If you are heading a finance or risk function in the Kingdom right now, SOCPA just handed you a new question to answer. It rewrote who is licensed to provide accounting, bookkeeping and zakat and tax services, and the change is already sitting inside contracts most CFOs and CROs have not reopened.
It stopped being your external provider's compliance problem the moment their licence gap became your governance gap.
This is not a routine circular. It is one of SOCPA's broadest updates in years, and it redraws who is licensed to do what, what your engagement letters can legally cover, and what the firms you rely on should be able to prove before your next audit cycle or advisory renewal.
- Decision 46268 brings in category-specific licences for accounting firms.
- Bookkeeping and zakat and tax return preparation are now explicitly regulated.
- Check every provider's licence before your next audit cycle or renewal, not after.
Let's dig deeper into the ruling
Decision 46268 puts amendments to the rules for accounting services, and for zakat and tax accounting services, into effect. Licences are now category-specific, bookkeeping and zakat and tax return preparation are explicitly regulated, and firms carry new duties: a compliance officer, documented internal policies and an annual self-assessment. (SOCPA announcement ↗)
Separately, the Financial Control Law, in force since April 2026, tightens oversight of government-funded bodies and those working on their behalf. If your company delivers government contracts, check its reach with your advisers. (Ministry of Finance ↗)
Four changes carry the most weight for the people accountable for these relationships:
Zakat and tax return preparation is now a regulated accounting service
If your organisation takes zakat calculation or tax return work as a bundled add-on from its audit firm or bookkeeping provider, that arrangement now needs the right licence behind it. A provider without it is a governance exposure inside your finance function, not a paperwork detail. (SOCPA zakat and tax rules ↗)
Bookkeeping providers now sit inside the licensing perimeter
This is the change most likely to have escaped board and audit committee attention. A bookkeeping provider whose output feeds your statutory filings now needs a licence, even if it never performs an audit. If part of your finance operation is outsourced, this merits a direct question rather than an assumption.
Combined audit and accounting licences carry extra independence safeguards
Firms that provide both audit and accounting services under a combined licence face additional independence safeguards. Audit and advisory work packaged together for pricing convenience deserves a fresh look.
CPD evidence is now part of each firm's annual self-assessment
Continuing professional development now has to be evidenced in the firm's annual self-assessment. For any audit committee relying on a firm's professional standing in its due diligence, this is a specific, legitimate item to ask for.
Where this lands on your desk
It depends on your position in the organisation.
CFO
Your exposure sits less in your own licensing and more in the licensing of everyone your organisation contracts with. Put a direct question to your external auditor, tax adviser and any outsourced bookkeeping provider: does your current licence cover everything you do for us under Decision 46268?
A provider unable to answer that precisely is a provider whose risk you are already carrying.
CRO
This is a third-party risk question hiding in plain sight. Vendor and provider risk assessments should now include a SOCPA licensing check for any external firm handling statutory filings, zakat or tax, alongside the usual credit, cyber and operational categories already on your risk register.
It is also worth revisiting your external audit and advisory arrangements through an independence lens, since firms holding a combined audit and accounting licence now face added independence safeguards.
Audit Committee or BAC
The question worth raising at your next meeting is direct: has management confirmed that every licensed provider the organisation relies on, including audit, tax, zakat and bookkeeping, holds the right licence category under Decision 46268?
This is the kind of governance gap that looks obvious in hindsight and invisible until someone asks it aloud.
The governance imperative
The Kingdom's audit and accounting profession is going through one of its most significant tightenings in years, at a time when more Saudi family businesses and mid-sized companies are preparing for outside investors and listings.
That timing is not incidental. Regulators are raising the floor on audit and advisory quality just as the cost of getting it wrong is rising, and boards are increasingly expected to have asked these questions before a regulator or a deal counterparty does.
The practical next step
For CFOs and CROs, the practical next step is a provider licensing review ahead of the next audit cycle or contract renewal, not after. It is a short conversation with your providers now, and a much longer one with a regulator later if it is skipped.
This article is general information, not legal advice. Confirm how the rules apply to your organisation with your advisers.