Fractional HR

Outsourced HR vs fractional HR in Germany: what you can hand off, what stays with the employer

Payroll, application handling and HR admin can be outsourced. Liability, data protection and works council duties stay with you. When a business transfer applies.

10 October 202615 min readby Nick Schaefer, HR Interim Manager & AI Consultant16 sources
The short answer

Yes, you can outsource parts of an HR department in Germany, such as payroll, application handling or personnel administration. You do not hand over the responsibility: the employer remains liable for wage tax and social security contributions, remains the data controller under the GDPR for employee data, and has to involve the works council before deciding. A business transfer under section 613a of the German Civil Code (BGB) only arises when an organised unit moves with its staff or assets, and for steering and decision-making a fractional or interim HR lead usually fits better than outsourcing.

At a glance

  • You can outsource the execution, the responsibility stays with the employer: wage tax (section 42d Income Tax Act), social security contributions (section 28e Social Code IV) and data protection.
  • Handing payroll to a third party requires a data processing agreement under Article 28 GDPR. In my review of 165 HR tools, such a statement is recorded for 55.
  • Plain contracting out is usually a functional succession under case law. If the main workforce of the unit moves too, section 613a BGB applies.
  • The works council must be informed about external personnel (section 80(2) Works Constitution Act), and a substantial outsourcing can be an operational change under section 111.
  • Steering and decisions cannot be delivered like a payroll run. A fractional or interim HR lead is the better form for that.

Anyone searching for how to outsource an HR department ends up at providers listing benefits: lower cost, more capacity, bought-in expertise. What they rarely show is the other side of the ledger. What you hand over is the work. What you keep is the responsibility. In between sit three legal questions to settle before the contract: who is liable, who processes the data, and what the works council says.

This article sorts the tasks of an HR department by what can be outsourced and what cannot. It explains when outsourcing becomes a business transfer, how to handle the data protection side, and at which point outsourcing is the wrong form. It describes the legal framework in general terms and does not replace legal or tax advice in an individual case.

The perspective is that of an HR lead who has to decide what stays in-house. As an HR manager and head of people I have brought functions in-house and slimmed down processes. Both examples appear further down.

What can you outsource in an HR department?

Executing tasks with a fixed procedure can be outsourced: ongoing payroll, maintenance of personnel files and master data, handling applications up to the shortlist, drafting employment contracts and certificates from your templates, and the notifications to social security bodies. What these tasks have in common is that the decision about what to do is already made and only the execution is open.

What you cannot outsource is the employer position itself. Whoever has employees remains the contracting party, the person who gives instructions and the debtor of the pay. The decisions that converge in an HR department are also hard to deliver as a service: whom you hire, whom you dismiss, how you negotiate with the works council and which pay structure you want depend on knowing your company, and an external provider running a standard process does not.

An in-between form are tasks involving judgment, such as recruiting for hard-to-fill roles or support in separations. Here you can buy the execution while the decision stays in-house. That works when someone inside the company can assess the results. If nobody can, you receive results you cannot check. That is exactly what fractional HR is for.

The following selection helps with a first sort. It is orientation, not an expert opinion.

Orientation · switch views

Which form fits which task?

Three forms compared. Orientation from practice, not legal or tax advice.

  • Fits tasks with a fixed procedure: payroll, master data, certificates, notifications.
  • The provider works to a standard process for many clients at once.
  • Responsibility stays with the employer, including liability and data protection.
  • Needs a data processing agreement and an internal person who checks the results.

Good for execution, weak where questions require detailed knowledge of your company.

Evidence12

What stays with the employer even when a provider does the work

Liability for wage tax stays with the employer. Section 42d(1) of the Income Tax Act (EStG) says the employer is liable for the wage tax it has to withhold and pay over. A payroll provider can miscalculate and the tax assessment still comes to you. Your right of recourse against the provider follows from the contract and does not replace liability towards the tax office.

Social security works the same way. Under section 28e(1) of Social Code IV (SGB IV) the employer has to pay the total social security contribution. The provider calculates and reports, the duty to pay remains yours. Anyone outsourcing payroll should therefore set spot checks, for instance reviewing the first three payroll runs and then every quarter.

Who may perform payroll for third parties at all is governed by the Tax Advisory Act (StBerG). Sections 2 and 5 prohibit unauthorised assistance in tax matters. Section 6(1) no. 1 StBerG exempts ongoing payroll under narrow conditions: it must be carried out under the responsibility of a person who, after commercial training, has worked at least three years in bookkeeping for at least 16 hours a week. For you that means: ask the provider on what basis it does payroll, and get the answer in writing.

On top comes what no contract transfers: duty of care towards employees, being reachable in a conflict, and being the face towards the workforce. If a colleague asks about parental leave and the answer comes from a hotline that does not know your works agreement, you lose trust inside your own house.

Tap to open

Four duties that stay with the employer

Sources: EStG section 42d; SGB IV section 28e; GDPR Articles 28 and 83; Works Constitution Act section 111. As of 10 October 2026.

Evidence3456

How do you handle data protection when HR tasks are outsourced?

With a data processing agreement under Article 28 GDPR, before the first record flows. The agreement sets out the subject matter and duration, the nature and purpose of the processing, the categories of data and the data subjects. You may only choose processors that provide sufficient guarantees for technical and organisational measures. Under section 26(1) BDSG employee data may only be processed as far as necessary for the employment relationship. That applies to the provider too.

Two clauses are easily overlooked. First, sub-processors: under Article 28(2) GDPR the provider may not engage another processor without your prior written authorisation, specific or general (for the access an external HR lead should get in daily work, see access to employee data for interim HR managers). Ask for the list before you sign, because a payroll provider almost always works with a data centre, a print shop and a support service. Second, control: Article 28(3)(h) obliges the provider to supply evidence and to allow and contribute to audits, including inspections. That is your right, and it only helps if you use it once.

Roles follow the actual circumstances. The European Data Protection Board's Guidelines 07/2020 make clear that the label in the contract does not decide who is controller and who is processor. A provider that uses employee data for its own purposes, for example benchmarks, is no longer a mere processor. So check whether it uses the data for anything else, and prohibit it in the contract.

The fine range is high. Infringements of the obligations of controllers and processors under Articles 25 to 39 GDPR, which include Article 28, can be fined up to 10 million euros or up to 2 percent of worldwide annual turnover, whichever is higher.

How common a data processing agreement is on the market shows in my review. I analysed 165 HR tools from personnel administration, recruiting, selection and employee experience. For 55 of them I found a statement on the data processing agreement on the provider's pages: publicly viewable for 40, on request for 10, and by click-through in the account for 5. Among the 17 payroll tools with AI features it was 3. That does not mean the rest offer no contract. It means you often have to ask for it.

Own review

Of 165 HR tools with AI, 40 have a publicly viewable data processing agreement

165
HR tools in the review
55
with a statement on the data processing agreement
40
of which publicly viewable

Source: own review by Nick Schaefer, as of 10 October 2026, 165 HR tools from personnel administration, recruiting, selection and employee experience (archived tools excluded). Recorded is what the provider pages state.

€10 millionor 2 percent of worldwide annual turnover: upper fine range for infringements of Articles 25 to 39 GDPR
17payroll tools in my review, a statement on the data processing agreement is recorded for 3 of them

Evidence7896

When does outsourcing become a business transfer?

When an organised unit passes to the provider. Section 613a(1) sentence 1 BGB: if a business or part of a business passes to another owner by legal transaction, the new owner steps into the rights and obligations of the existing employment relationships. If your HR department has four people who move to the provider together with rooms, systems and processes, that is typically a transfer of part of a business.

Merely contracting out a task is not. In its judgment of 24 May 2005 (8 AZR 333/04), the Federal Labour Court held that the mere continuation of an activity by a contractor is not a business transfer. What mattered was whether the new owner takes over the main workforce, a part of the staff that is essential in number and expertise. In the case decided, taking over 60 percent of the employees in a labour-intensive activity was not enough. The Court of Justice of the European Union had already ruled on 11 March 1997 in Süzen (C-13/95) that losing a contract to a competitor is not in itself a transfer under the Directive. It applies where assets are transferred or an essential part of the workforce is taken over.

In practice: if you outsource payroll and your colleague in payroll stays or is redeployed while the provider works with its own staff, it is usually a functional succession. If the unit's employees, systems and processes move across, a transfer of part of a business may exist. Drawing the line is case-by-case work for a specialist employment lawyer, but you can prepare the order of questions yourself.

If a business transfer exists, the consequences are clear. The affected employees must be informed in text form before the transfer (section 613a(5) BGB), they can object in writing within one month of receiving that information (subsection 6), a dismissal because of the transfer is invalid (subsection 4), and the former employer is jointly and severally liable with the new owner for obligations that arose before the transfer and fall due within one year (subsection 2).

Self-check · interactive

Does your outsourcing risk a business transfer?

Three questions for a first view. Not legal advice; the assessment in your case belongs with your employment lawyer.

Are employees of your HR department meant to move to the provider or keep working there?

This means a change of employer, not just working together.

1 monthperiod for employees to object, from receipt of the information (section 613a(6) BGB)
1 yearjoint and several liability of the former employer for obligations that fall due (section 613a(2) BGB)
60%of the workforce taken over was not enough for a business transfer in the Federal Labour Court case 8 AZR 333/04

Evidence101112

What does this mean for the works council?

Involve it early, even if no business transfer exists. Under section 80(2) of the Works Constitution Act (BetrVG) the works council's right to information also covers the employment of persons who are not in an employment relationship with the employer. Section 92(1) sentence 1 BetrVG names these persons expressly within personnel planning. Anyone bringing providers into HR processes therefore has a duty to inform before the question of co-determination even arises.

The second question is whether the outsourcing is an operational change. Section 111 BetrVG obliges companies with, as a rule, more than twenty eligible employees to inform the works council of planned operational changes in good time and comprehensively and to consult it. Operational changes include, among others, the curtailment or closure of essential parts of the operation and fundamental changes to the organisation of the operation. Whether outsourcing an HR department counts depends on how essential it is to the operation and how many employees are affected. Handing a two-person administration to a payroll provider is different from handing over an entire department.

Third, section 87(1) no. 6 BetrVG can apply if the provider works with technical systems designed to monitor employees' behaviour or performance. That happens quickly with time recording, attendance analysis or AI-assisted evaluation. Section 26(6) BDSG makes clear that the participation rights of employee representatives remain unaffected.

A simple sequence helps: inform the works council before choosing the provider, go through the criteria together, and present the draft contract with the data processing agreement before signing. That costs two conversations and reduces the risk of the outsourcing ending up in the conciliation board later.

  1. Define task and scopeWhich tasks, which people, which systems are affected? That determines which provision applies.
  2. Inform the works councilExternal personnel must be reported under sections 80(2) and 92 BetrVG, and section 111 BetrVG applies to an operational change.
  3. Settle data protectionData processing agreement, sub-processors and audit rights under Article 28 GDPR.
  4. Contract with an exitFix term, notice, return and deletion of data and the handover to the next solution up front.
  5. Start with checksSpot-check the first runs, then at regular intervals.

Evidence13141516

When does fractional or interim fit better than outsourcing?

When the problem is steering and not execution. A payroll provider does not answer questions about building the pay structure, handling the works council or a separation. Anyone who has HR specialists but nobody who decides and judges the providers' results does not have an outsourcing problem but a leadership problem.

Fractional HR means an experienced HR lead works a fixed part of the week for your company. That fits when your need is permanent but does not fill a full-time role. Such a person can also steer the outsourced providers: scope the tasks, review contracts, read the results critically and face the works council. The two models therefore complement each other more than they compete. The choice between fractional, interim and a permanent hire is covered in more detail on the page Interim, Fractional, or a Permanent Hire.

Interim is the form for a limited window: the HR lead is absent, a restructuring is due, or an outsourcing needs to be prepared first. An interim person can set the outsourcing up cleanly, with works council, data protection and handover process, and hand over to providers or a successor at the end. The contract form matters here. Someone who is integrated into your organisation and follows your instructions can count as an employee under section 611a BGB or as a temporary agency worker under section 1 AÜG.

An example from my own experience shows the direction can also run the other way. At a consumer goods group I brought talent acquisition in-house that had previously run externally. That saved 300,000 euros in recruiting costs. The example is no argument against outsourcing. It shows the question has to be asked again every year: is the task stable and frequent enough to run better and cheaper in-house? In personnel administration I saw the counterpart: manual effort fell from 30 to 5 hours a week without the task leaving the house. There the solution was not outsourcing but a better process.

When outsourcing is enough

The task is standardised, the decision is made, and someone in-house can check the results. Examples: ongoing payroll, master data maintenance, certificates.

When fractional or interim fits better

Nobody is there to decide, to lead the works council relationship and to steer providers. The need is permanent part-time (fractional) or time-limited (interim).

Orientation from practice. The forms are not mutually exclusive: a fractional lead can steer providers.

Evidence12

What belongs in the contract and the checklist?

The following list summarises what should be settled before signing. It does not replace a contract review, but it orders the questions to put to your provider. Each point traces back to one of the provisions above or to a sequence I consider sensible.

Tick off what is settled on your side. The list stays saved in your browser, and the button below copies the state as text.

To take with you

Checklist before outsourcing HR tasks

0/11

Your progress stays saved in this browser.

Evidence71013

How I approach the question when a company contacts me

I first ask what the company wants to outsource and why. If nobody leads HR as a whole and the outsourcing is meant to plug the hole, it is useful but does not solve the problem. It takes load off the existing team and leaves the leadership question open.

I work as a fractional and interim HR manager and so have an interest in the answer. I say it openly: if your task is ongoing payroll and someone in-house checks the results, you do not need me for it. Then a good payroll provider with a clean contract is the right choice, and at most I help read the contract against the points of the checklist. If works council, leadership questions, separations or building up HR are in the room, a lead with a mandate is the better lever.

Evidence2

Sources

  1. German Civil Code (BGB) section 611a: employment contract, instructions and overall assessment
  2. Temporary Agency Work Act (AÜG) section 1: permit, integration and instructions, temporary assignment
  3. Income Tax Act (EStG) section 42d: employer liability
  4. Social Code IV (SGB IV) section 28e: duty to pay the total social security contribution
  5. Tax Advisory Act (StBerG) section 6: exceptions to the ban on unauthorised assistance in tax matters
  6. Federal Data Protection Act (BDSG) section 26: data processing for employment purposes
  7. GDPR Article 28: processor
  8. GDPR Article 83: general conditions for imposing administrative fines
  9. European Data Protection Board, Guidelines 07/2020 on the concepts of controller and processor
  10. German Civil Code (BGB) section 613a: rights and obligations on transfer of a business
  11. Federal Labour Court, judgment of 24 May 2005, 8 AZR 333/04: contracting out, functional succession and main workforce
  12. Court of Justice of the EU, judgment of 11 March 1997, C-13/95 (Süzen): press release on business transfer when a contract is re-awarded
  13. Works Constitution Act (BetrVG) section 80: general duties of the works council, information
  14. Works Constitution Act (BetrVG) section 92: personnel planning
  15. Works Constitution Act (BetrVG) section 111: operational changes
  16. Works Constitution Act (BetrVG) section 87: co-determination rights

Frequently asked questions

May I hand payroll to a provider?

Yes. The responsibility stays with you: the employer is liable for wage tax under section 42d EStG and has to pay social security contributions under section 28e SGB IV. For the employee data you need a data processing agreement under Article 28 GDPR. Ask the provider on what basis under the Tax Advisory Act it does payroll.

Does outsourcing automatically become a business transfer?

No. The mere continuation of an activity by a contractor is not one according to the Federal Labour Court (8 AZR 333/04) and the CJEU (C-13/95). A business transfer under section 613a BGB exists when an organised unit passes, for example with the essential part of the staff or with assets. Have the classification in your case checked by an employment lawyer.

Do I have to involve the works council?

Yes, at least inform it. The employment of persons who are not in an employment relationship with the employer is part of the information duty under sections 80(2) and 92 BetrVG. For a substantial outsourcing section 111 BetrVG may apply, for monitoring technology section 87(1) no. 6 BetrVG.

Do I need a data processing agreement?

Yes, as soon as the provider processes employee data on your behalf. Article 28 GDPR requires a contract with subject matter, duration, nature and purpose of the processing, data categories and data subjects. It includes authorisation of sub-processors and audit rights.

What is the difference between outsourcing and fractional HR?

Outsourcing gives a task to a provider that does it to a standard process for many clients. Fractional HR is an experienced person who takes over your HR leadership for a fixed part of the week and can also steer providers. Outsourcing replaces execution, fractional replaces leadership.

Nick Schaefer, HR Interim Manager & AI Consultant

Discuss outsourcing or a fractional lead

A free first call to sort out which tasks you can outsource and where a lead is missing. If a payroll provider is enough, I will tell you so there.

Discuss outsourcing or a fractional lead

Related

More articles