Managing director liability in GmbHs and UGs: liability risks and protection for founders

Many start-up founders choose to establish a GmbH or Unternehmergesellschaft (UG) because these legal forms are associated with a limitation of liability for the company’s assets. However, this does not mean that a managing director of a GmbH or UG bears no personal liability risk. On the contrary: various liability traps lurk for start-up CEOs in particular. Typical mistakes range from late filing of insolvency applications and breaches of tax obligations to a lack of compliance within the company and can result in the managing director being liable with their personal assets. This article provides a practical overview of the liability risks for managing directors of GmbHs and UGs, explains specific case studies from start-up practice and shows how you can protect yourself with suitable measures (from D&O insurance and internal control systems to preventive legal advice).

Legal basis of managing director liability

The liability of the managing director of a GmbH is clearly regulated in the German Limited Liability Companies Act (GmbHG). Central to this is § 43 GmbHG, which stipulates that a managing director must exercise the “diligence of a prudent businessman”. If he breaches his duties, he is liable to the company for compensation for the resulting damage. Liability is generally unlimited with all of the managing director’s private assets. Several managing directors are also generally jointly and severally liable for breaches of duty.

It is important to distinguish between two perspectives of liability:

• Internal liability: This refers to the liability of the managing director towards the company itself. If the managing director breaches his duties to the GmbH as an organ (e.g. violates the articles of association or internal instructions from the shareholders, misuses business opportunities or uses company assets for the wrong purpose), the company (or the insolvency administrator in the event of insolvency) can make a claim for damages against him. A classic example would be a breach of the capital maintenance obligation pursuant to Section 30 GmbHG: This section prohibits the payment of the assets required to maintain the share capital to shareholders. If the managing director nevertheless pays out funds to himself or fellow shareholders without authorization, he is liable for the damage incurred by the company.
• External liability: This refers to the liability of the managing director towards third parties, i.e. in particular towards creditors of the company or government agencies. In principle, the following applies: Liabilities of the GmbH or UG should only be met with the company’s assets. A managing director is not automatically liable for all of the company’s debts. However, personal external liability always arises if the managing director personally breaches certain legal obligations that serve to protect third parties. In such cases, creditors “reach through” to the private assets of the person acting.

Typical examples of external liability are

• Liability under insolvency law: In accordance with Section 15a of the German Insolvency Code (InsO), an application for insolvency must be filed within three weeks at the latest if the company becomes insolvent or overindebted. If the managing director fails to do so, he or she is committing insolvency procrastination, which is not only punishable but can also give rise to personal liability. According to the previous legal situation (formerly § 64 GmbHG, now regulated in a similar form in § 15b InsO ), the managing director is obliged to compensate the company for all payments that are made from the company’s assets after the company has become insolvent (inability to pay or overindebtedness) and which are not consistent with the diligence of a prudent businessman. This means that as soon as the company is actually ready for insolvency, the managing director may no longer make any payments from the company’s assets that are detrimental to all creditors. If he does so, for example to quickly satisfy individual creditors or to continue operating the company without a realistic chance of restructuring, he must later reimburse these amounts out of his own pocket.
• Liability for tax debts and levies: Tax law and social security law also make the managing director liable. According to the German Fiscal Code (e.g. § 69 AO in conjunction with § 34 AO), the legal representative of a company is personally liable for all taxes if he or she intentionally or grossly negligently fails to pay taxes properly. In practice, this mainly concerns VAT and wage tax: if the VAT that the company has collected from customers, for example, is not paid to the tax office, or if wage tax is not paid correctly from salary payments to employees, the tax office can claim the missing amount directly from the managing director personally. Particularly critical: In the event of a shortfall, the managing director must use the available funds equally for all creditors. Before wages are paid in full while the wage tax is no longer sufficient, he must reduce the wages in order to pay the wage tax; otherwise he is personally liable for the unpaid tax. The same applies to VAT in a crisis: the tax office must not be placed in a worse position than other creditors. In addition to civil liability, there is also the threat of severe penalties in such cases, e.g. for tax evasion.
• Liability for social security contributions: Withholding employee social security contributions is also particularly dangerous. The managing director must ensure that the employee contributions to health, pension and unemployment insurance, which are withheld from salary payments, are paid to the collection agencies. If this is not done on time, he is personally liable for the outstanding contributions. What’s more, failure to pay social security contributions is punishable under Section 266a of the German Criminal Code (StGB) and can lead to a criminal record, even if the GmbH itself was insolvent. Therefore, in financial crises, it is essential to ensure that either the contributions are paid in full or that an application for insolvency is filed in good time before contributions can no longer be paid.
• Personal liability if the company violates the law: As the head of the company, the managing director has a duty to organize and monitor compliance with all legal regulations within the company. This area is often referred to as compliance responsibility. If the company violates laws (e.g. environmental regulations, occupational health and safety, product safety, data protection, etc.) without the managing director having taken appropriate precautions, he or she may be charged with organizational negligence. In serious cases, the managing director may face personal fines or penalties, especially if it can be proven that he knew of problems and did not intervene. Even if the sanctions often affect the company first (such as fines under the GDPR or official requirements), the manager can also be held personally liable if they neglect their supervisory duties. Case law (e.g. the much-noticed Neubürger ruling by Munich Regional Court) has made it clear that a managing director is obliged to set up a compliance management system appropriate to the company in order to prevent legal violations. Failure to do so is considered a breach of the duty of care under Section 43 GmbHG.

In addition to these explicit statutory liability situations, there are other constellations in which the alleged limitation of liability is effectively breached. The legal term for this is often “pass-through liability”. This means that despite the independent legal personality of the GmbH/UG, the managing director or the shareholders behind the company are directly liable with their private assets. These cases include, for example

• Legal appearance and company name: A UG (haftungsbeschränkt) must always make this limitation of liability recognizable in business transactions (by adding “haftungsbeschränkt” to the name). If a UG managing director omits this addition in contracts or on invoices, a third party may trust that they are contracting with a person without limited liability and, in the event of a dispute, argue that they were misled about the limitation of liability. In such a case, the person acting is personally liable on the basis of legal liability. The same applies if transactions are already concluded in the name of the company before the GmbH/UG is entered in the commercial register: In this formation phase, the acting parties are generally personally and jointly and severally liable (liability of the pre-GmbH or acting party liability).
• Commingling of assets: If the managing director manages the company’s finances like his private coffers, pays private expenses from the company’s coffers or vice versa, the separation of company and private assets is nullified. In such cases, the company’s creditors can argue that the company was merely a “front” and that the commingling of assets justifies an attack on private assets.
• Misuse of the legal form / undercapitalization: If a founder only uses the GmbH or UG to take entrepreneurial risks without providing sufficient capital for the basic equipment of the business, this can be considered an abuse of the legal form in extreme cases. A classic example is the liability for encroachment that destroys the company’s existence: if shareholders withdraw important assets from the company shortly before it goes bankrupt (e.g. withdraw funds or machinery and use them privately), they are personally liable to pay damages to the creditors as they have “eroded” the insolvency estate. Even if the capitalization of the UG/GmbH is completely inadequate for the planned business from the outset, in exceptional cases this can be classified as gross negligence or immoral, with the result that creditors make a personal claim against the shareholder-managing director.

Typical liability traps in start-up practice

Especially in young companies and among founders without much experience, similar mistakes happen again and again, which lead to the aforementioned liability risks. Below are some practical case studies that are typical for start-ups:

1. delaying insolvency due to over-optimism: The technical founder of a young GmbH notices in the fall that the liquid funds are only sufficient for about one month. Instead of sounding the alarm immediately, he hopes that a new financing round will be concluded and continues to pay outstanding invoices from selected suppliers in the meantime. When the search for investors is delayed, further payments fall into arrears. Finally, the GmbH is insolvent, but the insolvency application is not filed until two months later. As a result, the managing director finds himself under criminal investigation for delaying insolvency. At the same time, the insolvency administrator demands compensation from him personally for all payments that he has made since the insolvency occurred, including several thousand euros to individual creditors that should have been included in the insolvency estate.

2. taxes and social security contributions misappropriated: A start-up CEO and co-founder runs into financial difficulties with his UG (limited liability company). In order to be able to continue paying the salaries of the remaining three employees, at least net, he decides to temporarily not pay the VAT and wage tax due to the tax office. He assumes that he will be able to make up for this within a few months following the expected financing. However, the hoped-for cash injection does not materialize. The result: the tax office initiates proceedings and holds the managing director personally liable for around 25,000 euros in outstanding taxes. At the same time, the public prosecutor’s office is investigating the facts of tax evasion and the withholding of social security contributions. In addition to financial ruin, the founder also faces criminal prosecution.

3. lack of compliance and supervision: The managing director of a young medical technology company focuses heavily on product development and discussions with investors. Meanwhile, she neglects internal processes and controls due to a lack of time and expertise. One day, it turns out that an employee has been violating data protection regulations for a long time by storing unencrypted patient data on his private laptop. In addition, safety-related tests on a medical device were not properly documented. As a result, the company was fined a large amount for violating the GDPR. At the same time, the managing director is personally accused of violating her compliance obligations, as she did not take any organizational measures to prevent such violations. The authority also imposes a fine on her. The damage to the company’s image is considerable and could have been largely avoided through early consultation and an internal control system.

4. private withdrawals from the GmbH account: A young founding team runs a UG (haftungsbeschränkt) with minimal start-up capital. Shortly after the company was founded, the two shareholder-managers each withdraw several thousand euros “in advance” from the company account to cover their private living expenses, without a formal shareholder resolution or sufficient profit basis. When the company later gets into difficulties, these funds are not available to the company. Consequence: The withdrawals violate § 30 GmbHG (prohibited disbursements). The managing directors must repay the money to the company. As they are unable to pay privately, they will ultimately have to file for personal insolvency. The limitation of liability of the UG did not protect them here.

5. personal guarantees and contracts in one’s own name: A start-up needs loans for office equipment and a company car. The bank and the lessor insist on personal guarantees from the managing director due to the limited capital of the GmbH. In addition, the managing director inadvertently signs an important supply contract not with the addition “i.V.” (on behalf of the GmbH), but only with his name. A few months later, the business fails and the GmbH is unable to service its liabilities. Consequence: The bank makes a full claim against the founder under the personal guarantee, and the supplier also claims that he personally concluded a contract with the founder (due to the unclear signature). The founder is thus liable for debts in the six-figure range, although the GmbH actually had a limitation of liability. This clearly shows that a slight formal error or a hasty personal commitment can undermine the entire protective function of the GmbH.

Protection and prevention: How managing directors minimize their risk

Although the risks described can have considerable consequences, there are numerous measures that managing directors can take to protect themselves against liability claims or significantly reduce the risk. The following starting points are particularly important for founders and start-up CEOs:

Take out D&O insurance

D&O insurance (directors’ and officers’ liability insurance) is a special liability insurance for the executive bodies of a company, e.g. managing directors of a GmbH or board members of an AG. In the event of a claim, it covers the costs of liability claims against the insured manager. Typically, this involves claims for damages by the company (internal liability) or third parties (external liability), provided there is no intent. D&O insurance is worth its weight in gold, especially in the event of financial losses due to wrong decisions: it covers legal fees and court costs to defend against unjustified claims and pays compensation in the event of an emergency. D&O can be a financial burden for start-ups, but in view of the increasing requirements and risks, every managing director should check whether they are at least covered for significant risks. It is important to keep an eye on the sums insured and exclusions. For example, not every policy covers claims arising from all conceivable breaches of duty (often excluded are deliberate violations of the law or certain types of tax debts).

Internal control system and compliance

A robust internal control system (ICS) helps to identify and avoid errors and omissions at an early stage. This includes, for example, regular financial and liquidity reviews so that impending payment bottlenecks and potential over-indebtedness are identified promptly. A good controlling system alerts the managing director in good time if a crisis is looming so that he can take countermeasures at an early stage or, in an emergency, file for insolvency in good time before personal liability arises.

The internal control system also includes adherence to compliance guidelines: The managing director should establish clear rules for his company (e.g. for the handling of customer data, for product safety, for the acceptance of important publications by a legal audit, etc.). They must define responsibilities and regularly train employees so that everyone knows which regulations need to be observed. Start-ups in particular often pay little attention to the topic of compliance at first, but a minimum level of organizational precautions is essential to avoid being held accountable later on for simple omissions.

Financial and legal provision

A good managing director not only plans for the business, but also for emergencies. This includes creating financial reserves (in the sense of a “war chest”) in order to be able to bridge short-term crises without immediately running into legal violations. For example, it can be useful to agree a line for liquidity loans or to discuss additional contributions with shareholders at an early stage during a crisis. This prevents taxes or contributions from not being paid due to a lack of money.

Preventive consultation with experts is also advisable: regular consultation with a tax advisor ensures that all tax obligations are met and warning signals (such as back tax payments) are taken seriously. An experienced lawyer can help to make business processes legally compliant, for example by reviewing contracts, advising on employment law or data protection, and providing specific information on legal changes that affect the company. Especially when a company starts to grow, the managing director should recognize their own limits: Not all risks can be overseen alone, and seeking advice in good time is not a sign of weakness, but rather risk management in practice.

It can also be helpful to agree certain indemnities or support commitments with the shareholders in the managing director’s employment contract. Companies often decide annually to discharge the managing director for the previous financial year, which at least signals internally that no claims should be asserted due to known breaches of duty. Although a discharge does not protect against external claims or intentional behavior, it creates trust and reduces the potential for conflict with shareholders.

Separation of private and corporate spheres

Last but not least: discipline in dealing with company assets and risks prevents most cases of recourse liability. From the outset, founders should strictly separate the company’s money from their private purse. No private withdrawals without a clear contractual basis, no mixing of assets, no using the GmbH like a private bank. Managing directors should also think carefully about when they issue personal guarantees or sureties. Even if lenders often insist on this: Every personal assumption of liability overrides the limitation of liability and can threaten the company’s existence in an emergency. It is worth negotiating hard to see whether other collateral can be provided or at least to limit liability. Contracts should always be concluded in the name of the company and should also be recognizable as such (by means of an appropriate signature with a company suffix) in order to avoid misunderstandings about liability.

Checklist: How founding managing directors reduce their liability risk

• Inform & educate: Familiarize yourself early on with the central duties of a GmbH/UG managing director (bookkeeping, deadlines for tax payments, employment law obligations, etc.). Attend training courses or seminars on managing director duties to learn about typical pitfalls.
• Set up financial monitoring: Keep an eye on your liquidity. Use a financial controlling system that shows you at all times how long your capital will last. If bottlenecks threaten, act immediately (reduce costs, talk to investors, consider filing for insolvency).
• Tax and payment discipline: Set up a system (e.g. escrow account or automated direct debits) to ensure that VAT, income tax and social security contributions are paid on time. If in doubt, talk to the tax office about deferrals at an early stage instead of simply suspending payment.
• Compliance management: Establish internal company guidelines for all relevant areas (data protection, occupational health and safety, IT security, etc.). Appoint responsible persons in the team and regularly check whether processes are being adhered to. Keep documentation so that you can prove that you have fulfilled your supervisory duties in the event of an emergency.
• Use external advice: Have a tax consultant for ongoing financial and payroll accounting. Use a lawyer for complicated contracts, company law and compliance issues. A quick consultation can often prevent major problems.
• Check D&O insurance: Especially if your startup has investors on board or is pursuing high growth targets, your personal risk also increases. Calculate the costs of D&O insurance and compare offers. Pay attention to which risks are covered.
• No experiments with capital: adhere strictly to the rules of capital maintenance. As a shareholder, do not make any hasty profit distributions or loans from the company’s assets. These may be reversed and lead to liability.
• Separate private and company: Avoid processing private expenses via the company or, conversely, using company funds for private purposes. Keep separate accounts and bookkeeping. This clear separation protects you from accusations of asset mingling.
• Handle contract drafting consciously: Always sign contracts in the name of the GmbH/UG and check whether clauses bind you personally (e.g. personal guarantees). If in doubt, have contracts checked by a lawyer before you enter into obligations that you may regret later.

Conclusion

For founders and managing directors of a GmbH or UG, the issue of liability is of central importance. Although the legal form of a limited liability company generally protects the private assets of the shareholders, the managing director as an executive body is responsible in many respects. Legal obligations such as the obligation to file for insolvency, the payment of taxes and social security contributions or the organization of a legally compliant business must be taken seriously, as there is a risk of personal liability and even liability in exceptional cases. Start-up CEOs in particular should be aware of the typical risks described and take active countermeasures. The good news is that with a conscious compliance culture, solid financial management and the backing of insurance and advice, most liability traps can be avoided. This allows founders to concentrate on building up their company without having to constantly fear for their private assets.

Author: Marian Härtel

Marian Härtel ist Rechtsanwalt und Fachanwalt für IT-Recht mit einer über 25-jährigen Erfahrung als Unternehmer und Berater in den Bereichen Games, E-Sport, Blockchain, SaaS und Künstliche Intelligenz. Seine Beratungsschwerpunkte umfassen neben dem IT-Recht insbesondere das Urheberrecht, Medienrecht sowie Wettbewerbsrecht. Er betreut schwerpunktmäßig Start-ups, Agenturen und Influencer, die er in strategischen Fragen, komplexen Vertragsangelegenheiten sowie bei Investitionsprojekten begleitet. Dabei zeichnet sich seine Beratung durch einen interdisziplinären Ansatz aus, der juristische Expertise und langjährige unternehmerische Erfahrung miteinander verbindet. Ziel seiner Tätigkeit ist stets, Mandanten praxisorientierte Lösungen anzubieten und rechtlich fundierte Unterstützung bei der Umsetzung innovativer Geschäftsmodelle zu gewährleisten.