Corporate criminal liability for bribery in Germany

For Australian companies operating in Germany, bribery risk sits at the intersection of individual criminal responsibility, corporate fines and practical compliance expectations. The legal question is often framed too simply: can a German company itself be prosecuted for bribery? Germany has traditionally resisted a general system of criminal liability for companies, yet businesses can still face severe financial and operational consequences when representatives or employees engage in corrupt conduct.

This distinction matters for companies from Sydney, Melbourne, Perth or Brisbane entering the German market through a subsidiary, distributor, joint venture or acquisition. A German GmbH may not receive a criminal conviction in the same way as an individual director, but the organisation can be fined, deprived of illicit gains, excluded from public procurement and exposed to extensive investigation costs. Understanding how the system works helps Australian boards and compliance teams set realistic controls.

The German model of organisational responsibility

Under German law, criminal offences are generally committed by natural persons. A managing director, employee, agent or other decision-maker may therefore be prosecuted for offering, promising or granting an improper advantage. The company itself is usually addressed through administrative offence mechanisms rather than a standalone corporate crime.

The principal provision is section 30 of the Administrative Offences Act, commonly known as the OWiG. It allows authorities to impose an association fine where a senior representative commits a criminal offence or administrative offence that breaches the company’s duties or enriches the organisation. The relevant representative may include a managing director, authorised officer, member of the management board or another person with substantial responsibility.

This structure does not make corporate exposure merely technical. A company can be the economic beneficiary of bribery even where senior management claims not to have known about the payment. The law also recognises supervisory failures. Section 130 OWiG can apply where a person responsible for business supervision intentionally or negligently fails to prevent violations that proper oversight should have detected.

Bribery offences that create exposure

German criminal law separates several forms of bribery. Sections 331 to 335 of the Criminal Code address benefits offered to public officials, judges and other public-sector decision-makers. Depending on the facts, liability may arise from accepting a benefit, granting an advantage for an official act, or entering into a corrupt arrangement connected with official duties.

Commercial bribery is addressed principally by section 299 of the Criminal Code. It can cover offering or accepting an improper advantage in a business context where the payment is intended to influence the purchase of goods or services, or to disadvantage competitors. The provision is especially relevant to sales intermediaries, procurement staff, distributors and agents.

A payment does not have to be labelled a bribe in the accounts. Inflated commissions, sham consultancy agreements, unusual rebates, “success fees”, gifts routed through relatives and lavish hospitality can all attract scrutiny when they lack a legitimate business rationale. In sectors such as engineering, construction, medical technology and resources, a payment connected to tender access or contract renewal will usually receive closer attention.

The same risk arises when an Australian company deals with a German public enterprise or government-controlled body. The recipient’s formal job title is not always decisive; the person’s public function and the transaction’s connection with official duties can be more important.

What a company can face without a criminal conviction

A corporate fine under section 30 OWiG can be substantial. The statutory framework includes maximum amounts linked to whether the underlying offence was intentional or negligent, while the economic benefit obtained through the misconduct can influence the overall financial impact. Authorities may also pursue confiscation or disgorgement so that corruption does not remain profitable.

Investigations can create additional costs through document preservation, forensic accounting, employee interviews, external counsel and cooperation with prosecutors. A business may also suffer reputational damage, loss of financing, contract termination and difficulty maintaining relationships with German customers or public bodies.

Public procurement consequences are particularly important. A business associated with bribery may be excluded from tenders, subject to self-cleaning assessments or required to demonstrate that it has taken credible remedial steps. For an Australian company supplying rail infrastructure in Berlin, technology to a state-linked manufacturer in Bavaria or mining equipment through a German distributor, exclusion from one major tender can matter more than the initial fine.

The absence of a corporate conviction should therefore not be treated as a safe harbour. The practical question is whether the company can show that its controls, supervision and response were proportionate to the risks of its business.

The role of management and supervisory failures

German prosecutors focus heavily on the conduct of individuals who had authority, influence or supervisory responsibility. A managing director who approves a suspicious commission may face personal criminal liability. So may a sales manager who knowingly arranges a payment through an intermediary, or a compliance officer who deliberately suppresses a report.

Section 130 OWiG creates a separate route to organisational responsibility. The issue is whether a responsible person failed to supervise operations in a way that would have prevented or materially hindered the offence. This can involve missing approval procedures, weak third-party checks, inadequate accounting controls or a failure to act on repeated warning signs.

Controls should reflect the actual risk profile rather than exist only in a policy folder. A company selling into German public procurement may require formal approval for hospitality, tender-related contact and agents’ commissions. A small Australian exporter using one local representative might need fewer layers than a multinational with hundreds of distributors, but it still needs written expectations, training and evidence that concerns are escalated.

Australian directors will recognise the broader governance principle. A board in Melbourne or Perth cannot rely entirely on a general statement that “the business has a compliance policy”. It should be able to identify who owns the risk, how exceptions are approved and what happens when a distributor refuses to provide beneficial ownership information.

Third parties, joint ventures and intermediaries

Many bribery cases begin with a third party rather than an employee. German authorities may examine consultants, customs brokers, sales agents, freight providers, local advisers and joint venture partners. A contract that describes a person as an independent contractor does not automatically protect the principal from liability or reputational consequences.

Due diligence should test ownership, qualifications, government connections, compensation, services actually performed and the reason the intermediary was selected. Payments should match documented work and be made through ordinary banking channels to an account held in the contracting party’s name. Requests for cash, offshore accounts, unexplained urgency or payment splits are warning signs requiring escalation.

Joint ventures deserve particular care because control is shared and information may be uneven. Practical joint venture clauses can address audit rights, training, books and records, cooperation with investigations, reporting duties and termination for corruption. Those provisions do not eliminate liability, but they help define expectations and preserve evidence of preventive effort.

When due diligence must be conducted abroad, companies should also understand privacy, employment and surveillance restrictions. The use of a private investigator may raise legal issues involving personal data, covert recording and unauthorised access to information. A careful review of the private investigators used for overseas checks can prevent a compliance exercise from creating a second legal problem.

Gifts, hospitality and business travel

German law does not prohibit every meal, conference invitation or modest gift. The risk depends on the recipient, timing, value, purpose and connection with a decision. Hospitality offered during a live tender, licensing process, inspection or regulatory negotiation is more sensitive than an ordinary working lunch with no pending official action.

Policies should distinguish public officials from private-sector contacts and set clear approval thresholds. A low-value branded item may be acceptable in one setting but inappropriate when given repeatedly to the same decision-maker. Travel paid for a public official’s partner, leisure extensions, luxury accommodation or entertainment unrelated to a genuine business agenda can make an apparently legitimate visit look corrupt.

International companies often benefit from a single global standard supported by local guidance. The World Economic Forum’s travel and entertainment guidance can help teams assess whether an arrangement is reasonable, transparent, business-related and proportionate. It should complement, rather than replace, German law and internal approval rules.

Language and culture can complicate decisions. “A bit of schmoozing” may sound harmless in an Australian sales conversation, but the same arrangement may look improper when a public-sector decision is pending in Frankfurt. A clear record of who attended, what business purpose existed and who approved the expense is more defensible than reliance on informal custom.

Investigations, evidence and cooperation

When concerns emerge, a company should preserve emails, messaging records, invoices, expense claims, contracts and accounting data. German employment, privacy and data protection rules affect how internal investigations are conducted, particularly when employee devices or personal accounts are involved. Investigators should define the scope, legal basis, interview process and reporting line before collecting large volumes of data.

The company should separate fact-finding from premature conclusions. A suspicious commission may reflect a legitimate service, a bookkeeping error or an improper payment hidden behind false documentation. Interviews, bank records, tender files and communications should be assessed together. Translating records into English for an Australian parent can help the board understand the issue, but original German documents and context should be retained.

Authorities may consider the organisation’s response when deciding how to proceed. Prompt preservation, voluntary remediation, disciplinary action, recovery of funds and improvements to controls can support the company’s position. They cannot erase an offence, and they should not be confused with an automatic settlement mechanism.

Internal investigations also need a disciplined approach to employee wellbeing. Sensitive interviews, long working hours and uncertainty can affect judgement and reporting quality; even basic policies that encourage exercise moderation reflect a wider principle that responsible compliance depends on people being able to function effectively. That point is secondary to legal obligations, but a distressed or exhausted team is less likely to identify and escalate bribery indicators accurately.

Building a defensible compliance programme

A proportionate programme begins with a risk assessment covering customers, government touchpoints, products, locations, intermediaries and payment structures. Germany may present lower perceived corruption risk than some overseas markets, yet risks remain in public procurement, regulated industries, customs, permits, state-owned enterprises and cross-border supply chains.

Training should explain the difference between an ordinary business courtesy and an improper advantage. It should use realistic examples: a distributor offering to “take care” of a permit, a customer requesting an unusual rebate, a consultant refusing to disclose ownership, or a public official seeking a luxury hotel during a site visit. Employees should know how to report concerns without routing everything through the local manager who may be involved.

Books and records controls are essential. False descriptions such as “market development”, “relationship support” or “special handling” can conceal bribery and create separate accounting concerns. Finance teams should check invoices, service evidence, bank details, tax treatment and approval trails. A payment that passes through a normal account is not automatically legitimate, but transparent records make anomalies easier to detect.

For Australian businesses, the German programme should connect with obligations under Australian law, including the foreign bribery provisions of the Commonwealth Criminal Code. An Australian parent cannot assume that conduct is acceptable because the payment was made by a German subsidiary or local intermediary. Consistent group standards, careful delegation and regular testing are especially important when operations span the Pilbara, Singapore, Frankfurt and multiple layers of distribution.

The central point is that Germany’s lack of broad corporate criminal liability does not remove corporate bribery risk. Individuals may face criminal prosecution, while the company can face administrative fines, confiscation, procurement exclusion, investigation costs and lasting commercial damage. The strongest protection is a functioning system that identifies high-risk relationships, supervises decision-makers, records transactions honestly and responds quickly when warning signs appear.

For an Australian company entering Germany, the practical lesson is simple: treat the German subsidiary, agent or joint venture as part of the group’s anti-corruption control environment, not as a legal buffer. Corporate exposure may arise through a representative’s conduct or a supervisor’s failure, and the evidence of prevention will matter when authorities examine what the business knew, what it should have known and how it acted.