India‑based Global Capability Centers (GCCs) have evolved significantly over the years. No longer viewed merely as cost‑arbitrage centres, many GCCs today serve as value engines—supporting global finance, tax operations, procurement analytics, legal operations, technology platforms, and enterprise wise impact reporting.

This maturity, however, has introduced a frequently observed governance issue in tax assessments and internal reviews: the confusion between Permanent Establishment (PE) risk and GCC operating model risk. While these risks are related, they are legally distinct, arise from different fact patterns, and attach to different entities. Treating one as a substitute for the other is a recurring reason why otherwise mature GCCs become vulnerable to tax and transfer pricing scrutiny.

PE Risk and GCC Risk: A Practical Distinction

Permanent Establishment (PE) Risk

PE risk concerns the foreign enterprise, not the Indian GCC. The question examined by tax authorities is narrow but decisive:

As highlighted in the contextually relevant case Hyatt International Southwest Asia Ltd. v Additional Director of Income‑tax.

The case arose from tax assessments for AYs 2009–10 to 2017–18 involving Hyatt International Southwest Asia Ltd., a UAE-based company, which had entered into long-term Strategic Oversight Services Agreements (SOSA) with an Indian hotel owner (Asian Hotels Ltd.) to provide brand oversight, strategic planning, and operational guidance for hotels in Delhi and Mumbai.

Hyatt declared nil taxable income in India on the ground that it had no Permanent Establishment (PE) under Article 5 of the India–UAE DTAA and rendered services largely from abroad, but the Assessing Officer held that Hyatt had a “business connection” and a fixed place PE in India, attributing income accordingly under Section 9(1)(i), which was upheld successively by the DRP and ITAT, and partly by the Delhi High Court (which rejected royalty characterization but confirmed PE existence), leading to appeals before the Supreme Court.

 The core issue before the Court was whether Hyatt’s activities under the SOSA constituted a fixed place PE in India and, if so, how profits were to be taxed; the Supreme Court, applying the “substance over form” principle and reiterating the “disposal test” under Article 5, held that despite the absence of a formal office, Hyatt exercised continuous, substantive, and operational control over the hotels (including decision-making, supervision, and business integration) and effectively had the hotel premises at its disposal, thereby constituting a fixed place PE.  

Further ruled that profits attributable to such PE are taxable in India as if it were a separate entity even if the foreign enterprise had overall losses, ultimately dismissing Hyatt’s appeals and affirming the High Court’s conclusion on PE.

The Supreme Court held that “substantive control + functional integration + disposal over Indian operations = Permanent Establishment (PE)”, even without a formal office or legal ownership.

This shifts the analysis from legal structure → operational reality. Here are the critical GCC scope positions those needs to be reviewed from PE lens of view.

Is the foreign parent effectively running its business from India?

PE exposure arises not from the complexity or importance of work performed in India, but from the location of commercial authority and control. In practice, PE risk assessments focus on whether Indian personnel:

• Negotiate or conclude contracts, Approve pricing, discounts, credit terms, or settlements
• Exercise authority that binds the foreign enterprise
• Act as the real decision centre for revenue‑generating activities
• Are perceived by third parties as the operational headquarters                                   

In short, PE risk is about business control—not support capability.

GCC Risk (Operating Model Drift)

GCC risk, by contrast, arises at the level of the Indian entity. It examines whether the GCC continues to operate as a captive service provider consistent with its contractual scope, transfer pricing characterisation, and governance framework.

In practice, GCC risk manifests as operating model drift, often without immediate visibility. Typical triggers include:

• Expansion of responsibilities without updating intercompany agreements
• India assuming end‑to‑end ownership of processes intended as support
• Escalations consistently concluding in India rather than offshore
• Transfer pricing assumptions misaligned with actual conduct
• Global teams deferring to India due to operational dependence

Crucially, GCC risk can exist even in the absence of PE exposure. It is not a tax residency issue, but a substance and governance mismatch.

Why the Boundary Gets Blurred

Three recurring factors explain why mature GCCs misjudge this boundary.

First, success. As GCCs demonstrate capability, reliance increases and authority slowly migrates to the most effective teams.

Second, misplaced reliance on incorrect proxies, such as:

• Cost‑plus remuneration as a PE shield
• Absence of revenue in India as proof of no PE
• Job titles and organisation charts as evidence of control
• “Back office” labels overriding actual conduct

Third, governance lag. Operational scale grows faster than authority matrices, delegation frameworks, and behavioural controls are refreshed.

The result is risk accumulation by default, not by design.

The Practical Boundary Test

A simple, audit‑tested principle helps distinguish permissible execution from risk‑creating control:

India may execute.
The parent must decide.
The parent must own risk and reward.

This formulation recognises modern delivery realities while preserving legal defensibility. When decision authority and economic ownership remain offshore—both on paper and in practice—PE and GCC risks are materially reduced.

How Risk Appears in Practice

Low‑risk GCC models typically involve India providing processing, analytics, reporting, and documentation support; with commercial decisions, contract execution, and risk ownership demonstrably offshore.

Grey‑zone configurations arise where India routinely recommends pricing, vendors, or strategies, offshore approvals become perfunctory, customer or vendor interactions include India “for support,” and escalation paths effectively terminate in India. These cases attract scrutiny even without immediate PE conclusions.

High‑risk scenarios emerge where India negotiates or concludes contracts, approves pricing or settlements, operates as a de facto headquarters, or where offshore decision‑makers exist largely in form. At this stage, PE risk and operating model failure often converge.

Illustrative Functional Examples

• Transfer Pricing: India designing standard operating procedures is generally defensible; India approving commercial exceptions indicates authority migration.
• Legal and Tax: India preparing advisory analysis aligns with support; India determining settlements or litigation strategy reflects decision control.
• Procurement: India producing sourcing analytics is acceptable; India finalising suppliers or pricing raises immediate concern.

Across functions, the dividing line is consistent: decision ownership, not technical capability.

Governance Measures That Work

Well‑governed GCCs combine structural and behavioural controls. These include authority matrices, clear delegations, separate global and India role charters, mandatory offshore approvals for defined matters, and intercompany agreements aligned with reality.

Behavioural discipline is equally important—training leaders on decision hygiene, preventing India from becoming the default escalation point, and enforcing the distinction between “recommend” and “approve.”

Concluding note

GCCs are no longer defined by cost advantage; they are defined by the value they create. However, value without clearly governed authority boundaries is precisely where PE risk and operating model drift begin.

In practical terms:

• PE risk arises when India runs the business.
• GCC risk arises when India forgets it is supporting the business.

For multinational groups, intentional governance of authority—not constraining capability—is now foundational.