Data Rooms and Disclosure Obligations in Company Sales

Executive Summary

• A virtual data room can fulfill disclosure obligations – but only if the seller is justified in expecting that the buyer will actually recognize the disclosable circumstance there.

• For information of very significant importance ("dealbreakers"), merely uploading it is often insufficient: a separate, active notice is regularly required.

• Time pressure before signing/notarization does not generally relieve the buyer – but the seller may be obligated to expressly point out subsequent uploads.

I. The Data Room as a Central Instrument of M&A Transactions

Anyone selling a company must disclose material circumstances to the buyer. In transaction practice today, this information transfer predominantly occurs via a virtual data room (VDR). But is it sufficient to make thousands of documents available – or must the seller separately point out particularly critical issues? Two decisions – OLG München (NZG 2021, 423) and BGH (NJW 2023, 3423) – demonstrate: the answer is nuanced, the consequences are significant.

1. Structure and Organization of a Virtual Data Room

A well-structured data room is organized by topic (e.g., corporate law, contracts, finance, taxes, employees, intellectual property, real estate, litigation) and typically follows an Information Request List (IRL) from the buyer or its advisors. It is important that documents are accurately named, systematically organized, and provided in full. A table of contents, search function, and version control facilitate navigation. Data room rules govern access, confidentiality, and, where applicable, liability disclaimers.

2. Redactions and Sensitive Information

Not all information can be disclosed without reservation. Personal data, trade secrets, and antitrust-sensitive information are often redacted or disclosed only in later phases. A careful balancing process is required: the seller must disclose enough to satisfy its duty to disclose, while safeguarding legitimate confidentiality interests.

II. Seller's Disclosure Obligations – Legal Foundations

According to established case law of the BGH, there is no general obligation in contract negotiations to inform the other party about all details and circumstances that could influence its decision. In principle, each negotiating party is responsible for its own contractual actions.

However, a duty to disclose exists for circumstances that could frustrate the purpose of the contract or cause very significant economic damage to the other party – provided the disclosing party must reasonably expect, in good faith, that the other party will not recognize the significance without notice.

Core Question in Practice: Is it sufficient to upload relevant documents to the data room – or must the seller separately point out critical issues to the buyer?

III. Duty to Disclose in Company Sales (OLG München)

The Facts

Plaintiff 1 was a limited partner in F-KG, which operated a nightclub. He sold his limited partnership interest together with the general partner GmbH to the defendant. The notarized purchase agreement included a comprehensive liability waiver. Before the sale, the seller had claimed to the buyer that the business was back in profit. In fact, the nightclub had never generated profit; the company was in economic crisis and later filed for insolvency. Business records had been handed over, but they were incomplete and did not reflect the actual situation.

The Decision (Key Findings)

• Comprehensive duty to disclose: The seller must proactively inform about all circumstances material to the purchase decision – particularly regarding the economic situation, losses, and signs of crisis.

• Incomplete documents are insufficient: Merely handing over/uploading documents does not fulfill the obligation if they are incomplete or do not accurately reflect the situation.

• Active misrepresentations create liability: The false claim of a 'profit zone' can be deemed fraudulent misrepresentation and trigger claims under culpa in contrahendo (§§ 280, 311 para. 2 BGB) as well as rescission under § 123 BGB.

• Liability waiver does not apply: A contractual liability waiver typically does not cover breaches of disclosure obligations; fraud cannot be effectively waived in any event (§ 276 para. 3 BGB).

Practical Lesson: Even a comprehensive liability waiver does not protect the seller from the consequences of active misrepresentations or deliberate concealment of material circumstances.

IV. Duty to Disclose and Reference to the Data Room (BGH)

The Facts

The plaintiff acquired several commercial units in a building complex with exclusion of warranty for defects. In the purchase agreement, the seller represented that no resolutions had been passed from which future special assessments would arise – except for a resolution regarding roof renovation (annual impact of EUR 5,600). The seller granted access to a virtual data room. On Friday, three days before the notarization appointment, she uploaded a collection of resolutions maintained since 2007 to the data room. It contained minutes indicating that renovation measures with a cost scope of up to EUR 50 million were under consideration and a corresponding special assessment was to be levied. The plaintiff rescinded for fraudulent misrepresentation and alternatively declared withdrawal.

The BGH Guidelines

• Principle: Data room access can constitute disclosure. The seller fulfills its duty to disclose by uploading documents if, based on the circumstances, it is justified in expecting that the buyer will obtain knowledge through review.

• Case-by-case assessment: Relevant factors include the scope/organization of due diligence, data room structure, agreements made, nature of the information, and the specific document.

• For matters of very significant importance: separate notice required. If a circumstance is a dealbreaker and not readily apparent from the data, the buyer may regularly expect active notice.

• Time constraints: Time pressure does not generally eliminate the expectation; the buyer must, if necessary, request extension of deadlines/postponement of appointments. However, the seller must point out subsequently uploaded documents.

• Duty to inquire: The buyer's lack of diligence affects liability only through contributory negligence, not as a 'free pass' for the seller.

Core Finding: Mere reference to the data room is insufficient if the seller knows that a critical piece of information is there that the buyer will not readily recognize. In such cases, active flagging is required.

V. Checklists for Sellers and Buyers

For Sellers

• Active disclosure instead of passive provision: For material risks (e.g., existential litigation, imminent special assessments, sustained losses/signs of crisis), provide express notice.

• Maintain data room properly: clear naming, logical organization, index, search function; chaotic structures typically work against the seller.

• Document notices: written communications, management presentations, Q&A log, index notes, or disclosure letter.

• No misrepresentations: Any active inaccuracy can trigger liability – regardless of liability waivers.

For Buyers

• Due diligence thorough and traceable: systematic review, task allocation, documentation of findings.

• Time management: respond decisively to late uploads (deadline extension/appointment postponement) and ask follow-up questions.

• Contractual safeguards: specific representations and warranties (R&W), indemnities, and disclosure mechanisms supplement statutory disclosure requirements.

VII. Conclusion

Case law clearly shows: the data room is indispensable, but does not relieve the seller of its duty to disclose. Anyone who merely "hides" critical information in the data room without separately pointing it out risks damages and rescission. Buyers, in turn, should carefully review the data room, actively manage time pressure, and contractually secure against risks.

FAQ

1) Is it sufficient to upload critical documents to the data room?

Not necessarily. Uploading may suffice if the seller is justified in expecting that the buyer will recognize the circumstance. For dealbreakers or risks not readily apparent, additional notice is regularly required.

2) What are typical 'dealbreaker' information items?

Information that could frustrate the purpose of the contract or trigger significant economic damage, e.g., massive special assessments, imminent insolvency, existential legal or compliance risks.

3) Must the seller point out subsequent uploads?

Regularly yes – particularly for material documents. The buyer should be able to recognize that new material for review has been added.

4) Does time pressure before the appointment relieve the buyer?

Generally not. The buyer must request deadline extensions or appointment postponements as needed.

5) What role does a liability waiver play?

Liability waivers typically do not protect against breaches of disclosure obligations and not against fraud. Moreover, such clauses are often narrowly construed.

6) How is notice best documented?

In writing and specifically: email/Q&A log with document reference (folder, file name, version), disclosure letter, or recorded management presentation.

7) What should the buyer do when encountering 'red flags'?

Ask targeted questions, obtain written confirmations, request special warranties/indemnities if necessary, and adjust the timeline.

8) Does this also apply outside traditional M&A?

Yes. The guidelines are also relevant in real estate transactions or other situations involving information asymmetries.