Corporate & Compliance Digest November 09, 2026
We are delighted to share this week's AKP Corporate & Compliance Weekly Digest. Please feel free to write to us with your feedback at info@akandpartners.in.
1. Labour Law & Employment Law
1.1. Delhi Labour Department issues advisory on payment of statutory bonus to outsourced workers for accounting year 2025-26
The Office of the Secretary-cum-Commissioner (Labour), Government of the National Capital Territory of Delhi, has issued an advisory dated 2 November 2026, directing principal employers to ensure payment of statutory bonus to eligible outsourced workers and employees engaged through contractors in Government departments, autonomous bodies and Public Sector Undertakings (PSUs) for the accounting year 2025-26. In accordance with the Code on Wages, 2019, outsourced workers and employees earning wages up to INR 21,000 (Indian Rupees Twenty-One Thousand only) per month and having worked for at least 30 days during the accounting year are eligible for statutory bonus. The bonus is payable at a minimum rate of 8.33 per cent (eight point three three per cent) or INR 100 (Indian Rupees One Hundred only), whichever is higher, and a maximum rate of 20 per cent (twenty per cent), calculated on wages subject to a ceiling of INR 7,000 (Indian Rupees Seven Thousand only) or the applicable minimum wage, whichever is higher.
2. Securities & Capital Markets
2.1. BSE Introduces Revised Short-Term Additional Surveillance Measures for Identified Securities
BSE Limited issued Notice No. 20261030-43 concerning the applicability of the Short-Term Additional Surveillance Measure ("ST-ASM") framework to identified securities. The notice specifies securities that have met the criteria for inclusion under Stage I and Stage II of the framework. Securities placed under Stage I will attract a margin requirement of 50% or the existing margin, whichever is higher, subject to a maximum of 100%. Securities placed under Stage II will attract a margin requirement of 100%. These requirements will apply from 3 November 2026 to open positions as of 2 November 2026 and new positions created from 3 November 2026. The notice clarifies that the surveillance framework operates alongside other applicable surveillance measures and that the inclusion of securities is a market-surveillance action and should not be construed as an adverse action against the concerned companies. Trading members are required to refer to the annexure for the securities covered and implement the applicable margin requirements.
2.2. CDSL Extends Deadline for Submission of Net Worth Certificates and Audited Financial Statements
CDSL issued Communiqué No. CDSL/DP/2026/764, extending the deadline for submission of net worth certificates and audited financial statements by depository participants. The communiqué extends the submission deadline to 31 December 2026. The extension relates to the prescribed financial documents required to be submitted by depository participants to CDSL and provides additional time for completion of the applicable filing requirements. Depository participants are required to take note of the revised timeline and ensure that the relevant certificates and audited financial statements are submitted within the extended period. The communiqué forms part of CDSL’s compliance and oversight requirements applicable to its registered depository participants.
3. Information Technology & Data Protection
3.1. CERT-In issues advisory on multiple vulnerabilities affecting MikroTik routers
CERT-In has issued a high-severity advisory regarding multiple vulnerabilities affecting MikroTik RouterOS 6 versions prior to 6.49.21, MikroTik RouterOS 7.23.x versions prior to 7.23.6 and MikroTik RouterOS 7.24.x versions prior to 7.24.3. The vulnerabilities arise from improper authentication, inadequate security checks, argument injection and memory-handling issues, and could allow a remote attacker to bypass authentication, gain elevated privileges, execute arbitrary code, obtain sensitive information or cause denial-of-service conditions on affected systems. CERT-In has noted that these vulnerabilities, together with SSH vulnerabilities CVE-2026-67279 and CVE-2026-86060, are being actively exploited in the wild under the name “MikroTrick”. Users and organisations using affected MikroTik products have been advised to apply the security updates released by MikroTik.
3.2. CERT-In reports multiple vulnerabilities in Tata Motors iRA and iRA.ev applications
CERT-In has reported multiple high-severity vulnerabilities affecting Tata Motors iRA 2.0 versions 26.7.3 and below and Tata Motors iRA.ev versions 26.7.2 and below. The vulnerabilities include hardcoded credentials, insecure WebView configuration, information disclosure through application logs and improper SSL certificate pinning, which could allow attackers to obtain sensitive credentials, impersonate users, access vehicle-related information and services, or modify application data. CERT-In has advised users of the affected applications to upgrade to Tata Motors iRA 2.0 version 26.8.2 and Tata Motors iRA.ev version 26.9.1 to address the identified vulnerabilities.
3.3. CERT-In reports multiple vulnerabilities affecting Adobe products
CERT-In has reported multiple critical vulnerabilities affecting Adobe Campaign Classic versions prior to 7.4.4 build 9403, Adobe Connect Desktop App, Adobe Creative Cloud Desktop Application and Adobe Substance 3D Painter. The vulnerabilities arise from security weaknesses including code injection, operating system command injection, SQL injection, incorrect authorisation, cross-site scripting (“XSS”), buffer overflow and out-of-bounds read vulnerabilities. Successful exploitation could allow a remote attacker to execute arbitrary code, elevate privileges, bypass security restrictions or cause memory corruption on affected systems. CERT-In has advised users and organisations using the affected Adobe products to apply the security updates released by Adobe Inc.
4. Taxation
4.1. CBDT notifies conditions and filing requirements for mergers of registered non-profit organisations
The Central Board of Direct Taxes (CBDT), through Notification No. 139/2026 dated 30 October 2026, notified the Income-tax (Eighth Amendment) Rules, 2026, introducing Rule 189A and Form No. 112A under the Income-tax Rules, 2026. The new Rule prescribes conditions for the merger of registered non-profit organisations having the same or similar objects. These include requirements relating to the transfer of assets and liabilities, continuity of objects, and compliance with applicable tax obligations. The merged organisation is required to furnish Form No. 112A electronically to the jurisdictional Principal Commissioner or Commissioner within one month from the end of the month in which the merger.
4.2. CBIC extends the transitional deadline for implementation of Sea Cargo Manifest and Transhipment Regulations
The Central Board of Indirect Taxes and Customs (CBIC), through Notification No. 90/2026-Customs (N.T.) dated 1 November 2026, notified the Sea Cargo Manifest and Transhipment (Fourth Amendment) Regulations, 2026. The amendment substitutes the existing date against Serial No. 6 in the table following Form XII of the Sea Cargo Manifest and Transhipment Regulations, 2018, with 31 January 2027. This extends the transitional timeline for the specified category of customs ports, providing additional time for stakeholders to transition to the prescribed electronic cargo-manifest reporting framework.
4.3. CBIC prescribes phased transition to SCMTR-compliant export messages
Through Circular No. 47/2026-Customs dated 1 November 2026, CBIC prescribed a phased transition from the existing export messages to the messaging framework under the Sea Cargo Manifest and Transhipment Regulations, 2018. The Circular notes that although import and export message functionality has been deployed under the SCMTR framework, export-side filing remains limited to certain ports. Accordingly, the Board has directed that the existing export messages be discontinued in phases, with the transition to be completed by 31 January 2027. During the transition period, stakeholders are required to adopt SCMTR-compliant software and message formats. CBIC has also directed that no penal action should be taken during the implementation phase.
5. Regulatory Enforcement (Registrar of Companies)
Authority | Name of the Entity | Amount | Contravention |
ROC, Kolkata-II | Yardstick Merchant Private Limited
| INR 72,250 (Indian Rupees Seventy-Two Thousand Two Hundred Fifty only)
| Failure to file Financial Statements (Form AOC-4) since FY 2020-21, resulting in violation of Section 137(1) of the Companies Act, 2013; penalty imposed under Section 137(3). |
ROC, Mumbai-I | Follicular Technologies Private Limited
| INR 5,000 (Indian Rupees Five Thousand only)
| Incorrect disclosure in Form AOC-4 for FY 2024-25 by mentioning an incorrect Annual General Meeting date, resulting in contravention of Rule 8(3) of the Companies (Registration Offices and Fees) Rules, 2014; penalty imposed under Section 450 of the Companies Act, 2013. |
ROC, Bengaluru | PismoLabs Technologies India Private Limited
| INR 25,000 (Indian Rupees Twenty-Five Thousand only)
| Failure to circulate notice, agenda and notes for a Board Meeting held on 6 September 2024 as required under Section 173(3) of the Companies Act, 2013; penalty imposed under Section 173(4). |
Disclaimer
The note is prepared for knowledge dissemination and does not constitute legal, financial or commercial advice. AK & Partners or its associates are not responsible for any action taken based on its contents.
For further queries or details, you may contact:
Mr Anuroop Omkar
Founding Partner, AK & Partners
Comments