GmbH Director Liability in Germany 2026: When You're Personally on the Hook

As a GmbH managing director (Geschäftsführer), you might think "limited liability" gives you full protection. It doesn't. In four clearly defined situations, you face personal liability in 2026, and German tax authorities enforce them aggressively. Here's where the traps are and how to protect yourself.

In short: A GmbH protects your personal assets only as long as you meet your director duties. Liability pierces the shield in four areas: unpaid taxes (§ 69 AO), a late insolvency filing (§ 15a InsO), withheld social contributions (§ 266a StGB) and breach of the duty of care (§ 43 GmbHG). Pay taxes and contributions on time, document your decisions cleanly and watch your liquidity, and you close the most common gaps before they become a problem.

Why "limited liability" isn't unlimited

The basic rule: the GmbH is liable with its corporate assets; you, the director, are not liable for business debts. But: once you breach statutory duties, the liability shield falls. German courts and tax offices call this Durchgriffshaftung (piercing the corporate veil), and you're personally on the hook.

Lawyers split this into two directions. Internal liability (Innenhaftung, § 43 GmbHG) runs toward your own company: you owe the GmbH damages if you harm it through a breach of duty. External liability (Außenhaftung) runs toward third parties, such as the tax office (§ 69 AO), the health insurer (§ 266a StGB) or creditors in insolvency (§ 15a InsO). The overview below shows both sides at a glance.

1. Tax liability under § 69 AO

If the GmbH fails to pay taxes "intentionally or with gross negligence", you're personally liable. The tax office issues a liability notice (Haftungsbescheid) and can enforce directly against your private assets. Common triggers:

• VAT return (UStVA) filed late or not at all
• Payroll tax withheld from salaries but not paid to the tax office
• Prepayments ignored while cash was available

Example: Your GmbH turns over €200,000 but the VAT return never goes out and the cash dries up, so you're personally liable for the €38,000 of VAT, your house included.

Payroll tax is especially delicate: it counts as money held in trust for the state. Failing to remit it while you still pay out net salaries is almost automatically gross negligence. Cash-crunch rule: when in doubt pay salaries only pro rata, but remit the payroll tax on them in full.

2. Late insolvency filing under § 15a InsO

The moment your GmbH becomes insolvent (zahlungsunfähig) or over-indebted (überschuldet), you have exactly three weeks to file for insolvency. Miss the deadline and you face:

• Personal liability for any debts incurred after insolvency-readiness
• Up to 3 years imprisonment (§ 15a Para. 4 InsO)
• 5-year ban from serving as a managing director

Since the SanInsFoG reform (2021), § 15b InsO tightens this further: any payments you still make after insolvency-readiness sets in must be reimbursed to the insolvency estate from your own pocket. The only exceptions are payments compatible with the care of a prudent business leader, for example to keep the business running briefly for a restructuring. Keep paying suppliers "blind" and you often pay twice.

Continuous liquidity planning is therefore mandatory. "I didn't realize we were insolvent" counts as gross negligence, because you're legally required to know.

3. Social security contributions: § 266a StGB

There's no "we ran out of money" defense here. Withholding the employee share of social security contributions and not transferring them to the health insurer is a criminal offense. Penalty: up to 5 years' imprisonment or a fine, plus personal liability for the full unpaid amount.

Cash-crunch rule: social security contributions are always paid before any other creditor. Suppliers can wait, the health insurance fund cannot. What matters is the employee share, because that is the part carrying criminal liability, even if on paper it's only a fraction of the total contribution.

4. Duty of care under § 43 GmbHG

You must run the company "with the care of a prudent businessman". Breach this duty and cause damage to the GmbH, and you face internal liability, owed to the company itself or, in insolvency, to the insolvency administrator. Classic triggers:

• Risky investments without documented due diligence
• Breach of the articles of association (e.g. taking actions that required shareholder approval)
• Hidden profit distributions later flagged by the tax office
• Incomplete or missing bookkeeping records

Important: a hidden profit distribution (vGA), like an above-market director's salary or a private purchase routed through the GmbH, doesn't only trigger back-taxes. It also creates personal liability toward co-shareholders.

The Business Judgment Rule as a shield. Not every wrong call leads to liability. Business decisions are protected if you made them on an adequate information basis, in good faith and for the benefit of the company, and can prove it. That is exactly why written documentation is not bureaucracy but your most effective liability protection.

De facto directors are liable too. Anyone who actually runs the business without being registered in the commercial register (faktischer Geschäftsführer) is liable by analogy under § 43 GmbHG. A "silent" shareholder who really makes the decisions cannot escape responsibility.

How long can you be held liable?

Liability doesn't end when you step down. Breaches from your time in office remain actionable within the relevant limitation period, sometimes for years.

5 ways to protect yourself

1. On-time taxes and filings. With automated bookkeeping, no VAT deadline slips through. This alone eliminates the most common § 69 AO case.

2. D&O insurance. Directors & Officers liability insurance covers financial loss from negligent breach of duty and the cost of your legal defense, with premiums from around €80–200 per month. Note: intent, fines and unpaid taxes are not insurable. The policy does not release you from remitting taxes and contributions yourself, on time.

3. Clean documentation. All material decisions in writing: shareholder resolutions, investments, contracts. Storage according to the new 8-year retention periods.

4. Annual discharge (Entlastung). Have it formally resolved at the ordinary shareholders' meeting. The discharge waives claims that were evident from the submitted financial statements. Without it, claims can be raised retroactively for up to 5 years.

5. Early crisis detection. Weekly cashflow check, monthly management report (BWA). The moment liquidity wobbles or equity turns negative: call your tax advisor and insolvency lawyer immediately, not in four weeks. Clean books that survive a tax audit also defend you against liability claims.

Frequently asked questions on director liability

Am I still liable after I step down as managing director?

Yes. You can be held liable for breaches during your term within the limitation period, even long after you've resigned. For § 43 GmbHG that's 5 years; for tax liability in cases of evasion, up to 10 years. A formal discharge by the shareholders limits this risk.

What's the difference between internal and external liability?

Internal liability (§ 43 GmbHG) concerns your relationship with your own GmbH: you owe it damages. External liability hits you directly toward third parties, meaning the tax office, the health insurer or creditors. In practice external liability is more dangerous because it goes straight to your private assets.

Does D&O insurance really cover everything?

No. A D&O policy covers financial loss from negligent breaches of duty and the cost of legal defense. It does not cover intentional acts, fines and penalties, or unpaid taxes and social contributions. So you remain personally responsible for the classic liability traps.

Does a shareholder-director also risk personal assets?

Yes. Liability attaches to your role as managing director, not to your shareholding. Even a sole shareholder-director is personally liable in the cases above, because the duties under § 69 AO, § 266a StGB and § 15a InsO attach to management.

Is good bookkeeping enough as liability protection?

It's the foundation. On-time returns, a current liquidity view and complete documentation defuse the three most common traps (taxes, insolvency, social contributions) and provide the evidence for the Business Judgment Rule. Insurance and legal advice complement this protection but don't replace it.

Conclusion

The "GmbH" in the name doesn't protect everything. Taxes, social security and timely insolvency filing are the three hotspots, slip on any of these and you're personally liable. Punctual GmbH bookkeeping, automated tax calculations and a live cashflow view bring the liability risk close to zero. Norman handles VAT returns, corporate tax prepayments and monthly BWA automatically, closing the most common liability gaps before they open.