The case, explained

Liability of the Supervisory Body and Organizational Fault: Supreme Court Orientations

7 min read · Updated November 2026 · Editorial oversight: Avv. Federico Papa

The Supreme Court, in a recent ruling, clarified the liability profiles in one of the most complex judicial cases of recent years, concerning the accounting management of a major national banking institution. According to press reports, the core of the debate shifted from the conduct of top management to the specific function of the Supervisory Body (OdV), outlining the boundaries between oversight of the model and management control. This contribution examines the general principles of law established by the Supreme Court regarding the nature of organizational fault and the limits of criminal liability of OdV members for failure to supervise. Through a reconstruction of the regulatory framework and the development of a twin case, we will examine how case law aims to prevent the supervisory role from transforming into strict liability for every offense committed within the entity.

Liability of the Supervisory Body and Organizational Fault: Supreme Court Orientations

In brief

The article analyzes the Supreme Court decision which, while confirming the acquittal of OdV members, upheld the PM's appeals by annulling with referral the acquittal of the former top management and the bank for the 2014 and 2015 financial statements. The focus is on the distinction between the duties of the Board of Statutory Auditors and those of the Supervisory Body, reiterating that the latter is not responsible for the reliability of financial statements, but rather for the maintenance and effectiveness of the 231 Model. The concept of organizational fault and the causal link required to establish the supervisory body's omissive liability are clarified.

  1. The facts

    The case stems from the open-balance accounting of structured financial transactions named Alexandria and Santorini in the financial statements of Monte dei Paschi di Siena between 2012 and 2015. According to reports from outlets such as Il Sole 24 Ore and Il Corriere della Sera, the prosecution argued that this technical choice was aimed at concealing billions in losses, constituting the crimes of false corporate communications and market manipulation. The proceedings involved former top executives Alessandro Profumo and Fabrizio Viola, together with the members of the Supervisory Body. In the first instance, the court accepted the prosecution's theory, but the Court of Appeal overturned the decision, issuing an acquittal because the fact does not exist. The Supreme Court upheld the Public Prosecutor's appeals regarding the former executives and the bank, annulling the acquittal with referral to the Milan Court of Appeal for the 2014 and 2015 financial statements due to contradictory reasoning, while the acquittal was confirmed as final only for the OdV members. Regarding the latter, it was established that its members could not be held liable for failing to prevent an accounting choice that, at the time, was technically debatable but not patently fraudulent.

    1. Legislative Decree no. 231/2001, under Articles 6 and 7, forms the core of the regulatory framework, requiring entities to adopt organizational models suitable for preventing crimes and to establish a body endowed with autonomous powers of initiative and control.
    2. Article 40, paragraph 2, of the Criminal Code sets forth the equivalence clause, under which failing to prevent an event that one has a legal duty to prevent is equivalent to causing it, raising the question of whether OdV members hold a guarantor position.
    3. Articles 2621 and 2622 of the Civil Code define the scope of false corporate communications, the predicate offense that the OdV should have, according to the initial prosecution theory, detected and promptly reported.
  2. What case law says

    Supreme Court case law has progressively clarified that the OdV holds neither management nor representation powers for the entity, distinguishing it strictly from the Board of Statutory Auditors. The court specified that OdV members are not tasked with auditing financial statement data in a technical accounting sense, but must monitor the functioning and compliance of models, ensuring the maintenance of the overall preventive system. Established case law excludes attributing liability to the body solely because an offense was committed. For omissive liability to exist, so-called organizational fault must be demonstrated, meaning a structural deficit in control measures that the OdV should have identified. Furthermore, the causal link must be proven: the prosecution must demonstrate that, had the OdV exercised its oversight powers, the offense would have been prevented with high logical probability, thereby avoiding the transformation of the role into a form of positional liability.

  3. Analysis drafted and verified with edit.legal

    To verify the provisions cited in this article, we used edit.legal. Test our legal AI on official sources and apply it to your own matters.

    Try edit.legal AI
  4. Key takeaways for professionals

    1. Accurately define information flows directed to the OdV, clearly distinguishing management information from control reporting.
    2. Thoroughly document every verification activity conducted, in order to establish evidence of due diligence and absence of organizational fault in case of legal challenges.
    3. Avoid overlapping duties between the Board of Statutory Auditors and the OdV, preserving the autonomy and specificity of the oversight function regarding the Model.

References: D.Lgs. 231/2001Art. 40 c.p.Art. 2621 c.c.Art. 2622 c.c.

Avv. Federico Papa
Editorial oversight: Avv. Federico Papa·ICAMContent drafted with AI support and subject to editorial source checks. Despite these controls, inaccuracies may remain: reports and rectification requests are welcome. Report a correction

Frequently asked questions

What are the penalties for OdV members in case of failure to supervise?

OdV members may be held criminally liable for crimes committed by top management (such as false corporate communications) under the doctrine of omissive concurrence, risking the same custodial sentences provided for primary perpetrators, in addition to civil damage claims.

Can the OdV be held responsible if the 231 Model is incomplete?

The OdV is tasked with reporting model inadequacy or non-implementation to the administrative body; if it fails to identify obvious organizational gaps that facilitated crime commission, negligent conduct may be attributed to its members.

What should an OdV member do to protect themselves?

It is essential to record minutes for every meeting, request timely submission of required information flows, and promptly report in writing to the Board of Directors any anomaly or impediment encountered in fulfilling oversight duties.

Verified legal research and drafting with edit.legal

Legal research and drafting with citations checked against official databases. edit.legal is free to try, no credit card.

Try edit.legal for free