Corporate Criminal Liability Explained

Corporate criminal liability refers to the circumstances in which a company or other corporate entity can be held criminally responsible for unlawful conduct in its name, on its behalf, or through its actions. In England and Wales, criminal law applies not only to individuals but also to organisations where statutory offence provisions or legal principles allow a corporate body to be prosecuted and punished. This article explains the legal foundations of corporate criminal liability, common offences that attract such liability, how liability is established, potential penalties, procedural aspects, and practical compliance considerations for businesses.

What Is Corporate Criminal Liability?

A corporate body is a legal entity distinct from its owners, directors, employees and agents. Corporate criminal liability recognises that companies, partnerships and other incorporated entities can commit crimes and be held accountable in the criminal courts. Unlike civil liability (which results in compensation), criminal liability can lead to criminal penalties such as fines, orders, and in some cases deferred prosecution agreements or disqualification of officers.

Corporate criminal liability arises through:

• Statutory offences created by Parliament;
• Specific liability regimes that apply to companies; and
• Common law or judicially recognised principles in limited situations.

Unlike individual criminal liability, a company cannot be imprisoned, but fines and other sanctions can have significant operational and reputational impact.

Legal Foundations of Corporate Liability

Statutory Corporate Offences

Parliament creates many criminal offences that specifically apply to companies or can be enforced against corporate entities. These statutes may impose obligations on companies to act in particular ways, and breach of those obligations attracts criminal liability. Examples include:

• Economic crime offences, such as fraud, false accounting, money laundering and market abuse, many of which fall within the expanded regime under the Economic Crime and Corporate Transparency Act 2023. Under that Act, liability for economic crimes can be attributed to a corporate body where a “senior manager” acts within the scope of their authority, significantly widening corporate liability approaches.
• “Failure to prevent” offences requiring companies to have adequate systems in place to prevent fraud, bribery or tax evasion that benefits the organisation. A new statutory fraud prevention offence for large companies came into force, removing the need to prove senior management knowledge and imposing liability if the company fails to demonstrate reasonable fraud prevention measures.
• Sector‑specific offences such as environmental crime, competition law breaches, export control or financial regulatory offences, which include specific provisions for corporate liability.

These statutory regimes treat the corporate body independently of the individuals within it, meaning the offence can be committed by the company even if no individual has been personally charged.

Corporate Manslaughter and Related Offences

One well‑known example of corporate criminal liability is the offence of corporate manslaughter (also known as corporate homicide), created by the Corporate Manslaughter and Corporate Homicide Act 2007. Under this Act, a qualifying organisation (such as a limited company or LLP) is guilty of an offence if:

• The way in which its activities were managed or organised by senior management caused a person's death; and
• That failure amounts to a gross breach of a relevant duty of care owed to the deceased.

This offence applies to corporate bodies and public bodies (e.g., NHS trusts or councils where they are employers) but is limited to serious cases where organisational failings rise “far below what can reasonably be expected”.

Unlike the previous common‑law regime, corporate manslaughter does not require proof of fault by a single “controlling mind” - liability is assessed on how the company's senior management operated as a whole.

How Corporate Liability Is Established

Attribution of Conduct

To attribute liability to a company, the law must connect the corporate body's actions or omissions to the offence. Historically, the identification principle meant corporate liability depended on showing that a senior individual (the “controlling mind and will”) acted with the requisite culpability. This made prosecution difficult for many offences. Just as importantly, corporate behaviour could previously only be attributed when senior directors' actions represented the company's mind.

Modern statutory reforms - particularly under the Economic Crime and Corporate Transparency Act 2023 - have reduced reliance on the identification principle by expressly attributing liability where a senior manager (broadly defined by statute) acts in the scope of their authority. This applies to a wide range of listed economic offences and removes the need to pinpoint a single individual's misconduct.

Consent, Connivance, and Neglect

In some statutory offences, a company can be liable when the offence was committed with the consent, connivance or neglect of a company officer, such as a director or manager. In such cases, prosecutors can pursue both the corporate entity and individuals responsible for the conduct, allowing for concurrent actions against the company and officers.

Examples of Corporate Criminal Offences

1. Failure to Prevent Fraud

Under legislation introduced in 2025, large companies meeting criteria (e.g., more than 250 employees, turnover exceeding £36 million or assets over £18 million) are criminally liable if an employee, agent, subsidiary or associated person commits fraud intended to benefit the business, unless the company can prove it had reasonable fraud prevention procedures in place. Proof of intent by senior managers is not required, significantly broadening potential liability.

This offence reflects a shift toward strict liability for corporate entities, mirroring similar frameworks under the anti‑bribery and tax evasion “failure to prevent” regimes.

Penalties and Enforcement

A corporation convicted of a criminal offence may face a range of penalties depending on the offence and its severity:

• Fines, often unlimited where statutes allow it;
• Confiscation orders under the Proceeds of Crime Act;
• Remedial or publicity orders requiring corrective action or publication of the conviction;
• Deferred Prosecution Agreements (DPAs) in appropriate cases, where prosecution is suspended in return for compliance with agreed conditions;
• Disqualification or restrictions on directors or officers in related proceedings.

For corporate manslaughter, fines can be substantial and are scaled based on the size and turnover of the organisation.

Procedural Aspects

Investigation and Charging

Corporate investigations are typically led by specialist agencies such as the Crown Prosecution Service (CPS), Serious Fraud Office (SFO), Health and Safety Executive (HSE) or other regulators depending on the offence type. Prosecutors must consider evidential sufficiency and public interest before charging an organisation.

Deferred Prosecution Agreements

For certain economic offences, companies may negotiate a DPA - a formal agreement with prosecutors under which charges are suspended if the company complies with specified conditions (including fines, compensation payments and remedial steps). DPAs aim to balance accountability with rehabilitation, particularly where corporate misconduct arises from systemic failings rather than wilful criminality.

Practical Risks and Compliance Considerations

Corporate criminal liability presents significant risk management and compliance challenges for businesses. Companies must identify exposure to criminal offences - including fraud, bribery, health and safety breaches, environmental offences and economic crimes - and implement robust systems to prevent or detect misconduct.

Key compliance measures include:

• Policy frameworks for anti‑fraud, anti‑bribery, whistleblowing and ethical conduct;
• Training and awareness programmes for directors, officers and employees;
• Internal monitoring and audit controls;
• Senior management oversight and accountability;

Failure to establish reasonable prevention procedures can expose companies to prosecution even where wrongdoing was committed by individuals without senior management involvement.

Common Questions About Corporate Criminal Liability

Can a company itself go to prison?
No. A corporate body cannot be imprisoned. Fines or other sanctions are imposed instead, although individuals involved may face separate criminal liability.

Does senior management need to know about the illegal act for corporate liability?
Under modern statutory provisions like the senior manager and failure‑to‑prevent regimes, liability can arise even without proving knowledge or intent by directors if the organisation failed to have adequate controls.

Can a foreign company be prosecuted?
Yes. A corporate entity incorporated abroad but operating in the UK may be liable where the conduct or harm occurs within the UK. Prosecutors must identify the correct entity for indictment.

Summary

Corporate criminal liability in England and Wales provides mechanisms to hold companies accountable for criminal conduct in their operations or through agents and employees. Liability arises through statutory offences - including evolving regimes under the Economic Crime and Corporate Transparency Act 2023 - and specialised offences such as corporate manslaughter. Attribution of liability has moved beyond the traditional identification principle to include acts of senior managers within the scope of authority and failure to prevent offences. Penalties can be substantial and include unlimited fines, remedial orders and deferred prosecution agreements. Effective compliance, internal controls and risk management are essential for corporate entities seeking to mitigate exposure to criminal liability in an increasingly stringent legal landscape.