📱Test our Android app — free beta!Join Beta GroupYou'll receive the install link by email after joining.

Differences

This shows you the differences between two versions of the page.


—guide:public-authority:rti-compliance-audit [2026/07/10 22:17] (current) – created - external edit 127.0.0.1
Line 1: Line 1:
 +{{htmlmetatags>metatag-keywords=(RTI compliance audit,RTI audit checklist,public authority RTI audit,RTI internal audit,Section 4 audit)
 +metatag-description=(Annual RTI compliance audit checklist for public authorities. Twelve audit areas, scoring template, evidence required, and how to close audit observations from the CAG or Information Commission. Free 2026 audit guide.)}}
  
 +====== RTI Compliance Audit Checklist for Public Authorities ======
 +
 +<WRAP center round tip 100%>
 +**Direct answer.** Every public authority should run an internal RTI compliance audit at least once a year, ideally aligned with the financial-year close. The audit should cover **twelve areas**: PIO designation, FAA designation, Section 4 disclosure, record management, RTI receipt and disposal SLAs, fees, appeals, third-party procedure, Section 25 returns, training, citizen feedback, and Information Commission directions outstanding. A scoring template is below — eighty per cent or above is the working benchmark; below sixty per cent is a red flag for the head of office and external audit.
 +</WRAP>
 +
 +CAG audits and Information Commission compliance reviews routinely flag the same patterns: outdated PIO pages, untracked appeal disposals, missing Section 25 returns, no Section 4 update log. An internal audit catches all of these before the external audit does. This checklist is designed for adoption by the public authority's vigilance / records committee.
 +
 +===== When to run the audit =====
 +
 +  * Annually, in April, after the financial-year close.
 +  * Before any planned CAG audit.
 +  * Before any Information Commission inspection.
 +  * On change of head of office (handover).
 +  * On any major adverse Commission order against the authority.
 +
 +===== Legal basis =====
 +
 +  * **Section 4** — disclosure and record management.
 +  * **Section 5** — designation of PIOs.
 +  * **Section 6 to 11** — applications, fees, exemptions, third-party.
 +  * **Section 19** — appeals.
 +  * **Section 20** — penalty (Commission's power; audit tracks adverse orders).
 +  * **Section 25** — annual return.
 +
 +===== Twelve audit areas with scoring =====
 +
 +Each area is scored out of ten. The total is out of 120; convert to percentage.
 +
 +==== Area 1 — PIO designation (10) ====
 +
 +  * Office order designating PIO is current (4).
 +  * Subject-wise PIOs designated where appropriate (2).
 +  * APIOs at all field offices (2).
 +  * Substitute PIO during PIO leave (2).
 +
 +==== Area 2 — FAA designation (10) ====
 +
 +  * Office order designating FAA is current (5).
 +  * FAA is senior in rank to PIO (3).
 +  * Substitute FAA during leave (2).
 +
 +==== Area 3 — Section 4 disclosure (10) ====
 +
 +  * All 17 sub-clauses published (5).
 +  * Last-updated date within last quarter (2).
 +  * Regional-language version (1).
 +  * Mobile-friendly (1).
 +  * Indexable (1).
 +
 +==== Area 4 — Record management (10) ====
 +
 +  * Master file index in place (3).
 +  * Retention schedule applied (2).
 +  * Active files digitised (3).
 +  * Search-and-retrieval log maintained (1).
 +  * Annual records audit (1).
 +
 +==== Area 5 — RTI receipt and disposal SLA (10) ====
 +
 +  * % applications acknowledged within 48 hours (3).
 +  * % disposed within 25 days (3).
 +  * % disposed within 30 days (2).
 +  * % deemed refusals (negative score below 5%) (2).
 +
 +==== Area 6 — Fees (5) ====
 +
 +  * Receipts register reconciled with cashier (3).
 +  * No unlawful additional-fee demands (2).
 +
 +==== Area 7 — Appeals (10) ====
 +
 +  * % first appeals disposed within 30 days (3).
 +  * % within 45 days (2).
 +  * Speaking orders for all appeals (3).
 +  * Orders despatched to both parties (2).
 +
 +==== Area 8 — Third-party procedure (10) ====
 +
 +  * Section 11 notice issued in 100% of relevant cases (5).
 +  * Public-interest balance recorded (3).
 +  * Third-party right of appeal communicated (2).
 +
 +==== Area 9 — Section 25 annual return (10) ====
 +
 +  * Quarterly returns submitted on time (4).
 +  * Annual return submitted by 30 April (3).
 +  * Data reconciles with internal registers (2).
 +  * Recommendations for reform recorded (1).
 +
 +==== Area 10 — Training (10) ====
 +
 +  * PIO has attended at least one DoPT-recognised training in the year (4).
 +  * FAA has attended training (3).
 +  * APIOs trained (2).
 +  * Refresher for dealing assistants (1).
 +
 +==== Area 11 — Citizen feedback (10) ====
 +
 +  * Feedback mechanism on website (3).
 +  * Average response time to feedback (2).
 +  * Citizen camps / awareness drives (2).
 +  * Brochures available in regional language (3).
 +
 +==== Area 12 — Outstanding Commission directions (15) ====
 +
 +  * No Commission direction outstanding more than 30 days (5).
 +  * No Section 19(8)(a) direction unimplemented (5).
 +  * No Section 20 penalty proceedings against PIOs (5).
 +
 +===== Step by step =====
 +
 +  - Step 1. Constitute an audit team — nodal RTI officer, internal audit officer, IT, vigilance.
 +  - Step 2. Agree the score-sheet using the twelve areas above.
 +  - Step 3. Sample 5% of applications and 10% of appeals for evidence.
 +  - Step 4. Cross-verify with public-facing data (website, portal, Commission's records).
 +  - Step 5. Score each area with documentary evidence.
 +  - Step 6. Compile a draft report with scores, findings, recommendations.
 +  - Step 7. Discuss with the head of office; finalise.
 +  - Step 8. Place the report on the office's RTI page (with redactions for any sensitive personnel content).
 +  - Step 9. Track corrective actions to closure.
 +
 +===== Evidence the audit team should gather =====
 +
 +  * RTI Receipt Register sample.
 +  * Appeals Register sample.
 +  * Fee Register sample.
 +  * PIO/FAA office orders.
 +  * Section 4 page screenshots with date.
 +  * Section 25 returns submitted.
 +  * Outstanding Commission orders.
 +  * Training certificates of officers.
 +  * Citizen feedback log.
 +
 +===== Scoring benchmarks =====
 +
 +^ Score % ^ Rating ^ Action ^
 +| 90+ | Excellent | Sustain |
 +| 80 to 89 | Good | Minor improvements |
 +| 70 to 79 | Average | Targeted improvements |
 +| 60 to 69 | Weak | Action plan within 30 days |
 +| Below 60 | Critical | Head of office to convene review |
 +
 +===== Common public authority mistakes =====
 +
 +  * **No internal audit at all** — first time the public authority sees the gaps is during CAG audit.
 +  * **Audit by the same team that runs RTI** — conflict of interest.
 +  * **Audit with no evidence** — checking yes/no without documents.
 +  * **Audit findings not closed** — same observations year after year.
 +  * **No publication of audit report** — citizens don't see it; Commission has nothing to track.
 +
 +===== Frequently asked questions =====
 +
 +==== Is the audit mandatory by law? ====
 +
 +The Act does not name an "audit" but the Section 25 return, Section 4 sign-off, and CAG performance audit collectively make internal audit a practical necessity.
 +
 +==== Who pays for an external audit? ====
 +
 +External audit (CAG, peer-review by another department, civil-society audit) is funded by the audit authority's budget. Internal audit is by the public authority's own staff.
 +
 +==== How long does an audit take? ====
 +
 +Two to three weeks in a small office; six weeks in a large ministry.
 +
 +==== Can a third-party agency audit us? ====
 +
 +Yes — many ministries engage civil-society partners (e.g. CHRI, RAAG) for independent scoring.
 +
 +==== What if we score below 60%? ====
 +
 +The head of office must convene a review and produce a 30-day action plan.
 +
 +==== Do we publish the audit report? ====
 +
 +Yes, with redactions for sensitive personnel matters.
 +
 +==== Does the Commission accept our audit as evidence? ====
 +
 +Yes. Commissions look favourably on public authorities that maintain internal audit and produce findings.
 +
 +===== Sources =====
 +
 +  * The Right to Information Act, 2005 — Sections 4, 5, 6 to 11, 19, 20, 25.
 +  * Department of Personnel and Training, [[https://cic.gov.in|cic.gov.in]] — guidance.
 +  * Comptroller and Auditor General, [[https://cag.gov.in|cag.gov.in]] — performance audits.
 +  * Central Information Commission, [[https://cic.gov.in|cic.gov.in]] — illustrative directions.
 +
 +===== See also =====
 +
 +  * [[guide:public-authority:section-4-1-b-checklist|Section 4(1)(b) checklist]]
 +  * [[guide:public-authority:record-management-system|RTI record management system]]
 +  * [[guide:public-authority:annual-rti-return|Annual RTI return]]
 +  * [[guide:public-authority:rti-cell-sop|RTI cell SOP]]
 +  * [[guide:public-authority:pio-faa-details-website|PIO and FAA details on website]]
 +
 +Last reviewed: 9 May 2026.
 +===== RTI compliance audit: How to assess whether a public authority is meeting RTI obligations? =====
 +
 +RTI compliance audit of public authorities — complete guide on assessment and enforcement:
 +
 +  - **Step 1: What is RTI compliance?** (a) under Section 4(1)(a) of the RTI Act: every public authority must maintain all records duly indexed and in a form that facilitates the right to information, (b) under Section 4(1)(b): every public authority must publish 17 categories of information suo moto (on its website — including organisation structure, powers and duties, decision-making process, rules and regulations, budget, subsidy programmes, information about PIOs, etc.), (c) under Section 5(1): every public authority must designate a Central/State Public Information Officer (CPIO/SPIO) and a First Appellate Authority (FAA), (d) under Section 26: the appropriate government must organise training programmes and create awareness about the RTI Act.
 +  - **Step 2: Key compliance indicators.** (a) Section 4(1)(b) disclosure: is the 17-point mandatory disclosure published on the website — and is it current (updated within the year), (b) PIO/FAA designation: are the PIO and FAA designated — and are their names, designations, and contact details published, (c) RTI fee mechanism: is the RTI fee collection mechanism in place (online payment, IPO, court-fee stamp — as per the state/central rules), (d) response rate: what percentage of RTI applications are responded to within 30 days (the statutory timeline), (e) rejection rate: what percentage of RTI applications are rejected — and are the rejections with valid reasons (citing the specific exemption), (f) first appeal disposal: what percentage of first appeals are disposed of within 30 days (the statutory timeline for FAA), (g) penalty and compliance: has the Information Commission imposed penalties — and has the public authority complied.
 +  - **Step 3: How to audit.** (a) visit the public authority's website (check Section 4(1)(b) disclosure — is it present, is it current, are all 17 categories covered), (b) file test RTI applications (file 3-5 RTI applications on different topics — and track the response time, the quality of response, and the rejection rate), (c) file RTI on compliance (ask the public authority for: (i) the number of RTI applications received per year, (ii) the number responded to within 30 days, (iii) the number rejected — with reasons, (iv) the number of first appeals — and the disposal rate, (v) the number of second appeals to the Information Commission — and the penalties imposed), (d) check the Information Commission's website (for orders against the public authority — and the compliance status), (e) check the Annual Return (the public authority must file an annual return with the Information Commission — with compliance statistics).
 +  - **Step 4: File RTI for audit.** File RTI with the public authority asking for: (a) the Section 4(1)(b) disclosure (the date of last update — and the URL where it is published), (b) the PIO and FAA designated (the names, designations, phone numbers, and email addresses — and whether the posts are currently filled), (c) the number of RTI applications received from [date] to [date] (and the number responded to within 30 days — and the number rejected — with the reasons for rejection), (d) the number of first appeals received and disposed of (within 30 days — and the number pending — and the reasons for pendency), (e) the number of second appeals to the Information Commission (and the number of penalties imposed — and the amount — and whether the penalties have been paid), (f) the annual return filed with the Information Commission (for the year [year] — a copy of the return).
 +  - **Step 5: Common non-compliance.** (a) Section 4(1)(b) not published (the public authority has not published the 17-point disclosure — or it is years old — or it is incomplete), (b) PIO not designated (the PIO post is vacant — or the PIO is additional charge — or the contact details are not published), (c) RTI applications not responded to (the PIO does not respond — or responds after 30 days — or gives incomplete information), (d) rejections without valid reasons (the PIO rejects without citing the specific exemption — or cites "general" reasons like "not in public interest"), (e) first appeals not disposed of (the FAA does not respond — or responds after 30 days — or upholds the PIO's rejection without reasoning), (f) penalties not paid (the Information Commission imposes a penalty — but the public authority does not pay — or recovers it from the PIO).
 +  - **Step 6: Enforcement.** (a) file a complaint with the Information Commission (under Section 18 — for non-compliance with Section 4 — or non-response by the PIO), (b) the Commission can: (i) direct the public authority to comply (publish Section 4(1)(b) — designate PIO — respond to RTI applications), (ii) impose a penalty on the PIO (Rs 250 per day — up to Rs 25,000 — under Section 20(1)), (iii) recommend disciplinary action (against the PIO — under Section 20(2)), (c) file a writ petition (in the High Court — under Article 226 — for systemic non-compliance — the court can order the public authority to comply with the RTI Act), (d) use the audit findings for advocacy (publish the audit report — approach the media — and the parliament/legislature — to highlight non-compliance).
 +  - **Step 7: Best practices.** (a) proactive disclosure (the public authority should publish all 17 categories — on the website — updated annually), (b) online RTI portal (the public authority should accept RTI applications online — with online payment — and online response), (c) training (the public authority should train the PIO and FAA — on the RTI Act, the exemptions, and the response format), (d) monitoring (the public authority should monitor the RTI compliance — monthly — with statistics on response rate, rejection rate, and appeal disposal), (e) the CIC has issued guidelines (on Section 4(1)(b) compliance — and on the PIO's duties — and the public authority should follow these guidelines).
 +
 +See [[https://righttoinformation.wiki/guide/public-authority/rti-compliance-audit|RTI Compliance Audit]] and [[https://righttoinformation.wiki/guide/find-pio-2026|Find PIO]].
 +
 +{{tag>rti compliance audit section 4 public authority pio faa information commission penalty section 20 annual return 2026}}