Almost every tax penalty falls on the taxpayer. This one falls on a named individual, personally, for a failure in the company’s tax accounting systems. The sums are modest by the standards of tax disputes. The professional consequences for a finance director are not.
On this page
The Regime That Penalises a Person, Not a Company
Almost every tax penalty falls on the taxpayer. The Senior Accounting Officer regime is different: it imposes a personal penalty on a named individual, in their own name, for a failure of the company’s tax accounting arrangements.
The regime was introduced by Schedule 46 to the Finance Act 2009. It applies to qualifying companies: broadly, large UK companies measured by turnover and balance sheet total, tested by reference to the preceding financial year and applied across groups.
The Three Duties
1. The main duty: reasonable steps
The SAO must take reasonable steps to ensure that the company establishes and maintains appropriate tax accounting arrangements, and to monitor those arrangements and identify respects in which they are not appropriate.
“Appropriate tax accounting arrangements” means arrangements that enable the company’s relevant liabilities to be calculated accurately in all material respects. The duty is about systems and processes, not about getting every number right. An error that arises despite appropriate arrangements is a tax problem for the company; it is not automatically an SAO failure.
2. The certificate
The SAO must provide HMRC with a certificate for each financial year, stating either that the company had appropriate tax accounting arrangements throughout the year, or that it did not, with an explanation of the respects in which they were not appropriate.
The certificate is due no later than the deadline for filing the company’s accounts, and it must be given for each qualifying company in a group.
3. Notification of the SAO’s identity
The company must notify HMRC of the name of each person who was its SAO for the financial year, by the same deadline.
The Penalties
| Failure | Who is penalised |
|---|---|
| Failure to take reasonable steps (the main duty) | The SAO personally |
| Failure to provide a certificate, or providing an incorrect one | The SAO personally |
| Failure to notify the SAO’s name | The company |
Each penalty is a fixed amount per failure per financial year. A reasonable excuse defence is available, and there is a right of appeal to the First-tier Tribunal. The penalties are not tax-geared, so they do not scale with the size of the error, which is precisely why the regime is about governance rather than about tax.
Who Should Be the SAO
The SAO is the director or officer who, in the company’s reasonable opinion, has overall responsibility for its financial accounting arrangements. In practice this is usually the finance director or chief financial officer.
Three points recur:
- It must be a real appointment. Designating a junior finance manager who lacks authority over systems and resources does not discharge the company’s obligation and leaves that individual personally exposed.
- Group structures need care. Each qualifying company needs an SAO, and one individual may act for several. The certificate obligations are per company.
- Changes mid-year must be tracked, because the duties attach to whoever held the role.
What “Appropriate Arrangements” Looks Like
HMRC assesses systems, and the evidence is documentary. A defensible position generally involves:
- A documented tax risk register, reviewed and dated, covering each relevant tax: corporation tax, VAT, PAYE, and the others that apply.
- Process maps showing how data flows from the underlying systems to the tax computations and returns, with the control points identified.
- Defined ownership for each tax, with named individuals and escalation routes.
- Reconciliations and review controls that are performed and evidenced, not merely described.
- A record of identified weaknesses and remediation, with dates and owners.
- Board and audit committee reporting on tax governance.
- Evidence of the SAO’s own monitoring: what they asked, what they were told, and what they did about it.
Where SAO Sits in the Governance Picture
SAO is one of several regimes that push tax governance onto named individuals and organisations rather than onto the tax computation:
- The corporate criminal offences under ss45–46 Criminal Finances Act 2017, and the newer failure to prevent fraud offence, both of which turn on documented prevention procedures: see our resource on corporate criminal offences.
- Publication of tax strategy by large businesses.
- Personal liability notices transferring company penalties to officers: see our guide to PLNs.
- Money laundering supervision and the accountability it places on nominated officers.
The common thread is that the evidence is contemporaneous documentation of process. An organisation that builds one integrated governance framework satisfies most of these obligations at once; one that treats them as separate compliance exercises does more work and evidences it less well.
If HMRC Raises an SAO Issue
- Establish which duty is said to have been breached: the main duty, the certificate, or the company’s notification. They are separate, with separate penalties and separate defendants.
- Separate the SAO’s position from the company’s immediately, and consider whether independent advice is needed. The interests can diverge, particularly where the SAO raised a weakness that the board declined to fund.
- Assemble the systems evidence, not the tax analysis. HMRC is asking about arrangements, not about whether a particular figure was right.
- Distinguish an error from a systems failure. A mistake that occurred despite appropriate arrangements is not an SAO breach, and the point should be made in terms.
- Consider reasonable excuse, applying the four-stage framework in Perrin, and the standard in Clean Car as applied to this individual in their actual situation.
- Appeal in time and consider the statutory review route.
Frequently Asked Questions
Who is penalised under the SAO regime?
The individual, personally, for failing to take reasonable steps and for failing to provide a certificate or providing an incorrect one. The company is penalised separately for failing to notify HMRC of the SAO’s name. That personal exposure is what distinguishes the regime from almost every other tax penalty.
What is the main duty?
To take reasonable steps to ensure that the company establishes and maintains appropriate tax accounting arrangements, and to monitor them and identify respects in which they are not appropriate. Appropriate arrangements are those that enable the company’s relevant liabilities to be calculated accurately in all material respects. The duty is about systems and processes, not about getting every number right.
Should I ever sign a qualified certificate?
Where the arrangements were not appropriate, yes. The statute requires it. Signing an unqualified certificate to avoid inviting scrutiny is dangerous: an incorrect certificate carries its own personal penalty, and a knowingly incorrect one moves the analysis towards deliberate conduct. A qualified certificate identifying the weakness and the remediation plan is usually the safer course.
Does a tax error mean the SAO has failed?
No, and the distinction is important. The duty is to take reasonable steps to ensure appropriate arrangements exist. An error that occurs despite appropriate arrangements is a tax issue for the company, not an SAO breach. Where HMRC raises SAO alongside a tax adjustment, that point should be made in terms and the systems evidence produced rather than the tax analysis.
What should an SAO keep on their own file?
A contemporaneous record of what they actually did: the questions asked of each tax owner, the assurances received, the issues escalated, and the resources requested. Because the duty is to take reasonable steps, that record is the defence, and it is especially valuable where a weakness was identified and the board declined to fund the fix.