Corporate Criminal Liability in Greece (2026): What Executives and Boards Need to Know

Corporate criminal liability greece is moving to the centre of boardroom risk agendas in 2026, as enforcement scrutiny intensifies, executive prosecutions become more visible, and cross-border cooperation through Eurojust and EU instruments reshapes how white-collar cases are investigated. Directors, general counsel and compliance officers now face a landscape where the company itself, and the individuals who run it, can be exposed simultaneously to criminal, administrative and reputational consequences. This guide explains in plain terms whether and how companies and executives can be held liable in Greece, what penalties they face, how investigations proceed, and the practical steps a board can take to reduce exposure and respond effectively if a crisis breaks.

It is written for decision-makers who need legally precise, actionable guidance rather than high-level summaries.

Who should read this: company directors, in-house legal and compliance teams, general counsel and executives operating in or connected to Greece. What it covers: the scope of white-collar and corporate crime, the legal framework and tests for liability, sanctions, how investigations run, incident response, compliance programmes, and defence options.

Introduction, why 2026 matters for companies operating in Greece

The 2026 enforcement climate reflects a broader European shift towards holding both legal persons and their senior managers to account for economic crime. Greek authorities increasingly coordinate with EU partners through mutual legal assistance and Eurojust, which accelerates evidence-gathering across borders and raises the stakes for groups with multinational footprints. At the same time, prosecutors and regulators expect companies to maintain credible compliance programmes, the absence of one is increasingly treated as an aggravating organisational failure rather than a neutral fact. For executives, the practical consequence is clear: understanding corporate criminal liability greece is no longer a specialist concern confined to the legal department, but a governance obligation that sits squarely with the board.

What qualifies as white-collar and corporate crime in Greece

White collar crime greece covers a broad category of financially motivated, non-violent offences committed in a commercial or professional context. These offences typically involve deception, breach of trust, or the misuse of corporate structures for illicit gain. For boards, the key point is that many of these offences can be committed by employees acting within the scope of their duties, exposing both the individual and, potentially, the company.

Common corporate offences

The offences most frequently encountered in business crime greece matters include:

• Fraud and embezzlement. Dishonest obtaining of property or financial advantage, including misappropriation of company assets, as addressed under the Greek Penal Code.
• Bribery and corruption. Offering, giving, soliciting or accepting undue advantages, whether in the public or private sector, an area closely tied to Greece’s obligations under OECD anti-bribery standards and relevant EU instruments.
• Money laundering. Concealing the origin of criminal proceeds, often prosecuted alongside a predicate offence under Greece’s anti-money-laundering legislation.
• Market abuse. Insider dealing and market manipulation affecting listed securities, governed by EU-derived rules supervised by the Hellenic Capital Market Commission.
• Accounting and financial-statement fraud. Falsification of books and records to mislead investors, lenders or authorities.
• Tax offences. Evasion, fraudulent invoicing and VAT carousel schemes, which frequently overlap with money laundering charges.

Regulatory versus criminal overlap

A defining feature of corporate liability greece is that the same conduct can trigger parallel regulatory and criminal processes. Financial-sector supervisors, the Hellenic Competition Commission and the Hellenic Data Protection Authority may each pursue administrative sanctions, while prosecutors pursue criminal charges on the same facts. For example, a data breach mishandled during an incident can generate both a regulatory investigation by the Hellenic Data Protection Authority and criminal exposure if the underlying conduct involved fraud or concealment. Managing these parallel tracks, and the risk that admissions in one forum are used in another, is a core strategic challenge for executives and their advisers.

Can companies be held liable? Legal framework and tests for corporate criminal liability greece

Companies can face significant criminal, quasi-criminal and administrative consequences in Greece, although the architecture differs from common-law corporate liability. Greek criminal law has traditionally been built around the personal culpability of natural persons, with liability of legal persons imposed principally through administrative and sector-specific sanctions provided for in particular statutes, supplemented by EU instruments transposed into national law. The statutory basis is found in Greek criminal legislation and in sector-specific laws enacted through the Government Gazette (Εφημερίδα της Κυβερνήσεως, ΦΕΚ). Because the exact statute numbers and ΦΕΚ citations govern the outcome in any given case, boards should always obtain a current citation from counsel before relying on a general description.

Legal forms of liability

Two conceptual routes to corporate exposure dominate practice:

• Direct liability of the legal person. Where legislation expressly provides for the imposition of administrative or criminal sanctions on the legal person itself, common in anti-bribery, anti-money-laundering, market-abuse and certain regulatory regimes.
• Liability of corporate organs. The acts and intent of senior individuals, directors, managers and other persons exercising control, are the basis on which criminal responsibility is established, with the organisation potentially bearing administrative or financial consequences for conduct carried out on its behalf or for its benefit.

Criteria for corporate liability

Where liability of the legal person is available, Greek and EU-influenced practice tends to turn on a cluster of considerations:

• Organisational defect. A failure of supervision, control or compliance that enabled the offence, the closest Greek analogue to a “failure to prevent” rationale found in EU-derived regimes.
• Benefit test. Whether the offence was committed for the advantage of the company.
• Consent or connivance. Whether a controlling individual authorised, encouraged or knowingly tolerated the conduct.

Appellate jurisprudence from Areios Pagos, the Supreme Court of Greece, is central to defining how intent is attributed to an organisation through the actions of its organs. Practitioner guidance from George Fouskarinis is that the attribution analysis is fact-intensive: the identity and seniority of the individual, the scope of their authority, and whether the company benefited are all scrutinised closely. Boards should assume that the more senior the implicated individual, the easier it will be for prosecutors to reach the company.

Recent legislative developments and prosecutorial practice

The period from 2024 to 2026 has seen continued alignment with EU anti-financial-crime priorities and growing expectations that companies maintain documented compliance controls. Where the Ministry of Justice issues guidance on prosecutorial policy, including cooperation and corporate conduct, it should be read together with the primary statute. The practical trend industry observers expect to continue is that credible, pre-existing compliance measures increasingly influence charging decisions and the severity of any sanction.

Sanctions and executive liability: fines, imprisonment and ancillary penalties

The consequences of corporate criminal liability greece fall into two overlapping streams, those imposed on the company and those imposed on the individuals who directed or carried out the conduct. Executive liability greece is often the sharper risk for senior managers, because imprisonment and professional disqualification are personal consequences that no corporate indemnity can fully absorb.

Typical corporate sanctions

Where a legal person is sanctioned, the measures available in Greek and EU-derived regimes can include:

• Financial penalties. Fines calibrated to the gravity of the offence and, in some regimes, to turnover or the benefit obtained.
• Confiscation. Seizure of proceeds and instrumentalities of the offence.
• Operational restrictions. Suspension of specified activities, withdrawal of licences, or exclusion from public tenders.
• Dissolution. In the most serious cases, winding-up of the entity.

Personal sanctions for directors and employees

Individuals convicted of economic offences can face custodial sentences, fines, and ancillary measures such as disqualification from managing companies or exercising a profession. Professional bodies may impose their own disciplinary consequences in parallel. For regulated executives, a criminal conviction can effectively end a career even where the custodial element is suspended.

Civil and administrative consequences

Beyond the criminal court, companies and executives may face regulatory bans, debarment from public contracting, and civil claims from shareholders, counterparties or injured third parties. These collateral consequences frequently outlast the criminal proceedings and should be factored into any strategic decision from the outset.

Corporate versus individual liability, comparison

Investigations, prosecutors and courts: how white-collar cases proceed

Understanding the procedural pathway is essential to managing corporate criminal liability greece, because the strategic choices a company makes early, before any charge is filed, often determine the eventual outcome. Cases typically move through a sequence: complaint or information received, preliminary investigation, formal investigation and indictment, trial, and potential appeal, with points of law ultimately reviewable by Areios Pagos.

Role of the Hellenic Police and economic crime units

Specialised economic-crime and financial-investigation authorities gather evidence, conduct searches and trace assets. In corporate matters, their work frequently centres on seized documents, accounting records, electronic data and witness accounts from employees. Companies should assume that any electronic system may be subject to imaging and that informal employee statements can be pivotal.

Prosecutorial powers, search and seizure, and cross-border cooperation

Prosecutors direct the investigation and, within the applicable procedural framework, may order or seek judicial authorisation for searches, seizures and freezing of assets. In cross-border matters, mutual legal assistance and coordination through Eurojust allow evidence and requests to flow between EU jurisdictions, which is increasingly common in money-laundering and corruption cases involving multiple entities. For groups with operations or banking relationships across borders, this means that a problem surfacing in one country can rapidly generate parallel enquiries in Greece, and vice versa.

Boards should also be alert to extradition and European Arrest Warrant exposure where individuals are sought across jurisdictions; our guidance on Extradition in Greece, how to stop extradition and on Extradition of Greek nationals, procedure & requirements explains the mechanics in detail.

Typical timelines and detention risk

White-collar investigations in Greece are frequently lengthy, often running for years where the facts are complex, documents voluminous and cross-border cooperation required. For individuals, the primary acute risks are questioning, asset-freezing measures and, in serious cases, pre-trial restrictions. Practitioner guidance from George Fouskarinis is that the window in which defence strategy has the greatest leverage is at the preliminary stage, before positions harden and before statements are locked in.

How companies should respond, immediate steps and internal investigation checklist

When a credible allegation or an enforcement contact arrives, the first hours and days are decisive. A disciplined response protects the company’s legal position, preserves options, and signals good faith to authorities. This section provides a practical framework; it is the operational heart of managing corporate criminal defence greece in real time.

First 24–72 hours

Act methodically. The following numbered sequence reflects the priorities of the critical early window:

1. Retain external criminal counsel immediately. Engage specialist defence counsel before taking substantive internal steps, so that confidentiality and strategy are protected from the outset.
2. Preserve evidence. Issue a document-retention instruction, suspend routine deletion of emails and documents, and secure relevant devices and accounting systems.
3. Isolate affected systems carefully. Where a breach or fraud is suspected, contain the issue without destroying forensic traces, forensic imaging should precede remediation.
4. Identify a small response team. Limit knowledge to a need-to-know core of senior management and counsel to protect confidentiality and avoid tipping-off.
5. Map the exposure. Establish what is alleged, which individuals and entities are implicated, and whether cross-border elements exist.
6. Observe data-protection obligations. Evidence collection from employee accounts and devices must comply with data-protection rules; coordinate collection with the data-protection function and follow Hellenic Data Protection Authority guidance to avoid a secondary regulatory breach.

Conducting an internal investigation

An internal investigation greece should be scoped tightly and documented carefully. A workable investigation plan includes:

• Define scope and mandate. Agree the questions the investigation must answer and who commissions it, ideally the board or an independent committee.
• Protect confidentiality of legal advice. Structure the investigation so that legal advice and investigative work product are, so far as possible, shielded; understand the limits of lawyer–client confidentiality in Greek proceedings and the risk that materials may be compellable.
• Preserve and collect data forensically. Use defensible methods for imaging devices and extracting records, maintaining a clear chain of custody.
• Interview systematically. Sequence witness interviews from the periphery inwards, advising employees appropriately on their rights and the company’s position.
• Analyse against the legal tests. Assess the facts against the attribution, benefit and organisational-defect considerations discussed above.
• Report and remediate. Produce findings that enable the board to make informed decisions on discipline, remediation and disclosure.

Communications strategy

Control the narrative without compromising the defence. Internal communications to employees should preserve confidentiality and avoid prejudging outcomes. External communications, to regulators, banks, auditors, customers and, where relevant, the market, must be accurate, consistent and legally cleared. Inconsistent statements across audiences are a recurring source of avoidable harm.

When to self-report and cooperate

Deciding whether to approach authorities proactively is among the most consequential judgments a board will make. The decision turns on the strength of the evidence, the likelihood of independent discovery, the gravity of the conduct, the robustness of the company’s compliance record, and the practical benefits available for cooperation. Because broad formal plea-bargaining mechanisms are limited in the Greek system, the value of cooperation often depends on prosecutorial practice and the specific circumstances rather than on a guaranteed statutory discount. This is a decision to make only with current, case-specific legal advice.

Building (or fixing) a compliance programme that reduces criminal exposure

A credible compliance programme is the single most effective structural defence against corporate criminal liability greece. It reduces the likelihood of an offence occurring, limits attribution to the company where misconduct does occur, and demonstrates the good-faith organisational culture that can influence charging and sentencing. Meeting compliance requirements greece means building controls that are documented, risk-based and genuinely operational, not paper policies.

Core elements of an effective programme

• Risk assessment. A periodic, documented assessment of the company’s specific exposure to bribery, fraud, money laundering, sanctions and market-abuse risks.
• Policies and procedures. Clear, accessible rules on gifts and hospitality, conflicts of interest, third-party engagement and financial controls.
• Training and communication. Role-targeted training with records of completion, reinforced by visible leadership commitment.
• Monitoring and whistleblowing. Ongoing controls testing, audit coverage, and a protected channel for employees to report concerns, consistent with Greece’s transposition of the EU Whistleblower Directive.

Board oversight, D&O and insurance

The board must own compliance oversight rather than delegate it entirely. Directors should receive regular, metrics-based reporting and should document their supervision. Directors’ and officers’ insurance is an important protection for defence costs, but boards must understand its limits: criminal fines and dishonest conduct are typically excluded, and cover for the entity’s own liability is usually narrow. A short board-reporting template might track: number and outcome of whistleblower reports; training completion rates; results of third-party due diligence; open audit findings and remediation status; and any regulatory contacts during the period.

Practical mitigation

Mitigation is continuous. Companies should conduct periodic internal and external audits, apply proportionate third-party due diligence before onboarding agents and intermediaries, and implement time-bound remediation plans with named owners whenever a weakness is identified. Demonstrable remediation after a problem is identified is a powerful factor in both regulatory and criminal contexts.

Defence strategies and resolution options in Greece

Where charges are contemplated or filed, a structured defence can significantly alter the trajectory of a case. Effective corporate criminal defence greece combines factual investigation, legal analysis of the liability tests, and a realistic assessment of resolution options.

Criminal defence considerations

Core defence themes include challenging the mental element (intent or knowledge), contesting causation and the attribution of an individual’s conduct to the company, and demonstrating that robust corporate procedures were in place and were circumvented by a rogue actor. For individual executives, evidence of reliance on internal controls and the absence of personal benefit can be decisive in rebutting liability or reducing sanction.

Cooperation and negotiated resolutions

The Greek system does not offer the broad, codified plea-bargaining and deferred-prosecution regimes familiar from some other jurisdictions, although limited procedural mechanisms for admitting guilt and obtaining sentence reductions exist within the criminal procedure framework. Where cooperation or resolution is pursued, its value rests substantially on prosecutorial practice, case law and the specific facts. Boards should therefore treat any expectation of a negotiated outcome as case-specific and provisional, and should not assume a fixed tariff of benefits.

Litigation and appellate options

Where a conviction results at first instance, appeal generally lies to the competent appellate court, with further review by Areios Pagos, the Supreme Court of Greece, principally on points of law and procedural regularity. Appellate strategy should be considered from the trial stage onward, so that the record preserves the arguments on which any subsequent appeal will depend.

Key takeaways for executives and a 10-point board checklist

The central message for boards is that corporate criminal liability greece is a governance issue to be managed proactively, not a legal afterthought. The following ten-point checklist summarises prevention and response priorities:

1. Confirm the board owns compliance oversight and receives regular metrics-based reporting.
2. Maintain a current, documented, risk-based compliance programme.
3. Run periodic risk assessments covering bribery, fraud, money laundering and market abuse.
4. Operate a protected whistleblowing channel and act on reports.
5. Apply proportionate due diligence to third parties and intermediaries.
6. Pre-agree an incident-response protocol identifying counsel and a core response team.
7. Ensure data-collection practices during investigations comply with data-protection rules.
8. Review D&O cover and understand its exclusions for criminal fines and dishonesty.
9. Prepare for cross-border exposure, including mutual legal assistance and extradition risk.
10. Seek specialist criminal counsel at the first sign of an allegation, before taking substantive steps.

Sources

1. Hellenic Parliament
2. National Printing House / Government Gazette (ΦΕΚ)
3. Hellenic Ministry of Justice
4. Areios Pagos (Supreme Court of Greece)
5. Athens Bar Association
6. Hellenic Data Protection Authority
7. EUR-Lex (EU law and directives)
8. OECD, Anti-Bribery and Liability of Legal Persons
9. National and Kapodistrian University of Athens, Faculty of Law
10. Eurojust