Cross-Border M&A Due Diligence: A Practitioner's Framework for the €5M–€50M Market

The mid-market cross-border transaction — typically priced between €5 million and €50 million — occupies the most operationally demanding segment of M&A practice. It lacks the dedicated integration offices of mega-deals, yet it confronts the same matrix of regulatory clearances, employment law complications, and multijurisdictional legal exposures. A CFO or Corporate Counsel managing this process for the first time, or without specialist M&A advisers embedded in each local jurisdiction, faces a structural information disadvantage that is rarely acknowledged in standard due diligence templates.

This article provides a practitioner-level framework for cross-border due diligence across the four European jurisdictions that absorb the highest volume of inbound mid-market deal flow: the United Kingdom, Spain, France, and Germany. It addresses the legal architecture, financial complexity drivers, regulatory clearance thresholds, employment law landmines, and the red flags that experienced advisers identify early. Where other frameworks describe what to look for, this one explains why it differs by jurisdiction and what the commercial consequence of missing it actually is.

Why Cross-Border Due Diligence Is Structurally Different

Domestic due diligence, even in complex transactions, operates within a single legal framework. Counsel knows the statute of limitations for warranty claims, what representations typically survive closing, and how courts in that jurisdiction have treated post-closing disputes in comparable deals. The analysis has texture because it draws on institutional knowledge.

Cross-border due diligence strips away that texture. In its place, you have four distinct legal regimes governing the same transaction simultaneously: the law of the jurisdiction where the target is incorporated, the law of any jurisdiction where material assets or operations sit, the law governing the acquisition agreement itself (often English or New York law regardless of target domicile), and the regulatory regime of each jurisdiction where competition or sector-specific filings are required.

The structural differences that most affect mid-market deals are:

Title and security perfection. In England and Wales, security over shares is registered at Companies House under the Companies Act 2006. In France, pledges over shares (nantissement de parts sociales for SARLs and nantissement d'actions for SAS and SA structures) require compliance with Articles L228-1 et seq. of the Code de commerce. In Germany, share pledges over GmbH stakes require notarial deed under § 15 GmbHG. Failure to identify and release pre-existing security, or to obtain consents from existing creditors, routinely delays closings or creates post-closing disputes.

Change-of-control provisions. English, French, German, and Spanish contract law all treat change-of-control clauses differently. Under Spanish law, the general principle that contracts are between parties (res inter alios acta) means that downstream customer contracts may not require assignment consent even if the counterparty is acquired — but many commercial agreements in Spain include cláusulas de cambio de control that replicate the English approach. German courts have historically been more protective of third-party contractual rights. The consequence is that a mid-market buyer who fails to map change-of-control provisions across the target's top 20 customer and supplier contracts faces revenue attrition in the 6–18 months post-closing that no financial model anticipated.

Pension and social security structures. Mandatory occupational pension schemes in Germany (betriebliche Altersversorgung, governed by the Betriebsrentengesetz, BetrAVG) can create contingent liabilities that are substantially larger than disclosed reserves. In France, the indemnité de départ à la retraite and the severance structure under the Code du travail create employer obligations that are frequently underprovisioned in SME accounts. These are not theoretical — the European Court of Justice's decision in Beckmann v Dynamco Whicheloe Macfarlane (Case C-164/00) confirmed that retirement benefits are capable of TUPE-style transfer obligations, a principle embedded in Spanish and French domestic law through the Acquired Rights Directive (Council Directive 2001/23/EC).

Legal Due Diligence by Jurisdiction: Four Frameworks Side by Side

United Kingdom

The UK legal due diligence framework post-Brexit operates under English and Welsh law for most corporate matters, with Scottish law applying to Scottish companies and property. The principal statutes governing share acquisitions are the Companies Act 2006, the Business Purchase Sale of Goodwill rules under HMRC Practice Note SP3/91 for asset deals, and the Misrepresentation Act 1967 for warranty claims.

Key UK-specific diligence items:

• PSC Register (People with Significant Control, s.790A-790ZG Companies Act 2006): verify the register is accurate and that no disclosable arrangement has been omitted. HMRC has used PSC failures as indicators of undisclosed beneficial ownership in tax investigations.
• HMRC filings: R&D tax credit claims are common in UK tech and manufacturing mid-market targets. Verify that the company's qualifying expenditure under s.104A-104J Corporation Tax Act 2009 has been competently assessed. HMRC is actively reviewing historic claims under the 2023 R&D reform package and clawbacks are a material risk.
• Employment Status: following Uber BV v Aslam [2021] UKSC 5, gig economy and contractor arrangements carry reclassification risk. For targets in logistics, food services, or any platform-adjacent business, map all "independent contractor" arrangements.
• Data Protection: post-Brexit, the UK GDPR (UK General Data Protection Regulation, retained in UK law by the Data Protection Act 2018) applies alongside the EU GDPR for targets with EU-resident customers. Cross-border data flow adequacy decisions under Article 45 of the UK GDPR remain critical — the EU's adequacy decision for the UK under Article 45 EU GDPR continues to apply but is subject to review.

Spain

Spain's M&A diligence framework is governed primarily by the Ley de Sociedades de Capital (Royal Legislative Decree 1/2010), the Código de Comercio of 1885 as amended, and the Ley 3/2009 sobre modificaciones estructurales de las sociedades mercantiles for mergers and divisions.

Key Spain-specific diligence items:

• Registro Mercantil: the commercial registry is the authoritative source for corporate structure, appointment of directors (administradores), auditor appointments, and filed accounts. Unlike Companies House, access to full filings in Spain requires engagement with the relevant provincial registry — there is no single national electronic portal equivalent.
• Tax liabilities: Spanish tax law allows the Agencia Tributaria to inspect up to 4 years back (Article 66 Ley General Tributaria, LGT 58/2003), but the period extends to 10 years for undeclared income or hidden assets (Article 66 bis LGT, introduced by Ley 34/2015). In mid-market targets, undisclosed related-party transactions are the most common vector for extended assessment periods.
• Labour and ERTE: the expedientes de regulación temporal de empleo (ERTE) framework, expanded during COVID-19 under Real Decreto-ley 8/2020, left many Spanish SMEs with contingent obligations to the SEPE (Servicio Público de Empleo Estatal) for benefit reimbursement. These liabilities are frequently not on-balance-sheet.
• Real estate: Spanish property in mid-market deals often carries cargas urbanísticas (planning obligations) or defects in the Registro de la Propiedad that require resolution before closing. The nota simple from the property registry is a baseline document — a full certificación is essential if real property is a material asset.

France

French corporate diligence operates under the Code de commerce, the Code du travail, and, for SAS structures, the articles of association which in France carry quasi-constitutional weight and are frequently highly bespoke. The SAS (Société par Actions Simplifiée) is the dominant corporate vehicle for mid-market M&A targets in France precisely because its articles can create complex approval, drag-along, and tag-along mechanisms that do not appear in the statutory text.

Key France-specific diligence items:

• Works Council (Comité Social et Économique, CSE): under Articles L2312-1 et seq. Code du travail, any company with 50 or more employees must consult its CSE before a change of control can be completed. Failure to consult — or to allow the statutory minimum period for the CSE's response — can result in the nullity of the transaction under French law (nullité de la cession). This is not a technicality; French courts have voided transactions on this basis.
• PACTE Law reforms (Loi 2019-486 du 22 mai 2019): the PACTE law introduced raison d'être and société à mission designations. For targets that have adopted a raison d'être in their articles, M&A counsel must evaluate whether post-acquisition strategic integration plans are compatible with stated corporate purpose — a consideration that has moved from philosophical to legally relevant since shareholder derivative actions have been filed on precisely this ground.
• IP ownership: France's Code de la propriété intellectuelle (CPI) provides for automatic vesting of employee-created IP in the employer in employed relationships. However, for software specifically, Article L113-9 CPI creates a distinct employer-ownership regime. Verify all IP assignments for consultants and sub-contractors — under Article L111-1 CPI, ownership does not transfer absent explicit written assignment, and oral assignments are unenforceable.

Germany

German mid-market M&A is dominated by the GmbH (Gesellschaft mit beschränkter Haftung) structure, governed by the GmbHG (Gesetz betreffend die Gesellschaften mit beschränkter Haftung of 1892 as heavily amended). Share transfers in a GmbH require notarisation before a German notary under § 15(3) GmbHG — this creates a mandatory closing condition that can delay timelines significantly if the notary appointment is not booked weeks in advance.

Key Germany-specific diligence items:

• Co-determination (Mitbestimmung): under the Mitbestimmungsgesetz (MitbestG) of 1976, companies with more than 2,000 employees must have worker representatives on the supervisory board in equal number to shareholder representatives. For targets approaching but not yet at this threshold, the post-acquisition integration plan must account for the operational reality of supervisory board dynamics.
• Environmental liability: German environmental law under the Bundes-Immissionsschutzgesetz (BImSchG) and the Bodenschutzgesetz (BBodSchG) creates strict joint and several liability for contaminated land. In asset deals, this liability can attach to the acquirer. In share deals, it travels with the company. Environmental assessments (Phase I and Phase II) should be mandated for any German target with manufacturing, logistics, or historic industrial use.
• Betriebsübergang: § 613a of the Bürgerliches Gesetzbuch (BGB) is Germany's TUPE equivalent. For asset deals, all employment contracts transfer automatically, employees have the right to object (with specific legal consequences if they do), and pre-closing dismissals to facilitate the transfer are void. German works councils (Betriebsrat) have extensive information and consultation rights under the Betriebsverfassungsgesetz (BetrVG), and their agreement may be required for post-closing reorganisation measures.
• Trade registry (Handelsregister): unlike the UK or Spanish registries, the German Handelsregister operates through a decentralised court-based system (Amtsgericht). Notarised documentation for all register changes adds lead time to post-closing corporate housekeeping.

Comparative Framework: Key Diligence Dimensions Across Four Jurisdictions

Financial Due Diligence: Where Mid-Market Transactions Break Down

Financial due diligence in cross-border mid-market deals is complicated by the absence of IFRS-compliant accounts in a meaningful proportion of targets. Spanish SLs, French SARLs, and German GmbHs below certain thresholds prepare accounts under national GAAP — Plan General de Contabilidad (PGC) in Spain, French GAAP (Plan Comptable Général) in France, and German GAAP (Handelsgesetzbuch HGB) in Germany. These are materially different from IFRS and from each other.

The most common financial diligence failure modes in cross-border mid-market deals are:

Revenue recognition differences. HGB-based German accounts traditionally apply the Realisierungsprinzip (realisation principle), which is more conservative than IFRS 15's performance obligation model. German targets may show lower near-term revenue than an IFRS-reporting business with an identical commercial profile. Buyers applying IFRS or US GAAP-based valuation multiples to HGB EBITDA will systematically overpay on an adjusted basis unless the GAAP difference is quantified and bridged.

Related-party transactions and owner-managed normalisation. The majority of mid-market targets in the €5M–€50M range are owner-managed or family-controlled businesses. Three categories of normalisation are routinely required: (1) excess owner compensation (compare market remuneration for the role); (2) non-operating costs run through the business for tax efficiency (personal vehicles, personal real estate, family employee sinecures); (3) owner-managed pricing on related-party transactions. In Spain and Italy particularly, intercompany pricing in family groups is frequently not at arm's length because the historic tax incentive to shift profit between entities operated within the same family group has been more favourable than rigorous transfer pricing.

Working capital mechanics. The normalised working capital peg — typically the trailing twelve-month average — is the single most contested financial item in post-closing price adjustments in European mid-market M&A. German and French targets often carry higher trade payables relative to equivalently-sized UK or Spanish companies, partly reflecting different payment culture and supplier relationship dynamics. An acquirer who sets the working capital peg using a twelve-month average without understanding the seasonal dynamics and payment term practices of the specific sector and jurisdiction is creating a post-closing claim for the seller.

Off-balance-sheet liabilities. In all four jurisdictions, the categories most frequently omitted from disclosed liabilities in mid-market targets are: operating lease obligations (pre-IFRS 16 adoption for non-IFRS reporters), contingent warranty and indemnity claims from customers, contingent social security and employment tax obligations, and environmental remediation obligations. In Germany specifically, the pension reserves disclosed under HGB may be materially lower than the IFRS equivalent because HGB permits a discount rate pegged to the average market interest rate over the preceding seven or ten years (§ 253 HGB), whereas IFRS IAS 19 requires discounting at high-quality corporate bond yield. The difference can be substantial in periods of prolonged low interest rates.

Regulatory Clearances: Thresholds and Process Realities

In the €5M–€50M mid-market segment, EU Merger Regulation (Council Regulation (EC) No 139/2004) applies only where both Community dimension thresholds are met — typically requiring combined worldwide turnover exceeding €5 billion and EU-wide turnover exceeding €250 million for each of at least two parties. Most mid-market deals therefore fall below the EU threshold and are subject exclusively to national regimes.

The practical implication is that a deal with operations in three jurisdictions may require parallel national filings in each — with different forms, different waiting periods, different information requirements, and potentially divergent substantive analysis.

UK Competition and Markets Authority (CMA). Post-Brexit, the CMA has jurisdiction over deals meeting either the turnover test (UK target turnover exceeding £70 million) or the share of supply test (parties together supplying or acquiring 25% or more of goods or services of a particular description in the UK). The CMA's Phase I review period is 40 working days, but the CMA has increasingly used pre-notification engagement — an informal process that can add 4–8 weeks to deal timelines before the formal clock starts. For deals in sectors identified as CMA priorities (digital platforms, healthcare, financial services), pre-notification is effectively mandatory.

Spain — CNMC (Comisión Nacional de Mercados y la Competencia). The CNMC filing thresholds require combined Spanish turnover above €240 million and individual party turnover each above €60 million, or market share above 30% in Spain or an autonomous community. Spain also has a distinct foreign direct investment (FDI) screening regime under Real Decreto-ley 8/2020 (modified by Ley 11/2020), applying to non-EU investors in strategic sectors (energy, telecommunications, transport, media, healthcare, AI) where the transaction value exceeds €500 million or the target holds 10% or more of a sensitive sector. Post-Brexit, UK-based acquirers are treated as non-EU investors in Spain.

France — Autorité de la concurrence. The French authority's thresholds for domestic-only review are combined turnover of €75 million and individual party French turnover of €15 million each. France also operates one of Europe's most expansive FDI screening regimes under Décret n° 2019-1590 (as amended by Décret n° 2020-892) implementing Articles L151-3 et seq. Code monétaire et financier. The list of sensitive sectors subject to prior authorisation includes activities of strategic national interest — broadly interpreted to include cybersecurity, AI, data storage, and any critical infrastructure. Failure to notify triggers administrative fines and, in theory, unwinding of the transaction.

Germany — Bundeskartellamt. German merger control thresholds require combined worldwide turnover exceeding €500 million, German turnover of at least one party exceeding €25 million, and German turnover of another party exceeding €5 million. Germany also has a transaction value threshold (§ 35(1a) GWB) of €400 million for digital economy transactions where the German nexus test is met even without the revenue thresholds — introduced to capture acqui-hires and pre-revenue tech deals. Germany's national FDI screening under the Außenwirtschaftsverordnung (AWV), specifically §§ 55, 56, and 58a AWV, applies to non-EU/EEA acquirers of German businesses in the defence, critical infrastructure, and cloud sectors, with thresholds at 10%, 20%, and 25% stake acquisitions depending on the sector.

Employment Complexity: The Most Under-Diligenced Category in Mid-Market Deals

Employment due diligence is structurally under-resourced in mid-market M&A. In a €20 million transaction, the fee budget for employment legal diligence is typically €10,000–€25,000, which buys a document review and a high-level memo. What it rarely includes is a granular analysis of the target's historical labour practices, its labour court litigation record, and the informal arrangements — early retirement promises, undocumented bonus commitments, favourable treatment of long-tenured employees — that sit outside any formal HR document.

The employment landmines that most frequently crystallise post-closing in each jurisdiction are:

UK: Worker status and umbrella company arrangements. The IR35 off-payroll working rules (ss. 61M-61Z of the Income Tax (Earnings and Pensions) Act 2003, as reformed in 2021) shifted responsibility for status determination from the worker to the end-client in medium and large businesses. Mid-market targets with substantial contractor workforces may have transferred IR35 liability to the business without fully understanding the exposure. HMRC's Check Employment Status for Tax (CEST) tool produces non-binding determinations, and tribunal decisions have repeatedly departed from CEST output in favour of employed status.

Spain: Permanent discontinuous contracts (trabajadores fijos discontinuos) and subcontracting. Spanish labour law (Real Decreto Legislativo 2/2015, Estatuto de los Trabajadores) was significantly reformed by Ley 32/2021, which restricted the use of temporary contracts. The reform created an obligation to use fijo discontinuo contracts for seasonal or intermittent work that previously would have been covered by temporary contracts. Many Spanish mid-market businesses were slow to comply, creating contingent employment security claims. Additionally, subcontracting chains in construction and manufacturing frequently violate solidarity liability obligations under Article 42 of the Estatuto de los Trabajadores.

France: Collective agreements and accord d'entreprise. French law creates a three-tier normative framework: statutory minimum (Code du travail), sector-level collective agreement (convention collective de branche), and company-level agreement (accord d'entreprise). Company-level agreements can create rights and obligations that significantly exceed statutory minimums — additional paid leave, supplementary health cover, profit-sharing obligations (intéressement and participation under Articles L3311-1 et seq. Code du travail). The acquirer inherits these obligations. Identifying all in-force company-level agreements and quantifying their cost is a mandatory diligence step that is frequently deprioritised.

Germany: Collective bargaining (Tarifvertrag) and works council agreements (Betriebsvereinbarungen). German employment law's layered structure creates contractual obligations at the individual, works council agreement, and collective bargaining agreement levels. Where a Betriebsvereinbarung provides for specific processes for restructuring, headcount reductions, or changes to working conditions, post-acquisition integration plans that conflict with those agreements expose the acquirer to injunctive relief from the works council (§ 23 BetrVG) and substantial damages. German employment disputes are heard by the Arbeitsgerichte, which are generally employee-friendly, rapid, and inexpensive — which means the works council has a credible and low-cost enforcement mechanism.

Red Flags: What Experienced Practitioners Identify Early

The following patterns, when identified during the preliminary diligence phase, should trigger either enhanced scope or renegotiation of deal terms before resources are committed to full-scale diligence:

Founder retention of key relationships. In mid-market deals, where the founder remains post-closing as a transitional earner, verify which customer contracts are personally signed by or addressable only to the founder. If more than 20% of revenue is in contracts with a named-individual counterparty relationship, the earnout must be structured to reflect the commercial reality that the founder is, in effect, the customer relationship.

Inconsistency between filed accounts and management accounts. Where filed statutory accounts and management accounts diverge materially — particularly on gross margin or operating expenses — this warrants immediate escalation. In Spain and Germany, statutory accounts filed at the Registro Mercantil or Handelsregister are often prepared primarily for tax efficiency rather than economic transparency. The management accounts tell a different story. The gap between the two is a data point about either aggressive tax structuring or accounting irregularities.

Undisclosed related-party transactions. In all four jurisdictions, transactions between the target and entities controlled by the seller or the seller's family are a standard diligence item. The red flag is not the existence of related-party transactions — these are common in family businesses — but their absence from disclosed documents. A target that has no disclosed related-party transactions yet has a landlord relationship for its principal operating premises deserves scrutiny.

Unusual IP structure. Where core IP (product technology, brand, customer database) is not owned by the target entity but by a holding company, a trust, or the founder personally — with a license-back arrangement — the acquirer is buying a licensee, not an IP owner. French courts have been particularly active in examining whether IP license arrangements survive a change of control. Verify the license terms, the license duration, and whether the licensor is the target's owner and has agreed to transfer the IP as part of the transaction.

Regulatory non-compliance in regulated sectors. For targets in financial services, healthcare, food processing, or environmental permits, any gap in regulatory authorisation is not merely a compliance issue — it is an operational risk. A Spanish financial services target without a current CNMV authorisation, or a French food processor without current veterinary certification, faces business interruption on day one post-closing.

Realistic Timeline and Cost Framework for a €20M Cross-Border Deal

Note: French CSE consultation and German notary scheduling are the most commonly underestimated timeline factors. Both operate on statutory or logistical timelines that cannot be accelerated by commercial pressure.

Practical Takeaways for Corporate Counsel

1. Map regulatory filing requirements before signing the LOI, not after. The most expensive diligence mistake in cross-border mid-market M&A is discovering a mandatory competition or FDI filing obligation after the LOI has been signed with a closing timeline that assumed no regulatory condition. At pre-LOI stage, run a quick-and-dirty threshold analysis across every jurisdiction where the target has operations or revenue. Flag any FDI sensitivity — especially for UK or US acquirers in Spain, France, or Germany — before exclusivity creates deal momentum that overrides rigorous analysis.

2. Treat French CSE consultation and German works council rights as deal conditions, not post-signing formalities. Both France's CSE information and consultation procedure (minimum 15 days for simple deals; typically 30–45 days in practice given the CSE's right to appoint an expert under Article L2315-80 Code du travail) and Germany's works council information rights (§ 106 BetrVG) are legally mandated processes with legal consequences for non-compliance up to and including transaction voidability (France) or injunctive relief (Germany). Build the relevant time into the SPA closing conditions and structure the exclusivity period accordingly.

3. In German share deals, start the notary appointment immediately upon exclusivity. German notaries in major M&A markets (Munich, Frankfurt, Berlin, Hamburg) have significant lead times for complex closings. The notarial deed requirement under § 15(3) GmbHG is not merely administrative — it is a closing condition with no workaround. A three-week gap between signing and notary availability is commercially common and operationally inconvenient. Senior M&A counsel in Germany typically pre-book notary slots speculatively before signature.

4. Run a founder-removal stress test on the revenue base. For mid-market targets in all four jurisdictions, quantify how much revenue is in contracts that are effectively personal relationships of the founder, and model the post-closing revenue trajectory under three scenarios: (a) founder stays for full earnout period, (b) founder leaves at closing, (c) founder leaves after 12 months. The earnout structure, W&I insurance coverage, and price mechanics should all be calibrated against this analysis, not against an optimistic management case.

5. Engage local employment counsel with sector-specific experience, not generalist advisers. Employment law in France, Germany, Spain, and the UK is technical, politically active (legislative reform in all four jurisdictions in the 2021–2026 period has been substantial), and judge-made in ways that national-level commentary does not always capture at sector level. The practical application of French accord d'entreprise obligations in a logistics business is materially different from a software company. German works council rights in manufacturing diverge in material respects from their application in a professional services firm. Budget for specialist employment counsel in each jurisdiction where the target has more than 20 employees.

Legal Disclaimer: This article is for informational purposes only and does not constitute legal advice. The analysis reflects the authors' understanding of applicable law as of the publication date and should not be relied upon as a substitute for specific legal advice from qualified practitioners in the relevant jurisdictions. Laws and regulations change frequently; readers should verify current requirements with local counsel before taking any action.