Indian companies spent INR 34,909 crore on CSR in FY 2023-24, according to National CSR Portal data cited in the India CSR Outlook Report 2025 by CSRBOX. Education took 25% of that spend. Healthcare and sanitation took 18%. These are real commitments producing real outcomes in communities across the country.
None of that spend builds a social governance system. And when a BRSR Core assessor, a European buyer’s audit team, or a PE fund’s due diligence analyst walks through the door, it is the governance system they are looking for, not the CSR annual report.
This confusion is one of the costliest misunderstandings in Indian corporate compliance today. It affects listed manufacturers and unlisted exporters alike. Here are the five concrete differences, and why treating them as interchangeable carries a financial cost.
What CSR Is Designed to Do
CSR in India is governed by Section 135 of the Companies Act, 2013. The law applies to any company with a net worth of INR 500 crore or more, a turnover of INR 1,000 crore or more, or a net profit of INR 5 crore or more in the preceding financial year (Section 135(1), Companies Act, 2013). Eligible companies must spend at least 2% of their average net profits from the preceding three years on activities listed in Schedule VII of the Act: education, healthcare and sanitation, gender equality, environmental sustainability, rural development, heritage protection, and several other categories.
CSR is, by design, philanthropic. It is about a company directing profits toward social development outside its own operations. The spend is measured in rupees. The outcomes are measured in projects completed and beneficiaries reached. None of this touches how the company governs its own workforce, manages its supply chain, tracks safety incidents, or resolves employee grievances.
What Social Governance Is
Social governance is the internal operating architecture that governs how a company treats its own people, manages its suppliers, and handles social risk within its operations. It is not about what a company spends on society. It is about how a company governs workforce conditions, safety systems, grievance mechanisms, supplier accountability, and social KPI reporting. It is structural, not discretionary. It is measured in governance quality and evidence trails, not rupees.
Under BRSR, social governance shows up across Principles 3, 4, 5, and 8 of the National Guidelines on Responsible Business Conduct (NGRBC). Principle 3 covers employee well-being: fair wages, safe workplaces, diversity, and working conditions. Principle 5 covers human rights: grievance mechanisms, resolution data, and policies against forced and child labour. BRSR Core assessment tests whether the systems behind these disclosures are real, owned, and defensible.
A company can score highly on CSR spend and have no social governance at all. A company can have zero CSR obligation and still need social governance because its European buyer demands evidence of a functioning grievance mechanism.
Five Differences Between CSR and Social Governance
1. Legal basis.
CSR is governed by Section 135 of the Companies Act, 2013, and regulated by the Ministry of Corporate Affairs. Social governance under BRSR is governed by SEBI through the LODR Regulations. For exporters outside the BRSR mandate, social governance requirements come through buyer contracts and EU regulatory pull-through (EU Directive 2026/470, Omnibus I). These are separate legal and commercial frameworks. Satisfying one does not satisfy the other.
2. What gets measured.
CSR is measured in spend: how much was allocated, how much was spent, what activities were funded. Social governance is measured in system quality: does a grievance mechanism function? Who owns each social KPI? Can the company produce evidence for a reported number within 48 hours? A BRSR Core assessor does not ask how much a company spent on community programmes. They ask whether the safety tracking system has an escalation path.
3. Who it serves.
CSR serves external communities: school children, patients in rural clinics, beneficiaries of livelihood programmes. Social governance serves the company’s own stakeholders: its employees (permanent and contract), its suppliers, and the buyers and investors who depend on governance quality for their own compliance and risk management.
4. What triggers scrutiny.
CSR scrutiny comes from the MCA and the CSR committee. Social governance scrutiny comes from BRSR Core assessors, buyer ESG audit teams, and PE due diligence processes. The consequences differ: failing a CSR audit means penalties under the Companies Act. Failing a social governance review means qualified assurance opinions, lost buyer contracts, and investor write-downs.
5. Discretionary vs. structural.
CSR is, within the 2% floor, substantially discretionary. A company chooses which Schedule VII activities to fund, which implementing agencies to partner with, and which geographies to focus on. Social governance is not discretionary. The governance systems either exist or they do not. A company cannot choose to skip grievance resolution tracking the way it might choose education over healthcare for its CSR programme.
| Dimension | CSR (Section 135) | Social Governance (BRSR / Buyer Requirements) |
|---|---|---|
| Governed by | Companies Act, 2013; MCA | SEBI LODR; Buyer contracts; EU CSDDD pull-through |
| Applies to | Companies above INR 500 Cr net worth, INR 1,000 Cr turnover, or INR 5 Cr net profit | Top 1,000 listed companies (BRSR); any exporter facing buyer ESG audits |
| Measures | Spend (INR), activities, beneficiaries | System quality, evidence trails, KPI ownership |
| Focus | External communities | Internal workforce, suppliers, own operations |
| Scrutiny from | MCA, CSR Committee | BRSR Core assessors, buyer audit teams, PE/investor due diligence |
| Consequence of failure | Penalties under Companies Act; unspent funds transferred to government fund | Qualified assurance opinions, lost contracts, investor discounts |
What Happens When a Company Treats Them as the Same Thing
Consider a mid-sized listed manufacturer. Revenue around INR 800 crore. Strong CSR programme: INR 2 crore spent last year on education and healthcare in the district. The annual report has a well-formatted CSR section with photographs and beneficiary counts.
Now the buyer audit team arrives. They ask: how many grievances were filed by contract workers last year? Resolution time? Who owns this metric? The answer: we have a grievance policy document. No grievances were formally filed.
They ask: safety incident rate across your two sites? How tracked? Who reviews? The answer: we report safety data in our BRSR. The number comes from an HR spreadsheet compiled in March.
They ask: how do you verify supplier compliance with your code of conduct? The answer: we sent them the code. We have signed acknowledgements.
The INR 2 crore CSR spend is irrelevant to every one of these questions. It does not address the absence of a functioning grievance mechanism, the lack of real-time safety tracking, or the gap between a supplier code and a supplier governance system.
KPMG’s February 2026 analysis found that 45 of 94 NIFTY100 companies revised their prior-year BRSR data, and one received a qualified assurance opinion for insufficient evidence (KPMG India, Accounting and Auditing Update, February 2026). These are top-100 companies with dedicated ESG teams. For companies at INR 200 to INR 800 crore without those teams, the gap between CSR activity and governance readiness is wider.
The Distinction Applies Regardless of Company Size
A INR 3,000 crore listed packaging company needs social governance because BRSR Core assessment is now mandatory for the full top 1,000 (SEBI Circular, 12 July 2023; SEBI LODR Master Circular, 30 January 2026). A INR 150 crore textile exporter needs it because its UK buyer just sent a social compliance questionnaire covering grievance data and wage transparency. A INR 60 crore leather goods manufacturer needs it because its Italian buyer’s sourcing team flagged insufficient worker welfare documentation.
None of these companies can solve the problem by increasing CSR spend. The governance systems that produce defensible social data either exist or they do not.
