There Is No SECR-Specific Penalty
Neither SI 2018/1155 nor the Schedule 7 text it inserted creates an offence, a fine, or an enforcement power of its own.
Read end to end, Schedule 7 Part 7A contains no penalty provision anywhere in paragraphs 20A to 20K.
Everything that follows a defective directors' report is drawn from the Companies Act 2006 instead.
The Companies Act 2006 Chain
Four separate mechanisms apply once a directors' report carries SECR content, and they are not interchangeable.
| Mechanism | Who is liable | What it takes |
|---|---|---|
| s.419(3)–(4) — the offence | Individual directors | Knew the report did not comply, or was reckless, and failed to take reasonable steps |
| s.456 — court revision | The company; costs on approving directors | Court declares the report non-compliant and orders it revised |
| s.459 — compelled disclosure | The company | Supports a s.456 inquiry; not a penalty itself |
| s.463 — safe harbour | N/A — this limits liability | Not triggered by anything; it is a shield, not a sanction |
- The operative offence — s.419(3)–(4): committed by every director who knew the report did not comply, or was reckless as to whether it complied, and failed to take reasonable steps to secure compliance. It is triable on indictment or summarily, with no stated maximum fine for a SECR defect specifically.
- Court-ordered revision — s.456: a court declaration that a strategic report or directors' report does not comply, with power to order notification of anyone who may have relied on it and to put the costs of the application on the directors who approved it.
- Power to compel — s.459: a power to require documents and explanations from the company in support of a s.456 inquiry.
- The safe harbour, not a penalty — s.463: liability for anything in the report is owed to the company only, and only on knowledge, recklessness or dishonest concealment. Section 463(4) is explicit that no one else can rely on it: “No person shall be subject to any liability to a person other than the company resulting from reliance… on information in a report or statement to which this section applies.”
s.463 is routinely miscited as SECR's penalty
It is the opposite of a sanction — a shield that narrows who can sue over the report's content, not a consequence for getting it wrong.
No Statutory Assurance Requirement
No paragraph in Part 7 or Part 7A mentions assurance, verification or audit.
The government's own guidance says so directly: there is no statutory requirement to have environmental information audited, and the statutory auditor of the financial statements is not required to audit it.
What the auditor does do is narrower — s.496 requires an opinion on whether the directors' report is consistent with the accounts and has been prepared in accordance with applicable legal requirements. That is a consistency-and-legality check, not assurance over the emissions figures themselves.
DESNZ's own 2026 review concedes the consequence: limited verification undermines confidence in data quality.
LLPs Get Their Own Offence, Not Just a Company One
Because LLPs prepare a separate energy and carbon report rather than a directors' report, SI 2008/1911 reg 12B writes SECR-specific analogues of the company offences rather than simply extending them.
- Failure to prepare the report: modified s.415(6)–(7) makes it an offence committed by every person who was a member of the LLP immediately before the end of the filing period and failed to take all reasonable steps to secure compliance.
- Approving a non-compliant report: modified s.419(2)–(3) mirrors the company offence — every member who knew it did not comply, or was reckless as to whether it complied, and failed to take reasonable steps, commits an offence.
Sections 454–456 and 458–461 are applied to LLPs by SI 2008/1911 regs 23 and 24, carrying the court-revision route across as well.
“SECR creates no bespoke penalty regime” is accurate for companies and slightly overstated for LLPs — reg 10 of SI 2018/1155 created a report that exists only because of SECR, and reg 12B attaches criminal offences to it directly.
For the LLP-specific size test that sits behind that report, and a live drafting error on GOV.UK's own guidance about it, see our page on how SECR applies to LLPs.
Who Enforces It: the FRC, Not the "Conduct Committee"
The body authorised to bring a s.456 application changed on 6 May 2021.
SI 2021/465, article 4, states: “The FRC is authorised for the purposes of section 456 of the 2006 Act.” The instrument also substitutes “Financial Reporting Council Limited” for “Conduct Committee” throughout the LLP regulations.
The Conduct Committee ceased to hold that authorisation on that date — older material still naming it is out of date, not merely informal.
The FRC's review remit and SECR's scope are now two different tests
The FRC's Corporate Reporting Review remit is defined by Companies Act 2006 ss.382 and 466 — the accounts size test that moved to £54m turnover / £27m balance sheet on 6 April 2025.
SECR's own scope test, Sch. 7 ¶20B, did not move and remains £36m / £18m / 250. The population the FRC reviews and the population SECR actually catches are therefore no longer defined by the same figures.
The Actual Enforcement Record
The FRC's own current procedures state it plainly: failing voluntary correction, the FRC Board can seek a court order under s.456, and it maintains a legal costs fund of £2 million for that purpose — but “the FRC and the predecessor bodies that held these powers have, to date, succeeded in resolving all cases on a voluntary basis and without having to apply for a court order.”
That is an owner-source admission that no s.456 application has ever been made for any directors'-report matter, SECR or otherwise.
The one recorded SECR-specific check is a thematic review the FRC ran on 22 September 2021, covering 27 mainly larger entities. It found largely-compliant minimum disclosure, with weaknesses in methodology, ratio reconcilability and assurance explanation. A thematic review is a compliance survey, not an enforcement action.
DESNZ's 2026 post-implementation review describes the wider picture in its own words: the enforcement approach “remains light touch,” and “there is no dedicated civil sanction regime or proactive monitoring specific to SECR.”
DESNZ's separate independent evaluation put suspected non-compliance at 14–23% of the in-scope population, triangulated across a machine-read accounts check (34%, an overestimate), a business survey (14–23%) and FRC 2024 reviews (10%, an underestimate) — without a published breakdown by company type.
Not the Same as the Late-Filing Penalty
A separate, better-known penalty is easy to confuse with SECR enforcement: the civil penalty for filing the accounts and directors' report late at all, under s.453.
That penalty attaches to the company for lateness, scaled by how late and by company type, and it applies whether or not the report's SECR content is compliant — see our SECR filing deadlines page for the bands and the weekend-filing rule.
It is also not the newer ECCTA penalty: SI 2024/445 created a discretionary fine of up to £10,000 under the new s.1132A, but that power covers "relevant offences" rather than the civil late-filing penalty, so it does not apply to s.453 at all.
Three different provisions, three different liable parties, three different penalty types — and none of the three is SECR-specific.
What This Means in Practice
- Signing directors carry the risk, not the company alone. s.419 is a personal offence on the individuals who approved a non-compliant report knowing, or being reckless about, its defects.
- A light-touch record is not a low-stakes one. Zero court applications reflects that the FRC's process resolves issues before litigation, not that a defect goes unnoticed — the thematic review found real weaknesses even among largely-compliant filers.
- Do not rely on assurance you have not actually commissioned. The auditor's sign-off does not cover the emissions data; any verification of the SECR figures themselves is voluntary and separate.
- An LLP's exposure is not a company's exposure relabelled. The LLP offences sit in a different, modified set of provisions with their own drafting.
For how SECR's enforcement footing compares with a scheme built around a dedicated regulator and a civil penalty scale of its own, see ESOS vs SECR on uksrs.org.uk.