The criminal liability of the employer becomes a concrete issue when shortcomings in safety, a workplace accident, an occupational disease or an inspection by supervisory authorities emerge. At such times, the doubt does not concern solely the severity of the event: it is necessary to understand who had the duty to intervene, what powers they actually possessed, and whether a violation can be linked to a hazard or harm.

I want to help you distinguish the obligation of prevention from already established criminal liability. Not every irregularity automatically makes the employer guilty, but neither is it sufficient to invoke a formal appointment, a delegation, or the reckless behavior of a worker to exclude every aspect of liability. We will see which facts change the legal classification and which steps deserve attention.

When workplace safety can assume criminal relevance

A violation can be a crime even before an accident occurs. Legislative Decree No. 81 of 2008 provides for numerous contraventions for the non-observance of preventive obligations: some violations are punished with arrest or a fine, others with administrative sanctions. Therefore, it is essential not to confuse an inspection report, a technical prescription, and an indictment for an offense related to injury or death.

Prevention does not coincide with the delivery of personal protective equipment. It includes the concrete assessment of risks, the organization of work, the maintenance of environments and equipment, information, training, instruction when necessary, and emergency management. The text of Legislative Decree No. 81 of 2008 published in the Official Journal places these elements among the general protection measures.

Two obligations remain personal to the employer: the assessment of all risks through the risk assessment document, often called the DVR, and the designation of the head of the prevention and protection service, or RSPP. Article 17 of Legislative Decree No. 81 of 2008 considers them non-delegable. This does not mean that the employer must perform every technical activity alone, but that they cannot rid themselves of those fundamental decisions by transferring them merely on paper.

The DVR, in particular, is not an abstract document to be kept in the archives. It must describe the risks present in the activity and indicate measures, roles, and the schedule of interventions. If machinery, substances, work processes, premises, shifts, or organization change, the decisive question also changes: had the new risk been identified and managed with effective measures?

The absence of harm does not close the issue. The lack of the DVR or the RSPP can constitute autonomous contraventions; Article 55 of Legislative Decree No. 81 of 2008 governs the sanctions for the employer and the manager in various hypotheses of non-observance. The current text of Article 55 of Legislative Decree No. 81 of 2008 shows why it is improper to treat all safety compliances as mere bureaucratic formalities.

Who may be held liable: formal appointment, actual powers, and delegation

The title alone does not decide the matter. In organized enterprises, it may be necessary to establish who the employer was for safety purposes, what duties belonged to managers and supervisors, and who, in concrete terms, could order measures, halt a work process, or authorize expenditure. Criminal liability is personal: it does not derive automatically from the corporate position nor from the fact that an event occurred within the company.

What counts therefore is the relationship between the violated rule and the position of the person involved. A manager may be held liable for obligations connected to the organizational powers actually received; a supervisor has operational vigilance duties within their own scope. The employer retains instead the attributions that the law reserves for them and those that have not been validly transferred.

Delegation must transfer effective powers

A generic delegation is not enough. Article 16 of Legislative Decree No. 81 of 2008 requires a written act with a certified date, the written acceptance of the delegate, adequate competence with respect to the entrusted functions, powers of organization, management, and control consistent with those functions, and spending autonomy. It is also necessary to give adequate and timely publicity to the delegation.

The practical consequence is clear: entrusting a person with the task of handling safety without giving them the power to stop an activity, purchase protections, organize personnel, or obtain the necessary resources does not achieve a complete transfer of the function. The delegation must be read together with the organization chart, powers of attorney, spending powers, and the decisions actually made.

Delegation does not eliminate vigilance. Even when valid, the employer maintains the duty to verify that the delegate correctly performs the transferred functions. The same provision also excludes the possibility of delegating risk assessment and the designation of the RSPP. These conditions result from Article 16 and Article 17 of Legislative Decree No. 81 of 2008.

Accident or occupational disease: what must be proved

The event does not equal fault. Following an accident, criminal liability does not arise solely from the injury suffered by the worker. It is necessary to verify which precautionary rule was applicable, whether it was violated, whether the investigated person had a duty and power to prevent the risk, and whether the omission had a causal link with the event.

The breach must be linked to the harmful event. Article 589 and Article 590 of the Criminal Code govern negligent homicide and negligent personal injury respectively. Death and serious or very serious injuries caused by breaches of workplace accident prevention rules are subject to specific provisions. Personal conduct, breach of a precautionary rule and causation must be established: the accident alone does not prove criminal liability.

The decisive fact is the concrete risk. A machine lacking protection, a procedure incompatible with actual working times, training that is merely documentary, or an activity entrusted to unprepared personnel raise different issues. It is not sufficient to state in a generic way that the environment was dangerous: one must identify which risk manifested itself, which measure should have neutralized or reduced it, and whether that measure was practicable and exigible in the specific context.

The worker's behavior may assume relevance, but it does not automatically cancel the obligations of others. If a reckless conduct fits precisely into the risk that the precautions were supposed to prevent, it does not in itself break the link with the organizational omission. The assessment changes, however, if a conduct completely unrelated to the work processes emerges, unforeseeable with respect to the entrusted task and capable of producing the event autonomously.

Time also matters. It is useful to distinguish what existed before the event from what is done afterwards. Making an area safe, updating a procedure, or purchasing a protective device may be indispensable to protect other workers, but it does not automatically prove that the measure was already present nor does it resolve on its own the assessment of the cause of the accident. Documents, maintenance, operational instructions, and internal communications must be placed in their actual date.

The position of the company and the liability of the natural person

Person and enterprise do not coincide. Any criminal liability of the natural person holding a corporate role must be kept distinct from the liability of the entity provided for by Legislative Decree No. 231 of 2001. In the cases indicated by Article 25-septies, a company or another entity may undergo autonomous proceedings in relation to manslaughter or severe or very severe personal injuries committed with a violation of health and safety regulations.

Pecuniary sanctions and, in the provided cases, prohibitory sanctions may come into play for the entity. Article 300 of Legislative Decree No. 81 of 2008 reports the regulation of Article 25-septies of Legislative Decree No. 231 of 2001 and distinguishes the hypotheses of manslaughter from those of severe or very severe personal injuries.

A model is not an automatic shield. An organizational prevention system can be relevant only if it is adequate to the risks of the activity and actually operates: clear attributions, applied procedures, controls, information flows, and reactions to violations must be reflected in the facts. A document copied from a standard model or left unapplied does not allow one to deduce, on its own, either the effectiveness of prevention or the absence of liability.

How to handle an inspection or an event without confusing levels

The safety of people comes first. Following an accident or the finding of a hazard, it is necessary to prevent the risk from continuing to expose other workers. This does not authorize modifying registers, procedures, or documents retroactively; on the contrary, it is important to distinguish immediate protective interventions from what was prepared before the occurrence.

An inspection report requires a precise reading. It is necessary to understand whether it contests a contravention, imposes a prescription to eliminate the hazard, applies an administrative sanction, or transmits files to the judicial authority. Every act has different effects and may contain its own terms: there is no single term valid for all situations, nor is it prudent to assume that a subsequent compliance eliminates every criminal consequence.

If proceedings have already begun, the defense does not consist in repeating that the event was accidental. It is necessary to reconstruct in an orderly manner the work cycle, the entrusted tasks, the instructions received, the available measures, maintenance, training, and the decisions assumed. With my staff I can help you keep technical, organizational, and criminal profiles separate, without turning a still incomplete reconstruction into an improper admission.

Preserve what exists. Communications, training records, maintenance logs, service orders, contract agreements, delegations, and photographs can be relevant only if authentic, dated, and connected to the discussed fact. Preparing these materials in an orderly manner makes it possible to understand whether the problem concerns a single conduct, a defect in vigilance, an organizational shortfall, or multiple concurrent guarantee positions.

Frequently asked questions

Can I be investigated just because I am a company director?

No, the title is not enough. The assessment must identify a guarantee position, the powers concretely exercised, and a violation connected to the fact. However, in small businesses, administration, decision-making power, and the employer role may overlap. For this reason, it is important not to stop at the formal title, but to reconstruct who decided on organization, expenses, and safety.

Does a delegation of functions free me from all liability?

No, not automatically. Delegation requires written form, certified date, acceptance, competence of the delegate, adequate powers, and spending autonomy. Furthermore, the employer retains the duty to supervise the correct exercise of the transferred functions and cannot delegate risk assessment and the designation of the RSPP.

Does an accident prove that the employer is at fault?

No, the event alone does not prove fault. It must be ascertained whether a violated precautionary rule existed, whether the involved person had the duty and power to intervene, and whether that violation contributed to the event. The conduct of other subjects may also be relevant, but must be evaluated in the context of work risk.

Can the company be involved together with the employer?

Yes, they are distinct levels. The natural person can be held criminally liable for their own conduct; the entity can be called to answer pursuant to Legislative Decree No. 231 of 2001 in the provided hypotheses, including those recalled by Article 25-septies for events connected to the violation of safety regulations.

Does correcting the violation immediately eliminate the criminal proceedings?

Correction remains necessary to avoid new risks, but it does not automatically eliminate every consequence. The meaning of compliance depends on the type of violation, the content of the received act, and the potential presence of injuries or death. It is not prudent to assume retroactive documentary initiatives or ignore the terms indicated in a report.

Essential regulatory references

To orient yourself on the topic, you can consult Legislative Decree No. 81 of 2008 in the Official Journal, with particular attention to Articles 15, 16, 17, and 18; Article 55 of Legislative Decree No. 81 of 2008 on sanctions; and Article 300 of the same decree, which recalls the entity's discipline for safety crimes.

If you have to deal with an accident, an inspection report, or proceedings already initiated, you can contact me to frame your position and the received acts with attention to the facts actually documented.