WPK Requirements for German Auditors: What Every Wirtschaftsprüfer Must Comply With

Key Takeaways

WPK membership is mandatory for every Wirtschaftsprüfer, vereidigter Buchprüfer, and their firms. It is a condition of practising, not a voluntary affiliation.
Professional liability insurance of at least €1,000,000 per claim must be maintained continuously under § 54 WPO. Even a one-day lapse can trigger revocation proceedings.
Every Wirtschaftsprüfer must complete 40 CPD hours per year, with at least 20 hours of structured learning. The requirement cannot be averaged over multiple years.
Audit firms conducting statutory audits must undergo a quality assurance review every six years. Severe deficiencies can result in deletion of the firm's statutory auditor registration.
The WPK can impose sanctions up to €500,000 for individuals and €1,000,000 for firms, plus public disclosure of the breach under § 69 WPO.

A Wirtschaftsprüfer in Düsseldorf missed a CPD filing deadline by six weeks. No client complaint had been filed, no audit had gone wrong. The WPK opened a disciplinary proceeding anyway, because § 57 WPO gives the chamber authority to monitor compliance with professional duties regardless of whether harm occurred. The fine was €5,000. The auditor's name and the nature of the breach were published on the WPK website under § 69 WPO, where they remain visible to clients and competitors.

The Wirtschaftsprüferkammer (WPK) is the mandatory professional body for all Wirtschaftsprüfer, vereidigte Buchprüfer, and their respective firms in Germany. Compliance with WPK requirements under the WPO is not optional, and the consequences of non-compliance range from reprimands to permanent exclusion from the profession.

Who must be a WPK member and what registration requires

Every Wirtschaftsprüfer (WP), vereidigter Buchprüfer (vBP), Wirtschaftsprüfungsgesellschaft (WPG), and Buchprüfungsgesellschaft (BPG) in Germany is a mandatory member of the WPK. This is not a voluntary professional body like the IDW (where membership is optional). The WPK is a Körperschaft des öffentlichen Rechts (corporation under public law), established by the WPO, and membership is a condition of practising.

The WPK maintains the professional register (Berufsregister), which also serves as the statutory auditor register. Current membership stands at approximately 21,000 individuals and firms across Germany, served by a head office in Berlin and six regional offices in Berlin, Düsseldorf, Frankfurt am Main, Hamburg, Munich, and Stuttgart.

To be appointed as a Wirtschaftsprüfer, an individual must pass the Wirtschaftsprüfer examination (§§ 5 et seq., 12 et seq. WPO). The examination consists of written and oral parts, covering financial auditing, company valuation, professional statutes, applied business administration, and economics. Candidates must hold a university degree and complete a minimum of three years' practical experience, with at least two years in audit practice (§ 9 WPO). The examination is held twice per year in a nationwide standardised format. It is conducted entirely in German.

Once appointed, the Wirtschaftsprüfer must register with the WPK. Since June 2016, any auditor intending to conduct statutory audits under § 316 HGB must separately inform the WPK of this intention. Registration as a statutory auditor (gesetzlicher Abschlussprüfer) is a prerequisite for a valid appointment.

The WPK can revoke a Wirtschaftsprüfer's appointment under §§ 20, 34 WPO if the prerequisites for practising are no longer met. The most common grounds for revocation: failure to maintain professional indemnity insurance, disorderly financial conditions (ungeordnete Vermögensverhältnisse), and engagement in incompatible activities. Revocation is not a disciplinary sanction. It is a preventive measure, and it happens before any client complaint is filed.

Professional liability insurance: the €1M minimum

§ 54 WPO requires all Wirtschaftsprüfer and audit firms to maintain professional liability insurance of at least €1,000,000. The WPK is the body responsible for verifying that every member has sufficient coverage. This is not a formality. Failure to maintain insurance is grounds for immediate revocation of the appointment.

The €1M minimum applies per claim. Many firms carry higher coverage, particularly if they audit medium-sized or larger entities where the potential liability under § 323 HGB could exceed that threshold. § 323 Abs. 2 HGB caps statutory audit liability at €1M for non-PIE statutory audits and €4M for PIE audits, but contractual engagements (freiwillige Prüfungen) can carry uncapped liability unless the engagement letter limits it.

Watch the insurer transition

If your firm's insurance coverage lapses even briefly (for example, during a switch between insurers), the WPK may learn about it from the insurer's notification and initiate revocation proceedings. The WPK does not wait for a claim to be filed. The obligation is continuous, and the monitoring is active.

The 40-hour CPD obligation

The WPK's Professional Charter (Berufssatzung) requires every Wirtschaftsprüfer to complete a minimum of 40 CPD hours per year. Of these, at least 20 hours must be structured learning (Fortbildung). The remaining 20 hours can be unstructured, such as self-study. The IDW separately requires its voluntary members to complete 40 hours of fully structured learning per year, but the WPK's requirement is the legally binding one.

What counts as structured learning

Attendance at WPK-approved training events, seminars offered by the IDW or approved providers, university courses, and participation in technical committees. The WPK publishes a list of approved providers on its website.

What counts as unstructured learning

Reading technical publications, self-directed study of new standards, and preparation of technical presentations. The WPK does not require detailed logging of unstructured hours, but the obligation still exists and the auditor must be able to demonstrate compliance if asked.

The annual trap

The 40-hour minimum is an annual obligation. It cannot be averaged over multiple years. An auditor who completes 60 hours in one year and 20 hours the next is non-compliant in the second year. The WPK monitors compliance through self-declarations, and a failure to meet the requirement can trigger a disciplinary proceeding under § 68 WPO.

Category	Minimum Hours	Examples
Structured learning	20 hours/year	WPK-approved seminars, IDW events, university courses, technical committees
Unstructured learning	20 hours/year	Self-study, reading technical publications, preparing presentations
Total	40 hours/year	Cannot be averaged across years

Quality assurance reviews every six years

Every audit firm that conducts statutory audits under § 316 HGB must undergo a quality assurance review (Qualitätskontrolle) at least every six years. For firms conducting their first statutory audit, the review must occur within three years of the first engagement. The WPK's Commission on Quality Assurance (Kommission für Qualitätskontrolle) administers the system.

The review is conducted by a registered quality assurance reviewer (Prüfer für Qualitätskontrolle, or PfQK). This is a peer review model: the reviewer is another Wirtschaftsprüfer who has been registered by the WPK for this purpose. The WPK registers PfQK candidates and can reject a reviewer proposed by the firm if independence concerns exist.

What the reviewer evaluates

The internal quality control system (internes Qualitätssicherungssystem) of the firm. This covers:

Compliance with the WPO and Professional Charter
Independence requirements
Quality and quantity of resources
Engagement acceptance and continuance procedures
Staff training and supervision
The firm's own monitoring processes

Since December 2023, this evaluation must also cover the firm's compliance with the IDW QM Standards (the German transposition of ISQM 1 and ISQM 2).

The reviewer produces a report that goes to the WPK's Commission on Quality Assurance. If deficiencies are identified, the Commission can require remedial measures. If the deficiencies are severe or unresolved, the Commission can delete the firm's registration as a statutory auditor. That deletion means the firm can no longer accept statutory audit engagements under § 316 HGB.

Firm-level, not engagement-level

A point that distinguishes the German system from the Dutch (SRA/NBA) model: the German quality assurance review is a firm-level review, not an engagement-level inspection. The reviewer evaluates whether the firm's system is designed to produce compliant audits, not whether a specific audit file meets the standard. However, the reviewer will select individual engagement files to test whether the system is operating as designed. If those files show deficiencies, the conclusion about the system changes.

For PIE audits, the quality assurance system is different. The Abschlussprüferaufsichtsstelle (APAS), the German auditor oversight body established at the Federal Office for Economic Affairs and Export Control (BAFA), conducts inspections directly. APAS has ultimate decision-making authority over the WPK's Commission on Quality Assurance as well.

Disciplinary oversight and the sanctions that follow

The WPK's disciplinary authority comes from §§ 57, 61a, and 71 WPO. It covers all breaches of professional duties by WPK members, with one exception: breaches arising in the course of statutory audits of public interest entities fall under APAS jurisdiction (§ 66a Abs. 6 WPO).

A disciplinary proceeding does not require a client complaint. The WPK can initiate proceedings based on its own information, findings from quality assurance reviews, or results from its financial statement review programme. The WPK's Management Board (Vorstand) is responsible for sanctioning confirmed breaches (§ 68 WPO).

Available sanctions under § 68 WPO

Sanction	Maximum	Notes
Reprimand (Rüge)	—	Lowest level; still recorded
Fine	€500,000 (individuals) / €1,000,000 (firms)	Multiple sanctions can be imposed simultaneously
Temporary prohibition	Varies	Restriction from certain professional activities
Exclusion (Ausschließung)	Permanent	Removal from the profession

Under § 69 WPO, irrevocable disciplinary measures are published on the WPK website. The publication includes the auditor's name, the nature of the breach, and any response the auditor has provided. This public disclosure is the sanction that most auditors fear, because it is visible to every current and prospective client.

If a member objects to a WPK sanction unsuccessfully, they can appeal to the professional courts (Berufsgerichte). These are special divisions of criminal courts, with the District Court of Berlin as the first instance and the Superior Court of Justice of Berlin as the appellate court.

The WPK's financial statement review programme

Separately from quality assurance reviews and disciplinary proceedings, the WPK continuously reviews published financial statements audited by its members. This programme operates on a random basis. It does not require a prior suspicion of a breach.

The WPK selects published annual and consolidated financial statements from the Bundesanzeiger (Federal Gazette) and reviews both the financial statements and the corresponding auditor's report (Bestätigungsvermerk) for compliance with legal and professional requirements. PIE financial statements under § 316a Satz 2 HGB are excluded from this programme (those fall under APAS).

If the WPK identifies ambiguities in the financial accounting or the auditor's report, it discusses them with the responsible auditor. The discussion may resolve the matter. But if the review reveals a suspected breach of professional duties, the WPK can escalate to a formal disciplinary proceeding.

Between-cycle oversight

For smaller firms, this programme is the WPK oversight mechanism that operates between the six-year quality assurance cycles. A firm that passed its peer review in 2022 can still face questions from the WPK's financial statement review team in 2024 about a specific engagement.

Worked example: Schäfer & Partner WPG

Firm profile: Schäfer & Partner WPG, a four-partner audit firm based in Stuttgart. The firm conducts 45 statutory audits per year, all non-PIE. Annual revenue: €3.2M. The firm's last quality assurance review was in 2020. The next review is due by 2026.

Step 1: Verify ongoing registration

The managing partner confirms that the firm's registration as a statutory auditor is current on the WPK's public register. Professional liability insurance of €2M per claim is in place (above the €1M minimum under § 54 WPO). All four partners hold current Wirtschaftsprüfer appointments.

Documentation note: Record the registration confirmation date, the insurance policy number and coverage amount, and the appointment status of each partner. File the WPK register extract.

Step 2: Assess CPD compliance

Each of the four partners completed the following CPD hours in the current year:

Partner A: 44 hours (22 structured)
Partner B: 41 hours (20 structured)
Partner C: 38 hours (18 structured)
Partner D: 52 hours (30 structured)

Partner C is below the 20-hour structured minimum. The firm identifies this in October, with two months remaining to close the gap.

Documentation note: Record each partner's CPD log with structured and unstructured hours separated. For Partner C, record the remediation plan (specific events booked for November and December) and the expected completion date.

Step 3: Prepare for the 2026 quality assurance review

The firm must select a registered PfQK and propose them to the WPK's Commission on Quality Assurance. The PfQK will evaluate the firm's quality management system, which since December 2023 must comply with the IDW QM Standards (ISQM 1/2 transposition). The firm's quality management manual was last updated in 2022. It needs revision to address the IDW QM Standards, particularly the risk assessment process (ISQM 1 para. 23–27) and the monitoring and remediation component.

Documentation note: Record the selected PfQK, the date of WPK approval, and the timeline for the quality management manual update. Create a gap analysis between the current manual and the IDW QM Standards requirements.

Step 4: Address a financial statement review inquiry

In March, the WPK sends a letter regarding a 2024 audit of a medium-sized GmbH. The WPK has identified that the Bestätigungsvermerk does not contain a material uncertainty section, despite the published Anhang disclosing a “significant uncertainty regarding refinancing.” The responsible partner must respond within four weeks, explaining either why a material uncertainty section was not included (with reference to the IDW PS 270 scenario classification) or acknowledging the omission.

Documentation note: Record the WPK inquiry date, the partner's response, the supporting documentation from the engagement file, and the outcome. If the response resolves the matter, file the WPK's closure letter. If it escalates, engage legal counsel immediately.

The total annual compliance cost for Schäfer & Partner: approximately 180 partner hours across CPD, quality management updates, and WPK correspondence, plus €8,000–12,000 for the quality assurance review when it falls due.

Practical checklist for WPK compliance

Confirm your registration as a statutory auditor on the WPK's public register at the start of each audit season. An expired or missing registration makes your appointment as auditor invalid.
Verify that professional liability insurance meets the €1M minimum under § 54 WPO and that coverage is continuous. Set a calendar reminder 90 days before renewal to prevent any gap.
Track CPD hours monthly, not annually. The 20-hour structured minimum must be met by December 31. Falling short in December leaves no recovery time.
If your firm's six-year quality assurance review is approaching, update the quality management manual to reflect the IDW QM Standards (effective for periods beginning on or after 15 December 2023). Propose a PfQK to the WPK Commission at least six months before the review deadline.
When the WPK sends a financial statement review inquiry, respond within the stated deadline. Late responses do not resolve themselves. They generate a second letter and, potentially, a disciplinary file.
Publish the annual WPK membership fee payment receipt. Non-payment of fees is a breach of the Professional Charter and can trigger its own proceeding.

Common mistakes that trigger WPK action

The WPK's annual disciplinary oversight reports consistently identify firms that let professional liability insurance lapse during insurer transitions. Under § 54 WPO, even a one-day gap can trigger revocation proceedings. The WPK is notified directly by the outgoing insurer.
Small firms with one or two partners sometimes treat the 40-hour CPD requirement as optional during busy audit seasons. The WPK's self-declaration system catches this at year-end, and the fine under § 68 WPO for non-compliance applies regardless of the firm's workload.

Frequently asked questions

How many CPD hours must a Wirtschaftsprüfer complete each year?

The WPK requires every Wirtschaftsprüfer to complete a minimum of 40 CPD hours per year. Of these, at least 20 hours must be structured learning (attendance at WPK-approved training events, seminars, or university courses). The remaining 20 hours can be unstructured, such as self-study or reading technical publications. The 40-hour minimum is an annual obligation and cannot be averaged over multiple years.

How often do German audit firms undergo quality assurance reviews?

Every audit firm conducting statutory audits under § 316 HGB must undergo a quality assurance review (Qualitätskontrolle) at least every six years. For firms conducting their first statutory audit, the review must occur within three years. The review is conducted by a registered peer reviewer (Prüfer für Qualitätskontrolle) and evaluates the firm's internal quality control system, not individual engagement files, though sample files are tested.

What sanctions can the WPK impose for non-compliance?

Under § 68 WPO, the WPK can impose: reprimand (Rüge), fine of up to €500,000 for individuals and €1,000,000 for audit firms, temporary prohibition from certain professional activities, and exclusion from the profession (Ausschließung). Under § 69 WPO, irrevocable disciplinary measures are published on the WPK website, including the auditor's name and the nature of the breach.

What is the minimum professional liability insurance for a Wirtschaftsprüfer?

§ 54 WPO requires all Wirtschaftsprüfer and audit firms to maintain professional liability insurance of at least €1,000,000 per claim. Failure to maintain insurance is grounds for immediate revocation of the appointment. Even a brief lapse during an insurer transition can trigger revocation proceedings, as the WPK is notified directly by the outgoing insurer.

Is WPK membership mandatory for German auditors?

Yes. Every Wirtschaftsprüfer (WP), vereidigter Buchprüfer (vBP), Wirtschaftsprüfungsgesellschaft (WPG), and Buchprüfungsgesellschaft (BPG) in Germany is a mandatory member of the WPK. The WPK is a Körperschaft des öffentlichen Rechts (corporation under public law), established by the WPO, and membership is a condition of practising. This is distinct from the IDW, where membership is voluntary.