When a bank, insurer, or other regulated entity appoints a new board member or managing director in the DACH region, the competent supervisory authority expects evidence that the individual is reliable, professionally qualified, and financially sound. In Germany, this assessment is known as the Zuverlässigkeitsprüfung, and it forms a core part of BaFin’s review of proposed appointments under the German Banking Act (Kreditwesengesetz) and the German Investment Firm Act (Wertpapierinstitutsgesetz). Comparable requirements exist in Austria under the Bankwesengesetz and in Switzerland under FINMA’s fitness and propriety framework. This article outlines what a practical Zuverlässigkeitsprüfung file should contain and how screening processes can be structured to meet supervisory expectations.
What Zuverlässigkeitsprüfung means in practice
Zuverlässigkeitsprüfung is not a single document but a structured assessment of whether a natural person is suitable to hold a management or supervisory function at a regulated institution. The authority examines whether the candidate possesses the necessary reliability, professional qualification, and time commitment to fulfil the role. Reliability in this context encompasses criminal history, financial integrity, regulatory track record, and any adverse media or reputational concerns that could call the individual’s trustworthiness into question.
The assessment is forward-looking but grounded in verifiable facts. Supervisors expect the institution itself to conduct a thorough pre-screening before submitting a nomination, rather than relying on the authority to surface disqualifying issues during its formal review.
Who falls within scope
The requirement applies broadly to individuals who can significantly influence the business direction of a regulated entity. This typically includes:
- Members of the management board or board of directors
- Managing directors (Geschäftsführer) of entities such as Sparkassen, cooperative banks, or investment firms
- Members of supervisory boards where they exercise control functions relevant to the institution’s governance
- Holders of key functions such as risk management, compliance, and internal audit, depending on the regulatory perimeter
- Shadow directors or persons whose instructions the management regularly follows
In Germany, BaFin’s assessment covers both the initial appointment and subsequent changes. In Austria, the Financial Market Authority (FMA) applies comparable criteria under the Bankwesengesetz. In Switzerland, FINMA assesses fitness and propriety for board members and senior management of supervised institutions, with particular attention to sufficient availability and absence of conflicts of interest.
Step-by-step: Building a Zuverlässigkeitsprüfung file
Step 1: Identify the relevant regulatory framework
Determine which law governs the institution and which authority will receive the filing. In Germany, banks fall under the Kreditwesengesetz and investment firms under the Wertpapierinstitutsgesetz, with BaFin as the competent authority. Insurers are subject to the Versicherungsaufsichtsgesetz. In Austria, the Bankwesengesetz and Versicherungsaufsichtsgesetz apply, with the FMA as supervisor. In Switzerland, the Financial Services Act and banking legislation frame FINMA’s expectations. The framework determines which forms must be completed and which supporting documents are required.
Step 2: Collect identity and registry data
Gather verified identity information for the candidate, including full legal name, date and place of birth, nationality, and current residential address. Cross-reference this against official identification documents and, where applicable, commercial register entries that list the individual as a director or officer of other companies. In Germany, the Handelsregister and Unternehmensregister serve as primary sources. In Switzerland, the ZEFIX commercial register provides comparable data. In Austria, the Firmenbuch holds directorship information.
Step 3: Screen for sanctions and adverse media
Conduct sanctions screening against current EU, UN, and national sanctions lists. Adverse-media screening should cover reputable sources for criminal proceedings, regulatory enforcement actions, civil judgments involving fraud or breach of fiduciary duty, and significant reputational incidents. The screening should be documented with search parameters, sources consulted, date of search, and analyst conclusions on any hits identified.
Step 4: Verify business history and directorships
Compile a chronological professional history covering the period typically expected by the authority. For each position held, record the entity name, role, start and end dates, and reason for departure. Cross-check against commercial register data to identify any undisclosed directorships or ongoing mandates that could create conflicts of interest or time-commitment concerns. Particular attention should be paid to directorships at entities that subsequently entered insolvency or became subject to regulatory action.
Step 5: Assess financial integrity signals
Review publicly available information for signs of personal insolvency, outstanding tax liabilities, or involvement in entities with significant financial irregularities. In Germany, a self-declaration regarding personal financial circumstances is commonly part of the filing. The institution should corroborate the declaration with independent checks where feasible, including registry data on insolvency proceedings and any publicly recorded enforcement actions.
Step 6: Document the human review decision
A qualified reviewer should assess all collected information and reach a documented conclusion on the candidate’s reliability. This conclusion should reference the evidence gathered, address any identified risks, and explain how those risks were evaluated. The file should be retained in a manner that allows the supervisory authority to reconstruct the institution’s assessment process.
Zuverlässigkeitsprüfung checklist
| Area | What to verify | Typical sources |
|---|---|---|
| Identity | Full legal name, date of birth, nationality, address | Official ID, population register |
| Directorships | Current and past mandates, conflicts of interest | Handelsregister, Firmenbuch, ZEFIX |
| Sanctions | EU, UN, national sanctions list hits | Official sanctions lists |
| Adverse media | Criminal, regulatory, reputational findings | Reputable media, court databases |
| Financial integrity | Insolvency, tax issues, enforcement actions | Insolvency registers, self-declaration |
| Professional history | Chronological career, qualifications, time commitment | CV, references, registry cross-checks |
| Documentation | Search parameters, dates, analyst conclusions | Internal screening file |
DACH differences at a glance
While the core principle — that persons in management positions must be reliable and qualified — is consistent across the DACH region, the procedural details differ. In Germany, BaFin expects the institution to submit a structured filing with supporting evidence, and the authority may request additional information or conduct its own inquiries. In Austria, the FMA follows a comparable process under the Bankwesengesetz, with particular emphasis on the candidate’s professional qualifications and time availability. In Switzerland, FINMA’s assessment focuses on fitness, propriety, and sufficient availability, with explicit attention to whether board members can dedicate adequate time to their roles, especially when holding multiple mandates.
A further difference lies in the treatment of group-internal appointments. German supervisors generally expect the same depth of screening regardless of whether the candidate is an external hire or an internal promotion. Swiss and Austrian authorities similarly do not relax standards for internal candidates, though the documentation burden may differ where prior assessments already exist.
Common pitfalls
Several recurring issues weaken Zuverlässigkeitsprüfung files. First, institutions sometimes rely solely on the candidate’s self-declaration without independent corroboration, which supervisors view as insufficient. Second, adverse-media screening is conducted too narrowly, missing non-German-language sources or sources outside the candidate’s primary country of residence. Third, directorship histories are incomplete because only current mandates are checked rather than the full historical record available in commercial registers. Fourth, the documentation of the human review decision is cursory, making it difficult to demonstrate that the institution exercised its own judgment rather than mechanically collecting documents.
A further pitfall is treating the Zuverlässigkeitsprüfung as a one-time event. Ongoing monitoring of board members and managing directors for new adverse media, sanctions designations, or regulatory actions is increasingly expected, particularly for institutions with higher risk profiles.
Practical considerations for institutions
Institutions subject to Zuverlässigkeitsprüfung requirements should establish a repeatable process that combines registry data retrieval, sanctions and adverse-media screening, and documented human review. The process should be proportionate to the institution’s size and risk profile but should never omit independent verification of the candidate’s declarations. Where screening identifies potential concerns, the institution should assess whether those concerns are material to the candidate’s reliability and document its reasoning before proceeding with the nomination.
External screening providers can support the data-gathering and screening stages, but the institution retains responsibility for the assessment decision and for the completeness of the filing submitted to the supervisory authority. This article provides general information and does not constitute legal advice in individual cases.