The rules for auditor rotation in the United States require the key partners on a public company audit — not the firm itself — to step off after a set number of years and stay away for a defined cooling-off period. The lead partner and the engagement quality reviewer rotate after five consecutive years; other significant audit partners rotate after seven. These requirements come from the Sarbanes-Oxley Act of 2002 and the SEC’s independence rule at 17 CFR 210.2-01(c)(6), and they apply to audits of SEC-registered issuers. Private companies and nonprofits generally sit outside the federal mandate.
Which Partners Have to Rotate
The rotation clock runs on individual partners based on their role, and two tiers do most of the work.
The lead audit partner and the engagement quality reviewer (sometimes called the concurring partner) face the tighter limit. Either one must rotate off after five consecutive years serving in that capacity on the engagement. Other audit partners who make significant decisions on the engagement can serve up to seven consecutive years before they must step off.
The definition of “audit partner” reaches further than many people expect. Under the SEC’s rule, it covers any partner responsible for decision-making on significant auditing, accounting, or reporting matters, or who maintains regular contact with the client’s management and audit committee. The lead partner on a subsidiary whose assets or revenues make up 20 percent or more of the consolidated total also counts. Partners who provided ten or fewer hours of audit services are excluded, and so are specialty partners and national office consultants who advise on technical issues without ongoing client contact.
How Long the Cooling-Off Period Lasts
Rotation is not just a break; it’s a required absence. Once the lead partner or the engagement quality reviewer rotates off, they cannot return to that client in either role for five full years. Other audit partners have a shorter two-year cooling-off period before they can come back to the engagement.
The length of that gap is the point. It has to be long enough to interrupt the familiarity that builds up between an auditor and a client’s management team, which is the specific risk Congress had in mind when it wrote the rotation provisions into Sarbanes-Oxley.
The One-Year Rule for Auditors Who Join the Client
A separate rule handles the situation where a member of the audit team goes to work for the company being audited. If a person who served on the audit engagement team takes a financial reporting oversight role at the client — chief financial officer, controller, or similar — the audit firm loses its independence with respect to that client for the year before the next audit begins. The rule applies to any team member who provided more than ten hours of audit, review, or attest services.
The practical result: a company that hires a key member of its own audit team may have to find a new audit firm on short notice.
The Exemption for Small Audit Firms
The SEC carved out a narrow exemption from partner rotation for small firms. A firm qualifies if it has fewer than five public company audit clients and fewer than ten partners. “Partners” is read broadly here to include all equity partners, principals, shareholders, and anyone in a partner-equivalent role, whether they work in audit, tax, or consulting. The exemption comes with a condition: the PCAOB must inspect each of the firm’s public company engagements at least once every three years.
When a firm grows past the exemption, its partners don’t have to leave immediately. The SEC’s Office of the Chief Accountant has published a transition timeline. The lead partner may continue through the first annual audit period that ends after the exemption no longer applies, even if that partner has already exceeded five years. The concurring reviewer gets two annual audit periods. Other audit partners get a fresh clock and may serve seven full annual audit periods after the exemption is lost.
What Happens if the Rules Are Broken
A rotation violation potentially taints the affected audits as non-independent, which can trigger restatements and regulatory scrutiny. The consequences hit both partners and firms.
The PCAOB has been willing to enforce. In March 2025, the Board sanctioned a partner who served as lead engagement partner for a sixth consecutive year. He was censured, barred from associating with any PCAOB-registered firm for two years, and assessed a $15,000 civil penalty. At the firm level, Blue & Co., LLC was censured, fined $75,000, and required to overhaul its independence policies after the PCAOB found the firm had failed to ensure its partners complied with rotation requirements.
Fines are often the smaller problem. An independence failure means the affected audits may not satisfy SEC filing requirements, which can force the company to engage a new firm and re-audit its financial statements. That cost lands on both the firm and its client, and the reputational damage tends to outlast the penalty.
Why the Firm Itself Doesn’t Rotate
U.S. rules rotate partners, not firms. That was a deliberate choice. Congress considered mandatory firm rotation during the Sarbanes-Oxley debates and rejected it, and the PCAOB studied the question again in 2011 without adopting a firm rotation mandate. The rationale is that changing key partners refreshes skepticism while keeping the institutional knowledge the firm has built about the client’s operations, industry risks, and internal controls.
The European Union went the other way. Under EU Regulation 537/2014, public-interest entities must rotate the entire audit firm after a maximum of ten years, with limited extensions available. The outgoing firm then faces a four-year cooling-off period before it can return.
Opponents of firm rotation in the U.S. argue that the first years of a new engagement carry elevated risk, because the incoming firm is still learning the client’s systems and judgment areas. The U.S. system leans instead on the audit committee, which has sole authority to hire and fire the external auditor, to decide when a change is warranted.
Do the Rules Apply to Private Companies and Nonprofits?
Federal law does not require partner or firm rotation for private companies, nonprofits, or other entities that aren’t SEC-registered issuers. Rotation at these organizations is a matter of internal governance, stakeholder expectations, or industry-specific regulation.
Voluntary rotation is common anyway. Private equity investors, lenders, and major donors often want to see periodic changes as evidence that independence is being taken seriously. A private company negotiating a large credit facility may find its bank pushing for rotation every seven to ten years. Nonprofit boards frequently adopt similar policies on their own.
Some industries face mandatory rotation through state regulation. Insurance companies, financial institutions, and other regulated entities may be required to rotate auditors after a set period, often five to seven years. These requirements vary by state and by industry, so any organization in a regulated sector should check its specific licensing and reporting obligations.
Nonprofits that receive substantial federal funding have additional auditor selection requirements under the Uniform Guidance at 2 CFR 200.509. The Uniform Guidance does not mandate rotation, but it requires that auditor procurement follow federal standards and that the selection consider the firm’s relevant experience, staff qualifications, results of peer and external quality control reviews, and price.