Tax Compliance Management Systems are becoming essential for mid-sized companies. IDW PS 980, the BMF letter on § 153 AO, and the EGAO pilot phase create new incentives -- and risks for companies without a system.
Table of Contents
- The New Reality: Tax Compliance as a Management Task
- What Is a Tax CMS?
- IDW PS 980: The Audit Standard for Compliance Systems
- § 153 AO and the 2016 BMF Letter: The Criminal Law Incentive
- BGH Ruling 1 StR 265/16: Compliance Reduces Fines
- The EGAO Pilot Phase: Audit Relief as a Reward
- How the Pilot Phase Works
- Requirements for the Control System
- Implementation: The Roadmap for Mid-Sized Companies
- Phase 1: Stocktaking and Risk Analysis (2-4 weeks)
- Phase 2: Design (4-6 weeks)
- Phase 3: Implementation (8-12 weeks)
- Phase 4: Test Operation (4-8 weeks)
- Phase 5: Regular Operation and Continuous Improvement
- Digital Tools: Software for Tax CMS
- Costs and Benefits: The Business Case
- Common Mistakes in Implementation
- Conclusion
The New Reality: Tax Compliance as a Management Task
Tax compliance has long ceased to be a mere accounting function. The increasing complexity of tax law, stricter audit standards of the tax authorities and the digitalisation of tax audits make a systematic Tax Compliance Management System (Tax CMS) a strategic necessity for mid-sized companies. Those who still rely on informal processes and the knowledge of individual employees today are taking a considerable risk -- not only in tax terms, but also in criminal law.
The pressure to act is growing: with the EGAO pilot phase, the revised IDW PS 980 and the landmark BGH ruling on the fine-reducing effect of compliance systems, the regulatory environment has fundamentally changed.
What Is a Tax CMS?
A Tax Compliance Management System is an internal control system aimed at ensuring compliance with all tax obligations. It encompasses all organisational measures, processes and controls that ensure that:
- Tax returns are filed completely, correctly and on time
- Tax payments are made correctly and punctually
- Bookkeeping obligations are properly fulfilled
- Tax risks are systematically identified, assessed and managed
A Tax CMS is not a rigid IT system but a living management system that integrates culture, processes, organisation and technology. According to Haufe, it serves not only to avoid risks but also offers the opportunity to identify optimisation potential in tax processes.
IDW PS 980: The Audit Standard for Compliance Systems
The IDW Auditing Standard PS 980 of the Institut der Wirtschaftsprüfer (Institute of Public Auditors in Germany) is the authoritative German standard for auditing compliance management systems. In its revised version of 2022, it defines seven basic elements that an effective CMS must exhibit:
- Compliance culture: Attitude and behaviour of the company management (tone from the top)
- Compliance objectives: Definition of tax compliance targets
- Compliance risks: Systematic identification and assessment of tax risks
- Compliance programme: Risk management measures (policies, processes, training)
- Compliance organisation: Clear responsibilities and reporting lines
- Compliance communication: Information and training of all participants
- Compliance monitoring and improvement: Regular review and further development
For the tax area, the IDW published Practice Note 1/2016 (Praxishinweis 1/2016), which specifically applies the PS 980 requirements to Tax CMS. This practice note is the central guidance document for designing a Tax CMS in mid-sized companies.
§ 153 AO and the 2016 BMF Letter: The Criminal Law Incentive
The correction obligation under § 153 AO (Berichtigungspflicht) requires taxpayers to immediately notify the tax authorities of recognised errors in tax returns and to correct them. In practice, the distinction between a mere correction under § 153 AO and a voluntary disclosure (Selbstanzeige) under § 371 AO (in cases of intentional tax evasion) is often difficult -- and carries severe criminal law consequences.
This is where the BMF letter of 23 May 2016 comes in, which supplemented the Application Decree to the AO (AEAO) with decisive passages. The key statement:
If a taxpayer has established an internal control system that serves to fulfil tax obligations, this can constitute an indication that speaks against the existence of intent or negligence.
In plain terms, this means: a functioning Tax CMS can, in a critical situation, make the difference between a correction under § 153 AO and an allegation of tax evasion (§ 370 AO, Steuerhinterziehung) or reckless tax reduction (§ 378 AO, leichtfertige Steuerverkürzung). For managing directors and board members, this is an essential aspect of personal liability avoidance.
BGH Ruling 1 StR 265/16: Compliance Reduces Fines
The Federal Court of Justice (Bundesgerichtshof, BGH) expressly stated for the first time in its landmark ruling of 9 May 2017 (1 StR 265/16) that a compliance management system can be taken into account when assessing fines under § 30 OWiG (Administrative Offences Act, Ordnungswidrigkeitengesetz).
The key findings of the BGH:
- An existing CMS can be considered as a mitigating factor in fine assessment
- The subsequent introduction or improvement of a CMS can also have a mitigating effect
- The prerequisite is that the CMS is capable of significantly impeding comparable legal violations in the future
This ruling triggered a new dynamic in the compliance discussion. Companies that can demonstrate an effective Tax CMS have a significantly better defence position in the event of tax violations.
The EGAO Pilot Phase: Audit Relief as a Reward
Since 1 January 2023, the pilot phase under Art. 97 § 38 EGAO (Einführungsgesetz zur Abgabenordnung, Introductory Act to the Fiscal Code) has been running, offering companies with a demonstrably effective tax control system relief in tax audits. This represents a paradigm shift in German tax administration. According to PwC, the legislator is thereby setting a positive incentive for tax compliance for the first time.
How the Pilot Phase Works
- Application: The company applies to the competent tax authority for examination of its tax control system
- System audit: The tax administration examines the control system for effectiveness
- Relief: If the result is positive, reduced audit procedures in terms of nature and scope can be agreed for the following tax audit
The pilot phase runs under § 38 EGAO initially until 2029. The results will be evaluated and are intended to serve as the basis for a permanent statutory regulation.
Requirements for the Control System
Under § 38(2) EGAO, a tax control system must meet the following requirements:
- Correct recording of tax assessment bases
- Timely and complete payment of taxes owed
- Ongoing mapping of tax risks
Implementation: The Roadmap for Mid-Sized Companies
Implementing a Tax CMS need not be a major project. For mid-sized companies, a pragmatic, risk-based approach in five phases is recommended:
Phase 1: Stocktaking and Risk Analysis (2-4 weeks)
- Recording all tax-relevant processes
- Identifying the main tax types and risks
- Analysing existing controls and documentation
- Prioritising action areas
Phase 2: Design (4-6 weeks)
- Defining compliance objectives
- Establishing the organisation and responsibilities
- Developing policies and procedural instructions
- Selecting appropriate software support
Phase 3: Implementation (8-12 weeks)
- Introducing the defined processes and controls
- Implementing the IT solution
- Training employees
- Documenting the system
Phase 4: Test Operation (4-8 weeks)
- Conducting test runs
- Identifying and remedying weaknesses
- Adjusting processes as needed
Phase 5: Regular Operation and Continuous Improvement
- Ongoing monitoring of effectiveness
- Regular updates in response to legal changes
- Annual review and further development
Digital Tools: Software for Tax CMS
Digitalisation not only makes a Tax CMS necessary but also significantly more efficient to implement. Modern software solutions particularly support:
- Workflow management: Automated deadline management and task assignment
- Risk management: Systematic recording and assessment of tax risks
- Document management: Central storage and versioning of all tax-relevant documents
- Monitoring and reporting: Dashboards for monitoring compliance KPIs
- Training management: Administration and documentation of employee training
Established providers such as DATEV, SAP, Thomson Reuters (ONESOURCE) or specialised Tax CMS solutions offer modular systems that can be adapted to the needs of mid-sized companies.
Costs and Benefits: The Business Case
The costs of implementing a Tax CMS depend heavily on the company size, the complexity of the tax structure and the chosen degree of digitalisation. For a mid-sized company with 50-500 employees, the following ranges can be expected:
One-off costs:
- Consulting and design: EUR 15,000 -- 50,000
- Software implementation: EUR 10,000 -- 40,000
- Training: EUR 5,000 -- 15,000
Ongoing costs:
- Software licences: EUR 5,000 -- 20,000/year
- Maintenance and updates: EUR 3,000 -- 10,000/year
These costs are offset by significant savings potential:
- Reduced tax audit risks: Fewer additional payments and interest
- Avoided fines: Particularly through the fine-reducing effect under BGH case law
- Audit relief: Less effort in tax audits through the EGAO pilot phase
- Process efficiency: Avoidance of duplication and error reduction
- Personal liability avoidance: Protection of management from criminal prosecution
According to an analysis by Grant Thornton, the investment in a Tax CMS pays for itself for most mid-sized companies after the first avoided additional tax audit payment.
Common Mistakes in Implementation
From our advisory practice, we know typical pitfalls:
- Lack of management support: Without clear commitment from top management, the Tax CMS remains a paper tiger
- Over-engineering: A Tax CMS must fit the company -- not every mid-sized company needs a corporate-level system
- Neglecting compliance culture: Technical systems alone are not sufficient -- employees must be brought on board
- One-off introduction without maintenance: A Tax CMS is not a project with an end date but an ongoing process
- Lack of documentation: Without comprehensive documentation, the Tax CMS cannot develop its protective effect
Conclusion
Implementing a Tax CMS is no longer a question of whether, but when, for mid-sized companies. The regulatory developments -- from the BMF letter on § 153 AO to BGH case law to the EGAO pilot phase -- send a clear signal: those who organise tax compliance systematically will be rewarded. Those who do not risk not only tax disadvantages but also personal liability.
The right time to start is now. The EGAO pilot phase offers a limited window of opportunity to benefit from audit relief. And the digital tools make implementation practical and economically viable even for smaller companies.
At compleneo, we support you in designing and implementing a tailored Tax CMS for your company. Get in touch with us.