How to Build an Internal Compliance Response Process When Labour and Tax Rules Change

When labour or tax rules change, a company’s first priority should not be to interpret the new requirements internally. It should be to confirm quickly whether the change affects its people, payments, filings, contracts or approval processes.

For foreign businesses with employees, supplier payments, sales activities or ongoing filing obligations in Sri Lanka, compliance should not depend solely on ad hoc reminders from one finance employee or an external adviser. A more reliable approach is to establish defined information channels, owners, assessment templates and escalation paths, so management can see changes, set priorities and confirm that implementation has been completed.

Create a Single Entry Point for Compliance Changes

Regulatory changes may come to a company’s attention through authority announcements, professional updates, industry associations, banks, suppliers or employee questions. The issue is not the number of sources. It is that information may enter the business without being logged, assessed or formally closed.

Consider appointing an internal coordinator to maintain a compliance change register. This person does not need to provide legal or tax advice. Their role is to ensure that each change has a source, an owner and a defined next step. The register may include the following fields:

Item	Information to Record
Change topic	Labour, payroll, employee benefits, tax, invoicing, payments, filings or other matters
Information source	Authority website, appointed professional firm, internal discovery or business partner notification
Date received	The date the company first received or identified the information
Potentially affected entity	Relevant local company, branch, project team or business line
Questions to confirm	Whether the change applies, when it applies and what internal actions may be required
Professional adviser owner	The appropriately qualified legal, tax, audit or labour adviser engaged for the matter
Internal implementation owner	Finance, HR, operations, procurement, legal or management representative
Status	Pending assessment, pending decision, in progress, pending review or closed

The key purpose of a single entry point is to avoid relying on verbal communication. Regardless of where information originates, retain the original link, email, document or meeting record, and note when the company began to address the issue.

Assess Impact Through Three Questions Before Changing Any Process

After receiving information about a change, the internal coordinator should submit the matter to an appropriate licensed professional firm or suitably qualified professional for confirmation. Internal teams can prepare the relevant facts, but should not reach legal, labour or tax conclusions based only on informal summaries or forwarded messages.

The assessment can be structured around three questions.

1. Does the Change Apply to the Company?

The company should provide its entity type, actual business activities, workforce profile, revenue or payment scenarios, current registration status and any special project arrangements. Rather than asking only whether a new rule applies, provide enough business context for the professional adviser to assess the position.

2. Which Business Processes Could Be Affected?

Labour-related changes may require a review of employment contracts, onboarding documents, payroll calculations, personnel records, working arrangements, employee communications and termination procedures. Tax-related changes may affect transaction classifications, contract terms, invoicing practices, payment approvals, accounting records, filing preparation and documents required for external audit.

At this stage, keep separate records of conclusions requiring professional confirmation and facts already known internally. For example, the finance team can describe the current payment process, while HR can explain existing roles and payroll cycles. The specific treatment should be addressed through advice or recommendations from the engaged professional firm.

3. What Operational Risks Could Arise if No Adjustment Is Made?

The company does not need to determine penalties or legal consequences itself. It should instead identify practical operational risks: whether the payroll system requires changes, whether contract templates need updating, whether employees need to be informed, whether payments should be paused for review, whether historical records need to be completed, or whether management approval is needed for additional budget or resources.

Establish a Cross-Functional Responsibility Matrix

Compliance changes often break down between finance, HR and operations. A professional adviser may provide an opinion, but no one confirms whether the system was updated. A system may be updated, but no one checks the contracts or employee communications. Management may approve a change, but the evidence of implementation may never be filed.

For each change, use a simple responsibility matrix that identifies at least the following roles:

• Management approver: Sets risk priorities, approves resource allocation and decides on significant business adjustments.
• Internal coordinator: Maintains the change register, convenes meetings, tracks outstanding items and files supporting evidence.
• Finance owner: Identifies actual impacts on accounting, payments, invoicing, filing materials and system settings.
• HR owner: Reviews employment contracts, employee files, payroll materials, internal policies and employee communications.
• Business or operations owner: Confirms whether customers, suppliers, project delivery or day-to-day processes are affected.
• Professional adviser contact: Provides advice within the agreed scope and identifies facts and documents the company needs to provide.

The matrix should specify who does what, what they must deliver, who reviews the work and when the item can be confirmed as closed. Broad assignments such as “finance to follow up” or “adviser to handle” are usually not enough to create an auditable implementation trail.

Turn Professional Advice into an Internal Action List

External professional advice often uses legal, tax or labour terminology. Internal implementation requires clear, completed tasks. The coordinator can break the advice into four categories of action:

1. Information gathering: Compile contracts, payroll records, payment records, organisation charts, employee lists, internal policies or historical filing materials.
2. Process changes: Update approval steps, data collection methods, payroll or accounting system settings, supplier information requirements and filing paths.
3. Document updates: Review contracts, templates, employee notices, internal policies or management authorisation documents that may need updating.
4. Communication and training: Tell affected teams when the new process should begin, when the previous process should stop and who should handle exceptions through escalation.

Each task should have completion evidence, such as an approved document version, a system change record, meeting minutes, employee communication records, an email from the professional adviser or a review checklist. The purpose of keeping evidence is not to create unnecessary paperwork. It is to show how the company identified and addressed the change when staff change, audit preparation is required or a later dispute arises.

Set an Escalation Path for Urgent Changes

Not all changes need to be handled at the same speed. A company can use three internal impact levels—routine, priority and urgent—rather than attempting to assess legal severity on its own.

For example, if a change may affect an upcoming payroll run, near-term filing preparation, customer contracts currently being signed or significant payments, notify management and the relevant professional adviser promptly. Related actions that have not been reviewed may need to be temporarily paused. If the impact concerns future templates or longer-term record organisation, it can be included in the routine project plan.

When escalating a matter, provide management with a short decision note covering: known facts, questions still to be confirmed, affected processes, recommended temporary controls, professional support required and the date of the next update. This helps avoid sending management only a vague message that “the rules have changed.”

Use a Post-Implementation Review to Confirm the Process Is Working

Completion of an implementation task does not necessarily mean the risk has disappeared. For changes affecting payroll, employee management, payments or ongoing filings, conduct an internal review after the first implementation to check whether actual practice matches the confirmed approach.

The review can focus on whether old templates are still being used, whether system fields are complete, whether employees, suppliers or business teams understand the new requirements, whether exceptions have been recorded and whether the professional adviser needs to carry out additional review. If issues are identified, reopen the item in the change register rather than simply adding another explanation in an email thread.

Businesses with ongoing operational obligations can also use this process alongside the article “What Must Be Maintained After Incorporation: A Continuing Operations Checklist for Sri Lankan Companies” and the personnel preparation work described in “How to Prepare Payroll, EPF and Personnel Records Before Hiring Your First Employee.” The first helps create an annual and ongoing obligations view, while the second helps HR teams organise basic labour-related information.

Minimum Document Pack to Retain

For each labour or tax change that has been addressed, consider retaining at least the following materials:

• Original information source and date identified;
• Description of the company’s business facts and the affected scope;
• Questions submitted to the professional adviser and written responses received;
• Management decisions or internal approval records;
• Updated processes, templates or system change records;
• Communications with employees, business teams or suppliers; and
• Results of the first implementation review and any outstanding items.

MMD Business Support can assist companies in organising change items, coordinating document lists, arranging communication with local professional firms, following up cross-functional tasks and consolidating project progress. Company registration, legal, tax, audit, immigration and specific licensing work should be undertaken by appropriately qualified and engaged professional firms.

Information from relevant authorities can be cross-checked through official sources, including the Inland Revenue Department of Sri Lanka (https://www.ird.gov.lk/) and the Department of Labour (https://labourdept.gov.lk/). Companies should address specific matters based on their own business facts and the latest advice of their engaged professional advisers.

This content is for general information only and does not constitute legal, tax or immigration advice. Specific requirements should be confirmed with the relevant Sri Lankan authorities and engaged licensed professional advisers.