1. Preconditions for corporate criminal liability in Austria
Corporate criminal liability is based on the attribution of a criminal offence to the company. This is the case where
- an offence is committed for the benefit of the company, or
- an offence results from a breach of corporate or organizational duties.
An offence is deemed to benefit the company, if it is intended to generate an economic advantage, such as unlawful profits, cost savings or the securing of business opportunities. Typical examples include falsified financial statements, unlawful price coordination, acts of corruption or tax-related crimes.
A breach of duty arises where legally or organizationally imposed obligations are violated. These duties often stem from civil, administrative or regulatory law requirements. In practice, even structural or organizational shortcomings may be sufficient to trigger liability – including cases where the offence was committed by a single employee.
2. Management misconduct vs employee misconduct
In Austria, it is being differentiated between offences committed by
- management, or
- employees.
Management includes all superior decision-makers such as managing directors, board members, authorized signatories, supervisory board members as well as individuals who exercise significant factual influence over the company, such as shareholders or de facto managing directors.
Where such decision-makers commit a criminal offence in their function, their conduct is directly attributed to the company. In practice, misconduct at management level almost inevitably leads to corporate liability.
In cases involving employee misconduct, the situation is more complex. The company may only be held liable, if the offence was enabled or materially facilitated by inadequate supervision or deficient organizational structures by management. Common risk factors include unclear responsibilities, missing approval processes, insufficient documentation or a lack of effective training and controls.
3. Potential consequences for companies
- Monetary fines
If liability is established, courts may impose substantial monetary fines. The amount is determined by the statutory penalty applicable to the underlying criminal offence and the company’s financial capacity. Depending on the offence, fines may reach several million euros.
A company’s management’s behavior during the investigation is a key mitigating factor regarding the amount of the fine. Cooperation with authorities, prompt internal investigations, remediation of damage and the implementation or enhancement of compliance measures can significantly reduce sanctions. In some cases, prosecutors may even refrain from pursuing charges altogether.
- Other consequences
Criminal proceedings rarely affect companies in isolation. Even the status of being under investigation can result in reputational damage, regulatory consequences and considerable economic harm.
4. Greatest risks for companies
Corporate criminal proceedings most commonly arise in the context of economic and financial crime, including fraud, breach of trust, corruption, anti-competitive conduct and tax offences. Violations relating to environmental protection, occupational safety or product safety may also give rise to corporate criminal liability.
Notably, companies are often not prosecuted because of deliberate criminal conduct, but because internal structures were inadequate or poorly documented. Deficient control mechanisms and unclear governance structures remain among the most frequent triggers for corporate criminal investigations.
5. How can companies reduce their exposure?
Effective prevention is the most important tool for managing corporate criminal risk – and is expressly taken into account by prosecutors and courts:
- A robust and well-designed compliance framework serves not only as a preventive measure, but also as a key defense. In practice, it may determine whether proceedings are discontinued or resolved through alternative measures.
- Clear governance structures are essential. Responsibilities, decision-making processes and control mechanisms must be transparent, documented and consistently applied.
- An effective internal control system, including risk assessments, approval processes and regular audits, is the backbone of modern compliance.
- Equally important are clear policies and a credible “tone from the top”. Guidelines on anti-corruption, conflicts of interest and anti-money laundering should be practical, accessible and embedded in day-to-day operations.
- Targeted and regular training is particularly important in high-risk areas such as sales, procurement, finance and senior management. Beyond awareness, training also creates valuable documentation that can prove critical in defense.
- Finally, companies should act swiftly if concerns arise. Internal investigations, early fact-finding, data preservation, cooperation with authorities and – where appropriate – remediation can significantly limit legal and economic exposure.
6. Conclusion
Corporate criminal liability in Austria is firmly established in practice. The framework clearly rewards prevention, transparency and cooperation.
Companies that invest in clear structures, actively manage compliance risks and treat compliance as an integral part of their corporate culture significantly reduce their exposure – and are far better prepared should an investigation arise. This is particularly relevant in cases of employee misconduct, where corporate liability depends on management or organizational failures.
Do you require legal support?
We support companies in all matters of corporate criminal liability – from preventive compliance advice and internal investigations to defense in corporate criminal proceedings. We also assist with the implementation of compliance systems, employee training and risk assessments.
Contact LEUKOS for a confidential consultation.