Can a Flawed EMP Trigger Personal EP Act Prosecution for QLD Project Directors?
- John Merlo
- 10 hours ago
- 16 min read
Key Takeaways
Executive titles do not guarantee immunity: An environmental consultant carrying the title of "Project Director" may be exposed to personal prosecution under the Environmental Protection Act 1994 (Qld) if their role involves managing the client's environmental compliance, regardless of statutory board appointment.
Resignation does not extinguish exposure: Section 493 of the EP Act now operates via two concurrent liability pathways. Under sections 493(1)–(4), liability attaches to executive officers who held that office when the corporation's environmental harm actually occurred. Under sections 493(5) and (6), inserted by the Environmental Protection and Other Legislation Amendment Act 2023 in response to R v Dumble & Ors [2021] QCA 161, liability also extends to executive officers who held that office when the corporation's underlying causative act or omission took place — even if the harm, and the offence itself, only crystallised after they had left the firm. Departing the firm does not extinguish historical exposure under either pathway.
Contractual disclaimers have statutory limits: Heavy reliance disclaimers drafted into an Environmental Management Plan (EMP) often fail to shield consultants from personal liability pathways arising under the Australian Consumer Law or the Environmental Protection Act 1994.
Statutory defences require active proof: to ensure the corporation complied with the Act — or, alternatively, that the officer was not in a position to influence the corporation's offending conduct. Both limbs require affirmative proof by the executive officer.
The registered post envelope from the Department of the Environment, Tourism, Science and Innovation (DETSI) sits open on your desk, and your stomach has just dropped. It is an investigation notice citing serious environmental harm caused by a developer client's site failure. But the shock isn't that your consulting firm is named—the shock is that you are named personally, targeted because your email signature reads "Project Director" on the allegedly flawed Environmental Management Plan (EMP). You do not sit on the company board and hold no statutory director titles with ASIC, yet the Queensland regulator is preparing to prosecute you individually, on a separate and direct personal liability pathway, under the Environmental Protection Act 1994 (Qld). Your immediate priority is triaging this exposure before the investigation locks in, understanding how your employment title has been weaponised, and building a defence that preserves your personal assets and professional standing.
Evaluating Personal Exposure When the Client's Environmental Management Plan Fails
Staring at a DETSI notice naming you personally alongside your developer client and your consulting firm is a profoundly isolating moment. You took on the "Project Director" title to manage complex site operations, not to absorb personal criminal exposure for a client's failure to implement your advice. Right now, you need to urgently triage your immediate exposure and understand precisely how the regulator intends to bypass your employer's corporate structure to target you. This section maps the specific personal liability pathways triggered by a regulatory investigation and outlines what actually sits between you and a prosecution.
Distinguishing Contract Scope from EP Act Statutory Exposure
When defending a flawed EMP, environmental consultants routinely look first to their engagement letter. It is vital to separate the contractual exposure pathway—the consulting firm's commercial agreement with the developer—from your statutory liability pathway as an individual. An explicitly defined scope of services is intended to restrict your obligations to the client, but the effectiveness of a consultant's limitation of liability clause is strictly conditional. While it may cap financial damages in a private commercial dispute, this protection is limited by overriding statutory obligations.
Contractual limitation of liability clauses between an environmental consultant and a developer do not prevent the Queensland regulator from pursuing statutory offences against the consultant directly.
Regulators enforce the Environmental Protection Act 1994 (Qld), not your private consulting contract. An engagement cap cannot contractually override the statutory General Environmental Duty, nor does it displace the regulatory enforcement powers targeting the specific individual who approved the deficient EMP.
Does Your "Project Director" Title Make You an "Executive Officer"?
A dangerous misconception in the consulting industry is that an Environmental Protection Act prosecution for executive officer liability can only target ASIC-registered board directors. In reality, the EP Act examines the substance of the individual's role rather than their formal corporate title. The statutory test turns on whether the individual is concerned with, or takes part in, the management of the consulting corporation itself — not merely the management of a single client project. If a senior environmental scientist or "Project Director" is genuinely concerned with, or takes part in, the management of the consulting firm, including its compliance operations, courts may consider them to satisfy the functional definition of an executive officer. Consequently, a senior role that carries real influence over how the firm is managed can expose the individual to prosecution, even if they never sit in a boardroom. Conversely, running a project for a client, without participating in the management of the firm, will not by itself meet the definition.
The Resignation Trap: Why Quitting Does Not Extinguish Historical EP Act Liability
Expert insight: Discovering that an old project is under DETSI investigation often prompts consultants to resign, under the mistaken belief that walking out the door severs their liability. It does not. The mechanism by which resignation fails as a shield has been clarified by both binding appellate authority and subsequent legislation. The Queensland Court of Appeal in R v Dumble & Ors [2021] QCA 161 confirmed that, under sections 493(1)–(4) as originally enacted, executive officer liability arises when the corporation commits the offence — which, for a serious environmental harm offence, occurs only when the harm actually results from the corporation’s causative act, not when any earlier planning, advice or decision was made.
Importantly, the Court held that a person who was no longer an executive officer when the serious environmental harm occurred was not liable under that provision.
Following that decision, the Environmental Protection and Other Legislation Amendment Act 2023 inserted sections 493(5) and (6), which extend liability beyond the position confirmed in Dumble. Those provisions apply to executive officers who were in office when the corporation's underlying act or omission occurred, even where the offence only crystallises — and the officer has already resigned — after the harm materialises on site. This represents a deliberate expansion of liability beyond the temporal limitation identified by the Court of Appeal.
The practical consequence for a consultant is this: if the consulting firm's act of producing and delivering a flawed EMP is characterised as part of the corporation's causative act or omission that ultimately results in serious environmental harm, an individual who held executive officer status within that firm at the time of delivery may face exposure under sections 493(5)–(6) regardless of when they subsequently resigned. The investigation notice is not the start of that exposure — it is the point at which an existing exposure (arising when the statutory elements are satisfied) becomes visible and actionable.
The practical mistake is even more dangerous on the insurance side than the liability side. Professional indemnity cover for environmental consultants is almost always written on a claims-made basis, which means the policy that responds is the one on foot when the claim or notification is made—not the policy that was current when the advice was given. The moment you leave a firm, you usually fall off that firm's policy, and a claim landing two years later finds you uninsured unless you have arranged run-off (tail) cover for your historic acts. In practice, departing consultants should resolve their run-off position in writing before they hand back the laptop: confirm who carries the tail, for how many years it runs, and whether the deed of release or employment exit documentation expressly preserves your indemnity for work performed while employed. Negotiating that cover after a DETSI notice arrives is generally too late, because insurers will treat the known circumstance as undisclosable, and you may find yourself personally named with no policy standing behind you.
If you have already resigned from a firm whose project is now under review, do not assume your historic exposure is closed. Instruct our team to review your run-off position and liability before the investigation locks in.
How a Client's Site Failure Becomes Your Criminal Problem
Having seen how the threat reaches you personally, you now need precise definitions of the legal mechanics that allow a client's site failure to become your own criminal problem before we turn to how you push back against it. This section breaks down the specific statutory deeming provisions under section 493 and the alternative civil pathways that regulators and third parties use to impose liability directly on individuals, independently of the corporate structure. By understanding how summary proceedings and misleading conduct claims are deployed against individuals, you can accurately assess your exposure.
The "Failure to Ensure Compliance" Trigger
In plain terms, the regulator can treat your firm's offence as automatically being your offence too. This is the practical effect of the primary statutory mechanism connecting a client's environmental breach to a consultant's personal exposure, found in the Environmental Protection Act 1994. Section 493 provides that if a corporation commits an offence against a provision of the Act, each of the executive officers of the corporation also commits an offence, namely, the offence of failing to ensure the corporation complies with the Act.
This means that if a development approval rests on an EMP that later causes serious environmental harm, the firm's corporate offence immediately becomes the trigger for your personal exposure as an executive officer. Under section 493 of the EP Act, an executive officer is deemed to commit an offence if their environmental consulting corporation fails to comply with the Act. Regulators utilise this deemed liability to shift the focus from the corporate entity directly onto the individuals who managed or approved the defective environmental strategies.
The One-Year Clock on Summary Proceedings
Warning: Regulators must typically commence summary proceedings against an environmental consultant or their firm within strictly defined timeframes, generally within 1 year after the commission of the offence, or within 1 year after the offence comes to the complainant's knowledge — but in any event no later than 2 years after the commission of the offence — under section 497 of the EP Act. Consultants often assume that historical projects are permanently closed; however, because the limitation clock can start ticking when latent environmental harm is discovered years later, earlier site assessments may still generate live exposure. Procedural mechanisms surrounding these timeframes are subject to ongoing reform.
The Environmental Protection (Efficiency and Streamlining) and Other Legislation Amendment Bill 2025, introduced into Queensland Parliament on 20 November 2025, proposes to extend the limitation period to three years for key offences — including unlawfully causing serious or material environmental harm and contravening an environmental authority condition — and to two years for other offences, while removing the complainant's knowledge trigger entirely. For a project director facing exposure over a flawed EMP that causes serious environmental harm, the relevant period under the Bill would be the three-year limit, not the two-year one. The Health, Environment and Innovation Committee tabled its report on 30 January 2026 recommending that the Bill be passed, and Assent is anticipated during the first half of 2026. Practitioners and consultants should confirm the Bill's current status, as its passage would materially alter the timeframes within which exposure remains live.
The ACL Pathway: How Misleading Conduct Pierces the "Consultant's Veil"
Expert insight: Environmental consultants often assume that embedding heavy reliance disclaimers into an EMP will fully insulate them from third-party or regulatory claims. In reality, plaintiffs and regulators frequently reach for section 18 of the Competition and Consumer Act 2010 (Cth) Schedule 2, which provides that a person must not, in trade or commerce, engage in conduct that is misleading or deceptive or is likely to mislead or deceive. The tactical attraction of section 18 is precisely that it does not care about your corporate structure. An "accessorial" or "knowingly concerned" claim runs against the individual who produced the substantive content, not against the firm. That means the developer's litigation funders and the consultant's own client can both use it to reach the individual directly, sidestepping the firm and exposing the personal assets sitting behind it. A disclaimer that says "this report should not be relied upon for X" tends to be of little help here, because misleading conduct is assessed on what the document actually conveyed to its audience, not on the fine print appended to the back.
What makes an EMP "misleading" in a site investigation context is rarely an outright false statement—it is usually the gap between confident language and thin underlying work. Common triggers include presenting a contamination or acid sulfate soil assessment as conclusive when it rested on a sampling regime too sparse to support that conclusion; carrying forward a desktop assumption into the recommendations without flagging that it was never field-verified; or omitting a known site constraint because the client wanted a "clean" report to take to approval.
The pattern that exposes individuals is the one where the consultant privately knew the foundation was shaky—an internal email querying the data, a peer reviewer's comment that was overruled—yet the final EMP projected certainty. That contrast between what was known internally and what was represented externally is the evidentiary spine of a "knowingly concerned" case, which is why relying purely on the firm's corporate shell or standard commercial structuring may fail to shield a project director once the substance of the advice is under the microscope.
In our work defending consultants and project directors across Queensland and New South Wales, the cases that turn on accessorial liability are almost always won or lost in the contemporaneous record — the internal email, the overruled peer review, the caveat that never made it into the final report. Merlo Law's litigation team examines that material the way a regulator's investigator will, identifying where the gap between internal knowledge and external representation creates personal exposure before it hardens into a "knowingly concerned" allegation. Acting early on that analysis is frequently what separates a defensible position from an indefensible one.
Building Your Defence Under Section 493(4)
With the regulatory pathways identified, your focus must shift aggressively toward defence strategy. You are no longer just assessing risk; you need to understand how your project diary, internal peer review emails, and original scope of works can be weaponised as a shield. This section details the specific statutory defences available to project directors under section 493(4) and outlines the evidentiary threshold required to actively prove you exercised reasonable diligence or lacked influence over the offending conduct.
Proving You Took "Reasonable Steps"
When facing deemed liability, an executive officer must bear the burden of proving they took all reasonable steps to ensure the corporation complied with the Act, as set out in section 493(4). The dispute strategy in these matters often turns on the quality of contemporaneous documentation created during the EMP's drafting phase. The evidence that tends to carry the most weight includes:
Comprehensive QA/QC processes showing the methodology was checked and signed off at each stage.
Independent peer reviews of the EMP methodology, particularly where reviewer concerns were addressed rather than overruled.
Documented warnings to the developer about site limitations, ideally in writing and acknowledged by the client.
An executive officer can defend against section 493 liability by proving they took all reasonable steps to ensure the environmental consulting firm's compliance with the Act.
Courts may consider whether the consultant actively elevated identified environmental risks to the client's attention rather than simply accepting constrained instructions. To mount a successful defence under this limb, the project director is likely to require substantial evidence demonstrating that their internal management protocols were actively applied to the specific project under investigation.
Your project diary, QA sign-offs and peer-review correspondence may be the strongest defence you have — or the regulator's best evidence against you. Request an urgent review of your documentation before you respond to DETSI.
Proving You Could Not Influence the Client's Site Conduct
Example: Consider a scenario where a senior environmental consultant drafts an EMP containing strict, non-negotiable conditions regarding seasonal clearing limitations and erosion control requirements. The EMP is formally handed over to the developer client, who subsequently ignores these conditions on site to accelerate the construction schedule, leading to significant sediment runoff and water contamination.
The Department of the Environment, Tourism, Science and Innovation (DETSI) commences an investigation into the harm. Under the second limb of section 493(4), it is a defence for an executive officer to prove they were not in a position to influence the conduct. By producing site inspection reports or correspondence demonstrating the consultant was excluded from site management after delivering the EMP, the project director may establish this evidence factor. Successfully evidencing that the developer unilaterally deviated from the approved advice is often central to defending against personal prosecution.
The Failure of Contractual Liability Caps Against Statutory Standard of Care Breaches
A common commercial miscalculation among project directors is the belief that capping their financial exposure to the client simultaneously caps their regulatory exposure. A consultant's private contract, including any defined limitation of liability clauses, has no power to limit the consultant's overarching General Environmental Duty obligations under the EP Act. The effectiveness of these clauses is strictly limited to private contractual disputes and does not bind regulators. When DETSI evaluates an executive's personal liability, they assess the individual's conduct against the statutory standard of care. This creates a separate exposure channel where a consultant might successfully defeat a developer's civil damages claim using their engagement contract, but still face prosecution for failing to prevent environmental harm under the Act.
Executing Immediate Protective Measures Following a Regulatory Notice
The theoretical risk of executive liability transforms into an active, time-critical crisis the moment a DETSI notice arrives. Your immediate actions over the next 48 hours will dictate whether your insurance responds and whether your internal communications are protected from regulator scrutiny. This section sets out the critical first responses a project director must execute to preserve coverage under their professional indemnity policy and avoid prejudicing their defence during an active regulatory investigation.
Notify Your Insurer Before You Do Anything Else
The most urgent procedural mechanism following receipt of a regulatory notice is securing your insurance position. Claims-made professional indemnity insurance environmental consultant policies require strict compliance with notification obligations, and failure to act can be fatal to your coverage.
Immediately notify your broker in writing that a regulatory notice has been received or a circumstance has arisen that might lead to a claim.
Ensure the notification complies with the specific timing requirements set out in your policy document.
Recognise that under the Insurance Contracts Act 1984 (Cth) framework, late notification can severely compromise your ability to claim defence costs.
Do not admit liability to the regulator, the client, or third parties prior to receiving written confirmation of coverage from the insurer.
Failing to notify a professional indemnity insurer immediately upon receiving a DETSI investigation notice may result in complete denial of coverage.
Shielding Board Correspondence and Internal Reviews Through Legal Privilege
Following a serious site incident, the instinct for many project directors is to immediately initiate internal emails reviewing the failed EMP or assessing the firm's exposure. This can be a critical error. Engaging an independent litigation team immediately ensures that subsequent internal reviews, board-level communications, and strategic risk assessments are cloaked in legal professional privilege. This procedural mechanism prevents DETSI from subpoenaing those documents as evidence during summary proceedings. Without privilege attached from the outset, consultants risk creating highly disclosable admissions of fault that regulators will invariably demand during their investigation.
Time and again in QLD and NSW regulatory matters, we have seen well-intentioned internal post-incident reviews become the most damaging documents in a brief of evidence, simply because no privilege attached when the keyboard started. Merlo Law structures the internal review process so that board-level communications and strategic risk assessments are conducted under legal professional privilege from the first hour, keeping them out of the regulator's reach. Engaging counsel before, rather than after, that first internal email is one of the most decisive steps a project director can take to secure their commercial position.
Conclusion
That open envelope from DETSI sitting on your desk represents a fundamental shift in your professional exposure. When a client’s site failure triggers serious environmental harm, the regulatory focus rarely stops at the corporate boundary. Your "Project Director" title, the specifics of your involvement in the Environmental Management Plan, and the limits of your contractual disclaimers all form part of the calculus the Department of the Environment, Tourism, Science and Innovation uses when pursuing personal executive officer liability under the EP Act.
You now understand that neither resigning from the firm nor relying on a commercial limitation of liability clause provides an absolute shield against statutory or Australian Consumer Law pathways. In particular, the 2023 amendments to section 493 mean that exposure may arise from the time the corporation's causative act or omission occurred — which may predate the appearance of any site harm — and resignation after that point does not sever the liability pathway already engaged. The defence against deemed liability under section 493(4) requires active proof—demonstrating through contemporaneous records that you took all reasonable steps to ensure compliance, or that you lacked genuine influence over the offending site conduct.
The immediate next step is not to conduct an unprotected internal review of the EMP. You must urgently notify your professional indemnity insurer of the DETSI notice to preserve your coverage, and engage independent legal counsel to ensure your internal risk assessments are protected by legal professional privilege.
Your First 48 Hours If a DETSI notice has landed on your desk, the actions below are time-critical:
Notify your professional indemnity insurer or broker in writing immediately—delay can be fatal to your coverage.
Do not admit liability to the regulator, your client, or any third party before you have written confirmation of cover.
Do not begin an internal review or email trail about the EMP—unprivileged communications can become the regulator's evidence.
Engage independent legal counsel now, so that your risk assessments are protected by legal professional privilege from the outset.
Confirm your run-off (tail) insurance position if the project predates your current role or firm.
Speaking to an environmental liability lawyer before you reply to the regulator can be the difference between a contained matter and a personal prosecution. If you have received a DETSI notice, or suspect a historic project may be under review, contact Merlo Law for confidential, tailored advice on protecting your position, your coverage, and your professional standing.
FAQs
Can an environmental consultant be personally prosecuted under the EP Act?
Yes, an environmental consultant can face personal prosecution. If a consulting corporation commits an offence against the EP Act, executive officers may be deemed under section 493 to have also committed an offence, meaning they can be prosecuted individually.
Do you have to be a registered company director to face executive officer liability?
No, you do not need to be an ASIC-registered board director. Under the EP Act, the question is whether the person is concerned with, or takes part in, the management of the consulting corporation itself. If a senior environmental scientist or "Project Director" genuinely participates in the management of the firm, courts may consider them to meet the functional definition of an executive officer, regardless of their formal title.
Will a limitation of liability clause protect me from DETSI enforcement?
No, a commercial limitation of liability clause will not protect you from regulatory enforcement. While these clauses can cap financial damages in private disputes with clients, they cannot contractually override the statutory General Environmental Duty or prevent regulators from prosecuting statutory offences.
What defences are available against section 493 executive officer liability?
To defend against section 493 liability, an executive officer must establish specific statutory grounds. Under section 493(4), it is a defence to prove that the officer took all reasonable steps to ensure the corporation complied with the Act, or that the officer was not in a position to influence the offending conduct.
Can I avoid liability for a flawed EMP by resigning from my consulting firm?
Resigning from your firm typically does not extinguish your historical liability. Under sections 493(1)–(4) of the EP Act, liability attaches to executive officers who held that office when the corporation's environmental harm actually occurred. Under sections 493(5) and (6), inserted by the Environmental Protection and Other Legislation Amendment Act 2023, liability also extends to executive officers who held that office when the corporation's underlying causative act or omission took place, even if the harm — and the offence — only crystallised after they had resigned. Your current employment status is therefore not the determinative question; the question is whether you held executive officer status within the consulting firm at the time either of those statutory triggers was engaged.
How does the Australian Consumer Law apply to environmental consulting reports?
The Australian Consumer Law provides a separate pathway for liability regarding professional reports. Under section 18, a consultant can potentially face civil liability if they produce an Environmental Management Plan that contains misleading or deceptive information, allowing plaintiffs to pursue the individual directly rather than only the firm.
This guide is for informational purposes only and does not constitute legal advice. For advice tailored to your specific circumstances, please contact Merlo Law
Comments