When the first fine notice arrives, the first phone call I get is not from the driver. It is from the CFO, trying to figure out whether the figure in brackets next to “administrative penalty” is a personal or a corporate charge. It is almost always both, and it almost always grows for reasons that could have been prevented with a few hundred euros of training and one written internal procedure.
In the cluster of articles on the tachograph mandatory from 1 July 2026 and on penalties and FAQs, we covered what happens to the driver when violations occur. In this deep dive we step into the territory Italian SMEs systematically underestimate: the company’s own liability, autonomous and cumulative with respect to the driver’s, and what it concretely means for the fleet manager and the owner.
The typical scenario: €12,000 in penalties for “minor violations”
Composite scenario reconstructed from recurring patterns in the industry (not a single client). SME with 8 vans in EU international transport. A driver accumulates, over 14 months:
- 4 daily-driving-limit overruns (15 to 45 minutes over)
- 2 daily rests below the minimum (10-30 minutes short)
- 1 break split in a non-compliant way
Individually: minor fines, €41-300 each. On the driver.
Roadside check on the return to Italy. Fine to the driver: ~€1,800 cumulated. But the real bill arrives later: the authority files a parallel charge against the company for organisational supervision failure. The autonomous liability under art. 174-bis of the Italian Highway Code and art. 19 D.Lgs. 144/2008 is triggered. Company fine: ~€4,000 for the single series. Then, during the follow-up inspection, additional charges for data archiving and the absence of a documented training programme: another ~€6,500.
Total for the company: over €12,000 in penalties + reputational damage in the renewal of B2B contracts that require evidence of compliance. The driver was reliable, with years of experience. He had simply made a few mistakes, and the company had no structured controls.
This scenario illustrates the point: the driver’s fine is the floor, but it is the company’s liability that does the financial damage.
The regulatory framework: 3 layers of liability
Italian and EU law builds a three-layer liability system that is not always intuitive for people without a legal background.
Layer 1 — Driver liability
A driver who violates driving or rest time rules under Reg. (EC) 561/2006 is personally liable. Penalties under art. 174 of the Italian Highway Code, from €41 to over €1,700 depending on severity, with driving-licence point deductions.
Layer 2 — Joint and several liability of the company
Art. 19(2) of Reg. (EC) 561/2006 states the company is jointly liable for violations by its drivers, unless it can show it didn’t “encourage, facilitate or tolerate” the violation. Joint and several liability: the company may be required to pay the driver’s fine if authorities establish an organisational link.
Layer 3 — Autonomous liability of the company
Here lies the often-ignored point. Art. 174-bis of the Italian Highway Code and Reg. (EU) 2020/1054 (Mobility Package) introduced an autonomous liability of the company for failure to adopt adequate organisational measures to prevent violations. It applies even when no active “encouragement” can be shown. The mere omission of:
- Periodic checks on driving and rest times
- A documented training programme for drivers
- Written procedures for downloading and archiving data
- Supervision over correct tachograph use
The standard fine for autonomous liability is €333 to €1,331 (art. 19 D.Lgs. 144/2008), but it can stack across multiple drivers, multiple due dates and multiple types of omission.
Recent case law: what the Italian Supreme Court has said
The Italian Court of Cassation, in 2024-2025 rulings on the matter, has consolidated a position: joint and several liability for companies is not automatic, but it is excluded only if the company documents a structured control system. In the absence of documentation, courts presume an organisational omission. It’s a reversal of the burden of proof that many SME owners discover only after a fine is issued.
The operational message: if it isn’t written, it didn’t happen. Verbal procedures, informal briefings, “the driver knows what to do” have no evidential value.
The 4 minimum organisational duties of the company
Translated into daily operations, the company must be able to demonstrate four things.
1. Documented driver training
Every driver operating with the G2V2 must have completed a course on driving times, on the use of the device and on the implications of violations. The standard course is 8 hours and is delivered by accredited training providers (indicative cost €80-150 per driver). On completion, an attestation is issued and must be archived.
The training certificate is the main partial defence in case of charge: it shows the company has done its part in putting the driver in a position to operate correctly.
2. Documented periodic supervision
It is not enough to download the data: the company must show it reads it and acts on anomalies. Minimum practices:
- Monthly report of detected violations by driver
- Written communication to the driver about anomalies and corrective actions
- Annual procedure-review programme
- Audit trail retained for at least 1 year
3. Data download within deadlines
Reg. EU 165/2014 art. 10: driver data within 28 days, VU data within 90 days. For operational detail see the data download playbook for SMEs. The penalty for missed download is €419-1,689 per vehicle or driver.
4. Compliant archiving
Data retained for at least 1 year, on secure storage, accessible to authorities. Paper retention isn’t enough: .ddd or .v2b files must be kept in their original format, digitally signed by the tachograph, not reprocessed.
The training defence: how it actually works
One of the strongest legal levers is the training defence: with the documented completion of the 8-hour course at an accredited provider, the company can show it complied with regulatory obligations and — for minor infractions not attributable to active organisational omission — it can be relieved of autonomous liability.
Limits of the defence:
- Doesn’t cover serious infractions or repeated infractions by the same driver
- Doesn’t cover documented organisational omissions (e.g. data not downloaded)
- Doesn’t cover tachograph tampering
- Requires the course to have been completed before the period in which the violations occurred
Average cost of the training programme for a 10-driver fleet: €800-1,500. Penalties typically avoided in a significant inspection: €4,000-10,000. The return is easy to compute.
The 3 typical scenarios and who pays
| Scenario | Driver fine | Company fine | Defence available? |
|---|---|---|---|
| Trained driver, single minor violation, data downloaded on time | €41-300 | €0 (with defence) | Yes (training) |
| Untrained driver, repeated violations | €300-1,700 | €333-1,331 + stacking | No |
| Tachograph tampering or missed archiving | €1,700-31,200 + licence withdrawal | Up to €31,200 + criminal exposure | No |
The first scenario is what every SME should plan for. The second is where unstructured companies fall. The third is territory for a legal counsel + insurance loss adjuster.
What to do now: operational checklist for the fleet manager
To do in the next 30 days if not already done:
- Current-state mapping: which drivers are trained, when, certificate archived? Which not?
- Course planning: for drivers without a certificate, book the 8h module with an accredited provider. Cost: ~€150/driver.
- Written internal procedures: a 3-4 page document describing who does what for data download, archiving, anomaly handling. Signed by the owner, countersigned by the fleet manager.
- Data download system: if still manual, evaluate moving to automatic download via ITS interface or OEM cloud. See the three modes in the data download playbook.
- Quarterly internal audit: 30 minutes a month reviewing detected violations, with formal communication to the driver.
- Insurance policy: check with the broker the “administrative penalty” and “company liability” coverage. Not all fleet policies include them.
The most expensive conceptual mistake
The conceptual mistake we see most often is treating training, written procedures and periodic audit as costs. They are insurance: you spend €1,500 to cover €15,000 of expected risk. The ROI math is trivial, but it requires the owner or CFO to leave the “let’s not think about it until it happens” mindset and reason in terms of expected exposure.
A fleet management platform doesn’t replace training, but it automates supervision and the audit trail: monthly automatic reports, real-time alerts on maturing violations, digitally signed archive. It’s the difference between “I have a system” and “I hope it goes well”.
For more structured SMBs, the growing complexity of tachograph compliance also justifies rethinking internal roles: a fleet compliance officer is one of the specialist figures that can be created within a dual career path for fleet personnel, reducing the load on the fleet manager and concentrating regulatory know-how in a dedicated figure.
In short
- Company liability for the tachograph is autonomous and cumulative with that of the driver.
- Recent Italian case law has consolidated that joint liability is presumed in the absence of organisational documentation.
- The 4 minimum duties: training, supervision, on-time download, archiving.
- The training defence (8h course, accredited provider, ~€150/driver) covers minor infractions but not serious or repeated ones.
- The cost of due diligence is a fraction of the cost of the first structured fine.
If you run a fleet exposed to the Mobility Package 2026 perimeter and want to figure out how to automate data download, audit trail and fleet reporting in a single platform, download the Mobility Package 2026 checklist or book a call with an Optivo specialist.