The International Investigations Review: Austria


A distinction has to be made between the police and judicial authorities in Austria with respect to law enforcement authorities. In general, the police as the law enforcement authority, who are subordinate to the respective public prosecutor, lead the investigation. The public prosecutor is the head of investigations and responsible for the prosecution of crimes. A permit regarding investigations is in general not required; for example, to question witnesses. However, specific permission from the court is necessary if the public prosecutor decides to take special investigation measures, such as house searches (raids), opening of accounts or telephone tapping. All investigation measures are usually carried out by the police. Regarding the powers of the prosecution authorities, there is no distinction between corporate criminal proceedings and the prosecution of individuals.

After the investigation procedure has been completed, the public prosecutor decides, based on the results of the investigation, whether to press charges against the defendant (either an accused individual or a corporation) or whether proceedings should be discontinued.

The Central Public Prosecution for the Enforcement of Business Crimes and Corruption (WKStA) is a special prosecution authority that was established in 2011 as a response to the increasing number and complexity of white-collar crimes. It is in charge of prosecuting all Austrian business property crimes involving sums exceeding a certain amount or involving serious cases of corruption.

A special feature of Austrian criminal law is the reporting obligations of the public prosecutors. The public prosecutor must report crimes to its superior public prosecutor's office if there is an overriding public interest resulting from the significance of the crime or the suspect. If the importance of the crime is not restricted to the locality, the High Public Prosecutor's Office has to submit another report illustrating the premeditated procedural actions to the Federal Ministry of Justice. Thus, the reporting chain can range from the investigating or prosecuting public prosecutor to the Federal Ministry of Justice. Corresponding to the obligation of public prosecutors to report to higher authorities, these higher authorities have the right to issue instructions to subordinate public prosecutors.

The possibility of directives being given by higher public prosecutors has been the subject of numerous discussions, since critics stated that the prosecution should be – as part of the jurisdiction – as independent as courts and, therefore, directives given by higher public prosecutors would be improper. Therefore, a commission of experts was set up in 2014 to make a proposal concerning each single case that is reported to the Minister.

Since the Austrian Code of Corporate Criminal Liability (VbVG) came into effect on 1 January 2006, companies and other legal entities can also be accused in criminal proceedings and, like natural persons, can be (under given circumstances) held liable and be convicted. Depending on the conduct of the legal entity following the crime, the prosecutor is entitled to refrain from prosecuting if the prosecution seems unnecessary. Comprehensive cooperation with the prosecution and the installation (or adjustment) of an efficient surveillance system (for the future) can, in fact, protect the legal entity from further prosecution, but not the accused individual.


i Self-reporting

In terms of corporate and business crimes, Austrian law does not provide for a specific regulation governing self-disclosure that would exempt the perpetrators from punishment. However, if an offender or a legal entity that has committed or is responsible for a crime shows active repentance, the punishment may be exempted. What is expected from the individual or legal entity when showing repentance after committing an offence is precisely specified by law. The offender or the legal entity has to be willing to remedy the damage voluntarily even if only pressed by the victim, or at least commit himself or herself to compensating the damage without the law enforcement authorities becoming aware of the offender's guilt.

Self-disclosure is a special and very important feature in Austrian tax law. Taxpayers can often be exempted from quite substantial punishment by self-disclosure. The tax enforcement authorities, in turn, do not have to lead (lengthy) investigation procedures; however, self-disclosure only exempts offenders from punishment under circumstances that are strictly specified by law and that have been considerably tightened over the years.2

In financial criminal law, an exemption of punishment is only possible by means of self-disclosure if it occurs before an offence has been discovered or before the first prosecution measures against the self-disclosing person or business have been taken. In the case of an ongoing audit, self-disclosure has to take place when the audit starts. Owing to a recent modification, a tax surcharge is added when the offender is guilty of an intentional or grossly negligent tax offence.

In addition, within the scope of self-disclosure, the misconduct and all relevant circumstances that are important in determining the evaded amount or the tax loss have to be disclosed. If the self-disclosure is inaccurate to the extent that not all the relevant facts are disclosed, tax evaders will not be exempt from punishment. Moreover, the amount due must be paid within a month. It is possible, however, to apply for payment in instalments over a maximum of two years.

Austrian competition law3 also provides for a legal remedy with an effect similar to self-disclosure. The Federal Competition Authority (BWB) may refrain from requesting a fine in the event of violation of cartel regulations if a corporation that has violated cartel regulations is the first to disclose information and evidence to the BWB that allows it to file a well-founded request permission to carry out a house search. If the corporation is not the first to provide new information, it still can benefit from this regulation if the information disclosed allows the BWB directly to file an application (to the Cartel Court) to impose a fine.

Furthermore, it is required that the corporation has ceased violating cartel regulations and that it fully cooperates with the BWB in investigating the facts. The corporation must also not have forced any other business to participate in the violation of cartel regulations. If the corporation does not fulfil the requirement of being the first (whether to enable a house search or an application to impose a fine), but it complies with all the other aforementioned conditions, the cooperation may lead to a reduced fine.

Complementary to this legal remedy in competition law, the Code of Criminal Procedure contains a leniency programme applicable to offences perpetrated by employees or executives (e.g., Article 168b Criminal Code – collusive bidding) if the corporation benefits from the leniency programme provided by competition law. Furthermore, a general leniency programme (adapted via an amendment in 2016) enables an 'alternative reaction' in the meaning of 'out-of-court offence resolution' basically limited to small offences. If such an alternative reaction is not possible in particular cases (e.g., the offender did not comply with all the requirements), the offender can at least benefit from an 'extraordinary mitigation of punishment'.

ii Internal investigations

Internal investigations into corporations are increasingly gaining importance in Austria. The purpose of internal investigations is to gain a full and detailed picture of any criminal or illegal conduct of employees and executives if unlawful conduct in the corporation has occurred or is suspected. The results of internal investigations may also be made available to the public prosecutor, who may be investigating simultaneously, or to the interested public (e.g., concerning stock market-listed corporations).

Regarding sophisticated cases, there is often a requirement to set up an entire internal investigation team consisting of specialists within the corporation, optionally supported and strengthened by external experts, such as auditors and specialised attorneys at law. This team is in charge of seizing, preparing and analysing relevant data within the scope of the investigation. After screening the data, it may also be necessary to question former or current employees of the corporation about any incidents. During such 'forensic interviews', the interrogated person may (very often) incriminate himself or herself by a statement, hence an interview can be conducted only if the person cooperates voluntarily and is given the opportunity to consult an attorney at law in advance.4

There is no obligation to share the results of an internal investigation with law enforcement authorities, but if the corporation decides to cooperate with the enforcement authorities, there may be conflicts of interest with the company's current or former employees. This must be pointed out by the legal counsellor from the outset.

A few years ago, there was a discussion5 regarding whether law enforcers are entitled to request the surrender or to effect the detention of documents and reports kept by the corporation against its will. As a result of an amendment to the Code of Criminal Procedure in 2016, the correspondence with an attorney concerning, for example, an internal investigation is also protected if it is in the company's custody (and not only in the lawyer's office). These documents (even in the company's custody) cannot be confiscated; illegally obtained documents containing correspondence with a lawyer are subsequently inadmissible in court.

iii Whistle-blowers

Internationally, many corporations and public institutions already rely on whistle-blowers in the prevention of business crimes and corruption. There is no obligation for corporations in Austria to make anonymous whistle-blowing facilities available; however, the establishment of whistle-blowing facilities is increasingly acknowledged as part of modern risk management. Appropriate whistle-blowing facilities can consist of a corporation's own hotline, an email address established specifically for this purpose or a suitable internet platform. Often the corporation mandates a third party (e.g., a law firm) with execution of the hotline. The offences reported to these whistle-blowing facilities are not necessarily limited to internal offences against criminal law within the corporation; violations of labour law and environmental regulations may also be the subject of whistle-blowing reports.

In general, whistle-blowing facilities create certain tensions between an employee's duty of loyalty as defined by labour law (which goes beyond the general duty to work) and the employer's duty to have regard for the welfare of employees. Thus, the employee's duty of loyalty, according to which the employee has to safeguard the operational interests of the employer in the course of his or her work, may oblige the employee to report violations of regulations by other employees of which he or she has become aware. An obligation to spy on other employees can usually not be assumed. Regarding certain employees, however (e.g., employees of internal review or control departments), an extended obligation to report may already result explicitly from the agreed work activity.

If an employee aims to conceal serious violations of rules by other employees, he or she may prove to be undeserving of the employer's confidence. This can also result in a subsequent (summary) dismissal. Owing to the fact that an employer is obliged to have regard for the welfare of his or her employees, it would, however, not be appropriate to monitor an employee based on unsubstantiated and unfounded reports to document any further violations of rules.6

Certain legal provisions may encourage or even force an employee to notify the authorities or a compromised corporation of unlawful conduct. For example, persons trading financial instruments in their profession are obliged to notify the Financial Market Authority without delay when there is reason to suspect that a certain transaction could represent insider trading or market manipulation.

Depending on its precise design, an established whistle-blowing facility may be a monitoring measure or system that could potentially affect human dignity. For this reason, the introduction of a whistle-blowing facility requires the prior consent of the workers' council. If there is no workers' council, the consent of each employee has to be obtained in advance.

When implementing a whistle-blowing facility, data protection regulations have to be taken into consideration. The data inspection board dealing with whistle-blowing facilities must evaluate whether appropriate safeguards have been taken to prevent unauthorised access to collected data.

Moreover, the Austrian judicial authorities have established their own whistle-blowing home page.7 It is an anonymous interactive platform that is specifically maintained by the WKStA. Instead of being a mere reporting system that allows users to submit a message with a specific suspicion, this platform also offers the possibility of a mutual communication between the informant and the authorities, in which the informant (if desired) can remain anonymous.

This institution was set up in March 2013 and has been frequently used since then. In the first complete year of its existence (2014), more than 1,900 tip-offs had been registered, only 6 per cent of which were dismissed as being unsubstantiated. However, in the following years, there have been – including 2018 – consistently about 1,000 tips per year. Although only about 7 per cent of the tips cause themselves the initiation of criminal proceedings, many of these tips are being used as further evidence in already on-going investigations. All in all, information obtained from this platform has already led to a number of charges and convictions, thus proving its effectiveness.


i Corporate liability

The VbVG is a separate law that regulates the criminal liability of corporations organised as legal entities (see Section I). The criminal liability of a corporate entity results from criminal offences committed by its employees or decision makers. Irrespective of the level of seniority of the individual offender, liability of a corporate entity is only given if the offence was committed in favour of the corporate entity or if obligations relating to the corporate entity were infringed. An offence is already regarded as being to the benefit of a corporate entity if it has improved its competitive situation; material gain is not required. Obligations of the corporate entity that, if violated, may result in its liability, can be related to all areas of law.

Regarding offences of a decision maker, the corporation is (criminally) liable if the decision maker has committed the offence unlawfully and culpably. Decision makers are, as the VbVG states, above all, persons who are authorised to represent a corporate entity externally, such as members of the board of directors or managing directors.

The statutory prerequisites for holding a corporate entity liable as a result of the criminal offence of a (non-executive) employee are more comprehensive. The criminal offence committed by the employee must have been made possible or substantially facilitated by the corporation's failing to take measures in terms of technology, organisation and personnel to prevent such an offence. The employee must not have acted culpably (e.g., he or she can be exculpated owing to a mistake of law).

As described above, the criminal liability of a corporate entity depends solely on the criminal relevance of acts of its employees or decision makers. As specified, this may lead to serious conflicts of interest between prosecuted individuals and the corporate entity. For this reason, attorneys at law are advised against representing corporate entities and prosecuted individuals in the same case as this could cause a conflict with respect to the professional prohibition of dual representation.

ii Penalties

Corporate entities that are liable for criminal offences are punished only with fines. The amount of the fine is determined by the number of 'daily rates' imposed and the amount of the daily rate. The range of punishment (number of daily rates for the offence in question) depends on the seriousness of the offence committed and is derived from the penalty range applicable for individuals (e.g., an offence punished with 10 to 20 years or life imprisonment may lead to a fine with up to 180 daily rates imposed against the corporate entity). The next step is for aggravating and mitigating circumstances to be taken into consideration, to determine the specific number of daily rates within this range (e.g., if the maximum is 180 daily rates, the court might find 60 daily rates adequate in the specific case). An aggravating circumstance can be the amount of damage caused by the criminal offence as well as the level of unlawful conduct by employees that was tolerated or even promoted. Mitigating circumstances include whether the corporate entity participates in uncovering the infraction, remedies the consequences of the offence or takes precautions to prevent such offences in the future. In practice, the maximum number of daily rates for business crimes that are relevant is 130.

The amount of an individual daily rate results from the corporation's profitability, taking into account the corporation's economic performance. A daily rate corresponds to 1/360 of the corporation's annual yield (this amount may be exceeded or fall below by a third). The maximum amount of a daily rate, irrespective of the corporation's economic performance, is €10,000.

iii Compliance programmes

The establishment of a compliance programme does not automatically release a corporate entity from its criminal liability. The VbVG explicitly regulates that preventive measures (one example being an established compliance programme) taken both before and after the offence are considered mitigating circumstances. If the corporate entity involved has already taken preventive measures before the offence – which later, however, turn out to be inappropriate – and if, consequently, efforts to prevent such violations of laws by employees are obvious, this will (at least) lead to a significant reduction of the penalty. The same holds true for a corporate entity that decides – following the disclosure of misconduct by employees or decision makers – to establish a compliance programme or to remedy its weaknesses to avoid future misconduct.

The implementation of suitable training programmes or the drafting of guidelines for employees in sensitive fields of work are other examples of preventive compliance programmes seen as mitigating circumstances. In addition, the promotion or establishment of a whistle-blowing system may be regarded as an important step to prevent similar offences in the future.

An essential contribution to uncovering a crime may also lead to a reduction of the fine imposed on the corporate entity. That contribution will be realised more easily if a compliance programme with comprehensive duties of documentation or support for the corporation's internal review is already in place. These documents will most likely facilitate a review of the decision-making process in retrospect.

Furthermore, a reduction of the fine in the event of a criminal conviction can be achieved with the argument of impeccable business conduct. This mitigating circumstance for legal entities (liable under VbVG) corresponds with that of 'proper moral conduct' of natural persons. Impeccable business conduct is certainly indicated and supported by the establishment of a comprehensive and, above all, effective compliance programme.

In addition to many other advantages, the purpose of a compliance programme is, by definition, to prevent the commission of criminal offences in business. If a compliance programme has been successfully established and integrated into the corporate culture, this may well mean that the corporate entity should be able to produce evidence of its impeccable business conduct if convicted (for the first time). An effective compliance system can help a corporate entity that has already been liable once for an offence to show good conduct over a longer period.

iv Prosecution of individuals

Regarding the criminal liability of individuals in connection with the criminal liability of companies, it has to be taken into account that the criminal liability of companies always depends on the unlawful conduct of individuals (employees or decision makers). Only in exceptional cases, the employee who triggered the criminal liability of the company would go unpunished (e.g., if he or she did not act in a 'culpable' manner).

If an investigation against individuals working in the company is launched, the fundamental question for the company is whether it intends to cooperate with the defendants' counsel. In the event of close cooperation with the defendant, it is likely that criminal charges will be brought against the individual and also (after further analysis) against the company. In this respect, the invalidation of accusations against the individual can subsequently weaken the accusation brought against the company. Ultimately, it is at the discretion of the company to choose to cooperate with the defendants.

As the dismissal of employees or decision makers being criminally charged cannot always hinder the imposition of a fine against a company, the company – in cooperation with specialised attorneys at law – should devise a strategy for dealing with these individuals. At the same time, law enforcement authorities must be convinced (i.e., by the company cooperating as closely as possible) to refrain from bringing criminal charges against the company.


i Extraterritorial jurisdiction

In general, Austrian criminal law applies to all offences committed in Austria. This corresponds to the principle of territoriality that is now common practice for the application of statutes. Regardless of the foregoing, Austrian criminal law also applies to certain offences explicitly specified by law even if they were committed abroad.

The legal provision that crimes of corruption and bribery will be prosecuted in Austria, regardless of where the crime was committed if only the offender is Austrian, is of particular relevance for companies. These crimes are also prosecuted in Austria if the offence was committed to the benefit of an Austrian public officer.

If an Austrian citizen as an employee or decision maker of a company bribes a foreign public officer, he or she has to be punished pursuant to Austrian criminal law. This applies regardless of whether the crime was committed in Austria or abroad and whether it was an Austrian or foreign company. Conversely, decision makers or employees of foreign companies can be held criminally liable in Austria if they bribe an Austrian public officer – even from another country.

This type of special regulation goes far beyond the original principle of territoriality. In reality this means that bribery committed anywhere in the world by Austrian citizens or of Austrian public officers can be prosecuted in Austria.

ii International cooperation

The Austrian criminal justice authorities cooperate closely with those in foreign countries. The applicable legal basis is laid down in bilateral or multilateral international treaties and their respective implementation in Austrian law.

The Austrian Administrative and Judicial Assistance Act regulates, for example, the circumstances under which an extradition request to foreign criminal justice authorities can take place. This Act also contains several provisions governing general judicial assistance, and the takeover of criminal prosecutions, as well as the takeover of surveillance by Austrian authorities. The statutes specify reciprocity as a general prerequisite for these measures. In addition, administrative and judicial assistance requests must not infringe on public policy or the national interests of Austria.

Austria does not extradite individuals who commit petty crimes. Extraditions from Austria are only admissible in the case of intentional offences and for those who carry a prison sentence of more than one year pursuant to foreign and Austrian law. Austria does not, however, extradite to countries in which criminal proceedings are not in compliance with the fundamental principles of the European Convention on Human Rights (ECHR), or if the person extradited is at risk of political persecution, suffering cruel or humiliating punishments, or even the death penalty. In principle, Austria does not extradite its own citizens. However, there is an exemption with respect to extraditions to the International Criminal Court.

The influence of European Union (EU) law on the criminal law of individual Member States is becoming more important in practice. European law can specify, for example, minimum requirements for the determination of offences and penalties and for the facilitation of the mutual recognition of court sentences and decisions.

Extraditions to EU Member States have been specifically regulated by an EU Directive that was implemented in Austria by federal law with respect to judicial cooperation in criminal cases with EU Member States. This encompasses both pending foreign criminal proceedings (extradition for pretrial detention) and non-appealable sentences (execution of a sentence). These processes have been substantially simplified, compared with extraditions to third countries, owing to the principle of mutual recognition of criminal sentences passed by European states. It is also required that human rights standards are observed across Europe. For a number of specified offences, the requirement of reciprocity, for example, is no longer a prerequisite for extradition to another EU Member State. Consequently, a person who is prosecuted by an enforcement authority can also be extradited for an offence that is not punishable in Austria.

iii Local law considerations

In cross-border cases that have an impact on Austria, some special features have to be taken into consideration in criminal investigations. Austria still has banking secrecy laws that are comparatively strict. Information concerning transactions may only be given with prior approval of the court based on a motion filed by the public prosecutor. However, banks now have to report current accounts, building society accounts, passbooks and securities accounts to a central account register. Since 2017, Austria also participates in the international exchange of information on bank accounts.

There is also a strict obligation of secrecy regarding certain professional groups, such as attorneys at law, auditors and tax consultants. This obligation may not be invalidated by the seizure or confiscation of communications. Thus, members of these professional groups have the right to object to seizure. In the event of an objection, a court has to decide whether the seized communications are covered by professional secrecy. These communications may not be exploited by law enforcement authorities before the court has decided that the seized communications are not protected by the relevant professional secrecy.8 The protection of other professional groups, such as banks, has substantially softened in recent years. Therefore, it is now much easier for law enforcement authorities to gain access to communications from banks.

Year in review

In 2020, there have been several changes in the Austrian Criminal Procedure Law in response to the worldwide covid-19 pandemic. These changes are mostly limited to the duration of the protective measures against the coronavirus. They especially include a suspension of legal and judicial deadlines (e.g., for filing an appeal against a judicial decision) or the possibility to question a suspect who is held in pretrial detention via a video conference.

Apart from these changes connected to the covid-19 pandemic, the following amendments in the Austrian Criminal Law in the last year are worth mentioning.

In 2019, the Violence Protection Act 2019 entered into force, which – with regard to the criminal law aspects of this legislative package – aims to strengthen the procedural rights of the victims, especially victims of domestic violence and of sexual crimes.

Another update of the Austrian Criminal Law concerns the implementation of the Directive (EU) 2017/1371 on the fight against fraud to the EU's financial interests by means of criminal law. Since 28 December 2019, there are two new criminal offences described in the Austrian Criminal Code: Article 168c and Article 168d punish fraudulent acts affecting the revenue or expenditure and the assets of the EU budget.

An 'Adaption Act' in 2020 aimed to adjust the Austrian Criminal Law to European legislation in specific areas (e.g., with regard to extradition proceedings, juvenile criminal cases and the cooperation with international courts such as the International Criminal Court). This amendment also strengthened the right of suspects to contact a defence counsel on standby as soon as he or she has been arrested and it clarified that, if the prerequisites are met, a public defender has to be appointed without delay.

Finally, one legislative change within the Austrian Criminal Procedure Law has not been made by the legislative bodies, but was caused by a decision of the Austrian Constitutional Court. On 11 December 2019, the Constitutional Court ruled that Articles 134 (3a) and 135a Austrian Criminal Procedure Code contradict the constitution and it therefore repealed these two provisions (along with provisions outside of Criminal Law).9 The Austrian Constitutional Court stated that Articles 134 (3a) and 135a – that gave the public prosecutor the power to covertly monitor encrypted messages by installing a program on a computer system – conflict the right to privacy according to Article 8 ECHR, which has in Austria constitutional status. The court also found that the proportionality of the measures was not observed. The decision of the Constitutional Court was taken following two appeals lodged by several members of the Austrian Parliament. Because the decision of the repeal was announced even before Articles 134(3a) and 135a have entered into force (which would have been in April 2020), these provisions have never actually been applied.

Conclusions and outlook

The accomplished amendments mainly address individual procedural rights of suspects and victims in criminal proceedings and aimed at implementing several Directives of the European Union. Clearly, many legislative changes in Austrian Criminal Law that have been made in the first months of 2020 are part of necessary measures to prevent the spread of the coronavirus. Although most of them are limited to the duration of the worldwide covid-19 pandemic, it remains to be seen what long-term consequences the pandemic will have for Austrian Criminal Law.



1 Norbert Wess and Vanessa McAllister are partners and Markus Machan is attorney at wkk law Rechtsanwälte.

2 See Schrottmeyer, 'Verschärfungen bei der Selbstanzeige gemäß Section 29 FinStrG', Aufsichtsrat aktuell 2014, 13.

3 Competition law is technically regulated outside criminal law; however, the cartel fine is a criminal penalty in the meaning of Article 6 ECHR; see McAllister, Die Kartellgeldbuße (2017) 83.

4 See Wess, 'Unternehmensinterne Ermittlungen – Erfahrungen und Problemstellungen in Österreich', Anwaltsblatt, 2013, 223. There is an ongoing discussion whether an employee has to disclose all his or her knowledge (owing to the employee's duty of good faith) even if it may result in self-incrimination; see, for example, Zerbes, 'Strafrechtliche Grundsatzfragen “interner Untersuchungen''', in Lewisch (ed.), Wirtschaftsstrafrecht und Organverantwortlichkeit Jahrbuch 2013 (2013) 271.

5 See Wess, 'Die Privatisierung der Strafverfolgung', Journal für Strafrecht, 2014, 12.

6 See ECHR 9 January 2018, 1874/13, López Ribalda and others / Spain (video surveillance due to suspicion of theft by employees).

8 See Wess, 'Der Rechtsanwalt als Tatbeteiligter im Wirtschaftsstrafrecht – Grenzen strafprozessualer Zwangsmaßnahmen' in Lewisch (ed.), Wirtschaftsstrafrecht und Organverantwortlichkeit Jahrbuch 2011 (2011) 77.

9 See Austrian Constitutional Court 11 December 2019, G 72-74/2019, G 181-182/2019.

Get unlimited access to all The Law Reviews content