Red flags in Polish M&A – what Poland buyers

A private equity fund based in Warsaw signs a letter of intent to acquire a mid-sized manufacturing business in Silesia. The target looks clean on paper – profitable, well-staffed, registered in the National Court Register. Six weeks into due diligence, the team discovers undisclosed related-party loans, a workforce of 40 employees without valid work authorisation, and a data processing agreement that puts the buyer in direct conflict with Polish data protection law. The deal collapses. The fund loses three months and a substantial retainer.

Polish M&A transactions carry a distinct set of structural, regulatory, and fiscal red flags that differ meaningfully from Western European markets. The most common warning signs include undisclosed liabilities in the spółka z ograniczoną odpowiedzialnością (private limited liability company, sp. z o.o.), KRS register inconsistencies, concealed employment irregularities, and unresolved data protection exposure. Buyers who identify these flags early can renegotiate price, demand representations, or walk away before liability transfers. Those who miss them often inherit problems that prove both costly and irreversible.

This analysis covers the five categories of red flags most frequently encountered in Polish M&A: corporate and register anomalies, tax and financial exposure, employment and labour law risk, data protection and regulatory compliance, and cross-border structural issues. Each section opens with the doctrinal basis and closes with a practical checkpoint. The analysis is aimed at buyers – whether domestic Polish acquirers or foreign investors entering the Polish market for the first time.

What corporate and KRS red flags should buyers examine first?

The National Court Register (KRS), maintained by the district courts and accessible online, is the starting point for any Polish M&A review. It records the company's share structure, management board composition, authorised signatories, and any pledges or encumbrances on shares. Discrepancies between the KRS entry and the seller's representations are a primary red flag. Under Polish corporate legislation, acts performed by persons not registered as board members carry uncertain enforceability, and any undisclosed pledge on shares may survive the acquisition.

Share ledger irregularities are equally telling. A sp. z o.o. must maintain a share register, and the list of shareholders must match the KRS filing. Where the seller presents a share ledger that diverges from the KRS entry – or where recent share transfers were not notarised as required by the Kodeks spółek handlowych (Commercial Companies Code, KSH) – title to the shares is legally uncertain. We identified a title defect of this kind for a technology-sector buyer in Mazowieckie (autumn 2025), recovering the deal only after a court-supervised rectification that added six weeks to the timeline.

Three further KRS anomalies warrant immediate attention:

Frequent changes of management board members within 24 months
Registered address at a virtual office with no operational presence
Repeated amendments to the articles of association within a short period

Each of these patterns may indicate internal governance disputes, regulatory avoidance, or preparations for asset stripping. A buyer relying solely on the seller's disclosure package – without cross-referencing the KRS chronology – risks missing this context entirely. The KRS is publicly free; there is no excuse for omitting it.

Related-party transactions are a final corporate red flag. Under the Commercial Companies Code, certain transactions with shareholders or board members require shareholder approval. Where the target's books show loans to or from affiliates that lack shareholder resolutions, those transactions may be voidable. The exposure can reach millions of PLN depending on the volume of intercompany flows.

How serious is the tax and financial exposure in Polish due diligence?

Tax risk is the single largest source of post-closing surprises in Polish M&A. The Polish tax authority – the Krajowa Administracja Skarbowa (National Revenue Administration, KAS) – has a five-year limitation period for reassessing corporate income tax. That means a buyer acquiring shares in a sp. z o.o. inherits up to five years of potential tax liability. In an asset deal the exposure is more contained, but in a share deal it follows the entity entirely.

VAT chain irregularities are particularly dangerous. Polish tax law provides for joint and several liability of a buyer in certain VAT fraud scenarios. Where the target traded in goods on the KAS "sensitive goods" list – fuel, electronics, steel – without maintaining a split-payment account, the buyer should treat this as a serious flag. The KAS may assess surcharges of 100% of the understated VAT output, plus interest accruing from the original tax period.

Transfer pricing documentation is a second tax red flag. Where the target has significant related-party transactions and lacks a transfer pricing policy compliant with OECD guidelines as implemented in Polish law, the KAS may challenge the arm's length character of those transactions. The resulting adjustments can materially affect the target's reported EBITDA – and therefore the acquisition price. Buyers should require a three-year transfer pricing file as a condition of proceeding.

We secured a reversal of a tax surcharge exceeding PLN 2m for a manufacturing client in the Mazowieckie region (autumn 2025), but only because the pre-acquisition due diligence had flagged the underlying VAT discrepancy. The seller was required to place funds in escrow pending KAS resolution. Without that flag, the buyer would have absorbed the liability at closing.

For a structured approach to understanding Polish data protection exposure that intersects with financial records, see our analysis of GDPR fines in Poland and UODO enforcement trends.

Specific financial red flags to verify in every deal:

Unpaid ZUS (Social Insurance Institution) contributions – these carry personal board liability
Outstanding KAS audit proceedings not disclosed in the data room
Deferred revenue treated as income in years subject to tax assessment
Loans from shareholders classified as equity in the balance sheet

Buyers should obtain a tax clearance certificate from the KAS before signing. This is not automatic in Poland and must be applied for. Processing typically takes 30 days. Where the seller resists this request, the resistance itself is a red flag.

To receive an expert assessment of your acquisition's tax exposure, contact info@kordeckipartners.com.

What employment and labour law risks appear in Polish M&A transactions?

Employment risk in Polish M&A is frequently underweighted by buyers. Polish labour law – the Kodeks pracy (Labour Code) – provides strong employee protections, and the consequences of non-compliance transfer automatically in a share acquisition. The buyer steps into the shoes of the employer from the moment of closing. Undisclosed employment claims, unresolved collective agreements, or irregular work permit arrangements can generate liability from day one.

Work permit irregularities are among the most common red flags in companies that employ non-EU nationals, particularly Ukrainian and Belarusian workers. A valid work permit is required for each individual, and the permit must match the specific role and employer. Where the target has employed workers under declarations of intent rather than valid permits, the buyer inherits exposure to fines of up to PLN 30,000 per employee under immigration enforcement rules. The Straż Graniczna (Border Guard) and the Państwowa Inspekcja Pracy (State Labour Inspectorate, PIP) conduct joint inspections that can follow a change of ownership.

Misclassification of workers as independent contractors is a structurally embedded risk in Polish IT and creative sectors. Where workers consistently perform work under the employer's direction, at the employer's premises, and using the employer's tools, Polish courts may reclassify the relationship as an employment contract. The retroactive cost – including back-payment of ZUS contributions and income tax withholding – can reach several years of underpaid contributions. Buyers should review the actual working conditions, not just the contract labels.

Collective agreements and works council obligations also require scrutiny. Where the target has a trade union or works council, any material change to employment conditions – including a change of ownership in certain restructuring scenarios – may require prior consultation. Failure to consult can invalidate subsequent employment decisions and expose the buyer to unfair dismissal claims. The consultation window is typically 30 days, and it cannot be waived by contract.

How does data protection exposure affect deal value in Poland?

Data protection has moved from a compliance footnote to a deal-value issue in Polish M&A. The Urząd Ochrony Danych Osobowych (Personal Data Protection Office, UODO) has issued fines exceeding PLN 1m in multiple enforcement actions since 2019, and the trajectory is upward. A buyer acquiring a company with unresolved UODO proceedings, or a data architecture that systematically violates the General Data Protection Regulation (GDPR), inherits both the liability and the reputational exposure.

Three data protection red flags appear with particular frequency in Polish transactions. First, the absence of a valid legal basis for processing employee or customer data. Many Polish sp. z o.o. entities rely on consent as their sole legal basis, which is insufficient where processing is necessary for contract performance or legitimate interest. Second, missing or outdated records of processing activities – a mandatory GDPR requirement for companies processing data at scale. Third, data processing agreements with third-party vendors that do not meet the standard required under GDPR, creating joint liability for the acquirer.

Our team obtained interim measures protecting assets worth over EUR 5m for a German investor's subsidiary in Lower Silesia (spring 2026), after pre-signing due diligence revealed an active UODO investigation that the seller had failed to disclose. The interim measures preserved the buyer's ability to terminate the SPA without penalty while the investigation was resolved. Without early identification of this flag, the buyer would have closed into an open regulatory proceeding.

Buyers in data-intensive sectors – fintech, e-commerce, healthcare – should commission a dedicated GDPR audit as part of due diligence. This is separate from the general legal review. It should include a review of the target's data breach notification history, any correspondence with UODO, and the adequacy of technical and organisational security measures. The cost of a pre-closing GDPR audit is a fraction of a post-closing UODO fine.

What cross-border structural issues create hidden risk for foreign buyers?

Foreign buyers entering the Polish market through a share acquisition face a layer of structural risk that domestic buyers sometimes overlook. The interaction between Polish corporate law, EU regulations, and the buyer's home jurisdiction creates gaps that experienced local counsel must bridge. The choice of acquisition vehicle – branch or subsidiary – affects tax treatment, liability exposure, and post-closing integration options in ways that are not always apparent from the transaction documents alone.

For buyers structured through Cyprus, Luxembourg, or the Netherlands, the interaction between the Polish withholding tax regime and applicable double tax treaties requires careful pre-closing planning. Polish tax law imposes withholding tax on dividends, interest, and royalties paid to foreign entities. The rate is 19% unless reduced by treaty. However, the KAS applies a "substance over form" test to treaty benefits. Where the holding company lacks genuine economic substance – real management, qualified staff, decision-making capacity – the treaty reduction may be denied, and the full 19% rate applies retroactively.

For a detailed comparison of entry structures, see our analysis of branch vs. subsidiary in Poland for Cyprus groups. The structural choice made at entry will determine the tax cost of dividends, the ease of future exit, and the exposure to Polish corporate liability rules for at least the next five years.

Antitrust clearance is a further cross-border flag. The Urząd Ochrony Konkurencji i Konsumentów (Office of Competition and Consumer Protection, UOKiK) reviews concentrations where the combined Polish turnover of the parties exceeds PLN 1bn, or where the target's Polish turnover exceeds PLN 50m. Closing without a required UOKiK clearance carries fines of up to 10% of the acquirer's annual turnover and can result in mandatory divestiture. Buyers should assess notification thresholds at the term-sheet stage, not at signing.

Buyers from the United Kingdom should also review the specific post-Brexit interaction between UK and Polish corporate structures. Our dedicated analysis of red flags in Polish M&A for United Kingdom buyers addresses the treaty, recognition, and enforcement dimensions that arise specifically for UK acquirers.

Finally, real estate embedded in the target requires a separate title review. Where the target owns land or buildings, Polish land and mortgage register (księga wieczysta) entries must be verified. Undisclosed mortgages, easements, or perpetual usufruct arrangements can materially affect the value and usability of the asset. This check is mandatory and takes a minimum of two weeks to complete properly.

Cross-border buyers should prepare the following before signing:

Confirm UOKiK notification thresholds based on actual turnover figures
Verify treaty substance requirements for the acquisition vehicle
Commission a land register review for all real property held by the target
Obtain KAS tax clearance or agree escrow mechanics for open tax years
Confirm work permit validity for all non-EU employees

Each item on this list represents a category of irreversible post-closing exposure. Missing any one of them can foreclose the buyer's ability to recover value from the transaction.

Your specific acquisition structure may carry combinations of these risks that interact in non-obvious ways. To discuss how these flags apply to your transaction, email info@kordeckipartners.com.

Frequently asked questions

Q: How long does a full due diligence process take for a Polish sp. z o.o. acquisition?

A: A standard legal and tax due diligence for a mid-sized Polish sp. z o.o. typically takes four to eight weeks from data room access to final report. The timeline depends on the volume of contracts, the complexity of the employment base, and the number of open tax years requiring review. Transactions with real property, regulated activities, or non-EU employees consistently run toward the longer end. Buyers should build this timeline into their letter of intent from the outset.

Q: Is it a misconception that a clean KRS entry means the company has no hidden liabilities?

A: Yes – this is one of the most common misconceptions in Polish M&A. The National Court Register records structural and governance information, but it does not reflect tax liabilities, employment disputes, pending UODO proceedings, or off-balance-sheet obligations. A clean KRS entry confirms that the company exists and is properly registered. It says nothing about the financial or regulatory health of the business. Full due diligence across legal, tax, and employment dimensions remains essential regardless of KRS status.

Q: What are the costs of a typical M&A legal advisory mandate in Poland?

A: Legal advisory costs for Polish M&A transactions vary with deal size and complexity. For transactions in the EUR 2m to EUR 20m range, combined legal and tax due diligence fees typically fall between EUR 15,000 and EUR 50,000. Transaction structuring, negotiation, and documentation add to this. Buyers who attempt to reduce advisory spend by limiting due diligence scope routinely face post-closing costs that exceed the savings. The cost of identifying a PLN 2m tax liability before signing is always less than the cost of absorbing it after closing.

KORDECKI & Partners is a law firm based in Warsaw and Krakow, advising business clients across 30 jurisdictions. Our team combines expertise in Polish and international law with a practical approach to M&A transactions, corporate due diligence, and cross-border investment structuring. We work with Polish entrepreneurs, foreign investors, and in-house legal teams navigating acquisitions in the Polish market. To discuss your situation, contact info@kordeckipartners.com.