Corporate and Business Law (Global) · Other company officers

Auditor Rights, Duties and Liability in Company Law

Updated 11 October 2026 · Fact-checked

Auditors have rights that let them do the job: access to records, information from officers, and attendance at meetings. They have duties: report to members on the accounts and exercise reasonable skill and care. They are liable to the company for negligence, and to third parties only if a duty of care exists.

Understand Auditor Rights, Duties and Liability

An auditor is an independent professional who reports to the members (shareholders) on whether the financial statements give a true and fair view and are properly prepared. The auditor acts for the members, not for the directors.

Because the auditor must check what the directors have done, the law gives rights. These are powers the auditor can insist on. Rights are what the auditor may demand. Duties are what the auditor must do. Keep this split clear, because exam questions often test it.

The typical rights are: access at all times to the company's books, records and accounts; the right to require information and explanations from officers; the right to attend and speak at general meetings on matters that concern the auditor; and the right to receive notice of, and written resolutions for, members' meetings. Auditors also have protections when removed or when they resign. Those are covered under appointment and removal.

The main duties are: to carry out the audit with reasonable skill and care; to form an opinion and report to members on whether the accounts are properly prepared and give a true and fair view; to consider whether proper accounting records have been kept and whether the accounts agree with them; and to state in the report if they have not received the information they need. Exact reporting wording depends on the jurisdiction, so learn the principles.

Liability follows from breach of duty. The auditor owes the company a contractual duty and a duty in the tort of negligence to use the skill and care of a reasonably competent auditor. The standard rises with experience and expertise. Liability to third parties, such as investors or lenders, is narrow. In Caparo Industries plc v Dickman, the court held that an auditor owes no duty of care to individual shareholders or potential investors who rely on the accounts to buy shares. The statutory audit exists for members as a body to oversee the directors. A duty may arise where the auditor knows the specific third party and the specific purpose and knows the third party will rely on the report. Many jurisdictions also allow the company and auditor to agree a limit on liability, subject to being fair and reasonable, and an auditor cannot contract out of liability entirely.

Key formulas to remember

Rights versus duties: Rights = what the auditor may demand; Duties = what the auditor must do; Use this to sort any list of auditor powers and obligations.
Negligence elements: Duty of care + breach of the standard + loss caused by the breach (not too remote); All three must be shown for a claim to succeed.
Standard of care: Skill and care of a reasonably competent auditor; Judged against professional standards, and higher for specialists.
Caparo three-part test: Foreseeable harm + proximity between the parties + fair, just and reasonable to impose a duty; Applied to auditors and third parties. Reliance by an unknown investor is usually not enough.
Third-party duty exception: Auditor knew the third party, knew the purpose and knew they would rely; Only in this narrow case may a duty be owed outside the company.
Limiting liability: Liability limitation agreement with the company: permitted only if fair and reasonable; total exclusion is void; Check the conditions of the jurisdiction. Principle is the same in Global variant questions.

How to solve Auditor Rights, Duties and Liability questions

Use this method for any question on auditor rights, duties or liability, whether it is a short objective question or a scenario.

1Identify what is asked: a right, a duty, or liability. Write R, D or L beside the question.
2If it is a right or duty, ask: does the auditor demand it (right) or must the auditor perform it (duty)?
3If it is liability, identify who is claiming: the company, a shareholder, or an outside third party.
4For a company claim, test for breach of the standard of a reasonably competent auditor and whether it caused the loss.
5For a third-party or shareholder claim, apply the Caparo test and check whether the auditor knew of the person and purpose and reliance.
6Check for any limiting agreement and whether it is fair and reasonable.
7Pick the one option or write the conclusion that matches the rule exactly, with a short reason.

Quickest way: Who is claiming? Then apply the matching test

When to use it: Use in Section A and Section B objective questions where time is short and options look similar.

Spot the claimant. Company means negligence and contract. Outsider means Caparo.
If the claimant is an individual investor relying on published accounts, the answer is almost always no duty.
If the auditor knew the person, purpose and reliance, a duty may exist.
If the question is about access or information, it is a right. If it is about reporting or care, it is a duty.
Eliminate options that say liability can be fully excluded.

Common mistakes in Auditor Rights, Duties and Liability

Saying auditors owe a duty to all shareholders as individuals.
Students think shareholders own the company, so they must be protected individually.
Fix: The audit is for members as a body. Individual shareholders buying more shares cannot claim under Caparo.
Mixing up rights and duties.
Both are listed in the same part of the syllabus and sound similar.
Fix: Ask who acts. If the auditor can demand it, it is a right. If the auditor must do it, it is a duty.
Stating that an auditor can exclude all liability by agreement.
Students remember that limits are allowed and stretch it.
Fix: Limits are allowed if fair and reasonable. Complete exclusion of liability to the company is not valid.
Claiming the auditor is liable whenever the company suffers a loss.
Students forget that negligence needs breach and causation.
Fix: Show that the auditor fell below a reasonably competent standard and that the breach caused the loss.
Writing that the auditor reports to the directors.
Directors engage with the auditor daily and pay the fee.
Fix: The audit report is addressed to the members.

Worked examples

Example 1

An investor read a company's audited accounts and bought shares in it. The accounts were later found to be misstated because the auditor was careless. The investor lost money and sues the auditor. The auditor had no knowledge of this investor. Which statement is correct? (A) The auditor owes a duty to any person who reads the accounts. (B) The auditor owes a duty to the investor because the loss was foreseeable. (C) The auditor owes no duty to the investor on these facts. (D) The auditor owes a duty only if the directors approved the accounts.

Show the solution

Identify the claimant: an outside investor, not the company.
Apply Caparo: harm may be foreseeable, but proximity and fairness are lacking because the audit is for members as a body.
Check for the exception: the auditor did not know the investor, the purpose or the reliance.
So no duty arises. Options A and B overstate the duty. Option D is irrelevant.

Answer: (C) The auditor owes no duty to the investor on these facts.

Example 2

A company's finance director refuses to give an auditor an explanation about a large unexplained payment. Explain the auditor's rights, the auditor's related duty, and what could happen if the auditor missed obvious errors through carelessness and the company lost money.

Show the solution

Right: the auditor can require information and explanations from officers, and has access to the books and records at all times. The finance director should provide the explanation.
Duty: if the auditor does not receive the information and explanations needed, the auditor must say so in the audit report.
Liability: the auditor must use the skill and care of a reasonably competent auditor. If careless oversight of obvious errors falls below that standard, there is a breach.
The company can claim damages for negligence and for breach of contract if the breach caused its loss.
Any agreement limiting liability would only be effective if it is fair and reasonable.

Answer: The auditor has a right to the explanation and access to records. The auditor must report if the information is not given. Careless failure to find obvious errors is a breach of the duty of care, and the company can claim damages for the loss caused.

Exam tips

Always name the claimant first. Most wrong answers come from applying the company rule to a third party.
When the question names Caparo, state the result: no general duty to investors or individual shareholders, with a narrow exception where the auditor knew the person and purpose.
For rights questions, look for words like access, require, attend. For duties, look for report, opine, exercise care.
In a written answer, give the rule, apply it to the facts, then state a conclusion in one line.
Never write that liability can be excluded completely. Say limited, and only if fair and reasonable.

Practice questions from Other company officers

Auditor Rights, Duties and Liability in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Auditor Rights, Duties and Liability: frequently asked questions

What is the difference between auditor rights and duties?

Rights are powers the auditor can insist on, such as access to records and explanations from officers. Duties are obligations, such as reporting to members and using reasonable skill and care. A right is what the auditor may demand, and a duty is what the auditor must do.

What did Caparo v Dickman decide about auditors?

It decided that auditors do not owe a duty of care to individual shareholders or potential investors who rely on audited accounts when deciding to buy shares. The audit is carried out for the members as a body. It also set a three-part test of foreseeability, proximity and whether it is fair, just and reasonable to impose a duty.

Can an auditor limit liability to the company?

Yes, in many jurisdictions the company and auditor can agree a limit on the auditor's liability. The limit must be fair and reasonable. An auditor cannot exclude liability altogether.

When can an auditor be liable to a third party?

Only where a duty of care exists. This is likely where the auditor knew the third party, knew why the report was needed and knew the third party would rely on it. General reliance by the public is not enough.