What Counts as "Control" Under FEMA's 2022 ODI Rules — and Why It Decides Whether You Need an Audit or Just Signed Financials
FEMA control rules determine whether an investment is ODI or OPI and whether an APR audit is required. Explore thresholds, governance, and compliance.
Accorp Compliance Team
Our team of compliance experts specializes in PCI DSS, SOC 2, and other security frameworks to help businesses achieve and maintain compliance.
Ask any FEMA advisor which single word in the 2022 ODI framework causes the most disputes, misclassifications, and late-night phone calls before a December 31 deadline, and the answer is almost always the same: control. Whether your Indian company owes a full audit of its foreign subsidiary's financials for APR purposes, or can rely on lighter certified statements instead, comes down almost entirely to whether your specific shareholding and governance arrangement crosses FEMA's control threshold. Get the call wrong, and you either burn money on an audit engagement you didn't strictly need, or — the far more expensive mistake — file years of APRs without the audit RBI actually required, only discovering the gap once an AD bank or compounding proceeding catches it.
This piece breaks down what control legally means under the Foreign Exchange Management (Overseas Investment) Rules, 2022, why the definition is more genuinely contested than most first-time filers assume, and exactly how it decides your APR audit obligation.
The Word Doing All the Work in Your ODI Structure
Under the older regime that governed outbound investment before August 2022, companies structuring overseas investments rarely spent much energy scrutinizing the precise legal meaning of control — the framework simply didn't hinge as much on it. That changed completely with the current Rules. Today, whether your investment gets classified as Overseas Direct Investment (ODI) or the far lighter Overseas Portfolio Investment (OPI) depends on whether you hold 10% or more of a listed foreign entity's paid-up equity, or separately, whether you have control — regardless of how small your equity stake actually is. ODI brings materially heavier RBI reporting obligations with it. Misclassifying one as the other doesn't just create an awkward filing; it produces an incorrect compliance trail from transaction day one, a mistake that compounds with every passing filing year.
Reading the Actual Legal Text
The 2022 Rules define control as the right to appoint a majority of directors, or to control management or policy decisions — exercisable by a person or persons, acting individually or in concert, directly or indirectly. That right can be established through shareholding, management rights, shareholders' agreements, voting agreements entitling the holder to 10% or more of voting rights, or, in the Rules' own deliberately open-ended phrasing, "in any other manner."
This is a considerably broader test than most people assume at first glance. You don't need majority ownership to have control under FEMA — a carefully drafted shareholders' agreement granting board appointment rights or veto power over key decisions can establish control at a genuinely minority equity stake. This is exactly why a quick glance at the cap table isn't a substitute for reviewing the actual governance documents when determining your ODI compliance status.
The Fork in the Road: ODI Versus OPI
Once an investment is classified as ODI — through the 10%+ equity route, or through control regardless of equity size — a substantial set of recurring obligations kicks in: annual APR audit, continuous RBI Reporting through your AD bank, adherence to the 400% net worth financial commitment ceiling, and ongoing monitoring for as long as the investment stays active. OPI, by comparison, carries a meaningfully lighter compliance load, without the same annual audit-and-reporting cycle attached to it.
This is precisely why the control question isn't a legal formality to skim past. It's the decision point that determines whether your company signs up for a materially more demanding annual compliance track, year after year, for the life of the investment.
Where Practitioners Genuinely Disagree
Here's the part of this topic that rarely gets discussed plainly: reasonable, well-informed FEMA practitioners don't fully agree on how to read one specific piece of the control definition. RBI's own Foreign Exchange Management (Overseas Investment) Directions, 2022 have been interpreted by some as suggesting that simply holding 10% or more of voting rights, on its own, constitutes control — no accompanying agreement or management right required.
A significant body of legal opinion pushes back against that reading. The argument runs that the 10% voting rights clause in the formal definition was meant to apply in the specific context of a voting agreement — a contractual arrangement conferring that voting entitlement — rather than functioning as a standalone rule where crossing 10% ownership automatically equals control regardless of any accompanying agreement. Treating bare 10% ownership as automatic control, this view holds, would undercut the more liberalised intent behind the 2022 framework — and RBI's operational Directions aren't necessarily the definitive word on how Rules issued by the Central Government itself should ultimately be interpreted.
For any company structuring or reviewing an existing cross-border investment, this isn't a question to settle by default assumption. It's a live area of interpretive disagreement, and it's worth getting a considered, documented legal view rather than reaching for whichever reading feels most convenient in the moment.
Turning the Control Call Into an Audit Decision
This is where the abstract legal question becomes a concrete cost. Where the Indian company, directly or through a step-down subsidiary, holds 10% or more equity with control in an overseas entity, an annual audit of that foreign entity becomes mandatory for APR purposes — irrespective of profitability or how active the entity actually is. Where a genuine statutory audit isn't applicable in the specific host jurisdiction, RBI has clarified that the APR can instead rely on chartered accountant certification rather than a full independent audit.
The control determination is exactly what decides which path applies to your structure. Misjudge it — assume control where the governance documents don't actually support that conclusion, or overlook a shareholders' agreement that quietly confers control despite a modest equity stake — and you either commission audit work that wasn't strictly necessary, or, in the more serious scenario, file an APR missing the audit your Master Direction on ODI obligations actually demanded.
The Cost of Getting It Wrong in Either Direction
Companies that lean cautious and assume control exists when it technically doesn't end up commissioning a full audit engagement with a host-country professional — a UK auditor for APR filing, a US CPA for APR filing, or an equivalent elsewhere — when lighter certification might genuinely have sufficed. That's an avoidable expense, but a recoverable one.
The costlier direction runs the other way. A company assumes its structure falls short of control, often because equity sits just under the 10% mark, without carefully checking whether a shareholders' agreement or board appointment right independently establishes control regardless of that percentage — and proceeds to file its APR without the audit that was, in fact, required. This tends to surface during AD bank scrutiny or a later compounding review, at which point the missing audit has to be reconstructed retroactively across every affected year, layered with Late Submission Fees or formal compounding to bring the filing history back into good standing.
Getting the Determination Right From the Start
A sound control analysis starts with the full governance package — shareholders' agreements, voting arrangements, board appointment clauses, and management influence provisions — not just the percentage sitting on the cap table. It's worth revisiting this analysis whenever the governance arrangement itself changes, since a renegotiated agreement or a new board seat can shift an investment from OPI into ODI territory, or the reverse, without any change to the raw equity number involved. And it's worth documenting the reasoning behind the control call at the time the investment is made, so the classification has a defensible paper trail if questioned later during an AD bank review.
Once the classification is settled and confirmed, the practical next step is making sure whoever audits the foreign entity — wherever they're based — understands the specific control basis behind the engagement, rather than simply being asked for "an audit for RBI" without context. That context is often what determines whether the resulting financial statements actually satisfy what an APR filing India submission needs.
Getting this one determination right, early and on paper, tends to save companies far more than the cost of the legal review itself — because the alternative isn't a small correction later. It's rebuilding years of compliance history under regulatory scrutiny, which is a considerably harder position to argue from than a clear, documented control analysis made at the outset.




