Two organizations do the work of American accounting rules. The Financial Accounting Standards Board (FASB), a private nonprofit, writes them. The Securities and Exchange Commission (SEC), a federal agency, enforces them against public companies. That split answers most of the question of who sets and enforces GAAP standards, but the legal wiring underneath is worth knowing: the SEC actually holds the statutory power to write accounting rules itself and has chosen, since 1973, to delegate that job to the FASB.
The FASB Writes the Rules
The FASB is an independent, private-sector, nonprofit organization based in Norwalk, Connecticut. It sets financial accounting and reporting standards for public companies, private companies, and nonprofits that follow GAAP.1Financial Accounting Standards Board. About the FASB Its parent, the Financial Accounting Foundation (FAF), oversees it, funds it, and appoints its members. The FAF is itself independent of the government, which is the structural feature that keeps standard-setting insulated from political pressure.
Seven full-time board members run the FASB, drawn from auditing, corporate finance, academia, and government. To protect independence, each member has to cut ties with any former employer or firm before joining.1Financial Accounting Standards Board. About the FASB A majority vote of the full board is required to approve any final standard.2Financial Accounting Standards Board. FASB Rules of Procedure
Where GAAP Actually Lives
Before 2009, U.S. GAAP was scattered across thousands of individual pronouncements from multiple bodies. The FASB consolidated all of it into a single searchable system called the Accounting Standards Codification. The Codification is now the single official source of authoritative, nongovernmental U.S. GAAP.3Financial Accounting Standards Board. FASB Standards Anything outside it is non-authoritative, meaning auditors and preparers cannot rely on it as GAAP support.
When the FASB changes a rule, it publishes an Accounting Standards Update (ASU). A point that trips people up: the ASU itself is not authoritative GAAP. It simply communicates the changes being made to the Codification, which remains the one source of record.4Financial Accounting Standards Board. Accounting Standards Updates Issued The Codification also includes relevant SEC guidance in separate sections, but that guidance applies only to SEC registrants.
The SEC Holds the Legal Authority
Congress gave the SEC statutory authority to define accounting standards for publicly traded companies in the Securities Exchange Act of 1934.5GovInfo. Securities Exchange Act of 1934 The agency has never used that authority to write a full set of rules itself. In December 1973, it issued Accounting Series Release No. 150 formally recognizing the FASB’s pronouncements as authoritative for public companies, and it reaffirmed that position in a 2003 policy statement tied to Section 108 of the Sarbanes-Oxley Act. That statute lets the SEC treat accounting principles established by a qualifying private-sector body as “generally accepted” under federal securities law, provided the body meets criteria for independence, public-interest governance, and responsiveness to emerging issues.6U.S. Securities and Exchange Commission. Reaffirming the Status of the FASB as a Designated Private-Sector Standard Setter
The delegation is conditional, and that matters. If the SEC ever concluded the FASB was no longer meeting those criteria, it could withdraw recognition and either designate a new body or write accounting rules itself. That backstop gives the SEC real leverage without requiring it to build an internal standard-setting apparatus.
How the SEC Enforces GAAP
The enforcement teeth sit in Regulation S-X. Under Rule 4-01, financial statements filed with the Commission that are not prepared in accordance with GAAP are presumed to be misleading or inaccurate, regardless of any footnote disclosures.7eCFR. 17 CFR 210.4-01 — Form, Order, and Terminology Once a company files non-GAAP statements, the SEC doesn’t need to prove the statements actually deceived anyone.
Public companies file detailed periodic disclosures, including an annual report on Form 10-K and quarterly reports on Form 10-Q.8eCFR. 17 CFR 240.15d-13 — Quarterly Reports on Form 10-Q When significant events occur between regular filings, such as a material change in accounting methods or a change in auditor, the company must file a Form 8-K within four business days.9U.S. Securities and Exchange Commission. Form 8-K SEC staff review these filings and can issue comment letters, require restatements, or launch enforcement actions.
Sarbanes-Oxley added another layer. Section 404 requires every annual report to include an internal control report in which management takes responsibility for establishing adequate controls over financial reporting and assesses their effectiveness as of the fiscal year-end.10Office of the Law Revision Counsel. 15 USC 7262 — Management Assessment of Internal Controls For accelerated and large accelerated filers, the outside auditor must independently evaluate that assessment. Smaller companies with a public float under $75 million are exempt from the auditor attestation requirement, though they still must perform the management assessment.
The PCAOB Oversees the Auditors
The Public Company Accounting Oversight Board (PCAOB) sits between the SEC and the accounting firms that audit public companies. Created by Sarbanes-Oxley in 2002, it registers public accounting firms, sets auditing standards, inspects those firms, and investigates potential violations.11Public Company Accounting Oversight Board. About the PCAOB The SEC appoints PCAOB members, approves its rules and budget, and hears appeals of its disciplinary actions.12Investor.gov. Public Company Accounting Oversight Board (PCAOB)
The PCAOB doesn’t write accounting rules. It makes sure the auditors who verify GAAP compliance are doing that job correctly. When inspections turn up recurring audit failures in a particular area, those findings often feed back into the FASB’s agenda as evidence that existing guidance may need clarification.
Who Actually Has to Follow GAAP
Any company whose securities are registered with the SEC has to prepare its financial statements under GAAP. Domestic companies whose equity and debt securities trade on U.S. public markets are required to file GAAP-compliant reports with the SEC.13Financial Accounting Foundation. GAAP and Public Companies They must follow both the FASB’s Codification and any supplemental SEC rules.
Foreign private issuers registered with the SEC can file financial statements prepared under International Financial Reporting Standards as issued by the International Accounting Standards Board, without reconciling to U.S. GAAP.14U.S. Securities and Exchange Commission. Financial Reporting Manual — Foreign Private Issuers Foreign issuers using a different home-country framework must still provide a reconciliation to U.S. GAAP.7eCFR. 17 CFR 210.4-01 — Form, Order, and Terminology
Private companies face no SEC mandate to use GAAP. In practice, banks, investors, and major creditors usually insist on GAAP-compliant financials before extending credit or making an investment, because the standards are designed to make results comparable across companies.
One boundary worth naming: none of this covers state and local governments. They follow standards issued by the Governmental Accounting Standards Board (GASB), a separate independent organization also overseen by the FAF.15Governmental Accounting Standards Board. About the GASB Governmental GAAP differs substantially from private-sector GAAP because government finances work differently, and a municipality’s statements shouldn’t be evaluated against the same benchmarks as a corporation’s.