About the author
Paul Liese
Paul Liese
hsp Software

Paul Liese is the managing director of hsp Handels-Software-Partner GmbH in Hamburg. For many years, he has been involved in the Software and IT specialist with the topics relating to electronic invoicing. These include, in particular, procedural documentation, Tax CMS, transfer pricing and the internal control system. Together with his team, Paul Liese is working on the Elimination of all media breaks in accounting.

Endless rules: When has compliance gone too far?

What you can expect from this article

You know how it is: you actually just want to do something really simple, such as making a purchase, taking a decision or completing a task. But before you can get started, you have to fill in a form. After that, you’re supposed to obtain approval. And then you’re also expected to document that the approval has been granted properly. Of course, someone then has to check whether the documentation is complete. Why not? What should be a ten-minute job has been bloated into a one-hour chain of processes. What’s astonishing is that everyone followed the rules; nobody did anything wrong. And yet I can’t help but ask: are you serious?

When good intentions turn into a bureaucratic maze

I’ll admit it: I like rules. After all, I’m the managing director of a medium-sized company with lots of creative people, all of whom have their own ideas and visions. And at home, I’m a father – and there, too, rules can sometimes be quite helpful. That’s because rules create reliability and a consensus that everyone can adhere to and use as a guide. In doing so, they protect us from errors and misunderstandings, mistakes and unpleasant consequences. They ensure fair conditions and make decisions transparent. Or to put it another way: without rules, our way of working together would function just as poorly as most organisations do.

However, rules become a problem when those involved forget why they were originally introduced. Perhaps there was a mistake five years ago, following which an additional check was introduced. Two years later, something similar happened, so the departmental management introduced an approval process. And at some point, for reasons of liability or otherwise, a documentation requirement was added. So each measure was introduced with the best of intentions and not without good reason. But later on, each responsible body simply focused on its own part of the process, rather than questioning the whole structure. That’s how processes come about so easily – ones that look excellent on paper but bring surprisingly little satisfaction in day-to-day practice.

Control is good, but how much control is reasonable?

An everyday example: an employee needs a spare part costing 35 euros for their work. To obtain it, they must submit a request, which a line manager approves. The accounts department then checks the cost centre, after which the order is placed. And the result? Processing this transaction costs more than the accessory itself. Instead of asking at what cost threshold the entire process in this form makes sense, the company has just one standard process for all purchases – whether it’s three euros or thirty thousand. Wouldn’t it be wiser to set a budget range within which people are allowed to make their own decisions? Those in charge should keep proportionality in mind here. Because the truth is: every check comes at a cost. And not just money, but above all time – which, if we’re honest, is money in itself. What’s more, tasks that are perceived as pointless can demotivate the staff involved and make them more prone to errors. And too much control breeds little trust among those being monitored.

I become particularly wary when someone talks about having „digitised“ such processes. Upon closer scrutiny, it often turns out that the paper form has simply been replaced by a form on the intranet. Okay, so the scanning has been done away with – but what else? Once completed, the „digital“ form still has to pass through three departments; it’s approved here and printed out there, for documentation purposes. Is the process digital now? To some extent. Is it better? Faster? More efficient? Not really. Because in this case, digitisation was implemented technically before anyone had reviewed the processes. As Bernd Fritzges, then CEO of Telefónica, said back in 2015: ‘If you digitise a rubbish process, you end up with a rubbish digital process.’

Bureaucracy comes at a cost, even if we don’t realise it straight away

What many people forget is that bureaucracy comes at a cost. And I’m not talking about the numerous forms, fees or extra staff. Because the main burden is caused by the five minutes it takes someone to enter the same information twice or three times. Or the quarter of an hour a manager wastes on the formal approval of a decision that has long since been agreed upon in technical terms. And then there are the countless interruptions to ongoing processes, which lead to extra work and errors. These may seem like minor issues, but on balance they incur enormous costs. And it’s not just large corporations that are affected, but also small businesses, clubs and voluntary organisations.

However sensible many rules may be, we should learn anew to constantly question the bigger picture. To this end, I recommend five simple questions that help strike a balance between compliance and common sense:

  • What specific problem are we trying to prevent with this rule?
  • How great is the actual risk?
  • Is the effort involved proportionate to the outcome?
  • Which steps could be omitted without compromising safety or quality?
  • Would we introduce the entire process in exactly the same way today?

Conclusion: Compliance is not just about rules, but about the bigger picture

Rules are important, particularly when it comes to areas such as the risk of injury, financial security or tax compliance. Yet, for all our love of rules, we must never forget the purpose behind them. Whilst safety, protection and risk minimisation are important, they are not the ultimate business objective. Therefore, these factors must never take precedence over commercial success, efficient processes and motivated staff. Ideally, the two should be in balance.

After all, not every risk is equally critical or equally significant. And not every process requires measures and regulations of the same stringency. Good rules help us as people to achieve our goals, provide guidance and avoid obstacles, rather than creating new ones. Accordingly, whenever we plan to introduce a new rule, we should take a step back and look at the bigger picture. Do we simply need to introduce an extra step, or slightly adapt the existing process? Or could we perhaps meet both old and new requirements even better with a completely different process? Only in this way can we move away from being paralysed by bureaucracy and towards compliance processes that help us move forward.

More on the subject of internal control systems

Related posts
  • Boost your turnover with Opti.Tax
    Boost your turnover with Opti.Tax documentation

    Boosting turnover with Opti.Tax Doku: Tax advisers are provided with a powerful tool for creating procedural documentation in accordance with GoBD quickly and efficiently.

  • Opti.Tax can handle property tax – but what else?
    Opti.Tax: the all-rounder – practice management software for (almost) everything

    Many law firms and businesses, particularly tax consultancy firms and accountancy firms, have relied on Opti.Tax for years. Since the start of this year, many new users have joined, having chosen Opti.Tax because of its property tax features. It is definitely worth them taking a look at the other features and topics covered by the software.

  • Blog post featured image: Creating TCMS with AI?
    Tax Compliance with AI: How artificial intelligence supports an effective TCMS

    To many companies, a Tax Compliance Management System – or TCMS for short – initially sounds like extra paperwork, consultancy costs and new obligations. Where should one start? Who is responsible for setting it up? And how can this be managed at all alongside day-to-day business operations?