EU Financial Regulation 2018: A Guide for Auditors

What it is: background and legal basis

Understanding EU financial regulation is crucial for anyone working within the EU institutions, especially for auditors. This guide focuses on key aspects of the EU's financial framework as defined primarily by Regulation (EU, Euratom) 2018/1046, often called the Financial Regulation. This regulation lays down the rules for establishing and implementing the general budget of the Union and repeals Regulation (EU, Euratom) No 966/2012. It sits within the broader context of the Treaty on the Functioning of the European Union (TFEU), specifically Articles 290-291 which deal with delegated and implementing acts and more broadly Articles 310-325 on the EU Budget. The Financial Regulation ensures transparency, accountability, and sound financial management in the use of EU funds.

How it works in practice

The EU financial regulation establishes a comprehensive system covering various elements of budget management, internal control, and auditing. Let's explore some key components:

Key Financial Actors

Four main actors are involved in the implementation of the EU budget. Each has distinct responsibilities to ensure proper financial stewardship:

• Authorising Officer (AO): Typically, a Director-General within a Commission DG. The AO is responsible for implementing the budget. They establish operational objectives, ensure that activities comply with regulations, and delegate budget implementation tasks as appropriate.
• Accounting Officer (ACO): Responsible for implementing payments, collecting revenue, and ensuring proper accounting and reporting. The ACO also defines and validates accounting systems and manages treasury operations. The Accounting Officer of the Commission is a central function with an overview of the entire EU budget.
• Internal Auditor (IA): Provides independent, objective assurance and consulting services designed to add value and improve an organisation's operations. The IA helps the organisation accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes, as defined by the Institute of Internal Auditors (IIA) standards, which are also applicable in the EU context. Each DG has its own internal audit capability reporting to the DG’s Director-General, but ultimately supervised by the Commission’s Internal Audit Service (IAS).
• Certifying Authority (CA): Found primarily within the context of shared management. Each Member State designates a CA for each operational program funded by the EU. The CA is responsible for verifying the statements of expenditure and the payment applications before they are submitted to the Commission.

Ex-Ante and Ex-Post Controls

EU financial regulation mandates both ex-ante (before the event) and ex-post (after the event) controls. These controls aim to prevent errors and fraud and to ensure that funds are used correctly.

• Ex-ante controls: These preventive measures are implemented before a transaction takes place. They include checking the legality and regularity of proposed expenditure, verifying supporting documents, and ensuring compliance with relevant procedures and regulations. Examples include procurement checks, eligibility verification for grants, and pre-financing guarantees.
• Ex-post controls: These detective measures are performed after a transaction has occurred. They include audits, evaluations, and other checks to identify errors, irregularities, and fraud. Examples include audits by the European Court of Auditors (ECA), performance evaluations of EU programs, and investigations by the European Anti-Fraud Office (OLAF) and the European Public Prosecutor’s Office (EPPO). See OLAF vs. EPPO: EU Fraud Investigation for further detail.

Management Modes

The EU budget is implemented under three main management modes:

• Direct Management: The Commission implements the budget directly, either through its departments at headquarters or through its delegations in third countries. This mode is primarily used for administrative expenditure and for policy areas where the Commission has strong centralised control.
• Indirect Management: The Commission entrusts budget implementation tasks to other bodies, such as EU agencies, international organisations, or national public bodies. This mode is used when these bodies have specialised expertise or can implement the budget more effectively.
• Shared Management: The Commission delegates budget implementation tasks to Member States. This mode is used for the majority of the EU budget, particularly in areas such as agriculture, regional development, and employment. Under shared management, Member States are responsible for selecting projects, managing payments, and ensuring compliance with EU regulations.

Sound Financial Management (SFM)

Article 33 of the Financial Regulation enshrines the principles of sound financial management, requiring that the budget be implemented in accordance with the principles of economy, efficiency, and effectiveness:

• Economy: Minimising the costs of resources used. Obtaining the right quantity and quality of resources at the lowest possible cost.
• Efficiency: Optimising the relationship between resources used and outputs achieved. Maximising output for a given level of input, or minimising input for a given level of output.
• Effectiveness: Achieving the intended objectives and results. Ensuring that the outputs and outcomes of EU spending are aligned with the policy goals and contribute to the overall objectives of the EU.

Budget Implementation Cycle

The EU budget implementation cycle can be simplified into these steps:

1. Programming: Multi-annual planning of EU spending.
2. Budget Adoption: Annually setting the budget by the European Parliament and Council.
3. Implementation: Management of funds through various management modes.
4. Control and Audit: Monitoring and evaluation of spending and performance.
5. Evaluation: Assessing the impact and effectiveness of EU spending.

Audit Trail Obligations

The Financial Regulation requires the establishment of an audit trail for all financial transactions. Article 68 details the requirements for a complete and reliable audit trail. This trail should provide a clear record of all transactions, from the initial commitment of funds to the final payment and reporting. It enables auditors to trace the flow of funds, verify compliance with regulations, and identify any irregularities or fraud. The audit trail should include documentation such as contracts, invoices, payment orders, and audit reports. Electronic systems and data management are crucial for maintaining an effective audit trail.

Early Detection and Exclusion System (EDES) - Articles 135-145

The Early Detection and Exclusion System (EDES) is established by Articles 135-145 of the Financial Regulation. This system aims to protect the EU's financial interests by detecting and excluding unreliable entities from receiving EU funding. EDES operates based on information from various sources, including audits, investigations, and judicial decisions. EDES can impose sanctions on entities that have committed fraud, corruption, or other serious irregularities. These sanctions can include exclusion from future EU funding, financial penalties, and publication of the entity's name. The EDES system is managed by a central panel that makes decisions on whether to impose sanctions.

Here is a table summarizing the key aspects of the EDES system:

The most common points of confusion

• Differentiating between Authorising Officer and Accounting Officer responsibilities: Understanding that the AO is responsible for budget implementation and the ACO for accounting and treasury operations.
• Understanding the nuances of management modes (direct, indirect, shared): Recognizing the different levels of Commission control and Member State responsibility in each mode. Often exam questions will provide a specific scenario and test which management mode is applicable.
• Confusing the roles of OLAF, EPPO, and ECA: Knowing that OLAF investigates fraud, EPPO prosecutes criminal offenses affecting the EU budget, and the ECA audits EU finances.

Why it matters for EU auditors

A thorough understanding of EU financial regulation is essential for EU auditors, allowing them to effectively evaluate the legality and regularity of financial transactions, assess the effectiveness of internal controls, and identify potential fraud and irregularities. Auditors must be familiar with the various management modes, the principles of sound financial management, and the requirements for establishing an audit trail. This knowledge is critical for conducting comprehensive audits and providing assurance to the EU institutions and citizens that EU funds are being used properly. For those preparing for the EPSO AD7 Auditors competition, a deep understanding of these regulations is crucial for success on the exam. Prep for AD7 Auditors on Prep4EU

Related guides

• OLAF vs. EPPO: EU Fraud Investigation
• ECA DAS: EU Budget Audit