Corporate Criminal Liability in Aviation: Holding Companies Accountable for Systemic Safety Failures

Aviation safety is often associated with the actions of pilots or members of ATC, but a lot of aviation accidents can also expose failures within the companies responsible for designing, manufacturing, or operating the aircraft. The Boeing 737 MAX crisis provides a significant example of such problems, especially because the two crashes involving the aircraft in 2018 and 2019 resulted in the deaths of 346 people. Later investigations raised concerns about Boeing’s design and certification processes, safety practices, as well as commercial pressures and the effectiveness of regulatory oversight of the company. Such events therefore raise an important question of corporate criminal law: when harm results from a series of decisions made within a large organisation, how should criminal responsibility be assigned to the company?

This question is particularly difficult in the aviation environment because safety related decisions may involve more than one person, such as directors, senior managers, or engineers, as well as external organisations. When responsibility is distributed across such a wide range of personnel, it can get difficult to identify a single individual whose conduct can be treated as that of the corporation. This then creates a significant challenge for principles of corporate criminal responsibility, which have historically relied on identifying the company’s senior decision makers or “directing minds”. However, the occurrence of an aviation accident should not be the lone factor to establish criminal liability, as accidents may happen despite reasonable safety systems and compliance with all applicable legal requirements. The relevant issue therefore becomes whether the law can distinguish between an unavoidable accident or ordinary regulatory breach and a systemic organisational failure which is sufficiently serious to fully justify criminal punishment. This article asks the question of whether existing principles of corporate criminal liability are adequate to hold aviation companies accountable for systemic safety failures. It argues that the existing UK framework can broadly address serious organisational safety failures, specifically through the Corporate Manslaughter and Corporate Homicide Act 2007, which allows liability to be based on how an organisation’s activities are managed. The Crime and Policing Act 2026 has also strengthened corporate attribution of liability by creating an additional route through the conduct of senior managers. However, significant difficulties remain in applying these principles to complex organisations. Accordingly, this article argues that the most appropriate response is not to create an entirely new aviation-specific criminal offense, but to strengthen integration between corporate criminal law and aviation safety regulation. The article will first examine the development of corporate criminal liability from the traditional directing mind doctrine, before analysing the modern statutory framework and its relevance to aviation. It then uses the Boeing 737 MAX crisis as a case study to assess the practical effectiveness of the current framework and considers whether targeted legal reform is necessary.  

Under traditional English corporate and criminal law, establishing the liability of a company would generally require the conduct and state of mind of an individual to be attributed to the corporation. The leading authority for this approach is Tesco Supermarkets Ltd v Nattrass. In this case, the House of Lords considered whether the conduct of a supermarket manager could be attributed to Tesco. The House distinguished between an employee acting as servant or agent of the company and an individual who could be regarded as the company’s “directing mind and will”. Where a person was sufficiently senior to constitute the directing mind and will of the corporation, that person’s acts and state of mind could be treated as those of the company itself. As ordinary employees and lower level managers would generally not satisfy this test, their criminal conduct would not automatically become the conduct of the corporation. Such an approach was based on the idea that a corporation, although seen as a separate legal person, could only act through natural persons, meaning that there is a need to determine which individuals should legally represent the company. The identification doctrine therefore worked well for companies where the decision making authority was split between a small number of senior individuals, but when the doctrine was applied to large modern corporations, it created difficulties since the responsibility for important decisions could be distributed across a number of different individuals and departments. 

The limitations of treating the directing mind doctrine as a universal rule were later recognised in Meridian Global Funds Management Asia Ltd v Securities Commission. In Meridian, the Privy Council explained that corporate liability depends on the applicable “rules of attribution”, which determine when the acts or state of mind of an individual should be treated as those of the company. Lord Hoffmann pointed out that the “directing mind and will” should not be used by default for every question of corporate attribution, but rather the courts should consider the reasoning and wording behind the particular legal rule and determine whose conduct specifically the Parliament intended to attribute to the corporation. This allowed the courts to apply a more context specific rule of attribution, in appropriate circumstances, rather than require the relevant individual to be a part of the corporation’s highest management. Meridian therefore showed that corporate attribution is not necessarily dependent on identifying one permanent “directing mind”, but can depend on the legal purpose for which the attribution is required. This development is important for corporate criminal liability because it recognises that different legal rules may require different approaches to determine when a person’s conduct constitutes conduct of the company. On the other hand, Meridian did not completely solve the difficulties with corporate criminal liability, especially where criminal responsibility depends on establishing serious organisational failures instead of attributing a specific act or state of mind to one individual. 

The limitations of the traditional identification approach became particularly apparent following the Herald of Free Enterprise disaster in 1987, where a ferry capsized shortly after leaving Zeebrugge, Belgium, resulting in the deaths of 193 people and raising serious questions about the corporation’s management and safety practices. R v P & O European Ferries (Dover) Ltd became an important illustration of the difficulties involved with prosecuting a large company for manslaughter under the existing common law framework. The prosecution was unable to establish the necessary criminal responsibility of a sufficiently senior individual who could be identified as the company’s directing mind and whose conduct could therefore satisfy the requirements for manslaughter. This case highlighted a major weakness in the existing law, which was that a corporation could perhaps have serious organisational failures that contribute to deaths, while still avoiding a conviction since responsibility could not be attributed to one sufficiently senior employee. This was especially problematic in failures that resulted from a combination of decisions and weak management systems spread throughout different levels of the company’s chain of command. The failure of the prosecution contributed to the increased pressure for reform of the corporate manslaughter law and provided an important background to the enactment of the Corporate Manslaughter and Corporate Homicide Act 2007. The development from Tesco through Meridian to P&O European Ferries illustrates a broader movement in corporate criminal law, going from asking whether the conduct of a single individual can be identified with the corporation towards asking whether the company itself has failed in the way its activities are managed. 

The Corporate Manslaughter and Corporate Homicide Act 2007 represented a major shift away from the traditional identification doctrine by allowing corporate liability to focus on the way an organisation’s activities were managed. Under section 1(1), an organisation is guilty where the way its activities are managed or organised causes a person’s death and amounts to a gross breach of a relevant duty of care owed by the organisation to the deceased. This is important as the prosecution does not have to establish that one individual who constitutes the corporation’s directing mind personally committed the relevant offence. Instead, section 1(3) requires the way in which the organisation’s activities were managed or organised by its senior management to have been a substantial element in the breach of duty of care. This shows that the Act moves the focus from identifying a single culpable individual to examining the company’s management practices and whether those practices contributed substantially to the death. Section 1(4) states that a breach is “gross” when the conduct alleged to constitute the breach falls far below what can reasonably be expected of the organisation in the circumstances. The high threshold is important as it prevents every regulatory breach or aviation accident from automatically becoming a criminal offence. Importantly, section 8 requires the jury to consider relevant health and safety legislation when determining whether a breach is gross, including the seriousness of any failure to comply and any risk of death created by that failure. The jury can also consider the attitudes, policies, systems and accepted practices that may have encouraged or tolerated the relevant failure. This is especially important in aviation because it allows corporate liability to be assessed based on overall safety systems and management practices, rather than a single managerial error. The Act also defines “senior management” by reference to persons who play significant roles in decisions concerning how the whole, or a substantial part, of the company’s activities are managed or organised, as well as those who actually manage or organise those activities. This definition is especially relevant to aviation companies, as critical safety decisions may be distributed across senior executives, technical departments and other parts of the organisation. The legislation hence provides a framework capable of addressing the type of systemic organisational failure that the traditional directing mind doctrine struggled to attribute to a corporation. 

The practical operation of the 2007 Act is shown in R v Cotswold Geotechnical Holdings Ltd, which became the first successful prosecution under the legislation. The case involved the death of an employee who worked in an unsupported trench, with the company being led by a small number of individuals and having a relatively concentrated chain of command. The conviction demonstrated that the Act can impose criminal liability on a company by examining failures in the organisation of its activities rather than relying on the directing mind doctrine. On the other hand, the circumstances of this case also showed a potential limiting factor when considering its application to aviation. As Cotswold Geotechnical was a relatively small business, the relationship between senior management, operational decisions and the relevant safety failure was somewhat straightforward to establish. By contrast, aviation companies, particularly aircraft manufacturers and major airlines, can have a significantly more complex organisational structure where responsibility is distributed across several different departments, contractors, subsidiaries and regulatory organisations. We can find a similarity to this in the case of R v Lion Steel Equipment Ltd, where the corporation was convicted of corporate manslaughter following the death of an employee, while the individual directors who had also faced prosecution were not convicted of manslaughter. This shows an important principle of the modern framework, the fact that corporate liability and individual criminal liability are not necessarily dependent on one another. This means that the legislation can capture organisational failures even where the evidence does not point to a particular director or senior employee who should be convicted of manslaughter personally. This is especially important for aviation, as a systemic safety failure may result from a combination of multiple managerial decisions rather than the deliberate or grossly negligent conduct of a specific individual. 

Corporate criminal liability does not operate in isolation in the aviation industry, as aviation safety is already subject to an extensive regulatory framework which is designed to identify and proactively control risk before it can result in a catastrophic accident. In the United Kingdom, the Civil Aviation Authority (CAA)  plays a significant role in enforcing aviation safety requirements, requiring aviation organisations to comply with detailed regulatory requirements such as aircraft operations, maintenance, production, or airworthiness. Central to this regulatory approach are the Safety Management Systems (SMS), which provide a proactive approach to identifying hazards and implementing measures to reduce any potential risks. The CAA highlights that an effective SMS should be a part of the company’s policies and safety culture rather than consist of merely written procedures. As the 2007 Act and aviation SMS operate at different stages of the safety process, this becomes especially relevant to corporate criminal liability. While SMS is a preventative measure used to identify and mitigate risks before an accident can occur, the 2007 Act is a reactive action, only becoming relevant after an organisational failure results in death. This means that the two can complement one another. When an organisation fails to identify and mitigate known safety risks, such failures can provide important evidence when assessing whether the organisation’s management of activities fell below the standard reasonably expected. On the other hand, the existence of regulatory breach should not, on its own, establish corporate manslaughter, as the statutory requirement of a gross breach causing death remains a much higher threshold. This is a very important distinction as it maintains the difference between non-compliance with regulations and criminal responsibility while still allowing criminal consequences for serious safety failures within the organisation. The modern UK framework therefore gives a much broader basis for corporate criminal responsibility than the traditional identification doctrine. The Corporate Manslaughter and Corporate Homicide Act 2007 is significant as it allows liability to be assessed through the corporation’s management and organisational practices instead of requiring the identification of one directing mind. Despite this, this approach is effective only when the prosecution can establish a sufficiently serious organisational failure, show the required connection between senior management and the relevant managerial failure, as well as prove that the relevant managerial failure caused the death. This becomes especially significant in aviation, as safety responsibility may be distributed between several different actors who all contribute to the overall safety system. The Boeing 737 MAX crisis is a useful case study for testing whether this modern framework can deal with this type of distributed organisational responsibility adequately. 

The crashes of Lion Air Flight 610 in October 2018 and Ethiopian Airlines Flight 302 in March 2019 resulted in the deaths of 346 people and raised many concerns regarding the design, certification and management of the 737 MAX. While the causes of the crashes did involve technical and operational factors, further investigations identified organisational and regulatory failures that extended beyond the conduct of individual employees. The House Transportation and Infrastructure Committee identified multiple factors contributing to the crashes, including design flaws, managerial failures, production pressures and weakness in Federal Aviation Administration (FAA) oversight. Such findings are especially significant for corporate criminal liability, as they highlight how a serious failure in aviation can develop through the combination of decisions made by engineers, managers, executives, and regulatory bodies rather than through one isolated act. The Joint Authorities Technical Review also identified concerns surrounding the delegation of certification functions from the FAA to Boeing through its Organisation Designation Authorisation system. The review identified shortcomings, including inadequate FAA awareness of the changes associated with the Maneuvering Characteristics Augmentation System (MCAS) and indications of undue pressure on members of Boeing’s delegated engineering organisation. This highlights the difficulty of separating corporate responsibility from regulatory responsibility when a highly regulated company is permitted to perform significant certification functions on behalf of the relevant regulatory body. Importantly, this does not mean that regulatory shortcomings remove the responsibility of the corporation itself, but rather that they highlight the legal complexity when responsibility is distributed between multiple organisations. 

Despite the seriousness of the 737 MAX crashes, Boeing was not prosecuted for corporate manslaughter, but rather charged by the United States Department of Justice with conspiracy to defraud the United States in connection with its dealings with the Federal Aviation Administration’s Aircraft Evaluation Group. As a result, in January 2021, Boeing entered into a deferred prosecution agreement with the Department of Justice, under which it agreed to pay over $2.5 billion through a combination of a criminal monetary penalty, compensation to its airline customers, and a fund for the families of those who died in the two crashes. This meant that the prosecution focused on alleged deception and failures in Boeing’s dealings with the aviation regulator rather than directly establishing corporate criminal liability for the deaths themselves. This approach demonstrates that corporate accountability in aviation does not necessarily depend on prosecuting an organisation for the loss of life. As such, regulatory deception, compliance failures and failure to provide accurate safety information may provide alternative routes through which corporate conduct can attract criminal liability. The Boeing case is therefore relevant to the current analysis not because it established a precedent for corporate manslaughter, but rather because it demonstrates the range of organisational failures that may contribute to aviation disasters and the difficulty in attributing responsibility for them. The circumstances surrounding the 737 MAX raise the question of whether the Corporate Manslaughter and Corporate Homicide Act 2007 can adequately address comparable organisational failures occurring within a UK aviation company. On one view, the 2007 Act can address such circumstances as it does not require the prosecution to identify a single directing mind responsible for the entire failure, but instead focuses on the way in which the company’s activities were managed or organised and requires the way in which the organisation’s activities are managed ororganised by its senior management to have been a substantial element in the breach of duty. Section 8 also allows the jury to consider organisational attitudes, policies, systems and accepted practices that may have encouraged or tolerated the relevant failure. These provisions can therefore allow a court to examine wider corporate practices surrounding aviation safety instead of focusing exclusively on the conduct of one engineer or executive. However, the Boeing example also highlights important limitations in this approach. When responsibility for a safety failure is distributed across many different teams and individuals, it may become difficult to establish that the company’s management of activities was a substantial element in the breach of duty. In addition, it may be difficult to establish causation where an accident resulted from a combination of several failures involving technology, management of activity, and regulation. Therefore, the difficulty is not necessarily that the 2007 Act cannot address systemic corporate failures, but rather that applying the Act’s requirements to a company with a complex organisational structure could create issues in terms of attribution, causation, and proof. As a result, the Boeing 737 MAX crisis illustrated the tension within modern corporate liability, namely that while the law has moved beyond the need for a single directing mind, serious managerial failures may still be difficult to attribute where responsibility is spread between several complex corporate and regulatory structures. As such, the adequacy of the UK framework must be assessed not only by considering whether corporate liability is legally possible, but also by examining whether the existing requirements of that framework are able to produce real and effective accountability in practice. 

The current UK framework provides a stronger basis for corporate criminal liability than the traditional identification doctrine, especially in cases involving organisational and managerial failures. The Corporate Manslaughter and Corporate Homicide Act 2007 addresses the central problem identified in the pre-existing law by allowing the conduct of senior management and their management of corporate activities to form the basis of liability. The requirement that senior management’s management or organisation of activities must have been a substantial element in the breach also means that liability cannot be imposed only because an organisation experiences an accident or because a specific employee made an error. In addition, section 8 allows the jury to consider wider organisational attitudes, policies, systems and accepted practices when determining whether a breach was gross. This is especially valuable in the aviation space, as safety failures are often influenced by a combination of different factors rather than one individual decision. The existence of a separate aviation regulatory framework further supports this approach by providing companies with established systems for identifying potential safety hazards before they develop into catastrophic accidents resulting in death. When examined holistically, these factors suggest that the UK does not lack the legal tools necessary for addressing serious corporate safety failures. On the other hand, the existence of such factors does not automatically mean that the framework is entirely adequate in practice. The biggest difficulty is that corporate manslaughter still requires an established causation, a relevant duty of care, a gross breach, and a substantial contribution from senior management. In a complex aviation organisation, such requirements can become difficult to satisfy when a catastrophic event results from several decisions made by different departments, subsidiaries and external organisations. While the 2007 Act allows the court to examine organisational practices, the prosecution will still have to demonstrate that the organisation’s relevant failures caused the death rather than only contributed to a wider sequence of events. There is also potential for a distinction between the preventative measures of aviation safety regulation and the reactive nature of corporate manslaughter. While the SMS is designed to identify and mitigate risk in an attempt to prevent an accident, corporate manslaughter mostly becomes relevant only after a death has occurred as a result of an organisational failure. This can potentially create an accountability gap, as an organisation can show serious weakness in its safety management without those weaknesses satisfying the substantially higher criminal threshold required for corporate manslaughter. At the same time, however, it is important to maintain this threshold, as reducing it could result in ordinary regulatory breaches, human error or unavoidable aviation accidents being treated as criminal offences. As such, the objective should be to ensure that deliberate, reckless or extremely inadequate managerial practices can be identified and sanctioned effectively rather than to criminalise every serious safety failure. Recent developments in the UK corporate criminal law may, however, strengthen the ability of prosecution to attribute criminal conduct to large corporations. Section 250 of the Crime and Policing Act 2026 provides further basis for attributing criminal liability to a corporate body where a senior manager commits an offence while acting within the actual or apparent scope of their authority. This extends senior manager attribution beyond the limited categories of economic offences that were previously addressed by the Economic Crime and Corporate Transparency Act 2023. This is especially relevant to larger corporations as it reduces the reliance on the identification doctrine and recognises that significant managerial authority can exist outside a company’s formal directing mind. On the other hand, section 250 does not remove the requirements of the Corporate Manslaughter and Corporate Homicide Act 2007. Therefore, a prosecution for corporate manslaughter would still need to establish the statutory requirements concerning death, breach of duty, causation, and senior management involvement. The 2026 reform strengthens corporate attribution as a result, but it does not resolve deeper difficulties created by systemic aviation failures involving multiple individuals and organisations. This means that the UK framework’s adequacy depends on ensuring that corporate criminal law operates alongside the aviation safety regime, rather than simply expanding corporate attribution. 

The United States’ response to the Boeing 737 MAX crisis gives us a comparative perspective on how corporate accountability can operate alongside aviation regulation. Rather than pursuing corporate manslaughter, the United States Department of Justice relied on criminal liability for conspiracy to defraud the FAA, demonstrating the way in which regulatory and compliance offences can provide an alternative mechanism for holding aviation companies accountable. Such an approach suggests that effective corporate accountability may not necessarily require the creation of a separate offense directed specifically at aviation disasters. Instead, corporate law can work alongside industry-specific regulation to address different forms of organisational wrongdoing. A similar approach may be preferable in the United Kingdom, where the existing Corporate Manslaughter and Corporate Homicide Act 2007 should perhaps be complemented rather than replaced by a stronger regulatory and organisational accountability mechanism. Firstly, better coordination between the CAA and the relevant prosecution authority may ensure that serious and repeated safety failures which are identified through regulatory oversight are appropriately considered where potential criminal liability is being assessed. Secondly, aviation organisations should be required to maintain clear records of significant safety-related decisions and management responses to identified hazards. This would make it easier to establish how any such risks were identified, which individuals were responsible for addressing them, and whether or not senior management took any appropriate action. Thirdly, senior management accountability should be more closely integrated into Safety Management Systems, especially due to the fact that the effectiveness of an SMS depends on the safety leadership and management of organisational risks. Recent UK aviation regulation already moves in this direction by requiring Safety Management Systems for certain design and management organisations, including requirements concerning accountability, risk management and compliance monitoring. The introduction of section 250 of the Crime and Policing Act 2026 further highlights that Parliament is moving towards broader senior management attribution, however, this should be viewed as a complement to, rather than a replacement for, the industry-specific safety framework. These developments may provide a stronger evidential and preventative foundation for current corporate criminal law without also lowering the threshold for corporate manslaughter. The objective should therefore be to improve the connection between preventative aviation regulation and reactive criminal liability rather than to criminalise every serious safety feature. It also remains important to maintain a high threshold for corporate manslaughter because aviation safety depends on encouraging employees to report hazards and mistakes without the fear of ordinary errors automatically resulting in criminal prosecution. The most effective framework is therefore one where detailed safety regulation identifies organisational failures before accidents occur, while corporate criminal law remains available for the most serious cases that involve gross organisational failures and deaths.

This article examined whether the existing corporate criminal liability principles are adequate to hold aviation companies accountable for systemic safety failures. It has argued that the modern UK framework provides a significantly stronger basis for corporate accountability than the identification doctrine, but that at the same time there are remaining practical difficulties when responsibility for aviation safety failures is spread across a complex chain of command. The directing mind approach highlighted many limitations, as it required corporate criminal responsibility to be attributed through a sufficiently senior individual. The Corporate Manslaughter and Corporate Homicide Act 2007 addressed this problem by focusing on how a company’s activities are managed or organised and by allowing wider organisational practices to be considered when assessing serious breaches. The Boeing 737 MAX crisis nevertheless demonstrated that this broader approach may still face difficulties where failures are a result of a combination of engineering decisions, management practices, corporate culture and regulatory oversight. In these circumstances, establishing causation and showing that senior management’s management or organisation of activities constituted a substantial element in the relevant breach can cause evidential difficulties. The introduction of section 250 of the Crime and Policing Act 2026 also strengthens the framework of attributing criminal conduct through senior management, but does not remove the separate requirements that must be met for corporate manslaughter. The existing principles can therefore be seen as broadly adequate in law, but their effectiveness depends on how successfully corporate criminal liability operates alongside the current aviation regulatory framework. Rather than creating a separate aviation-specific corporate manslaughter offence, more emphasis should be placed on integrating criminal enforcement with aviation Safety Management Systems, improving documentation of decisions critical to safety and strengthening senior management accountability for any identified risks. Such an approach would maintain the high criminal threshold necessary for distinguishing gross organisational failures from ordinary human error or unavoidable accidents, while also ensuring that corporations cannot avoid accountability only because responsibility for a serious safety failure is spread between a complex corporate structure. Ultimately, effective corporate accountability in aviation should not depend on a single individual to blame, but on ensuring that companies responsible for managing safety can be held accountable when systemic failures cause preventable loss of life. 

Table of Cases

• Meridian Global Funds Management Asia Ltd v Securities Commission [1995] UKPC 5, [1995] 2 AC 500
• R v Cotswold Geotechnical Holdings Ltd [2011] EWCA Crim 1337
• R v Lion Steel Equipment Ltd (Manchester Crown Court, 20 July 2012)
• R v P & O European Ferries (Dover) Ltd [1991] 93 Cr App R 72
• Tesco Supermarkets Ltd v Nattrass [1971] UKHL 1, 1972 AC 153

Table of Legislation 

• Corporate Manslaughter and Corporate Homicide Act 2007
• Crime and Policing Act 2026
• Economic Crime and Corporate Transparency Act 2023

Bibliography

• Civil Aviation Authority, ‘Part 145 Safety Management System (SMS) implementation’ (CAA)
• Civil Aviation Authority, ‘Part 21 Subpart G Safety Management System (SMS) implementation’ (CAA)
• Civil Aviation Authority, ‘Safety management Systems’ (CAA)
• Joint Authorities Technical Review, Boeing 737 MAX Flight Control Systems (Federal Aviation Administration, October 2019)
• US Department of Justice, ‘Boeing Charged with 737 Max Fraud Conspiracy and Agrees to Pay over $2.5 Billion’ (7 January 2021)
• US House Committee on Transportation and Infrastructure, The Design, Development & Certification of the Boeing 737 MAX (Final Committee Report, September 2020)