Many start-up founders choose to establish a GmbH or Unternehmergesellschaft (UG) because these legal forms are associated with a limitation of liability for the company’s assets. However, this does not mean that a managing director of a GmbH or UG bears no personal liability risk. On the contrary: various liability traps lurk for start-up CEOs in particular.
Typical mistakes range from late filing of insolvency applications and breaches of tax obligations to a lack of compliance within the company. These can result in the managing director being liable with their personal assets. This article provides a practical overview of the liability risks for managing directors of GmbHs and UGs, explains specific case studies from start-up practice and shows how you can protect yourself with suitable measures.
Legal Basis of Managing Director Liability
The liability of a managing director of a GmbH is clearly regulated in the German Limited Liability Companies Act (GmbHG). Central to this is § 43 GmbHG, which stipulates that a managing director must exercise the “diligence of a prudent businessman”. If duties are breached, the managing director is liable to the company for compensation for the resulting damage.
Liability is generally unlimited, extending to all of the managing director’s private assets. Furthermore, several managing directors are typically jointly and severally liable for breaches of duty.
It is important to distinguish between two perspectives of liability:
- Internal liability: This refers to the liability of the managing director towards the company itself. If the managing director breaches their duties to the GmbH as an organ (e.g., violates the articles of association or internal instructions from the shareholders, misuses business opportunities, or uses company assets for the wrong purpose), the company (or the insolvency administrator in the event of insolvency) can make a claim for damages against them.
- A classic example would be a breach of the capital maintenance obligation pursuant to Section 30 GmbHG. This section prohibits the payment of assets required to maintain the share capital to shareholders. If the managing director nevertheless pays out funds to themselves or fellow shareholders without authorization, they are liable for the damage incurred by the company. For more details on capital, see The Share Capital of a GmbH: Myths and Facts.
- External liability: This refers to the liability of the managing director towards third parties, such as creditors of the company or government agencies. In principle, liabilities of the GmbH or UG should only be met with the company’s assets. A managing director is not automatically liable for all of the company’s debts.
- However, personal external liability always arises if the managing director personally breaches certain legal obligations that serve to protect third parties. In such cases, creditors “reach through” to the private assets of the acting person.
Typical Examples of External Liability
Here are some common situations that can lead to external liability:
- Liability under insolvency law: In accordance with Section 15a of the German Insolvency Code (InsO), an application for insolvency must be filed within three weeks at the latest if the company becomes insolvent or overindebted. If the managing director fails to do so, they are committing insolvency procrastination, which is not only punishable but can also give rise to personal liability.
- According to the previous legal situation (formerly § 64 GmbHG, now regulated in a similar form in § 15b InsO ), the managing director is obliged to compensate the company for all payments made from the company’s assets after the company has become insolvent (inability to pay or overindebtedness) and which are not consistent with the diligence of a prudent businessman.
- This means that as soon as the company is actually ready for insolvency, the managing director may no longer make any payments from the company’s assets that are detrimental to all creditors. If they do so, for example to quickly satisfy individual creditors or to continue operating the company without a realistic chance of restructuring, they must later reimburse these amounts out of their own pocket.
- Liability for tax debts and levies: Tax law and social security law also make the managing director liable. According to the German Fiscal Code (e.g., § 69 AO in conjunction with § 34 AO), the legal representative of a company is personally liable for all taxes if they intentionally or grossly negligently fail to pay taxes properly.
- In practice, this mainly concerns VAT and wage tax. If the VAT collected from customers is not paid to the tax office, or if wage tax is not paid correctly from salary payments to employees, the tax office can claim the missing amount directly from the managing director personally. Particularly critical: In the event of a shortfall, the managing director must use the available funds equally for all creditors.
- Before wages are paid in full while the wage tax is no longer sufficient, the managing director must reduce the wages to pay the wage tax; otherwise, they are personally liable for the unpaid tax. The same applies to VAT in a crisis: the tax office must not be placed in a worse position than other creditors. In addition to civil liability, severe penalties, such as for tax evasion, also threaten in such cases. For more on tax implications, see Closing Down a Business and Splitting a Business when Converting to a GmbH – Tax Traps for Founders.
- Liability for social security contributions: Withholding employee social security contributions is also particularly dangerous. The managing director must ensure that employee contributions to health, pension, and unemployment insurance, which are withheld from salary payments, are paid to the collection agencies. If this is not done on time, they are personally liable for the outstanding contributions.
- What’s more, failure to pay social security contributions is punishable under Section 266a of the German Criminal Code (StGB) and can lead to a criminal record, even if the GmbH itself was insolvent. Therefore, in financial crises, it is essential to ensure that either the contributions are paid in full or that an application for insolvency is filed in good time before contributions can no longer be paid.
- Personal liability if the company violates the law: As the head of the company, the managing director has a duty to organize and monitor compliance with all legal regulations within the company. This area is often referred to as compliance responsibility.
- If the company violates laws (e.g., environmental regulations, occupational health and safety, product safety, data protection, etc.) without the managing director having taken appropriate precautions, they may be charged with organizational negligence. In serious cases, the managing director may face personal fines or penalties, especially if it can be proven that they knew of problems and did not intervene.
- Even if sanctions often affect the company first (such as fines under the GDPR or official requirements), the manager can also be held personally liable if they neglect their supervisory duties. Case law (e.g., the much-noticed Neubürger ruling by Munich Regional Court) has made it clear that a managing director is obliged to set up a compliance management system appropriate to the company to prevent legal violations. Failure to do so is considered a breach of the duty of care under Section 43 GmbHG. Effective compliance is key, as discussed in NIS2 Compliance 2025: Relevance for SaaS and Media Start-ups.
Further Liability Constellations
In addition to these explicit statutory liability situations, there are other constellations in which the alleged limitation of liability is effectively breached. The legal term for this is often “pass-through liability”. This means that despite the independent legal personality of the GmbH/UG, the managing director or the shareholders behind the company are directly liable with their private assets. These cases include, for example:
- Legal appearance and company name: A UG (haftungsbeschränkt) must always make this limitation of liability recognizable in business transactions (by adding “haftungsbeschränkt” to the name). If a UG managing director omits this addition in contracts or on invoices, a third party may trust that they are contracting with a person without limited liability.
- In the event of a dispute, such a third party might argue they were misled about the limitation of liability. In such a case, the acting person is personally liable on the basis of legal appearance liability. The same applies if transactions are already concluded in the name of the company before the GmbH/UG is entered in the commercial register: In this formation phase, the acting parties are generally personally and jointly and severally liable (liability of the pre-GmbH or acting party liability).
- Commingling of assets: If the managing director manages the company’s finances like their private coffers, paying private expenses from the company’s funds or vice versa, the separation of company and private assets is nullified. In such cases, the company’s creditors can argue that the company was merely a “front” and that the commingling of assets justifies an attack on private assets.
- Misuse of the legal form / undercapitalization: If a founder only uses the GmbH or UG to take entrepreneurial risks without providing sufficient capital for the basic equipment of the business, this can be considered an abuse of the legal form in extreme cases. A classic example is the liability for encroachment that destroys the company’s existence: if shareholders withdraw important assets from the company shortly before it goes bankrupt (e.g., withdraw funds or machinery and use them privately), they are personally liable to pay damages to the creditors as they have “eroded” the insolvency estate.
- Even if the capitalization of the UG/GmbH is completely inadequate for the planned business from the outset, in exceptional cases this can be classified as gross negligence or immoral, with the result that creditors make a personal claim against the shareholder-managing director.
Typical Liability Traps in Start-up Practice
Especially in young companies and among founders without much experience, similar mistakes happen again and again, leading to the aforementioned liability risks. Below are some practical case studies that are typical for start-ups:
1. Delaying Insolvency Due to Over-Optimism
The technical founder of a young GmbH notices in the fall that liquid funds are only sufficient for about one month. Instead of sounding the alarm immediately, he hopes that a new financing round will be concluded and continues to pay outstanding invoices from selected suppliers in the meantime. When the search for investors is delayed, further payments fall into arrears.
Finally, the GmbH is insolvent, but the insolvency application is not filed until two months later. As a result, the managing director finds himself under criminal investigation for delaying insolvency. At the same time, the insolvency administrator demands compensation from him personally for all payments he made since the insolvency occurred, including several thousand euros to individual creditors that should have been included in the insolvency estate.
2. Taxes and Social Security Contributions Misappropriated
A start-up CEO and co-founder runs into financial difficulties with his UG (limited liability company). To continue paying the salaries of the remaining three employees, at least net, he decides to temporarily not pay the VAT and wage tax due to the tax office. He assumes that he will be able to make up for this within a few months following the expected financing. However, the hoped-for cash injection does not materialize.
The result: The tax office initiates proceedings and holds the managing director personally liable for around 25,000 euros in outstanding taxes. At the same time, the public prosecutor’s office is investigating the facts of tax evasion and the withholding of social security contributions. In addition to financial ruin, the founder also faces criminal prosecution. For insights into financial management and investment, see Early-Stage Financing for Start-ups.
3. Lack of Compliance and Supervision
The managing director of a young medical technology company focuses heavily on product development and discussions with investors. Meanwhile, she neglects internal processes and controls due to a lack of time and expertise. One day, it turns out that an employee has been violating data protection regulations for a long time by storing unencrypted patient data on his private laptop. In addition, safety-related tests on a medical device were not properly documented.
As a result, the company was fined a large amount for violating the GDPR. At the same time, the managing director is personally accused of violating her compliance obligations, as she did not take any organizational measures to prevent such violations. The authority also imposes a fine on her. The damage to the company’s image is considerable and could have been largely avoided through early consultation and an internal control system. Addressing Data Leaks in Startup Practice is crucial for data protection.
4. Private Withdrawals from the GmbH Account
A young founding team runs a UG (haftungsbeschränkt) with minimal start-up capital. Shortly after the company was founded, the two shareholder-managers each withdraw several thousand euros “in advance” from the company account to cover their private living expenses, without a formal shareholder resolution or sufficient profit basis. When the company later gets into difficulties, these funds are not available to the company.
Consequence: The withdrawals violate § 30 GmbHG (prohibited disbursements). The managing directors must repay the money to the company. As they are unable to pay privately, they will ultimately have to file for personal insolvency. The limitation of liability of the UG did not protect them here.
5. Personal Guarantees and Contracts in One’s Own Name
A start-up needs loans for office equipment and a company car. The bank and the lessor insist on personal guarantees from the managing director due to the limited capital of the GmbH. In addition, the managing director inadvertently signs an important supply contract not with the addition “i.V.” (on behalf of the GmbH), but only with his name. A few months later, the business fails and the GmbH is unable to service its liabilities.
Consequence: The bank makes a full claim against the founder under the personal guarantee, and the supplier also claims that he personally concluded a contract with the founder (due to the unclear signature). The founder is thus liable for debts in the six-figure range, although the GmbH actually had a limitation of liability. This clearly shows that a slight formal error or a hasty personal commitment can undermine the entire protective function of the GmbH.
Protection and Prevention: How Managing Directors Minimize Their Risk
Although the risks described can have considerable consequences, numerous measures can be taken by managing directors to protect themselves against liability claims or significantly reduce the risk. The following starting points are particularly important for founders and start-up CEOs:
Take out D&O Insurance
D&O insurance (directors’ and officers’ liability insurance) is a special liability insurance for the executive bodies of a company, such as managing directors of a GmbH or board members of an AG. In the event of a claim, it covers the costs of liability claims against the insured manager. Typically, this involves claims for damages by the company (internal liability) or third parties (external liability), provided there is no intent.
D&O insurance is worth its weight in gold, especially in the event of financial losses due to wrong decisions. It covers legal fees and court costs to defend against unjustified claims and pays compensation in an emergency. While D&O can be a financial burden for start-ups, every managing director should check if they are at least covered for significant risks given increasing requirements and risks.
It is important to keep an eye on the sums insured and exclusions. For example, not every policy covers claims arising from all conceivable breaches of duty (often excluding deliberate violations of the law or certain types of tax debts).
Internal Control System and Compliance
A robust internal control system (ICS) helps to identify and avoid errors and omissions at an early stage. This includes, for example, regular financial and liquidity reviews so that impending payment bottlenecks and potential over-indebtedness are identified promptly. A good controlling system alerts the managing director in good time if a crisis is looming, enabling them to take countermeasures at an early stage or, in an emergency, file for insolvency in good time before personal liability arises.
The internal control system also includes adherence to compliance guidelines. The managing director should establish clear rules for their company (e.g., for handling customer data, product safety, acceptance of important publications by a legal audit, etc.). They must define responsibilities and regularly train employees so that everyone knows which regulations need to be observed. Start-ups, in particular, often pay little attention to compliance initially, but a minimum level of organizational precautions is essential to avoid being held accountable later for simple omissions. This is part of avoiding common legal mistakes made by start-ups.
Financial and Legal Provision
A good managing director not only plans for the business but also for emergencies. This includes creating financial reserves (in the sense of a “war chest”) to bridge short-term crises without immediately running into legal violations. For example, it can be useful to agree on a line for liquidity loans or to discuss additional contributions with shareholders at an early stage during a crisis. This prevents taxes or contributions from not being paid due to a lack of money. Read more about this concept in The more innovative a company, the larger the “war chest”?
Preventive consultation with experts is also advisable. Regular consultation with a tax advisor ensures that all tax obligations are met and warning signals (such as back tax payments) are taken seriously. An experienced lawyer can help to make business processes legally compliant, for example, by reviewing contracts, advising on employment law or data protection, and providing specific information on legal changes that affect the company. Especially when a company starts to grow, the managing director should recognize their own limits: Not all risks can be overseen alone, and seeking advice in good time is not a sign of weakness, but rather risk management in practice.
It can also be helpful to agree on certain indemnities or support commitments with the shareholders in the managing director’s employment contract. Companies often decide annually to discharge the managing director for the previous financial year, which at least signals internally that no claims should be asserted due to known breaches of duty. Although a discharge does not protect against external claims or intentional behavior, it creates trust and reduces the potential for conflict with shareholders.
Separation of Private and Corporate Spheres
Last but not least: discipline in dealing with company assets and risks prevents most cases of recourse liability. From the outset, founders should strictly separate the company’s money from their private purse. This means no private withdrawals without a clear contractual basis, no mixing of assets, and no using the GmbH like a private bank.
Managing directors should also think carefully about when they issue personal guarantees or sureties. Even if lenders often insist on this, every personal assumption of liability overrides the limitation of liability and can threaten the company’s existence in an emergency. It is worth negotiating hard to see whether other collateral can be provided or at least to limit liability.
Contracts should always be concluded in the name of the company and should also be recognizable as such (by means of an appropriate signature with a company suffix) to avoid misunderstandings about liability.
Checklist: How Founding Managing Directors Reduce Their Liability Risk
- Inform & educate: Familiarize yourself early on with the central duties of a GmbH/UG managing director (bookkeeping, deadlines for tax payments, employment law obligations, etc.). Attend training courses or seminars on managing director duties to learn about typical pitfalls.
- Set up financial monitoring: Keep an eye on your liquidity. Use a financial controlling system that shows you at all times how long your capital will last. If bottlenecks threaten, act immediately (reduce costs, talk to investors, consider filing for insolvency).
- Tax and payment discipline: Set up a system (e.g., escrow account or automated direct debits) to ensure that VAT, income tax, and social security contributions are paid on time. If in doubt, talk to the tax office about deferrals at an early stage instead of simply suspending payment.
- Compliance management: Establish internal company guidelines for all relevant areas (data protection, occupational health and safety, IT security, etc.). Appoint responsible persons in the team and regularly check whether processes are being adhered to. Keep documentation so that you can prove that you have fulfilled your supervisory duties in the event of an emergency.
- Use external advice: Have a tax consultant for ongoing financial and payroll accounting. Use a lawyer for complicated contracts, company law, and compliance issues. A quick consultation can often prevent major problems.
- Check D&O insurance: Especially if your startup has investors on board or is pursuing high growth targets, your personal risk also increases. Calculate the costs of D&O insurance and compare offers. Pay attention to which risks are covered.
- No experiments with capital: Adhere strictly to the rules of capital maintenance. As a shareholder, do not make any hasty profit distributions or loans from the company’s assets. These may be reversed and lead to liability.
- Separate private and company: Avoid processing private expenses via the company or, conversely, using company funds for private purposes. Keep separate accounts and bookkeeping. This clear separation protects you from accusations of asset mingling.
- Handle contract drafting consciously: Always sign contracts in the name of the GmbH/UG and check whether clauses bind you personally (e.g., personal guarantees). If in doubt, have contracts checked by a lawyer before you enter into obligations that you may regret later.
Conclusion
For founders and managing directors of a GmbH or UG, the issue of liability is of central importance. Although the legal form of a limited liability company generally protects the private assets of the shareholders, the managing director as an executive body is responsible in many respects.
Legal obligations such as the obligation to file for insolvency, the payment of taxes and social security contributions, or the organization of a legally compliant business must be taken seriously, as there is a risk of personal liability and even criminal liability in exceptional cases. Start-up CEOs in particular should be aware of the typical risks described and take active countermeasures. The good news is that with a conscious compliance culture, solid financial management, and the backing of insurance and advice, most liability traps can be avoided. This allows founders to concentrate on building up their company without having to constantly fear for their private assets.