De Facto Director Liability in Poland (2026): Criminal Risk for "faktyczny Członek Zarządu"

De facto director liability in Poland has become one of the most urgent compliance concerns for boards, investors and general counsel operating in the Polish market. The January 2026 amendments to Poland’s Penal Code (Kodeks karny) broadened the scope of individual criminal exposure and introduced aggravating circumstances that directly affect persons exercising management functions without formal appointment, the faktyczny członek zarządu. At the same time, EU-driven enforcement harmonisation under the PIF Directive is pushing Polish prosecutors to pursue white-collar cases with greater frequency and cross-border reach. This article provides a practical, checklist-driven guide to the legal tests, offences, penalties and immediate compliance steps that boards, shareholders and supervisory bodies need to understand, and act on, now.

Quick Answer: Who Should Act Now and Why

Before examining the legal detail, every reader, whether general counsel, company secretary, PE sponsor or supervisory board member, should understand three things immediately.

What is a de facto director? A faktyczny członek zarządu is any person who, without formal appointment to the management board (zarząd), exercises actual control over a company’s affairs, making strategic decisions, representing the company to third parties, or directing day-to-day operations as though they were an appointed director.

What changed in January 2026? The penal code changes Poland enacted in January 2026 widened the catalogue of aggravating circumstances for economic offences and introduced new provisions targeting persons who exercise management functions “in fact or by way of delegation”, regardless of whether they hold a formal corporate role. Early indications suggest prosecutors are interpreting these changes as a mandate to investigate non-appointed decision-makers more aggressively.

What should your board do in the next 30 days?

• Audit decision-making roles. Map every person, inside or outside the company, who signs contracts, approves payments, gives instructions to employees or represents the company externally. If any of them is not a formally appointed board member, you have a de facto director risk.
• Document authority boundaries. Adopt or update written delegations of authority, internal approval matrices and role descriptions so that every decision-making function is formally assigned and recorded.
• Engage specialist criminal counsel. Commission a privileged legal review of your governance arrangements against the 2026 reform criteria before prosecutors do it for you.

The primary compliance decision question this article answers is: does anyone in our corporate structure exercise management-level control without a formal board seat, and if so, what criminal liability arises under Polish law, and how do we mitigate it?

Penal Code Changes Poland: The 2026 Reforms and Enforcement Trend

Poland’s criminal landscape for corporate decision-makers shifted materially in January 2026. The amendments, published in the Dziennik Ustaw (Official Journal) and implementing policy priorities announced by the Ministry of Justice, represent the most significant expansion of white-collar risk Poland has seen in over a decade. Industry observers expect these reforms to accelerate a trend already visible in 2024–2025, when Polish prosecutors increased the number of proceedings targeting persons exercising management functions without formal appointment.

Timeline of Key Reforms

White-Collar Enforcement Trends (2024–2026)

The enforcement landscape has been shaped by three convergent pressures. First, Poland’s transposition obligations under the EU’s PIF Directive have required prosecutors to pursue fraud, misappropriation and corruption affecting EU financial interests with increased resource and cooperation. Second, the OECD’s periodic reviews of Poland’s anti-corruption framework have recommended stronger mechanisms for attributing criminal liability to persons who exercise actual, not merely formal, control over corporate decisions. Third, a domestic political emphasis on economic accountability has led the Ministry of Justice to allocate additional specialist prosecutors to white-collar cases involving nominee director structures and investor-controlled management.

The combined result is that the de facto director liability Poland framework is no longer a doctrinal curiosity debated in academic journals; it is an operational enforcement tool. Boards that have not audited their decision-making structures against these changes face direct criminal exposure.

What Is a “De Facto Director” (Faktyczny Członek Zarządu): Legal Tests and Evidence

A faktyczny członek zarządu is a person who, without valid appointment to the management board of a Polish limited liability company (sp. z o.o.) or joint-stock company (S.A.), exercises the functions of a board member in substance. Polish courts and academic commentary, notably the analysis published through the Central European Journal of Social Sciences and Humanities (CEJSH), identify several overlapping legal tests that prosecutors and courts apply to determine whether a person has crossed the line from adviser, consultant or investor into de facto directorship.

• Control test. The person exercises actual control over the company’s strategic direction, approving budgets, authorising expenditures, deciding on hiring or dismissal of senior staff, or setting commercial policy.
• Representation test. The person presents themselves, or is presented by others, as a director, manager or authorised representative to third parties: banks, counterparties, public authorities or employees.
• Decision-making test. The person makes, or has veto power over, decisions that would ordinarily fall within the exclusive competence of the management board under the company’s articles of association (umowa spółki or statut) and the Code of Commercial Companies (Kodeks spółek handlowych).
• Appearance to third parties. External stakeholders reasonably believe the person is a board member or managing director, based on their conduct, communications or role in meetings.

No single test is determinative. Courts assess the totality of circumstances, and the threshold for criminal attribution is lower than many assume, particularly after the January 2026 reforms explicitly brought “in fact” management within the statutory definition.

Evidentiary Checklist: What Courts Look For

In proceedings alleging de facto director liability Poland, prosecutors typically assemble the following categories of evidence:

• Contemporaneous emails and messages. Internal communications showing the individual giving instructions, approving transactions or overriding board decisions.
• Signatory practice. Bank mandates, contracts, tax filings or regulatory submissions signed by, or requiring the approval of, the alleged de facto director.
• Meeting attendance and minutes. Records showing the individual chairing or directing board meetings, or attending management-level meetings where binding decisions were taken.
• Organisational charts and reporting lines. Internal documents that place the individual in a supervisory or decision-making position above the appointed board.
• Third-party witness testimony. Statements from employees, suppliers, customers or professional advisers describing the individual as the person “in charge” or “making the decisions.”
• Power of attorney and delegation documents. Broad or general powers of attorney (pełnomocnictwo ogólne) that confer management-level authority.

Boards should treat this evidentiary checklist as a mirror: if any non-appointed person in the corporate structure would appear, on these indicators, to be acting as a management board member, corrective action is overdue.

Criminal Liability for De Facto Directors in Poland: Offences, Elements and Penalties

The criminal exposure facing a faktyczny członek zarządu mirrors, and in some respects exceeds, the exposure of a formally appointed director. Under the Polish Penal Code (Kodeks karny, “K.k.”), as consolidated on ISAP, the following offences are most frequently alleged in de facto director cases.

Mens Rea and Attribution: How Criminal Intent Is Proved for Non-Appointed Managers

A critical question in any case involving director liability Poland is how intent (umyślność) is attributed to a person who was never formally appointed and may argue they were merely “advising” or “consulting.” Polish criminal law requires proof that the accused acted intentionally, either with direct intent (zamiar bezpośredni) or conditional intent (zamiar ewentualny, i.e., the person foresaw the possibility of the criminal result and accepted it).

For de facto directors, prosecutors build the mens rea case through the evidentiary categories listed above. If the evidence demonstrates that the individual exercised actual control, was aware of the relevant facts (e.g., the company’s insolvency, the falsity of filings, the diversion of assets) and chose to act or to direct others to act, conditional intent is typically satisfied. The January 2026 reforms reinforced this approach by clarifying that a person who exercises management functions “in fact” is treated, for the purposes of criminal attribution, in the same manner as a formally appointed board member. Industry observers expect this clarification to significantly reduce the scope for “I wasn’t really in charge” defences.

Aggravating factors that increase penalties include: the scale of financial damage (particularly above the PLN 5 million threshold introduced in January 2026), recidivism, abuse of a position of trust, and the involvement of public funds or EU financial interests.

Shareholder Criminal Liability Poland: When Investors and Supervisory Bodies Are at Risk

De facto director liability Poland extends beyond the operational level. Shareholders, private equity sponsors, strategic investors and supervisory board members (rada nadzorcza) may face criminal exposure where their involvement crosses the line from legitimate governance oversight into actual management direction.

The legal theories most commonly applied are:

• Direct perpetration as a de facto director. Where a shareholder or investor directly exercises management functions, dictating commercial strategy, instructing employees, approving transactions, they satisfy the legal tests outlined above and can be prosecuted as a principal.
• Aiding and abetting (pomocnictwo, art. 18 § 3 K.k.). A shareholder who provides resources, instructions or cover for criminal conduct by the management board (whether de jure or de facto) may be liable as an accessory.
• Instigation (podżeganie, art. 18 § 2 K.k.). A shareholder who induces or pressures a board member or de facto director to commit a criminal act, for example, directing the filing of false financial statements to inflate a valuation, can be prosecuted as an instigator, carrying the same penalty as the principal offence.

Risk Matrix by Investor Role

The dividing line is functional, not formal. A shareholder who exercises the kind of control that would, if exercised by a non-shareholder, qualify them as a faktyczny członek zarządu, faces identical criminal exposure. The 2026 reforms make this explicit.

Corporate Criminal Liability Poland: Indemnities and Insurance Limits

Poland has been moving, gradually but persistently, toward a comprehensive corporate criminal liability regime. As of mid-2026, the existing framework under the Act on Liability of Collective Entities for Criminal Offences (2002, as amended) permits sanctions against companies (fines, forfeiture, prohibition of activities) where a natural person acting on the entity’s behalf commits a specified offence. The January 2026 consultation draft proposed expanding the trigger conditions and increasing maximum fines.

For boards and investors, the critical practical point is the limit of contractual protections:

• Indemnity clauses cannot shield against criminal prosecution. Under Polish law, a contractual indemnity, whether in a shareholders’ agreement, management contract or service agreement, cannot relieve an individual of criminal liability. Criminal sanctions are a matter of public law; they cannot be waived, transferred or compensated by private agreement.
• D&O insurance policies exclude intentional criminal acts. Standard D&O policies in the Polish market contain exclusions for deliberate criminal conduct, fraud and dishonesty. Defence costs may be covered initially, but coverage is typically voided upon conviction or plea.
• Contribution and hold-harmless clauses are unenforceable to the extent they purport to cover criminal fines or penalties. Any provision in a management agreement or investment agreement that purports to indemnify a director (de jure or de facto) for criminal fines is void as contrary to public policy.

Do not rely on:

• Shareholder indemnities to “cover” criminal exposure
• D&O insurance to pay criminal fines
• Nominee director disclaimers to prevent prosecution of the person giving instructions
• Verbal assurances from investors that they will “stand behind” a director if problems arise

The only effective protection is structural: prevent criminal conduct from occurring, and ensure governance arrangements are designed so that no individual exercises management control without proper appointment, documented authority and accountability.

Compliance Steps for Boards: Practical Checklist and Templates

Mitigating de facto director liability Poland requires a structured, time-phased approach. The following checklist is designed for immediate use by general counsel, company secretaries and compliance teams.

Immediate Actions (Days 1–30)

• Decision-authority mapping. Identify every individual, whether employee, consultant, shareholder representative or external adviser, who currently exercises any management-level decision-making function. Cross-reference this list against the company’s formal management board composition and registered KRS entries.
• Stop unauthorised representations. Issue a written instruction to all staff and external agents that only formally appointed board members and persons holding valid, scope-limited powers of attorney may represent the company externally (sign contracts, file regulatory documents, communicate binding commitments).
• Preserve and review existing documentation. Collect board minutes, shareholder resolutions, internal emails showing decision-making flows, organisational charts and approval matrices for privileged legal review.
• Engage independent criminal counsel. Commission a privileged review of the company’s governance arrangements against the 2026 reform criteria.

Short-Term Actions (Days 31–90)

• Formal delegations of authority. Adopt or update a written delegation-of-authority matrix that assigns every material decision category (financial commitments above threshold, employment decisions, regulatory filings, litigation decisions) to a named, formally appointed person.
• Role descriptions and contracts. Ensure every consultant, adviser or shareholder representative has a written engagement letter that explicitly states they do not have authority to manage the company’s affairs, represent it externally or give binding instructions to employees, unless such authority is specifically granted by board resolution and documented.
• Nominee director protocols. Where nominee directors are used, implement a written protocol governing: (a) who may give instructions to the nominee, (b) what instructions the nominee may and may not accept, (c) how instructions and decisions are recorded, and (d) the nominee’s obligation to refuse instructions that would require illegal conduct.
• Board minute standards. Adopt a standardised board minute template that records: attendance, agenda, discussion summary, the identity of the person proposing each resolution, the vote and any dissent. Minutes should confirm that decisions were taken by the formally constituted board, not by any external person.

Medium-Term Actions (Days 91–180)

• Compliance training. Deliver targeted training to all management board members, supervisory board members, senior employees and shareholder representatives on the legal tests for de facto directorship and the personal criminal consequences of crossing the line.
• Sanctions and escalation policy. Adopt a written policy specifying that any person found to have exercised unauthorised management functions will be immediately suspended, and the matter referred to independent counsel for assessment and, where necessary, self-reporting to the prosecutor’s office.
• Annual governance audit. Institutionalise an annual review of decision-making flows, signatory practice and reporting lines to identify emerging de facto director risks before they crystallise.
• Shareholder agreement review. Review existing shareholders’ agreements, investment agreements and side letters to identify provisions that grant investors operational control, approval vetoes over ordinary-course transactions, or the right to appoint “observers” with decision-making influence. Amend or delete provisions that create de facto management risk.

Sample Shareholder Clause: Limiting De Facto Management Risk

A well-drafted shareholders’ agreement should include a clause substantially to the following effect:

“No Shareholder, nor any representative, adviser or affiliate of a Shareholder, shall exercise or purport to exercise any function reserved to the Management Board under the Company’s articles of association or the Code of Commercial Companies, unless such person has been formally appointed to the Management Board in accordance with the Company’s articles and registered with the KRS. Any instruction given by a Shareholder to the Management Board shall be communicated in writing, recorded in the Management Board’s minutes and assessed by the Management Board for compliance with applicable law before implementation.”

This clause serves a dual purpose: it documents the parties’ intention that shareholders will not exercise management functions, and it creates a contemporaneous record that can be used as evidence of proper governance if de facto directorship is later alleged.

Internal Investigations: What to Do When a De Facto Director Is Suspected

When a board discovers, or suspects, that a non-appointed person has been exercising management functions, a structured internal investigation should be initiated immediately. The stakes are significant: failure to act promptly may expose the appointed board members themselves to liability for failing to prevent criminal conduct.

• Appoint independent counsel. Engage external criminal defence counsel who is independent of both the suspected de facto director and the board. Privilege must attach to the investigation from the outset.
• Preserve all documents and communications. Issue a litigation hold notice covering emails, messages, contracts, minutes, bank records and any other materials relevant to the suspected person’s role. Do not allow deletion or alteration of records.
• Suspend, do not terminate. In most cases, the suspected person’s access to company systems and decision-making should be suspended immediately while the investigation proceeds. Termination may be premature and could destroy evidence or trigger retaliatory disclosure.
• Conduct privileged interviews. Interview key witnesses, employees, advisers, counterparties, under the direction of independent counsel. Focus on the factual indicators from the evidentiary checklist above.
• Assess self-reporting triggers. Under certain circumstances (particularly where tax offences or EU-funded programme fraud are suspected), voluntary self-reporting to the prosecutor’s office may mitigate penalties or provide a statutory defence. Independent counsel should advise on whether the threshold for self-reporting has been met.
• Protect privilege. Ensure all investigation materials are clearly marked as privileged and that the investigation is conducted for the purpose of obtaining legal advice. Polish privilege rules are narrower than some common-law jurisdictions; only communications with a qualified advocate (adwokat) or legal adviser (radca prawny) for the purpose of legal advice attract privilege.

Red flags requiring immediate investigation: a non-board member signing contracts above a material threshold; a shareholder representative chairing management meetings; an “adviser” issuing written instructions to employees; an investor’s operating partner approving the company’s annual budget.

Quick-Reference Comparison Table and Legislative Timeline

Key Legislative Dates

Conclusion and Next Steps

De facto director liability Poland is no longer a theoretical risk discussed in academic commentary, it is an active enforcement reality. The January 2026 penal code changes Poland implemented have removed the most common defence available to non-appointed managers (“I was never formally on the board”), expanded the penalties for large-scale economic harm, and aligned Polish enforcement with EU-wide expectations under the PIF Directive.

The five actions every board should prioritise now are:

1. Map all decision-making authority across the corporate structure, including shareholder representatives, consultants and advisers, and identify anyone who could be classified as a faktyczny członek zarządu.
2. Adopt or update written delegations, role descriptions and approval matrices to ensure every management function is formally assigned, documented and bounded.
3. Review shareholder agreements and investment documents for provisions that create de facto management risk, and amend them.
4. Implement a formal internal investigation protocol for responding to suspected de facto directorship, including privilege protections and self-reporting triggers.
5. Engage specialist criminal counsel for a privileged governance review against the 2026 reform criteria.

The cost of inaction is not merely theoretical. Individual exposure includes custodial sentences of up to 15 years for the most serious economic offences, and no contractual indemnity, D&O policy or informal assurance will provide protection once a criminal investigation is opened. The time to act, to review, document and restructure governance arrangements, is before the prosecutor’s office sends its first request for information, not after.

Sources

1. ISAP – Consolidated Texts of Polish Legislation (Kodeks karny)
2. Dziennik Ustaw – Official Journal of the Republic of Poland
3. Ministry of Justice (Poland) – Announcements and Reform Pages
4. CEJSH – “Personal Liability of a De Facto Director” (J. Olesiak)
5. Supreme Court of Poland (Sąd Najwyższy) – Judgments Portal
6. OECD – Corporate Liability and Enforcement Reports
7. European Commission – PIF Directive and Enforcement Framework