What SEBI asks, verbatim
Provide details of any corrective actions taken or underway on issues relating to advertising, and delivery of essential services; cyber security and data privacy of customers; re-occurrence of instances of product recalls; penalty / action taken by regulatory authorities on safety of products / services
Describe corrective actions for each area: advertising practices, delivery of essential services, cyber security incidents/data breaches, product recall prevention, and regulatory actions on product safety.
Quoted from the SEBI BRSR Format as amended March 2025, with measurement guidance from the ICAI Background Material on BRSR, Revised Edition 2024, page 152.
In plain English
You need to explain what the company did to fix problems in advertising, delivery of essential services, cyber security and data privacy, product recalls, and any regulatory penalties for product safety. The company should list each issue, the steps taken or being taken, and any actions by regulators. This information usually comes from internal compliance reports, incident logs, and regulatory notices.
What a complete, assurance-ready answer contains
A complete, assurance‑ready answer lists each corrective action by category, providing the date of implementation, responsible function, and measurable outcome (e.g., % reduction in incidents, time to resolution). Assurers look for evidence such as policy revisions, training completion rates, incident logs, and audit reports that confirm the action was executed and monitored. A common gap is omitting the post‑implementation review or follow‑up metrics, leaving the assurance team unable to verify sustained effectiveness.
Describes the completeness and granularity an assurer expects. No company figures are named.
Where the data comes from
Usually found in complaints and product records. Forward to your Customer service or Legal team.
Much of what BRSR asks for already exists in filings the company makes elsewhere, such as Pollution Control Board consents, PAT returns, hazardous-waste manifests and EPR registrations. The free gap analysis cross-references those filings against all 108 fields and shows which are already covered.
Frequently asked questions
What does BRSR P9-E6 ask for?
You need to explain what the company did to fix problems in advertising, delivery of essential services, cyber security and data privacy, product recalls, and any regulatory penalties for product safety. The company should list each issue, the steps taken or being taken, and any actions by regulators. This information usually comes from internal compliance reports, incident logs, and regulatory notices.
Is BRSR P9-E6 an Essential or a Leadership indicator?
P9-E6 is an Essential indicator, so it is mandatory for every BRSR filer. It sits under Principle 9, Consumer Responsibility.
Who inside the company holds the data for P9-E6?
Customer service / Legal. Usually found in complaints and product records. Forward to your Customer service or Legal team.
What unit does P9-E6 use?
narrative. Reporting in the wrong unit, or switching the denominator of an intensity ratio between years, is one of the more common reasons a figure has to be restated.
What does a complete answer to P9-E6 look like?
A complete, assurance‑ready answer lists each corrective action by category, providing the date of implementation, responsible function, and measurable outcome (e.g., % reduction in incidents, time to resolution). Assurers look for evidence such as policy revisions, training completion rates, incident logs, and audit reports that confirm the action was executed and monitored. A common gap is omitting the post‑implementation review or follow‑up metrics, leaving the assurance team unable to verify sustained effectiveness.
Other disclosures under Principle 9
How you receive and respond to consumer complaints and feedback (mechanism)
% of turnover from products carrying info on environmental / social parameters and safe use
Consumer complaints by type (data privacy, advertising, cyber-security, quality, etc.)
Product recalls on safety grounds (number and reasons)
Do you have a cyber-security / data-privacy policy? (Yes/No + web link)
Data breaches this year (number, % involving personal data, impact)
See P9-E6 against a real client
Describe a client in six fields and get all 108 BRSR disclosures classified as ready to pull, needs verification, or collect fresh, with the calculators built in. Free, no login, and nothing leaves your browser.