Introduction

Corporate criminal liability has undergone a significant transformation in the United Kingdom over the past two decades. Traditionally, prosecuting corporations for criminal offences was difficult because prosecutors were required to identify a “directing mind and will” within the organisation that possessed the necessary criminal intent. This identification doctrine often made it challenging to hold large corporations accountable for wrongdoing committed within complex organisational structures. In response to these limitations, the UK has adopted “failure to prevent” offences, creating a new model of corporate liability based on a company’s inability to prevent criminal conduct by persons associated with it.

The concept first emerged through the Bribery Act 2010 and was later expanded under the Criminal Finances Act 2017. More recently, the Economic Crime and Corporate Transparency Act 2023 has extended the approach further by introducing a corporate offence of failure to prevent fraud. These developments signal a significant shift in UK corporate criminal law, seeking to prevent corporate crime rather than punishing wrongdoing after it occurs. There is also more emphasis on organisational responsibility and compliance.

Expansion Beyond Bribery and Tax Evasion

The modern ‘failure to prevent’ model was introduced through Section 7 of the Bribery Act 2010. Under this provision, a commercial organisation commits an offence if a person associated with it bribes another person with the intention of obtaining or retaining business or a business advantage for the organisation. The company may avoid liability only if it can demonstrate that it had adequate procedures in place to prevent bribery. In 2017, the Criminal Finances Act created two offences relating to the failure to prevent the facilitation of tax evasion. These provisions impose liability on organisations whose employees, agents, or other associated persons criminally facilitate tax evasion. As with the bribery offence, companies’ only defence is to prove that they had reasonable prevention procedures in place.

The most significant recent expansion occurred with the enactment of the Economic Crime and Corporate Transparency Act 2023. This legislation introduced a new corporate offence of failure to prevent fraud. This offence applies where an associated person commits a specified fraud offence, intending to benefit the organisation or its clients. Unlike traditional corporate liability rules, prosecutors are not required to prove that senior management directed or knew about the fraudulent conduct. This is based on the recognition that economic crimes may occur where poor oversight, weak controls, or inadequate compliance systems enable misconduct. Rather than focusing solely on individual offenders, lawmakers now seek to incentivise corporations to take proactive measures to prevent wrongdoing before it occurs.

This development also reflects international trends. Global anti-corruption and anti-fraud frameworks emphasise corporate responsibility and preventive compliance measures. The UK’s approach aligns with international expectations promoted by organisations such as the Organisation for Economic Co-operation and Development (OECD) and the Financial Action Task Force (FATF), both of which encourage stronger corporate accountability mechanisms.

Compliance Expectations Under the ‘Failure to Prevent’ Framework

A defining feature of failure to prevent offences is their emphasis on compliance. Liability is not imposed simply because wrongdoing occurred. Instead, organisations are expected to establish and maintain effective procedures designed to prevent criminal conduct.

Under the Bribery Act 2010, government guidance identifies six key principles for adequate procedures:

1. Proportionality;
2. Top-level commitment;
3. Risk assessment;
4. Due diligence;
5. Communication (training); and
6. Monitoring and review.

Regulators expect organisations to adopt risk-based compliance programs tailored to their size, industry, and operational exposure.

Similarly, guidance relating to the failure to prevent tax evasion offences emphasises the importance of conducting risk assessments, implementing preventive controls, ensuring management commitment, providing staff training, and regularly reviewing compliance measures. The focus is on creating a culture in which illegal conduct is actively discouraged and detected timeously.

The new failure to prevent fraud offence under the Economic Crime and Corporate Transparency Act 2023 is expected to operate comparably. Organisations will need to identify fraud risks within their operations, implement internal controls, establish reporting mechanisms, conduct employee training, and maintain effective oversight structures. Companies that fail to take reasonable preventive measures may face significant legal and reputational consequences if fraud occurs.

Importantly, compliance expectations extend beyond formal policies. Regulators and courts increasingly examine whether compliance systems are genuinely effective in practice. A company cannot simply maintain a written code of conduct while ignoring warning signs of misconduct. To this end, active implementation and regular monitoring are required from senior leadership. Compliance functions are no longer viewed merely as administrative requirements but as essential components of organisational strategy and risk management.

Challenges and Criticisms

Despite its advantages, the ‘failure to prevent’ model is not without criticism. It is argued that it imposes substantial compliance costs, particularly on small and medium-sized enterprises. Developing risk assessments, training programs, monitoring systems, and reporting mechanisms can require significant financial and administrative resources.

Another criticism is that this approach risks creating uncertainty. Terms such as “adequate procedures” and “reasonable prevention procedures” may be open to interpretation, making it difficult for organisations to determine precisely what is required to avoid liability. Although government guidance provides some assistance, uncertainty may remain regarding the level of compliance expected in particular circumstances.

There are also concerns about over-criminalisation. Critics argue that organisations may be held liable even where senior management did not know about the misconduct. However, supporters contend that the availability of a compliance-based defence strikes an appropriate balance between accountability and fairness.

Conclusion

The rise of failure to prevent offences represents one of the most significant developments in UK corporate criminal law. Beginning with the Bribery Act 2010 and expanding through tax evasion and fraud legislation, the model represents a shift from reactive enforcement to proactive prevention. By holding organisations accountable for failing to implement effective safeguards, the law encourages stronger corporate governance, risk management, and ethical business practices.

As economic crime continues to evolve, failure to prevent offences is likely to play an increasingly important role in the UK’s regulatory framework. Organisations must therefore view compliance not merely as a legal obligation but as a strategic necessity. Those that invest in robust prevention procedures will be better positioned to reduce legal risks, protect their reputations, and demonstrate a genuine commitment to corporate integrity.