Obstruction of supervision concerns communications and relations with a public authority that controls a company or entity. If you are a director, statutory auditor, general manager, manager in charge of preparing corporate accounting documents, or hold another role subject to obligations towards the authority, a finding regarding transmitted data, missing documents, or responses deemed incomplete can have very different criminal consequences from a simple organizational irregularity.
In this guide, I want to clarify what Article 2638 of the civil code requires, why not every informational error constitutes a crime, and which facts truly change the assessment. We will also examine the difference between the liability of the individual and that of the entity pursuant to Legislative Decree 231/2001: these are connected planes, but they do not coincide.
What Article 2638 of the civil code punishes
The offence protects public supervision. Article 2638 of the civil code distinguishes two cases: false information or fraudulent concealment intended to obstruct supervision, and conduct that actually and knowingly obstructs it. In the first case, the intended obstruction need not have succeeded; in the second, there must be an actual effect on the authority’s supervisory activity.
The subjects indicated by the rule are numerous. The provision mentions directors, general managers, managers in charge of drawing up corporate accounting documents, statutory auditors, and liquidators, in addition to other subjects subject by law to supervision or bound by obligations towards the authority. The statutory auditor, in this context, is a member of the corporate control body, not the holder of a local public office.
The penalty provided is imprisonment. For the conduct governed by the first two paragraphs of Article 2638 of the civil code, the law indicates imprisonment from one to four years; the penalty is doubled in cases concerning companies with shares listed on regulated markets or widely distributed among the public to a significant extent. The text of the article also contemplates information relating to assets owned or managed by the company on behalf of third parties. Text of Article 2638 of the civil code reported in the Official Gazette.
The two types of conduct provided: false information and conscious obstruction
The first hypothesis concerns due communications. The first paragraph takes into consideration communications provided for by law towards the supervisory authority. Relevant factors include the presentation of material facts not corresponding to the truth, even when they concern evaluations, and the fraudulent concealment of facts that should have been communicated. The communication must therefore have a content connected to the economic, equity, or financial situation of the supervised entity.
Not every inaccurate data point is sufficient on its own. A transcription error, an incomplete piece of information later clarified, or a debated estimate cannot be automatically assimilated into criminally relevant conduct. It is necessary to distinguish objective inaccuracy from falsehood or concealment that occur within a due communication and are aimed at obstructing supervision. For this first hypothesis, the purpose of obstructing constitutes a central element.
The second paragraph has a broader scope. The law also considers anyone who, in any form, including omissions of due communications, consciously obstructs the functions of the authority. Here it becomes decisive to reconstruct the specific conduct: what information obligation existed, what supervisory activity was underway or had to be carried out, what was omitted or interposed, and what awareness emerges from the records.
Corporate role and obligation towards the authority: why both matter
The qualification should not be read in an abstract way. Being a director or statutory auditor does not mean, by itself, being liable for every communication that the company sends to the outside. It is necessary to understand who had the power or duty to prepare, approve, transmit, or check that specific information. Delegations, powers of attorney, internal regulations, and the actual division of functions can help define the perimeter of responsibilities.
The relationship with supervision also counts. Article 2638 does not apply simply because a company generically maintains relations with a public administration. There must be a public authority invested with supervisory functions and a legal obligation of communication, collaboration, or subjection to control. The nature of the regulated sector and of the request received can therefore radically change the legal classification of the fact.
Internal information circulation is relevant. A response sent to the authority may depend on data produced by different offices, an external consultant, or a specialized corporate function. This does not automatically eliminate responsibilities, but it prevents shortcuts: it is necessary to distinguish who formed the data, who knew of its inaccuracy, who had the title to correct it, and who decided on the submission or omission.
The facts that guide criminal defense
The contested communication is the starting point. It is necessary to identify its recipient, date, content, attachments, and the source of the transmission obligation. A request from the authority, a periodic report, and a response during an inspection are not interchangeable documents: their meaning depends on the regulations providing for them and the control function for which they are intended.
The falsehood must be concrete. If the charge concerns patrimonial or financial data, it is necessary to compare it with accounting records, resolutions, contracts, extracts, correspondence, and other documents that allow establishing what reality could be represented at that moment. The difference between provisional data, reasonable estimate, error, and knowingly untrue statement is not merely technical: it can affect the very existence of the accusatory hypothesis.
The obstruction must be linked to the supervisory function. It is not enough to state that information would have been useful to the authority. It is necessary to verify whether that news was due, what control it could concern, and in what way the contested conduct affected the possibility of exercising it. In the first paragraph, moreover, the connection between conduct and the purpose of obstructing is essential; in the second, awareness of the obstructive effect assumes relevance.
Subsequent conduct does not erase the problem, but it can clarify it. A timely correction, the delivery of missing documents, or a coherent explanation can be important elements to reconstruct what happened. However, they do not automatically make the preceding conduct harmless: their content, timing, spontaneity, and relationship with pre-existing obligations must be evaluated. Likewise, subsequent silence does not prove original intent by itself.
The liability of the entity pursuant to Legislative Decree 231/2001
The company is not automatically liable. The obstruction of supervision provided for by Article 2638, first and second paragraphs, is among the corporate crimes referred to in Article 25-ter of Legislative Decree 231/2001. To attribute crime liability to the entity, however, the hypothetical criminal liability of an individual is not sufficient: the connection of the fact to the interest or advantage of the entity provided for by the general regulations must also occur.
The entity's sanction is calculated in shares. For this crime, Article 25-ter provides for a pecuniary sanction from four hundred to eight hundred shares. The number of shares and the value attributed to each share are distinct elements; therefore, it is not correct to derive the final amount by multiplying an abstract figure without considering the criteria established by the decree. If the entity has achieved a profit of significant entity, the rule provides for an increase of the pecuniary sanction by one third. Institutional reference to Article 25-ter of Legislative Decree 231/2001.
A Model 231 does not automatically exempt the entity. For offences committed by senior management, Article 6 requires all of the following: an appropriate model adopted and effectively implemented before the offence, a supervisory body with autonomous powers, fraudulent circumvention of the model by the perpetrator, and no omitted or insufficient supervision. Procedures actually followed, checks on data and internal information flows therefore matter when managing relations with the authority.
Individual and entity have different positions. The defense of the director, manager, or statutory auditor concerns the personal charge: role, conduct, knowledge of data, and purpose. The entity, on the other hand, must also deal with its organizational structure, any interest or advantage, and the concrete suitability of the safeguards adopted. Confusing these two planes risks overshadowing elements useful to both.
How to face a charge without confusing the planes
The first choice is to avoid improvised responses. If a request for clarification, an investigative act, or an internal charge connected to supervision arrives, it is first necessary to distinguish the technical content from the criminally relevant one. Correcting a document may be necessary, but a correction must be evaluated consistently with the documents already transmitted, obligations toward the authority, and the position of the individuals involved.
The second choice is to separate facts from conclusions. Emails, minutes, accounting files, and internal communications can demonstrate the origin of data, but they do not automatically express an intention to obstruct supervision. Similarly, the existence of a technical criticality does not prove by itself the liability of someone who had a corporate role. The reconstruction must keep data, duty, decision-making power, and awareness distinct.
The third choice is to also consider the entity. When the hypothesis involves a company, it is useful not to limit attention to the position of the single individual. 231 procedures, delegations, control systems, and rules for managing relations with the authority can have autonomous relevance. If you have to face a concrete situation in Milan, you can contact me to frame the facts and positions involved without overlapping different responsibilities.
Frequently asked questions
Does an error in a communication to the authority always constitute a crime?
No, the error is not automatically sufficient. Article 2638 requires elements beyond simple inaccuracy. It is necessary to consider whether the communication was due, what data was actually available, who knew it and, according to the contested hypothesis, whether the conduct was directed at obstructing supervision or consciously prevented the exercise thereof.
Can I be involved even if I am not a director?
Yes, but the role must be concrete. The rule does not concern only directors: it also mentions general managers, managers in charge of accounting documents, statutory auditors, liquidators, and other subjects subject to supervision or obligated toward the authority. The formal qualification, however, must be linked to effective powers and the contribution made to the communication or omission charged.
Is failure to respond to a request from the authority always obstruction of supervision?
Not every delay is equivalent to the crime. It is necessary to establish whether the request imposed a response or the production of documents, whether the subject was obliged to comply, and what effect the conduct had on control. The rule expressly takes into consideration even the omission of due communications, but the assessment remains tied to the facts and awareness.
Can the company be held liable pursuant to Legislative Decree 231 even without the director's conviction?
The entity’s liability is autonomous but requires a predicate offence. Article 8 permits liability to be established even if the perpetrator has not been identified or is not criminally responsible, or if the offence is extinguished for a reason other than amnesty. The offence and the other requirements for liability under Legislative Decree 231 must still be proved: the absence of an individual conviction neither automatically establishes nor automatically excludes the company’s liability.
Does a 231 model adopted before the facts exclude the company's liability?
No, adoption alone is not sufficient. The model must be suitable for the concrete risk and applied effectively. In challenges related to supervision, procedures on information flows, data checks, signature delegations, and the methods by which the authority's requests and communications are managed can count.