---
title: "Edition No. 11 | 28 July 2026 | BNPS and Associates LLP"
url: "https://bnpsca.com/insight/edition-no-11-28-july-2026"
description: "KEY HIGHLIGHTS: • Jay Ushin faces a ₹1.22 crore GST show-cause notice over FY24 ITC reconciliation discrepancies — despite a prior clean CGST audit; reconcil..."
---

# Edition No. 11 \| 28 July 2026

Written by: **[CA Chintan Patel](https://bnpsca.com/partner/ca-chintan-patel)** \| Topic: **Board Members**

 ![Edition No. 11  |  28 July 2026](https://imageproxy.inlancer.in/pr:sharp/f:webp/rs:fit:1200:0/g:sm/plain/https://bnpsca.com/public/assets/upload/images/original/6a7c1d760ef44-Images-10.jpeg)28-07-2026

KEY HIGHLIGHTS:

 • Jay Ushin faces a ₹1.22 crore GST show-cause notice over FY24 ITC reconciliation discrepancies — despite a prior clean CGST audit; reconciliation is no longer optional even post-audit.

 • HDFC Bank's Board fines CEO Sashidhar Jagdishan, CFO Srinivasan Vaidyanathan and a Group Head ₹1 lakh each and self-reports to RBI over a ₹45 crore MSRDC deposit-pricing arrangement.

 • Bank of Baroda confirms ~1TB of customer data leaked on the dark web, tracing the breach to a compromised employee email account, not core banking systems — forensic investigation underway.

  **—** **CHINTAN'S PERSPECTIVE**

| ![](https://bnpsca.com/public/assets/upload/images/original/6872083e8d605-11.png)  **Chintan N. Patel**  Partner – Financial Reporting & Advisory  *B N P S And Associates LLP* | *Jay Ushin's show-cause notice is a reminder that a clean departmental audit is not permanent immunity — GST's automated return-matching is now surfacing ITC discrepancies that earlier manual assessments missed, and 'previously audited without dispute' carries less evidentiary weight than practitioners assume. The same week produced a sharper contrast in disclosure posture: HDFC Bank's Board voluntarily sanctioned its own CEO and CFO and referred the matter to RBI before any regulator asked, while Bank of Baroda moved quickly to characterise a dark-web data leak as an email-account compromise rather than a core-systems failure. Whether reactive or voluntary, the underlying test is the same — can the control failure be evidenced and remediated, not merely explained.* |
|---|---|

**—** **TOP DEVELOPMENTS**

**01** **GST & TAX LITIGATION**

**Jay Ushin Faces ₹1.22 Crore GST Demand Over FY24 ITC Reconciliation Discrepancies**

**WHY IT MATTERS** *A listed auto-component manufacturer's show-cause notice over ITC reconciliation — despite a prior clean CGST audit for the same period — illustrates how automated return-matching is now surfacing discrepancies that manual assessments previously missed.*

The Assistant Commissioner of GST, Sriperumbudur, issued a show-cause notice dated 24 July 2026 to Jay Ushin Ltd under Section 73 of the CGST Act, alleging ₹1,21,68,632 in tax dues from Input Tax Credit reconciliation discrepancies for FY 2023-24. The company disclosed the notice on 25 July 2026 under Regulation 30 of the SEBI LODR Regulations, maintaining its returns were correctly filed and had earlier been audited by the CGST Department without dispute on the issues now raised.

| **PRACTICAL IMPLICATION** A prior clean departmental audit is no protection against a later GSTR-2B/GSTR-3B mismatch notice; periodic ITC reconciliation with contemporaneous documentation remains the primary defence, and disputed demands should be evaluated for provisioning under Ind AS 37. |
|---|

**02** **GOVERNANCE & ICFR**

**HDFC Bank Board Fines CEO, CFO and Retail Assets Head ₹1 Lakh Each Over MSRDC Deposit Arrangement**

**WHY IT MATTERS** *A voluntary board-level disciplinary action against a bank's own CEO and CFO — self-reported to RBI ahead of any regulatory finding — is a governance signal rarely seen at this scale in Indian banking.*

HDFC Bank's Board, at its meeting on 23 July 2026, concluded an internal review into deposit arrangements with Maharashtra State Road Development Corporation entered into in 2017 and 2021, involving differential interest payments of approximately ₹45 crore. The Board issued warning letters and a ₹1 lakh monetary penalty each to MD & CEO Sashidhar Jagdishan, CFO Srinivasan Vaidyanathan and Group Head–Retail Assets Arvind Vohra, characterising the conduct as business overreach rather than fraud, and directed that the matter be communicated to RBI.

| **PRACTICAL IMPLICATION** Boards should note the precedent of voluntary disclosure and self-imposed sanction ahead of regulatory action; audit committees at other banks with structured deposit arrangements involving government-linked entities should independently test compliance with RBI directions on differential pricing. |
|---|

**03** **CYBER RISK & IT CONTROLS**

**Bank of Baroda Confirms Customer Data Leak on Dark Web, Traces Breach to a Compromised Employee Email Account**

**WHY IT MATTERS** *A public-sector bank confirming a leak of customer PII and internal audit records — while asserting core banking systems were unaffected — puts the spotlight on email and endpoint controls, an area auditors often under-test relative to core-system controls.*

Cybersecurity researcher Srikanth Lakshmanan first identified an approximately 1TB dataset advertised on a dark web platform, reportedly including Bank of Baroda customer records, Aadhaar and phone numbers, loan documents and internal audit papers. The bank confirmed the incident originated from a compromised employee email account, stated its core banking systems remain secure, and has commenced a forensic investigation in coordination with relevant authorities.

| **PRACTICAL IMPLICATION** Statutory and internal auditors of banks and NBFCs should extend ICFR/IT-control testing beyond core banking application controls to email security, endpoint protection and third-party access management, and confirm incident-response and customer-notification protocols are tested, not merely documented. |
|---|

**04** **GST ADMINISTRATION**

**CBIC Constitutes Panel to Examine Centralised GST Registration Under a Single PAN**

**WHY IT MATTERS** *If implemented, centralised registration would reverse a structural feature of GST since 2017 — separate registration, audit and assessment in every state of operation — with significant implications for compliance cost and multi-state audit exposure.*

CBIC has constituted an 11-member working group, headed by Chief Commissioner Vinayak Chandra Gupta, to examine centralised administration of GST taxpayers holding multiple state-wise registrations under a single PAN. The panel is to submit its report, including legal, administrative and technology requirements and a draft execution roadmap, within 30 days.

| **PRACTICAL IMPLICATION** Businesses with multi-state GST registrations should track this proposal closely; centralisation would materially change audit selection, assessment jurisdiction and litigation strategy, and finance teams should begin mapping current multi-state compliance costs as a baseline for evaluating the reform. |
|---|

| **— THIS MATTERS MORE THAN IT APPEARS**  *Three unrelated stories this week share a disclosure posture, not an industry. Jay Ushin is responding to a notice already issued. HDFC Bank pre-empted one, self-reporting to RBI before any finding was made. Bank of Baroda moved within days to frame its breach's boundary — email compromise, not core systems — before that framing could be contested. Voluntary and pre-emptive disclosure is increasingly a governance differentiator, not just a compliance formality. But disclosure speed does not substitute for remediation depth: the reconciliation gap, the deposit-pricing override and the email-security gap each still require independent testing, regardless of how quickly the story was told.* |
|---|

**—** **AI WATCH**

| The Center for Audit Quality's Audit Partner Pulse Survey, released 15 July 2026, found nearly 90% of audit partners rate their largest clients' AI-governance maturity as only 'developing' or 'early stage', even as technology disruption and AI-related competitive pressure rank among clients' top risks. For audit committees, this is a prompt to ask not just what AI tools management has deployed, but whether governance and oversight structures around them have kept pace. (CAQ, 15 July 2026) |
|---|

**—** **QUOTE OF THE DAY**

| *“It takes 20 years to build a reputation and five minutes to ruin it.”*  — WARREN BUFFETT |
|---|

**ABOUT BNPS**

B N P S And Associates LLP is a firm of Chartered Accountants having offices at Ahmedabad, Bengaluru, Raichur, Rajkot. The firm provides professional services in the areas of audit, assurance, financial reporting, taxation, risk advisory, due diligence and related professional services. For details refer, [www.bnpsca.com](http://www.bnpsca.com).

**Disclaimer:** This publication is intended solely for informational purposes and should not be construed as professional advice. Readers should seek professional guidance before acting on any information contained herein.

- Tags:
- [Audit Committee](#)
- [Board](#)
- [NFRA](#)
- [Ind AS](#)
- [Governance](#)
- [Risk](#)

 ![CA Chintan Patel](https://imageproxy.inlancer.in/pr:sharp/f:webp/rs:fit:200:0/g:sm/plain/https://bnpsca.com/public/assets/upload/images/original/6872083e8d605-11.png)About the Author

#### CA Chintan Patel

 Ahmedabad

 Ind AS Advisory Statutory Audit of Listed Companies ESG,BRSR

 [View Profile ](https://bnpsca.com/partner/ca-chintan-patel)

#### Share this on social media :

 [  Share ](http://www.facebook.com/sharer.php?u=https://bnpsca.com/insight/edition-no-11-28-july-2026) [  Tweet ](https://twitter.com/intent/tweet?url=https://bnpsca.com/insight/edition-no-11-28-july-2026) [  Post ](https://vk.com/share.php?url=https://bnpsca.com/insight/edition-no-11-28-july-2026) [  post ](https://www.linkedin.com/shareArticle?mini=true&url=https://bnpsca.com/insight/edition-no-11-28-july-2026) [  Share ](https://api.whatsapp.com/send?text=https://bnpsca.com/insight/edition-no-11-28-july-2026) [  post ](https://reddit.com/submit?url=https://bnpsca.com/insight/edition-no-11-28-july-2026) [  pin ](https://pinterest.com/pin/create/button/?url=https://bnpsca.com/insight/edition-no-11-28-july-2026)

## You May Also Like

Similar Articles You Might Find Interesting

 [ ![Edition No. 1  |  13 June 2026](https://imageproxy.inlancer.in/pr:sharp/f:webp/rs:fit:500:0/g:sm/plain/https://bnpsca.com/public/assets/upload/images/original/6a7aa5f36c663-Images-1.jpeg) ](https://bnpsca.com/insight/edition-no-1-13-june-2026 "Blog Link")13-06-2026

#### [Edition No. 1 \| 13 June 2026](https://bnpsca.com/insight/edition-no-1-13-june-2026 "Edition No. 1  |  13 June 2026")

 By Chintan N. Patel

 [Continue Reading](https://bnpsca.com/insight/edition-no-1-13-june-2026)

 [ ![Edition No. 2  |  14 June 2026](https://imageproxy.inlancer.in/pr:sharp/f:webp/rs:fit:500:0/g:sm/plain/https://bnpsca.com/public/assets/upload/images/original/6a7aa73b97dab-Images-2.jpeg) ](https://bnpsca.com/insight/edition-no-2-14-june-2026 "Blog Link")14-06-2026

#### [Edition No. 2 \| 14 June 2026](https://bnpsca.com/insight/edition-no-2-14-june-2026 "Edition No. 2  |  14 June 2026")

 By Chintan N. Patel

 [Continue Reading](https://bnpsca.com/insight/edition-no-2-14-june-2026)

 [ ![Edition No. 3  |  15 June 2026](https://imageproxy.inlancer.in/pr:sharp/f:webp/rs:fit:500:0/g:sm/plain/https://bnpsca.com/public/assets/upload/images/original/6a7aaa5d87c11-Images-3.jpeg) ](https://bnpsca.com/insight/edition-no-3-15-june-2026 "Blog Link")15-06-2026

#### [Edition No. 3 \| 15 June 2026](https://bnpsca.com/insight/edition-no-3-15-june-2026 "Edition No. 3  |  15 June 2026")

 By Chintan N. Patel

 [Continue Reading](https://bnpsca.com/insight/edition-no-3-15-june-2026)

###  Any Questions After Reading? We’re happy to clarify any doubts and advise you about your business

 [ Get Expert Guidance

 ](https://bnpsca.com/contact-us)

'); $(this).remove(); }); });