Expanding the Net: The New Era of Corporate Criminal Liability in the UK
For years, prosecuting large corporations for criminal activity in the UK was a legal uphill battle. The “identification doctrine” required prosecutors to prove that a person representing the “directing mind and will” of a company committed the offence. In complex corporate structures, finding that single point of failure was often nearly impossible, allowing many organisations to evade liability.
That era is ending. With the Crime and Policing Act 2026, which received Royal Assent on 29 April 2026, the UK has significantly lowered the bar for corporate criminal liability. The legal net has expanded, shifting the focus from the “directing mind” to a broader “senior manager” test that applies across almost the entire spectrum of criminal law.
From Economic Crime to All Crimes: The Evolution of Liability
To understand the impact of the 2026 Act, it’s necessary to look at the stepping stone that preceded it. The Economic Crime and Corporate Transparency Act 2023 (ECCTA) introduced a “senior manager” attribution test, but it was narrowly tailored. Under ECCTA, a company could be held liable if a senior manager committed specific economic offences, such as bribery or fraud, within their scope of authority.
The Crime and Policing Act 2026 removes that limitation entirely. Under Section 130(1), an organisation may now be held criminally liable if a senior manager commits any criminal offence within the actual or apparent scope of their authority.
The New Scope of Risk
This is no longer just about white-collar crime or financial fraud. The new regime applies to a vast array of criminal violations, including:
- Health and Safety: Failures leading to workplace injuries or fatalities.
- Data Protection: Serious breaches of privacy and data laws.
- Environmental Violations: Illegal dumping or pollution.
- Workplace Misconduct: Including modern slavery and other labour violations.
Crucially, the Act introduces several high-risk triggers that businesses must account for in their risk management strategies:
- No Requirement for Benefit: The prosecution does not need to prove that the senior manager intended to benefit the company.
- No Requirement for Knowledge: The organisation can be held liable even if the company had no knowledge of the manager’s conduct.
- The “Victim” Paradox: A company can face criminal liability even if it is the actual victim of the senior manager’s wrongdoing.
Who is Affected?
There is a common misconception that these laws only target the Fortune 500 or massive conglomerates. In reality, the senior manager attribution model applies to businesses of all sizes. Whether you are a scaling startup or a multi-national corporation, the risk is now tied to the actions of those in senior management roles.
Key Takeaways for Business Leaders
- Broadened Liability: Section 130(1) extends criminal liability to any offence committed by a senior manager within their scope of authority.
- Beyond Financials: The Act covers environmental, health and safety, and data protection crimes, not just economic ones.
- Strict Attribution: Liability exists regardless of whether the company benefited from the crime or was aware of it.
- Universal Application: The law applies to organisations of all sizes, removing the “complex structure” shield previously used by large firms.
Frequently Asked Questions
What was the “identification doctrine”?
It was the previous legal standard where a company was only liable if a person who was the “directing mind and will” of the firm committed the crime. This made it difficult to prosecute companies with decentralized management.
Does the company have to benefit from the crime for it to be liable?
No. Under the Crime and Policing Act 2026, there is no requirement that the senior manager intended to benefit the organisation for the company to be held criminally liable.
Does this only apply to large companies?
No. The senior manager attribution model is applicable to businesses of all sizes.
What is the significance of Section 130(1)?
Section 130(1) is the specific part of the Act that removes the limitation to economic crimes, allowing the “senior manager” test to be applied to any criminal offence.
As the UK moves toward this more aggressive enforcement stance, the burden of oversight has shifted. Companies can no longer rely on the opacity of their management structures to avoid liability. instead, they must implement rigorous internal controls to monitor the conduct of their senior leadership.