A quarter of municipalities told to verify auditor independence

A quarter of Estonia's municipalities should verify that their audit firm applies safeguards for auditor independence or change providerFIN. A Finance Ministry review of 2016-2025 engagementsFIN finds that 20 of the 79 local governments (KOV) have used the same audit firm for more than seven yearsFIN once recent switchers are excludedFIN, including seven full-decade ties that may be longerFIN, as earlier periods sit outside the analysis.

Market-wide quality controls give context. The Audit Activities Oversight Board (AJN) assesses firms generally every six years, and at least every three years where a firm also serves public-interest entities such as listed companies, banks and insurers, with different rules for starters and for firms previously rated orange or red. The ministry's annual analysis of those controls puts the bulk of firms at green or yellow, and as of 30 June 2026 no operating firm held a red outcomeFIN while orange counts fell.

The municipal market is small and concentrated. Over the decade 24 firms audited the 79 KOVs; in 2025 the count was 14 firms, equal to 12 percent of the 114 operating audit firms. Four of the 14 turn over above 1 million euro and the rest are mid-sized firms between 100,000 and 1 million euro. Two mid-sized firms hold about 62 percent of the municipal market by client count; measured by municipal assets and revenue, one of the two audits about 25 percent of the reports and the other nearly 10 percent. The two largest municipalities, Tallinn and Tartu, are audited by the largest firm, KPMG, as its only municipal clients, together about 40 percent of total municipal volume. Every firm currently active in the segment holds a green or yellow supervisory rating, after correcting isolated orange or red years during the period.

Engagement length is where independence risk concentrates. The Audit Activities Act requires a client contract for a mandatory audit to run at least two yearsFIN, with no general upper limit for ordinary engagementsFIN and no duration limits on review engagements; public-interest-entity contracts are capped at ten consecutive yearsRiigiteataja, and the same sworn auditor may sign reports for one municipality for at most seven consecutive yearsRiigiteataja. Empirical research cited in the review treats one to three years as potentially lower quality while the auditor still learns entity-specific risks, four to seven years as the effective window where client knowledge peaks before independence erodes, and the period after five to seven years as the break point where professional scepticism, routine and social ties make critical remarks harder. Across 2016-2025 the review counts 759 engagements under 184 contractsFIN: 31 one-year engagements, only three of them true single-year services with the rest in the 2016 opening or 2025 closing yearFIN, and only nine two-year contracts on the same assumptions, leaving short municipal contracts rareFIN. Contracts of three to six years dominate at 47 percentFIN, treated as appropriate for both quality and independenceFIN.

The long tail names 20 municipalities above seven yearsFIN, including Tallinn (10 years, KPMG)FINFIN, Tartu (9, KPMG)FINFIN, Narva (10, Audest)FIN, Parnu (8, ELSS)FIN and Harku (9, ELSS)FIN. Both very short and very long service periods can directly affect the sworn auditor's report and therefore the reliability of the annual accountsFIN. Municipalities in the long-tenure group must confirm which safeguards keep the signing sworn auditors independentFIN and, where that assurance is missing, change the service providerFIN and set internal rules on engagement length and cooling-offFIN.

The legal basis is the Audit Activities Act, notably sections 47, 55, 65-1, 91 and 136 to 137Riigiteataja, alongside Directive 2013/34/EU Article 34 and Directive 2006/43/EC.