Corporate Criminal Liability Germany 2026: Investigations, Fines and Compliance

Corporate criminal liability Germany remains one of the most misunderstood areas of enforcement risk for companies operating in the country, and the position in 2026 is different from what many international businesses assume. Germany does not impose general criminal liability on legal persons in the way that jurisdictions such as the United States or the United Kingdom do; instead, companies are primarily exposed through administrative fines under the Gesetz über Ordnungswidrigkeiten (OWiG) and a patchwork of sectoral sanction regimes. For in-house counsel, compliance officers and executives, the practical consequences are significant: enforcement is real, fines can be substantial, and the way a company responds to an investigation often determines the outcome.

This article sets out the current legal framework, what to expect during investigations and dawn raids, how fines are calculated, and how to build a compliance programme that stands up to scrutiny in 2026.

Key takeaways and executive summary

• Entity exposure runs through the OWiG, not the criminal code. There is no general corporate criminal offence in Germany. Legal persons face administrative fines and sanctions under the OWiG and specialised regulatory laws, while individuals are prosecuted under the Strafgesetzbuch (StGB).
• Fines can be significant and turnover-sensitive. OWiG fines are calculated on principles of proportionality and can take account of company size, benefit derived from the offence, and the quality of the compliance system in place. Proceeds from the alleged offense may also be forfeited.
• The first hours of a dawn raid matter. Companies that have a rehearsed dawn-raid playbook, secure counsel immediately and document the search protect their position far more effectively than those that improvise.

Corporate criminal liability Germany 2026: the legal update

The headline point for 2026 is continuity rather than revolution. As of the latest review, Germany has not enacted a single corporate criminal code creating general criminal liability for legal persons. A dedicated corporate sanctions statute, the draft Verbandssanktionengesetz, was debated in the previous legislative period but did not enter into force, and the enforcement architecture for companies continues to rest on the Ordnungswidrigkeitengesetz, the law on administrative offences, supplemented by sectoral regimes in areas such as financial services, pharmaceuticals and export control.

This matters because it shapes every strategic decision a company makes when it comes under scrutiny. Under German law, criminal guilt (Schuld) attaches to natural persons. Companies cannot themselves commit a crime in the sense used by the StGB; they can, however, be held responsible administratively where a person in a leadership position commits a criminal offence or an administrative offence, or where a breach of supervisory duties within the organisation enables such conduct. The distinction is not academic. It determines which authority acts, what standard of proof applies, and what defensive levers are available.

For companies planning their 2026 risk posture, the practical implication is straightforward: the absence of a general corporate criminal statute does not mean the absence of corporate exposure. Prosecutors and regulators use the OWiG and administrative fine powers actively, and the amounts involved in serious economic-crime matters can be very large. Proceeds can be confiscated. In-house counsel monitoring legislative developments should track any government or parliamentary communications through official channels, but should not assume that the current regime is toothless simply because it is only administrative in form. The reputational, financial and operational consequences of an OWiG fine are every bit as serious as a criminal conviction would be elsewhere.

Core legal framework: entity versus individual liability

Understanding corporate criminal liability Germany begins with a clean separation between the liability of individuals and the liability of the entity. These operate under different statutes, before different authorities in some respects, and with different standards and remedies.

Criminal liability of natural persons under the StGB

Individuals, directors, managers, employees, are prosecuted under the Strafgesetzbuch. This is the classic criminal-law route: the prosecution must prove that a specific person committed a defined offence with the required mental element, to the criminal standard. Penalties range from fines to imprisonment, depending on the offence. In an economic-crime context, the individuals most exposed are typically senior managers, board members and those with signing authority, precisely because their conduct can also trigger corporate consequences.

Liability of legal persons and corporate fines under the OWiG

The entity route runs principally through section 30 of the OWiG, read together with the supervisory-duty provisions in section 130. Where a person acting in a management or representative capacity commits a criminal offence or an administrative offence, or where inadequate supervision within the organisation allows such an offence to occur, a fine can be imposed on the company itself. This is the statutory foundation for corporate fines Germany OWiG, and it is the mechanism most in-house counsel will encounter in practice.

The fine attaches to the organisation, can be assessed by reference to the economic benefit obtained and the size of the undertaking, and is administered as part of the broader enforcement process rather than as a criminal sentence in the StGB sense. There are no binding sentencing guidelines in Germany that apply nationwide or in a Bundesland. 

Regulatory and sectoral sanction regimes

Beyond the OWiG, companies in regulated sectors face additional, self-standing sanction regimes. Financial institutions are subject to supervisory enforcement by the financial regulator (BaFin); pharmaceutical and medical-device companies face sector-specific administrative measures; exporters and traders must comply with export-control and sanctions rules enforced by customs and foreign-trade authorities. These regimes can operate in parallel with OWiG proceedings, meaning a single course of conduct can generate multiple lines of exposure. Corporate sanctions Germany therefore need to be mapped across every regulator with jurisdiction over the company’s activities, not treated as a single risk.

Typical offences and enforcement trends

The categories of conduct that generate corporate exposure have been stable over recent years, even as enforcement intensity has grown. White collar crime Germany covers a familiar set of offences, and understanding which ones attract enforcement attention helps companies prioritise their compliance investment.

White-collar offences commonly investigated

• Bribery and corruption. Both domestic and foreign bribery attract intense scrutiny, particularly where a benefit flowed to the company. Corruption cases frequently trigger parallel OWiG proceedings against the entity alongside criminal charges against individuals.
• Fraud. Fraud against customers, business partners, public bodies or subsidy schemes remains a core enforcement priority in economic crime investigations Germany.
• Accounting and reporting offences. Falsification of accounts, misstatement and related book-keeping offences often surface during audits or whistle-blower reports and can implicate senior management directly.
• Sanctions and export-control breaches. With the expansion of trade sanctions in recent years, breaches of export controls have become a prominent source of corporate exposure, enforced by dedicated customs and foreign-trade authorities.

Enforcement trends

Federal reporting on economic crime consistently identifies white-collar offences as a category with substantial financial impact, disproportionate to the number of recorded cases. The pattern that in-house counsel should note is qualitative as much as quantitative: investigations are increasingly document-heavy, digital-forensics driven, and cross-border in nature. Authorities coordinate with foreign counterparts more readily than they once did, and complex matters routinely involve the seizure and analysis of large volumes of electronic data. The upshot for companies is that economic crime investigations Germany are no longer short, contained affairs; they are sustained, resource-intensive processes that can run for years and touch multiple jurisdictions.

Investigations: what to expect

When corporate criminal liability Germany moves from theory to reality, it usually starts with an investigative measure, often a search of business premises. How a company handles the investigation phase has an outsized effect on the eventual outcome, and this is where preparation pays off.

Dawn raids: authority, procedure and immediate responses

Dawn raids Germany are a standard investigative tool. Investigators, acting on a judicial search warrant, may seize documents, servers, devices and records under the rules of the Strafprozessordnung (StPO). The moment officers arrive, the company is effectively in a high-stakes procedural environment where mistakes made in the first hour can compromise its position for months. Reception staff and employees frequently do not know what they are permitted to say or do, which is precisely why a pre-approved playbook is essential.

A practical ten-point immediate action checklist for in-house counsel during a dawn raid:

1. Contact external criminal-defence counsel immediately and, where possible, ask investigators to await their arrival.
2. Ask to see and copy the search warrant, and record the authority, scope, named suspects and offences.
3. Assign a dedicated internal team to accompany investigators room by room and take contemporaneous notes.
4. Log every document, device and item that is seized or copied.
5. Instruct staff politely but firmly on their rights and the limits of what they should volunteer.
6. Avoid any action that could be seen as concealment or destruction of evidence.
7. Do not delete data, alter records or discuss the matter over unsecured channels.
8. Notify senior management and the board promptly and consistently.
9. Prepare a clear, factual internal communication once the immediate phase is over, coordinated with counsel.
10. Develop guidelines for employee conduct in the event of an emergency, including rules regarding responsibilities, and train your employees

The criminal investigation process

Beyond the raid, the investigation typically involves questioning of witnesses and suspects, seizure and analysis of documents and data, and, in serious cases, measures affecting individuals, including the risk of custodial measures for managers where the statutory conditions for pre-trial detention are met. Employees called for questioning need clear guidance on their status, since the position of a witness differs materially from that of a suspect. Managers in particular face personal exposure that can diverge from the company’s interests, which raises coordination and conflict questions that must be managed from the outset.

Mutual legal assistance and cross-border cooperation

Modern economic-crime matters rarely stay within one country. German authorities cooperate with foreign prosecutors and regulators through mutual legal assistance channels and, within the EU, instruments such as the European Investigation Order, meaning evidence gathered abroad can feed into German proceedings and vice versa. For multinational groups, this creates the risk of parallel investigations in several jurisdictions arising from the same conduct, with the attendant challenges of coordinating disclosure, legal-protection claims and defence strategy across borders. Early mapping of where exposure exists globally is a critical part of managing corporate criminal liability Germany in a cross-border matter.

Sanctions, fines and remedial outcomes under the OWiG

The most common corporate outcome is a fine under the OWiG, potentially accompanied by other administrative measures. Understanding how these are assessed helps counsel forecast exposure and negotiate effectively.

How OWiG fines are calculated

Corporate fines Germany OWiG are governed by principles of proportionality. In broad terms, an administrative fine on a company reflects two elements: a punitive component responding to the seriousness of the breach, and a skimming component designed to remove the economic benefit the company gained from the offence. Because the benefit obtained can be very large in commercial contexts, the total figure can substantially exceed the statutory ceilings that apply to the punitive component alone. Regulators and prosecutors weigh factors such as the gravity and duration of the conduct, the level of management involvement, the company’s turnover and size, and, importantly, the presence and quality of the compliance system, both before and after the offence.

Other administrative measures

Fines are not the only consequence. Companies can face confiscation of proceeds, exclusion from public procurement in certain circumstances (including entry on the competition register maintained by the Bundeskartellamt), and sector-specific penalties imposed by regulators. In regulated industries, supervisory authorities can impose conditions, restrictions or licensing consequences that are commercially more damaging than the fine itself. Corporate sanctions Germany therefore need to be assessed holistically, taking in the full range of administrative levers rather than the headline fine figure.

Settlement mechanisms and Verständigung

Complex white-collar matters are frequently resolved through negotiated outcomes rather than fully contested proceedings. Verständigung, the German practice of a negotiated understanding between the court, the prosecution and the defence, governed by section 257c of the Strafprozessordnung, is a recognised mechanism for resolving criminal proceedings, and analogous negotiated approaches are used in the administrative sphere to conclude corporate fine matters. In practice, negotiated resolutions can secure a more predictable outcome, allow the company to demonstrate remediation, and reduce the overall penalty in exchange for cooperation and, where appropriate, admissions.

Verständigung in Germany is subject to procedural safeguards and transparency requirements, and it should never be approached without experienced counsel, but for many corporate defendants it can represent an efficient route to closure.

Compliance programmes: what satisfies courts and regulators in 2026

A credible compliance programme is among the most valuable investments a company can make against corporate criminal liability Germany, because it operates on both sides of the risk equation, it reduces the likelihood of an offence occurring and it can materially mitigate the sanction if one does. Case law of the Bundesgerichtshof has confirmed that the existence and effectiveness of a compliance management system, and its improvement after an incident, are relevant to the assessment of a corporate fine. In 2026, regulators and courts increasingly expect programmes to be genuinely effective, not merely documented on paper.

Minimum elements of an effective compliance system

• Risk assessment. A structured, regularly updated assessment of the company’s exposure across bribery, fraud, sanctions, accounting and sector-specific risks, tailored to its actual business and geographies.
• Policies and controls. Clear, accessible policies backed by concrete controls, approval thresholds, segregation of duties, third-party due diligence and gift-and-hospitality rules.
• Training and communication. Role-specific training that reaches high-risk functions, supported by a tone from the top that makes compliance a genuine leadership priority.
• Monitoring and reporting. Effective whistle-blower channels, including those required under the Hinweisgeberschutzgesetz, ongoing monitoring, and audit mechanisms that detect problems before regulators do.

International best-practice guidance on internal controls, ethics and compliance provides a widely accepted benchmark for these elements, and German authorities tend to view programmes aligned with recognised international standards favourably.

Documentation and remediation

Documentation is what converts a good programme into a defensible one. When authorities assess whether a company took reasonable supervisory measures, contemporaneous records of risk assessments, training completion, control testing and management decisions are important. Equally important is remediation after an issue is identified: prompt, thorough corrective action, disciplining wrongdoers, closing control gaps, strengthening oversight, is consistently treated as a mitigating factor. Compliance obligations Germany are therefore not static; they demand a demonstrable cycle of assessment, action and improvement.

Self-disclosure and mitigation

In some enforcement regimes, voluntary self-disclosure of suspected offences can significantly reduce exposure. However, the calculus is nuanced. Self-disclosure carries real risks, including the possibility of triggering parallel investigations or exposing individuals, and the benefits vary considerably between regimes. The decision should be made only after a careful, regime-specific analysis with experienced counsel, weighing the mitigation available against the downside. Cooperation with authorities, separate from formal self-disclosure, is more broadly recognised as a mitigating factor in fine determinations and settlement discussions.

Practical defence strategy during and after investigations

Once an investigation is underway, defence strategy for corporate criminal liability Germany becomes a question of coordination, evidence and judgment. The interests of the company and of individual employees are not always aligned, and managing that tension is central to a coherent response.

Coordinating entity and individual defence

The company and its exposed individuals need separate representation, because their interests can diverge. A manager may have incentives to minimise personal culpability that conflict with the company’s interest in demonstrating that the conduct was aberrant and unauthorised. The interests of witnesses in a preliminary investigation—and their legal representation—must not be overlooked. Managing these conflicts, identifying them early, providing appropriate individual representation, and defining clear protocols for information flow, is essential to avoid inconsistent narratives and strategic own-goals.

Forensic evidence collection and the limits of protection

Internal investigations Germany depend on rigorous, defensible evidence collection, but counsel must understand that the protection afforded to internal investigation materials under German law is more limited than in some other jurisdictions. Following the Bundesverfassungsgericht’s decisions in the Jones Day / Volkswagen matter, documents generated during an internal investigation are not automatically shielded from seizure, and the scope of protection can be narrower than international clients often expect. This makes it critical to plan investigations carefully, deciding who conducts them, how findings are recorded, and how sensitive material is handled, with full awareness of the constraints that German law imposes.

Using expert audits and third-party monitors

In appropriate cases, engaging independent forensic experts strengthens the credibility of an internal investigation and signals good faith to authorities. An independent audit of the facts, coupled with expert analysis of the control failures that allowed the conduct, supports both the defence narrative and the remediation case. Independent involvement can also help demonstrate that the company is treating the matter with the seriousness regulators expect.

Conclusion: managing corporate criminal liability Germany in 2026

Corporate criminal liability Germany in 2026 continues to operate through administrative fines under the OWiG and sectoral sanction regimes rather than a general corporate criminal statute, but the practical exposure for companies is anything but modest. The immediate priorities for in-house counsel are clear: map exposure across every relevant regulator, build and document a genuinely effective compliance programme, prepare a rehearsed dawn-raid and internal-investigation playbook, and establish protocols for coordinating entity and individual defence before any crisis arises. Companies that treat compliance as a live, evidenced discipline, and that respond to investigations with speed, discipline and experienced counsel, put themselves in the strongest position to reduce fines, resolve matters efficiently and protect their reputation.

For tailored guidance on any aspect of corporate criminal liability Germany, in-house teams should seek advice from qualified criminal-defence counsel through the Global Law Experts network.

This article is for general guidance only and reflects German law and practice as of the review date. It is not a substitute for legal advice on a specific matter.

Sources

1. Gesetze im Internet, Ordnungswidrigkeitengesetz (OWiG)
2. Gesetze im Internet, Strafgesetzbuch (StGB)
3. Gesetze im Internet, Strafprozessordnung (StPO)
4. Bundesministerium der Justiz (BMJ)
5. Bundeskriminalamt (BKA)
6. Bundesgerichtshof (BGH)
7. OECD, Anti-Bribery and Good Practice Guidance on Internal Controls, Ethics, and Compliance