Social security exposure in Iraqi corporate transactions is one of the liabilities most frequently underestimated by buyers, investors and lenders. Unlike tax, which usually receives specialist attention in due diligence, social security is often reviewed superficially by checking that a registration certificate exists. Yet arrears for unregistered workers, under-declared wages and late payments can accumulate over several years, and the penalty regime under the 2023 law can double the amount of unpaid contributions. Because the liability follows the employing entity, a buyer of shares inherits it in full.
The exposure is “hidden” because it rarely appears in financial statements. Target companies may not have provisioned for arrears, may not know that allowances should have been included in the contribution base, or may have engaged workers through informal arrangements that the authorities would regard as employment.
The Social Security Law No. 18 of 2023 requires registration of covered workers and payment of contributions at 5% employee and 12% employer rates (25% for oil and gas employers), on a base including allowances. Late payment attracts a penalty of 1% per month after 120 days, capped at 100%, and fines can apply. The Social Security Department may review prior periods and assess arrears against the employer. In a share acquisition, the target remains liable after the change of ownership; in an asset acquisition, exposure may follow the business depending on how employees are transferred.
Sources of social security exposure in Iraqi corporate transactions
Common sources include:
- Workers never registered, particularly site, daily or project staff.
- Wages declared at basic salary only, excluding allowances.
- Late or missed monthly payments accumulating penalties.
- Employees transferred between group companies without registration updates.
- Contractors who are in substance employees.
- Subcontractor workers for whom the target may bear responsibility.
- Foreign staff whose coverage position was not analysed.
Due diligence approach
An effective review goes beyond certificates. Buyers should:
- Compare headcount in payroll, HR records, tax filings and social security declarations.
- Sample payslips to identify allowances excluded from the base.
- Review payment history for late payments and penalties.
- Identify individuals paid outside payroll, such as through petty cash or invoices.
- Review subcontract arrangements and labour supply agreements.
- Ask for correspondence with the Social Security Department and inspection reports.
Quantifying the exposure
Once gaps are identified, buyers should estimate arrears for the relevant period, apply the penalty regime and consider fines. A sensible model distinguishes between confirmed exposure, likely exposure and remote risk. The quantification supports price negotiation and the sizing of indemnities or escrow.
Contractual protections
Protections may include:
- Specific warranties on registration, contribution base and payment history.
- A specific indemnity for pre-completion social security liabilities.
- Escrow or holdback sized to the quantified exposure.
- Pre-completion remediation as a condition precedent.
- Price adjustment mechanisms.
General warranties alone are often insufficient because disclosure may qualify them and claims may be time-barred or capped. Our corporate law team structures protections suited to Iraqi transactions.
Pre-completion and post-completion remediation
Where possible, sellers should remediate before completion by registering omitted workers and paying arrears. Where that is not practical, buyers should plan remediation in the first months after completion, using indemnity mechanisms to recover costs. Voluntary remediation is generally better received by the authorities than arrears discovered in an audit.
Asset deals and business transfers
In asset deals, the buyer may hire the seller’s employees. The buyer should register them from the transfer date and ensure the seller settles historical obligations. Clear transfer documentation helps show where liability for each period sits.
Common mistakes
- Relying on a registration certificate as evidence of compliance.
- Ignoring allowances in the contribution base.
- Overlooking subcontractor and informal workers.
- Using general warranties without a specific indemnity.
- Delaying remediation after completion.
Practical checklist
- Reconcile headcount across all records.
- Sample payslips for contribution base issues.
- Review payment and penalty history.
- Quantify exposure with penalties.
- Negotiate specific indemnities and escrow.
- Plan remediation with clear ownership.
Questions to include in the due diligence request list
A targeted request list produces better information than a general request for “all social security documents”. Buyers should ask for:
- The employer’s registration certificate and any updates under the 2023 law.
- Monthly declarations and payment receipts for at least the last three years.
- A headcount reconciliation between payroll, HR records, tax filings and declarations, prepared by the target.
- A schedule of all pay elements, with the target’s treatment of each for the contribution base.
- Details of any workers engaged through consultancy agreements, labour suppliers or daily arrangements.
- Correspondence with the Social Security Department, including audit notices, assessments and objections.
- Labour inspection reports and complaints received from employees.
- Details of intra-group transfers and secondments.
- Any clearance certificates obtained for completed projects.
The answers, and the target’s ability to provide them quickly, are themselves an indicator of the quality of its compliance.
Interviewing management
Documents rarely tell the whole story. Short interviews with the target’s HR manager, payroll officer and site managers can reveal informal practices, such as cash payments to temporary workers or allowances added by site managers, that do not appear in formal records. Interviewers should ask open questions about how workers are hired on site, how pay changes are approved and how new joiners are registered.
Warranty and disclosure dynamics
Sellers often resist specific social security warranties or try to disclose against them generally. Buyers should insist that disclosure is specific and that known issues are covered by an indemnity rather than merely disclosed. Time limits for social security claims should reflect how long the department may look back, and caps should not be set so low that they make the indemnity meaningless.
Kurdistan Region targets
Targets operating in Kurdistan Region should be reviewed under the Region’s social security framework as well. Groups with operations in both jurisdictions may have exposure in each, and the due diligence should cover both.
Illustrative example. An investor acquires 70% of a construction company. Due diligence shows that the company declared only basic salary and engaged 90 site workers through an unregistered labour supplier. The investor negotiates a specific indemnity and an escrow of the estimated arrears and penalties. After completion, the company registers the workers and corrects its base, and the escrow funds the settlement.
Key takeaways
- Social security exposure in Iraqi corporate transactions often sits outside the financial statements.
- Due diligence must reconcile data, not just review certificates.
- Penalties can double arrears, so quantification matters.
- Specific indemnities and escrow are the main contractual protections.
How Etihad Law Firm Can Help?
Identifying social security exposure in Iraqi corporate transactions early protects deal value and avoids post-completion surprises.
Etihad Law Firm conducts employment and social security due diligence, structures contractual protections and supports remediation, alongside our employment law practice.