1. When is a company liable under the VbVG?
The core of association liability is the attribution of an offense to the company. The law provides for two connecting factors:
- Either the act was committed “for the benefit of the association” or
- committed by “breach of associational duties“.
An act in favor of the association is given if the company should benefit economically as a result – for example, by seeking to enrich itself, by saving costs or by securing or obtaining business advantages. Typical examples are manipulated balance sheets, unlawful price fixing or offenses in the area of corruption and taxes.
A breach of duty occurs when obligations are violated that affect the company legally or organizationally. This includes, in particular, duties of care and protection enshrined in civil, administrative and supervisory law. A structural or organizational deficit is often sufficient to trigger liability – even if the offence was committed by an individual employee.
2. Distinction between decision-maker and employee actions
The VbVG distinguishes between criminal offenses of
- decision makers and
- Employees.
Decision-makers are managing directors, board members, authorized signatories, supervisory board members, but also other persons with significant influence on the management, such as shareholders or de facto managing directors. If these persons act unlawfully and culpably in their function, the act is directly attributed to the association. In practice, this means that misconduct at management level almost automatically leads to association liability.
The situation is more complex in the case of criminal offenses committed by employees. Here, the company is only liable if the crime was made possible or significantly facilitated by inadequate supervision or insufficient organization. A lack of the dual control principle, unclear responsibilities, undocumented processes or inadequate training may be sufficient to impute “organizational responsibility” to the company.
3. Impending consequences
- Fines
In the event of liability, the court can impose an association fine. The amount of the fine depends on the penalty for the underlying offense and the economic performance of the company. Depending on the offense, the possible fines can reach into the millions.
The conduct of the company in the course of the investigation plays a central role in the assessment of the fine. Cooperation with the authorities, internal investigations, compensation for damages and the implementation or improvement of compliance measures can significantly reduce the penalty or even lead to the public prosecutor’s office refraining from criminal prosecution due to the so-called prosecution discretion.
- Further consequences
In addition, criminal proceedings against a company are usually accompanied by far-reaching collateral damage: even being a defendant alone can lead to a loss of reputation, administrative law problems and economic damage.

4 Where are the greatest risks in practice?
Association proceedings are particularly frequent in the area of economic offenses – such as fraud, embezzlement, corruption, anti-competitive agreements or tax evasion. Violations in the areas of the environment, employee protection or product safety can also give rise to association liability.
It is striking that companies are often not prosecuted for “active” criminal energy, but because internal structures were incomplete or insufficiently documented.
A lack of control mechanisms or unclear responsibilities are among the most frequent triggers for association proceedings.
5 How can companies minimize the risk?
Effective preventive measures are the key to minimizing risk – and are also taken into account by the authorities and courts.
- A well-structured compliance system therefore not only serves the purpose of prevention, but is also a key defense instrument. This can be a prerequisite for refraining from prosecution or diversionary measures.
- A clear and comprehensible organization in which responsibilities, decision-making channels and control mechanisms are clearly defined is crucial.
- A functioning internal control system with risk assessments, approval processes and regular reviews forms the basis for any modern compliance structure.
- Equally important are binding behavioral guidelines and a consistent “tone from the top“. Guidelines on anti-corruption, conflicts of interest and money laundering prevention should be clearly formulated and accessible to all employees.
- Regular training in those areas where criminal risks typically arise – such as sales, purchasing, finance or management – is also essential. Training not only serves to raise awareness, but also creates important documentation that can be of great benefit in criminal proceedings.
- Finally, companies should not hesitate to conduct internal investigations in suspected cases. Rapid clarification, securing relevant data, cooperation with authorities and, if necessary, compensation for damages can make a decisive contribution to preventing or mitigating criminal consequences and economic damage.
6. conclusion
The VbVG has established itself in practice and focuses primarily on prevention, cooperation and education. Its consistent application shows: Good organization protects – legally, economically and reputationally.
Companies that create clear structures, actively manage risks and see compliance as an integral part of their everyday life can significantly reduce the risk of association proceedings – and are also better prepared if a suspected case does arise. This applies in particular to cases of employee misconduct, where organizational culpability is also always assumed.
Do you need support?
We support companies in all phases – from prevention and internal investigations to defense in association proceedings. We also provide support in the development or adaptation of compliance systems, employee training and the analysis of operational risks.
Contact LEUKOS for a confidential initial consultation.