parmalat Securities Litigation, plaintiffs pled that Deloitte aided an audit client with common law fraud.205In re Parmalat Sec. Litig., 501 F. Supp. 2d 560, 566 (S.D.N.Y. 2007). Given that this was a state law cause of action, the court applied the New York common law requirements for fraud, requiring the plaintiff to prove “that the defendant (1) made a material, false statement; (2) knowing that the representation was false; (3) acting with intent to defraud; and that plaintiff (4) reasonably relied on the false representation; and (5) suffered damage proximately caused by the defendant’s actions.”206Morris v. Castle Rock Ent., Inc., 246 F. Supp. 2d 290, 296 (S.D.N.Y. 2003). The court focused primarily on the intent to defraud and ruled that an auditor’s violation of GAAS does not by itself show intent, however “an auditor’s decision to take on non-audit work that threatens to compromise its duty of independence gives rise to a strong inference of . . . [fraudulent] intent . . . when . . . the auditor has a ‘direct stake’ in the alleged fraud.”207In re Parmalat, 501 F. Supp. 2d at 583–84. This heightened standard to show the intent element for common law fraud in New York, which includes not only a GAAS violation but also an auditor’s direct stake in the fraud, is in some ways analogous to the heightened standard to prove scienter on the part of auditors, as discussed in Section IV.B, because in both instances the courts have recognized a violation of the AICPA’s GAAS standards as helpful in showing intent, in addition to adding case law requirements to plead a valid claim.
However, some courts have not found it necessary to analyze auditor independence regulation when determining whether auditors were negligent in their review of their clients’ financial statements. In a consolidated action, insurance companies brought state law claims against Enron, Enron management, and Enron’s auditors, Arthur Andersen, in the wake of the Enron accounting scandal and resulting collapse.208Newby v. Enron Corp. (In re Enron Corp. Secs., Derivative & ERISA Litig.), 762 F. Supp. 2d 942, 954–55 (S.D. Tex. 2010). The plaintiffs specifically alleged that Arthur Andersen made negligent misrepresentations to investors and committed common law fraud in violation of Texas law.209Id. at 1021–22. In connection with the negligent misrepresentation claim, the plaintiffs were required to show (1) the defendant provided information (2) that was false, (3) the defendant did not exercise reasonable care or competence in obtaining or communicating the information, (4) the plaintiff justifiably relied on the information, and (5) the plaintiff suffered loss by justifiably relying on the information.210Id. at 980. In connection with the common law fraud claim under Texas law, the plaintiffs were required to show “(1) a material representation was made; (2) the representation was false; (3) when the representation was made, the speaker knew it was false or made it recklessly . . . (4) the representation was made with the intention that it be acted upon by the other party; (5) the party actually and justifiably acted in reliance upon the representation; and (6) the party suffered injury.”211Id. at 966. While the plaintiffs alleged that Arthur Andersen’s violations of AICPA’s GAAS standards showed the firm lacked independence, which they claimed was sufficient to show that Arthur Andersen did not meet the standard of care and competence as required by the negligent misrepresentation claim,212Id. at 1004. and that the violation of GAAS showed that Arthur Andersen made false representations about its independence sufficient for a common law fraud claim,213Id. at 1003–04. the court did not reach these issues, instead dismissing both claims because the plaintiffs could not show they relied on Arthur Andersen’s representations.214Id. at 1021–22.
Another area in which courts have assessed whether auditor independence gives rise to liability is in the area of state law claims for breach of fiduciary duties. In In re SmarTalk Teleservices, Inc. Securities Litigation, a trustee argued that PwC exceeded its normal role as an independent auditor, as defined by the AICPA’s GAAS, and therefore PwC owed a trustee fiduciary duties that the firm then breached by providing inadequate accounting and audit services.215In re SmarTalk Teleservices, Inc. Secs. Litig., 487 F. Supp. 2d 928, 931 (S.D. Ohio 2007). While the court did not reach the issue of whether there was a valid cause of action for breach of fiduciary duty, the court determined that whether PwC violated GAAS standards for independence was a genuine issue of material fact and denied the auditor’s motion for summary judgment on the breach of fiduciary duty claim, providing yet another example of the federal courts giving credence to the AICPA standards in determining auditor liability.216Id. at 935.
V. IMPLICATIONS OF STUDY ON HARMONIZATION OR SIMPLIFICATION OBJECTIVES
In all three areas of the law covered by the case study, including appeals of SEC enforcement decisions, federal securities claims, and state law claims, the federal courts have preferred to use the AICPA standards, including GAAS, in their decision-making over auditor independence. In many instances when AICPA standards were used in federal securities actions, case law requirements were also supplied to determine whether there was sufficient evidence presented to plead scienter. But, notably, there were no cases found that apply PCAOB or SEC auditor independence rules.
On the whole, this paper does not aim to provide a normative proposal for auditor independence regulation. However, the case study presented in Part IV can shed light on the process of harmonization, which, as discussed in Section III.E, involves the SEC, PCAOB, and AICPA each having to change their rules regarding auditor independence each time one of the other entities changes their independence rules, in order to ensure that the rules are not in conflict. Given that the case study indicates that AICPA standards are preferred by the federal courts, along with case law, in determining whether auditor independence has been violated, there is an argument to be made that the power to regulate auditor independence should be simplified into one regulatory framework run by a single entity—the AICPA. Under this proposal of “simplification,” the regulations set by each entity would not need to be harmonized each time one entity makes a change in auditor independence rules. Rather, given that the federal courts rely on AICPA standards, the substantive rule-making authority would be given to the AICPA alone. This is because the current framework has two entities, the SEC and PCAOB, whose frameworks are rarely applied in the federal courts or outside of internal enforcement actions and investigations.
As discussed in Part III, the AICPA, PCAOB, and SEC are involved in a self-regulatory model, in which the SEC provides oversight over the PCAOB, and the SEC and PCAOB have concurrent jurisdiction to set auditor independence standards as a federal regulatory agency and as a non-profit corporation subject to the oversight of the SEC, respectively. In this self-regulatory model, the SEC also provides oversight over the AICPA, which is a private industry organization run by accountants and which sets substantive auditor independence regulation. This self-regulatory model could be simplified to reflect other self-regulatory structures in United States financial services regulation so that rule-making authority is deferred entirely to the AICPA, with oversight by the SEC, in order to simplify the regulatory framework and reduce conflicts between the independence rules set by the AICPA, SEC, and PCAOB. This would be similar to the model between the SEC and FINRA, in which the SEC allows FINRA to set rules for national securities exchanges and provides oversight over that rulemaking, rather than having the SEC set its own detailed regulation over exchanges. Given that the AICPA sets forth the most comprehensive rulemaking and interpretations of auditor independence standards, and the federal courts rely on these standards, simplifying the regulatory framework for auditor independence by deferring to the AICPA seems like a possible solution.
Overall, the relative costs and benefits of self-regulation and the outsourcing of rulemaking to private industry are beyond the scope of this paper; however, the following arguments are meant to provide a brief summary of why simplification of rule-making authority regarding auditor independence regulations by giving authority to the AICPA and oversight to the SEC may or may not be beneficial.
There are valid reasons to argue against simplification that comes in the form of allowing the AICPA to be the only standard-setter in the area of auditor independence. Several critics have pointed out that self-regulation was one of the issues at the forefront of the Enron collapse and resulting scandal, and that the accounting profession needs an external regulator.217U.S. Gov’t Accountability Off., GAO-02-411, The Accounting Profession: Status of Panel on Audit Effectiveness Recommendations to Enhance the Self-Regulatory System 1 (2002); see also Reed Abelson & Jonathan D. Glater, Enron’s Many Strands: The Auditors; Who’s Keeping the Accountants Accountable, N.Y. Times (Jan. 15, 2002), https://www.nytimes.com/
2002/01/15/business/enron-s-collapse-the-auditors-who-s-keeping-the-accountants-accountable.html [https://perma.cc/D6DH-V59V]. However, others have argued that it was not self-regulation, but market failures and misaligned incentives over reputational costs that caused the accounting scandals during the early 2000s.218Coffee, supra note 14, at 1420–21. Further, self-regulatory organizations, such as FINRA, have successfully provided guidance to their respective stakeholders, with some oversight from the SEC, indicating that self-regulatory organizations with some administrative oversight can be successful.219Luis A. Aguilar, The Need for Robust SEC Oversight of SROs, Harv. L. Sch. F. Corp. Governance (May 9, 2013), https://corpgov.law.harvard.edu/2013/05/09/the-need-for-robust-sec-oversight-of-sros [https://perma.cc/D6DH-V59V].
Additionally, critics may argue that the AICPA relies on the SEC and PCAOB enforcement practices in addition to running its own enforcement program,220Ethics Enforcement, supra note 158. and to split up the enforcement and regulation practices could pose problems. However, given that the current system splits the enforcement burden between the SEC, PCAOB, and AICPA, and each uses violations of the other’s regulations to bring sanctions, consolidating the regulations into one body would not have to change this framework.
CONCLUSION
This paper reserves judgment on the relative merits of self-regulation and instead notes that the current regulatory harmonization effort is not the only solution to disentangle the regulatory framework for auditor independence. Instead, this paper poses a new potential solution—simplification—to the problem of unwinding the tangled regulatory framework of auditor independence to promote efficiency in rulemaking and clarity for stakeholder accounting firms, regulators, and clients.
Given that the courts frequently defer to AICPA auditor independence standards—along with case law requirements for pleading federal securities law violations—rather than SEC and PCAOB standards, and having three regulatory frameworks that need to be continuously updated to align with each other is complex and costly, simplification is a worthy goal. However, it is just one solution of many. As the SEC, PCAOB, and AICPA continue to pursue harmonization,221Press Release, U.S. Secs. & Exch. Comm’n, SEC Updates Auditor Independence Rules (Oct. 16, 2020), https://www.sec.gov/news/press-release/2020-261 [https://perma.cc/4Q63-BQEW]. it is worth considering whether other alternative approaches to auditor independence regulation, such as simplification, exist.
APPENDIX
|
Appendix |
||||
|
Case Name and Citation |
Procedural Posture |
Body of Law Applied |
Result in Favor of Auditor? |
|
|
1 |
Ponce v. SEC, 345 F.3d 722 (9th Cir. 2003). |
Appeal of Administrative Decision |
AICPA and SEC |
No |
|
2 |
Dearlove v. SEC, 573 F.3d 801 (D.C. Cir. 2009). |
Appeal of Administrative Decision |
AICPA and SEC |
No |
|
3 |
New Jersey v. Sprint Corp., 314 F. Supp. 2d 1119 (D. Kan. 2004). |
Motion to Dismiss |
AICPA |
Yes |
|
4 |
Newby v. Enron Corp. (In re Enron Corp. Secs., Derivative & ERISA Litig.), 762 F. Supp. 2d 942 (S.D. Tex. 2010). |
Motion to Dismiss |
AICPAa |
Yes |
|
5 |
In re WorldCom, Inc. Sec. Litig., 352 F. Supp. 2d 472 (S.D.N.Y. 2005). |
Motion for Summary Judgment |
AICPA and SEC |
No, on Securities Act Claim. Yes, on SEC Rule 10b-5 claim. |
|
6 |
In re Cardinal Health, Inc. Sec. Litigs., 426 F. Supp. 2d 688 (S.D. Ohio 2006). |
Motion to Dismiss |
AICPA |
Yes |
|
7 |
In re Royal Ahold N.V. Sec. & ERISA Litig., 351 F. Supp. 2d 334 (D. Md. 2004). |
Motion to Dismiss |
AICPA |
Yes |
|
8 |
Brody v. Stone & Webster, Inc. (In re Stone & Webster, Inc., Sec. Litig.), 414 F.3d 187 (1st Cir. 2005). |
Motion to Dismiss |
Sarbanes-Oxley |
Yes |
|
9 |
Ley v. Visteon Corp., 543 F.3d 801 (6th Cir. 2008). |
Motion to Dismiss |
AICPA |
Yes |
|
10 |
Grand Lodge of PA v. Peters, 550 F. Supp. 2d 1363 (M.D. Fla. 2008).
|
Motion to Dismiss |
AICPA |
Yes |
|
11 |
In re Williams Sec. Litig., 496 F. Supp. 2d 1195 (N.D. Okla. 2007). |
Motion for Summary Judgment |
AICPA |
Yes |
|
12 |
N.M. State Inv. Council v. Ernst & Young LLP, 641 F.3d 1089 (9th Cir. 2011). |
Motion for Summary Judgment |
AICPA |
Yes |
|
13 |
In re Parmalat Sec. Litig., 501 F. Supp. 2d 560 (S.D.N.Y. 2007). |
Motion to Dismiss |
AICPA |
Yes |
|
14 |
In re ArthroCare Corp. Secs. Litig., 726 F. Supp. 2d 696 (W.D. Tex. 2010). |
Motion to Dismiss |
AICPA |
Yes |
|
15 |
In re SmarTalk Teleservices, Inc. Secs. Litig., 487 F. Supp. 2d 928 (S.D. Ohio 2007). |
Motion for Summary Judgment |
AICPA |
No |
|
Note: The plaintiffs pled a violation of AICPA standards, but the court did not reach the issue in this case before making its final determination. |
||||
97 S. Cal. L. Rev. 495
* Executive Articles Editor, Southern California Law Review, Volume 97; J.D. Candidate, University of Southern California Gould School of Law, 2024; B.S., B.A., Boston College, 2017. Many thanks to Professor Jonathan Barnett for his feedback and guidance, as well as to the editors of the Southern California Law Review for their thoughtful suggestions. All mistakes are my own.