SIGN IN

What Is a Legal Register for Statutory Compliance in India 2026?

LexComplyLexComply9 min read
legal register legal register software compliance register legal register of applicable laws EHS legal register

TL;DR

  • A legal register is a controlled list of every law, rule, licence and permit that applies to a company, with the obligation each one creates, its owner and its evidence.
  • Indian companies need one because applicability is split across Central, State and municipal law, and because section 134(5)(f) of the Companies Act requires directors to confirm systems for compliance with all applicable laws.

Quick Answer: A legal register is a controlled list of every law, rule, licence and permit that applies to a company, with each obligation's owner and evidence. Section 134(5)(f) of the Companies Act, 2013 makes directors confirm systems for compliance with all applicable laws. LexComply's compliance management platform holds the register by entity, with version history for every amendment.

A legal register answers one question for an auditor or a Board: which laws bind this entity, at this site, today. In India that answer is spread across Central Acts, State Acts, municipal bye-laws and the conditions written into each licence. A register that lists only Central Acts misses most of the obligations a factory or warehouse actually faces.

Legal register at a glance

Element What it records Example
Law Act, rules, notification or bye-law Occupational Safety, Health and Working Conditions Code, 2020
Applicability Why it applies, by entity and site Factory under section 2(1)(w) of the OSH Code: 20 or more workers with power
Obligation The duty, in plain words Annual return, register, licence renewal
Owner A named person, not a department Plant HR manager
Due date Fixed, periodic or event-based Within 30 days of an event
Evidence Proof of compliance Acknowledgement, challan, certificate
Status Open, complied, delayed, not applicable Complied, with date

It is the master record of a company's legal obligations, kept in a form that can be audited. Some teams call it a compliance register or a register of applicable laws. The name matters less than the structure: one line per obligation, not one line per Act.

Why Does India Need a Separate Line for Each Obligation?

Because a single Act can create dozens of separate duties with different owners and dates. A labour Code alone can require registration, returns, registers, notices and inspections. Listing the Act once hides those duties. Listing each obligation lets the register show what is open on a given day. The same structure underpins every regulatory compliance programme.

Why Do Directors and Auditors Rely on It?

Directors, auditors and certifiers all rely on it. Under section 134(5)(f) of the Companies Act, 2013, the directors' responsibility statement confirms that proper systems exist to ensure compliance with all applicable laws. A legal register is the most direct evidence of such a system. Environmental and safety management systems certified to ISO 14001 and ISO 45001 also require a documented determination of legal requirements under clause 6.1.3.

It turns the register from a static list into a live workflow. The software holds each obligation, assigns it to an owner, reminds that owner before the due date and stores the evidence on closure. For environment, health and safety (EHS) teams, it also links each obligation to the site, licence or permit that triggered it.

Function Spreadsheet register Legal register software
Applicability by entity and site Manual filter Mapped per entity, unit and law
Reminders before due dates None Automatic alerts to the owner
Evidence Separate folders Attached to the obligation
Amendments Found by reading notifications Pushed as updates to affected lines
Audit trail Overwritten cells Version history per obligation
Board view Built by hand each quarter Dashboard by entity, law and risk

The day-to-day tracking that follows is covered in the guide to compliance monitoring software. Status then rolls up into a compliance dashboard for management.

It must track four kinds of source, because Indian obligations arise from all four.

  1. Central Acts and rules. Company law, tax, labour Codes, environment and data protection.
  2. State Acts and rules. Shops and establishments, professional tax, labour welfare funds and State factory rules.
  3. Municipal and local law. Trade licences, fire safety and building approvals.
  4. Licence and permit conditions. Consent conditions from a Pollution Control Board, factory licence terms and fire certificates.

Why Do Licence Conditions Belong in the Register?

Because a condition in a consent or licence is enforceable even though no Act lists it. A consent to operate under the Environment (Protection) Act, 1986 framework may fix monitoring frequencies and reporting dates specific to one site. If those conditions sit only in a PDF, nobody owns them.

How Should State Law Be Handled?

Separately for each State where the company operates. A company with plants in three States carries three sets of shops, labour welfare and professional tax obligations. The multi-state labour law compliance checklist shows how far these differ.

How Do You Decide Which Laws Apply?

You decide applicability by testing each law against the facts of each entity and site. The test uses five facts.

Fact What it decides Example of a threshold
Entity type Company law, LLP or partnership duties Listed company or private company
Activity Sector licences and approvals Food business, chemicals, financial services
Location State and municipal law Each State where a site operates
Headcount Labour Code thresholds 10 or more, 20 or more workers
Size Audit and governance duties Turnover, paid-up capital, borrowings

Record the reason for each decision in the register, including a decision that a law does not apply. An auditor will ask why a law is marked not applicable, and the answer should sit beside the entry. Re-run the test whenever a fact changes, such as a new site, a headcount crossing a Code threshold or a change in paid-up capital, because applicability moves with the facts.

By reviewing every amendment against the register and recording what changed, with the date. Indian law changes constantly. The four labour Codes, for example, came into force on 21 November 2025 and replaced 29 Central labour laws. A register still citing the repealed Acts points owners at the wrong parent law, even where an old rule continues under the Code's savings clause.

What Should an Amendment Review Record?

Each review should record four things: the notification, the date it takes effect, the register lines affected and the action taken. Keep the old version of each changed line. A version history lets an auditor see which obligation applied at any earlier date.

How Often Should the Register Be Reviewed?

Continuously for notifications, and in full at least once a year. A monthly digest suits a small single-site company. Due dates also move, as the guide to recently extended compliance due dates shows. A multi-State group needs updates as notifications are issued, because a State amendment can change a due date within weeks.

What Should You Compare When Choosing a Provider in 2026?

Compare the content behind the software as closely as the software itself. A legal register is only as good as its law library and the speed of its updates.

What to check Why it matters
Coverage of State and municipal law Most site-level obligations sit here
Who writes and maintains the content Lawyers and company secretaries, not only developers
Update frequency Amendments must reach the register before the next due date
Applicability mapping per entity and site Owners should see only what applies to them
Licence and permit tracking Conditions and renewal dates in the same register
Evidence and version history Proof for the auditor and the Board
Reporting routes Owners at remote sites may report by email

A spreadsheet suits one entity at one site with a short list of laws. It fails once the register crosses States or sites, because nobody updates it when the law changes and reminders depend on memory. Software suits any company where a site owner, rather than the central compliance head, must act on the obligation.

Where Does a Compliance Platform Fit?

A compliance management platform carries the legal register as its base layer. LexComply lets a company allocate only the relevant Acts and compliances to each entity, so an owner sees only what applies. Its registrations module holds licences in one repository, and each compliance keeps a version history of every amendment.

LexComply also grades each compliance in a Compliance Criticality Matrix by penalty and imprisonment risk. The software tracks, allocates and evidences each obligation; the authority grants the licence, and the filing remains the company's own responsibility. To review your current register, contact LexComply.

Common Mistakes to Avoid

  • Listing Acts instead of obligations. One line per Act hides the separate registration, return and register duties inside it. Each duty needs its own line, owner and date.
  • Citing repealed labour laws after 21 November 2025. The four labour Codes replaced 29 Central labour laws on that date, so entries under the old Acts need remapping.
  • Leaving licence conditions out. A consent or licence condition is enforceable on its own terms, even where no Act states it.
  • Marking a law not applicable without a reason. Section 134(5)(f) assurance depends on showing how applicability was decided, so record the threshold tested.
  • Building one register for a multi-State group. State law differs by State, so each site needs its own applicable-law set.

This article is general information on Indian compliance practice, current as at the date shown above. It is not legal advice, and applicability of any law depends on the facts of each entity and site.

Frequently Asked Questions

Is a legal register mandatory in India?
No. No single Act names a "legal register". The duty arises indirectly: directors must confirm compliance systems under section 134(5)(f) of the Companies Act, 2013, and ISO 14001 and ISO 45001 certification require documented legal requirements under clause 6.1.3. A register is the usual way to meet both.
What is the difference between a legal register and a compliance calendar?
A legal register lists what applies and why. A compliance calendar schedules when each obligation falls due. The calendar is built from the register, so register errors flow into it. Since 21 November 2025, a calendar built on the repealed labour Acts cites the wrong parent law, and misses that some old rules continue under the Codes' savings clauses.
Which laws go into an EHS register?
An environment, health and safety (EHS) register typically covers the Environment (Protection) Act, 1986 framework, pollution consents from the State Pollution Control Board, the OSH Code, 2020, fire safety and hazardous waste rules. It also carries the conditions written into each site's consents and licences.
Who owns each obligation in the register?
A named person at the site or function that performs it. The compliance or legal head owns the register as a whole. Only the site owner, such as the occupier of a factory under the OSH Code, 2020, can produce the challan, return or certificate when the auditor asks.
How does an auditor use a legal register?
An auditor samples obligations from the register and asks for the evidence of each. The secretarial audit report under section 204 of the Companies Act, 2013, given in Form MR-3, also names the other laws applicable specifically to the company. The register should identify those laws so the auditor does not have to.

About the Author

LexComply is an AI-powered governance, risk and compliance (GRC) platform, built by practitioners and a RegTech pioneer since 2015.