Environmental, Social and Governance (ESG) - Principles and Practice · Business Ethics, Code of Conduct and Anti-Bribery

Adequate Procedures Defence and Anti-Bribery Compliance Programme

Updated 11 October 2026 · Fact-checked

Under the proviso to section 9(1) of the Prevention of Corruption Act, 1988, a commercial organisation can defend itself if it proves it had adequate procedures, in compliance with prescribed guidelines, to stop persons associated with it from bribing public servants. You build a programme with risk assessment, policy, due diligence, training, monitoring and review.

Understand Adequate Procedures Defence and Compliance Programme

Section 9 makes a commercial organisation punishable with fine if any person associated with it gives or promises to give an undue advantage to a public servant. The intent must be to obtain or retain business, or an advantage in the conduct of business, for the organisation. So the company can be liable for what an employee, agent or subsidiary does for it.

The law also gives a way out. The proviso to section 9(1) says it is a defence for the organisation to prove that it had in place adequate procedures, in compliance with such guidelines as may be prescribed, to prevent associated persons from such conduct. The burden is on the company. A policy that sits in a drawer will not meet it. You need evidence that the procedures existed and worked in practice.

Who is an associated person? Anyone who performs services for or on behalf of the organisation. The capacity does not matter: employee, agent or subsidiary all count (Explanation 1). It is decided on all relevant circumstances, not just the label of the relationship (Explanation 2). An employee is presumed to be an associated person unless the contrary is proved (Explanation 3). This is why third parties such as agents, consultants and distributors are the biggest risk area.

Section 9(5) says the Central Government shall prescribe guidelines for organisations to put in place. The text supplied to you does not set out the content of those guidelines. So, in an answer, describe the programme using accepted good practice, and say plainly that it is designed to meet the guidelines as prescribed. Do not quote guideline paragraph numbers.

A sound programme is built on a cycle: top-level commitment, risk assessment, a clear policy and code, controls over gifts, hospitality, donations and payments, due diligence on third parties, training, a reporting channel, monitoring and audit, and periodic review. Each element creates evidence for the defence.

Key rules to remember

Liability of a commercial organisation: Offence by associated person + intent to obtain or retain business or advantage in conduct of business → organisation punishable with fine; Section 9(1). The penalty for the organisation is fine.
Adequate procedures defence: Organisation proves adequate procedures, in compliance with prescribed guidelines, to prevent associated persons from such conduct → defence available; Proviso to section 9(1). The burden of proof is on the organisation.
Associated person test: Person performs services for or on behalf of the organisation = associated person; Section 9(3)(c). Capacity is irrelevant (employee, agent, subsidiary). Employees are presumed associated unless the contrary is proved.
Commercial organisation: Body incorporated in India carrying on business anywhere; foreign body carrying on business or part of it in India; partnership firm or association of persons formed in India or abroad on the same basis; Section 9(3)(a). Business includes trade, profession or providing service.
Prosecution not required for the associated person: Alleged to have committed the section 8 offence, whether or not prosecuted; Section 9(2). The organisation can be proceeded against even if the individual is not prosecuted.
Nature of offence: Offences under sections 7A, 8 and 9 are cognizable; Section 9(4). Police can investigate without a court warrant in line with cognizable procedure.

How to solve Adequate Procedures Defence and Compliance Programme questions

For a case-based question, work in the order provision, facts, conclusion. Use this sequence.

1Identify the organisation and check it is a commercial organisation under section 9(3)(a), including place of incorporation and carrying on business.
2Identify the person who acted and test whether they are an associated person: services for or on behalf of the organisation, capacity irrelevant, employee presumption.
3Check the act: giving or promising an undue advantage to a public servant, intended to obtain or retain business or an advantage in the conduct of business.
4State the consequence: the organisation is punishable with fine, and the individual need not have been prosecuted.
5Examine the defence: list what procedures existed, and test each against the facts for adequacy and for actual operation, not just paper.
6Point out gaps such as no third-party due diligence, no training, no monitoring or no response to red flags.
7Conclude clearly: the defence succeeds or fails, noting the organisation must prove it.
8Add practical recommendations: policy, controls, training, reporting channel, audit and board oversight.

Quickest way: Four-question scan

When to use it: Use when time is short or the question asks for a brief opinion.

Who is the commercial organisation and who is the associated person?
Was an undue advantage given or promised to a public servant for the organisation's business?
Which procedures did the company have, and were they in force and followed?
Conclude: fine liability stands unless the company proves adequate procedures, and name the missing control.

Common mistakes in Adequate Procedures Defence and Compliance Programme

Saying the company is liable only if the agent is convicted.
Students mix individual criminal liability with organisational liability.
Fix: Quote section 9(2): the person is treated as having given the advantage if alleged to have committed the section 8 offence, whether or not prosecuted.
Treating only employees as associated persons.
Associated person sounds like staff.
Fix: Cite Explanation 1: employee, agent or subsidiary. Look at all circumstances, not just the contract label.
Claiming the defence is made out because a policy exists.
Students equate having a document with having adequate procedures.
Fix: Show the procedures were implemented: training records, due diligence files, monitoring and action on red flags. The company must prove it.
Quoting guideline details or section numbers that are not certain.
Students try to add detail from memory.
Fix: Say the procedures must comply with guidelines as prescribed under section 9(5), and describe the programme in terms of good practice.
Forgetting the intent requirement.
Focus stays on the payment alone.
Fix: State that the advantage must be intended to obtain or retain business or an advantage in the conduct of business for the organisation.
Ignoring foreign bodies and partnerships.
Students think of Indian companies only.
Fix: Recall the four limbs of section 9(3)(a), which also cover foreign bodies carrying on business or part of it in India, and partnerships and associations.

Worked examples

Example 1

Kaveri Infra Ltd, an Indian company, hires a liaison consultant to obtain a municipal licence. The consultant pays ₹5,00,000 to a municipal officer, a public servant, to speed up the licence for Kaveri. Kaveri has an anti-bribery policy but never trained staff or checked the consultant. Advise on Kaveri's liability.

Show the solution

Provision: section 9(1) punishes a commercial organisation with fine if an associated person gives or promises an undue advantage to a public servant to obtain or retain business or an advantage in its conduct.
Organisation: Kaveri is a body incorporated in India carrying on business, so it is a commercial organisation under section 9(3)(a)(i).
Associated person: the consultant performs services on behalf of Kaveri, so is associated under section 9(3)(c). Capacity does not matter.
Act and intent: paying ₹5,00,000 to a public servant to speed up Kaveri's licence is an undue advantage aimed at an advantage in the conduct of its business.
Defence: Kaveri must prove adequate procedures in compliance with prescribed guidelines. It has only a policy, no training, no due diligence and no monitoring.
Conclusion: the defence is unlikely to succeed. Kaveri is exposed to fine, whether or not the consultant is prosecuted (section 9(2)).

Answer: Kaveri is liable to fine under section 9(1). The adequate procedures defence will probably fail because the policy was not implemented through due diligence, training or monitoring.

Example 2

Draft the key elements of an anti-bribery compliance programme that Meridian Textiles Ltd can use to support the adequate procedures defence.

Show the solution

Start with the legal basis: the proviso to section 9(1) requires adequate procedures, in compliance with prescribed guidelines, to prevent associated persons from bribing public servants.
Governance: board approval of the policy, a named senior compliance owner, and regular board reporting.
Risk assessment: map where the company deals with public servants, such as licences, customs, inspections and tenders, and rate the risk by location, activity and intermediary.
Policy and controls: a clear ban on bribes, rules on gifts, hospitality, donations and facilitation payments, accurate books and approval limits.
Third-party due diligence: check identity, reputation and ownership of agents and consultants, justify fees, include anti-bribery clauses and audit rights in contracts, and refresh checks periodically.
Training and communication: induction and periodic training, with extra training for high-risk roles, and keep attendance records.
Speak-up and response: a confidential reporting channel linked to the vigil mechanism, investigation protocol, and discipline.
Monitoring and review: internal audit testing, transaction reviews, record keeping and periodic review of the programme.

Answer: The programme should have board ownership, risk assessment, a clear policy with controls, third-party due diligence, training, a reporting channel, and monitoring with periodic review. Records of each element form the evidence for the defence.

Exam tips

Begin every case answer with section 9(1) and its proviso, then apply the facts.
Always test the associated person definition, because examiners use agents, subsidiaries and consultants as the trap.
Show that the burden to prove adequate procedures lies on the organisation.
For drafting or programme questions, use a structured list: risk, policy, due diligence, training, monitoring, review.
Avoid citing guideline paragraph numbers or cases unless certain; stay with the section text.

Practice questions from Business Ethics, Code of Conduct and Anti-Bribery

Adequate Procedures Defence and Compliance Programme: frequently asked questions

What is the adequate procedures defence under the Prevention of Corruption Act?

It is the proviso to section 9(1). A commercial organisation can escape the fine by proving it had adequate procedures, in compliance with prescribed guidelines, to prevent associated persons from bribing public servants.

Who bears the burden of proof for the defence?

The organisation. The proviso says it shall be a defence for the organisation to prove that it had such procedures. So you must keep records that demonstrate the procedures worked.

Does the company escape liability if the agent is not prosecuted?

No. Section 9(2) treats a person as having given an undue advantage if alleged to have committed the section 8 offence, whether or not prosecuted. The organisation can still be proceeded against.

What should an anti-bribery compliance programme include?

Good practice includes board commitment, risk assessment, a clear policy, controls on gifts and payments, third-party due diligence, training, a reporting channel, monitoring and periodic review. It should be designed to meet the guidelines prescribed under section 9(5).