A governing board’s responsibilities are to set the organization’s direction, safeguard its finances, hire and oversee the chief executive, keep the organization compliant with the law, and monitor the risks that could sink it. Those jobs belong to the board as a single body, not to any individual director, and each member carries personal fiduciary duties that a court can enforce if the board gets it wrong. The scope is the same whether the entity is a public company, a private corporation, or a tax-exempt nonprofit; the specifics shift, but the core work does not.
The Three Fiduciary Duties Every Director Carries
Every other board responsibility traces back to three legal duties. Courts use them as the measuring stick when a decision is challenged.
Duty of Care
Act in good faith and with the attentiveness a reasonable person in a similar role would use. In practice, that means reading the financial reports before the meeting, asking real questions when something looks off, and staying current on the major risks facing the organization. A director who rubber-stamps whatever management puts in front of them is the textbook example of a care failure.
Directors can rely on officers, outside professionals, and board committees for information, but that reliance has to be reasonable in itself. Trusting a CFO whose numbers have already been questioned does not qualify. When directors do act in good faith, on an informed basis, and genuinely believe the decision serves the organization, the business judgment rule generally shields the decision from being second-guessed in court. The protection disappears when a director is uninformed, conflicted, or acting in bad faith.
Duty of Loyalty
Put the organization’s interests ahead of your own. Diverting assets, taking business opportunities that belong to the organization, or steering contracts to a company you control all breach this duty.1Cornell Law Institute. Duty of Loyalty When a conflicted transaction does happen, courts apply the entire fairness standard, examining whether both the process and the price were fair. Boards that survive that scrutiny document the conflict, exclude the interested director from the vote, and show that the terms match what an arm’s-length deal would have produced.
Duty of Obedience
This one matters most in the nonprofit world. The board has to keep the organization faithful to its stated mission, articles of incorporation, and bylaws. A homeless shelter that quietly pivots to real estate development, or a charity that routes donated funds into unrelated ventures, risks both legal action and loss of tax-exempt status. When circumstances genuinely require the mission to change, the board follows the amendment process in the bylaws rather than drifting away from it.
Strategy Belongs to the Board, Operations to Management
The board sets long-term direction through the mission, vision, and a strategic plan that turns those into concrete objectives. The line that keeps a board effective is the one between governance and management. The board decides what the organization should accomplish and why. The executive team decides how. Directors who slip into running day-to-day operations undermine the CEO and crowd out the work only the board can do.
Progress gets tracked through regular reporting, typically quarterly, that compares actual results against the plan. When the numbers diverge, the board has to figure out whether the strategy itself needs adjusting or whether execution is the problem. The plan itself gets a full review every three to five years so the organization is not chasing goals that no longer fit its environment.
Financial Stewardship
Financial oversight starts with approving the annual budget and continues through regular review of balance sheets, income statements, and cash flow reports. Directors do not all need to be accountants, but every one of them should understand enough to notice warning signs: an unexpected drop in revenue, overhead creeping past its budgeted share, a cash balance shrinking quarter over quarter.
Internal controls are the board’s main defense against fraud. These include dual signatures on large checks and separating the people who authorize payments from those who process them. The board also selects an independent auditor to review the annual financial statements. For nonprofits, state laws often require an independent audit once revenue crosses a threshold, and government grants frequently carry their own audit requirements.
Organizations holding endowment funds take on additional obligations under the Uniform Prudent Management of Institutional Funds Act, adopted in 49 states and the District of Columbia. UPMIFA sets out factors the board must weigh before spending from an endowment, and in most adopting states, spending above 7% of the fund’s three-year average market value is presumed imprudent. The board can exceed that figure, but has to justify and document the reason.
Hiring and Overseeing the Chief Executive
Picking the chief executive is usually the single most consequential thing a board does. The process should define the qualifications the role requires, run a serious search, negotiate compensation that reflects both market data and the organization’s capacity, and lock everything into a written agreement that spells out performance expectations and termination procedures.
Once the executive is in place, the board’s job shifts to oversight. Annual evaluations tied to measurable criteria (progress on strategic goals, financial health, staff retention, program outcomes) keep the relationship productive. The board is the executive’s supervisor as a body. Feedback flows through the formal evaluation and the board chair, not through individual directors freelancing their own opinions.
Compensation Risk for Tax-Exempt Organizations
For a nonprofit, executive pay carries real legal exposure. If the IRS finds that an officer or insider received compensation above fair market value, the transaction is treated as an excess benefit and the recipient personally owes an excise tax of 25% of the excess. If the excess is not corrected in time, a second tax of 200% follows.2Office of the Law Revision Counsel. 26 USC 4958 – Taxes on Excess Benefit Transactions
Boards can shield both themselves and the executive by following the IRS’s three-step procedure that creates a rebuttable presumption of reasonableness. The decision has to be approved by board members with no conflict in the transaction. The board has to obtain and rely on comparable salary data before voting. And the board has to document its reasoning at the time of the vote, not after.3Internal Revenue Service. Rebuttable Presumption – Intermediate Sanctions When all three steps are satisfied, the IRS can challenge the compensation only by developing evidence strong enough to overcome the comparability data the board used.
Nonprofits that pay anyone listed on Part VII of Form 990 more than $150,000 in total compensation must also file Schedule J with detailed reporting on that pay.4Internal Revenue Service. Exempt Organization Annual Reporting Requirements – Filing Requirements for Schedule J, Form 990 The disclosure is public. Donors, journalists, and watchdog groups read it.
Compliance and Risk Oversight
Boards that set up compliance systems and then ignore them end up almost as exposed as boards that never bothered. Under the standard set in In re Caremark, directors face personal liability if they completely fail to put any reporting or monitoring system in place, or if they install one and then consciously stop paying attention. The bar is high. A plaintiff has to show sustained failure, not a single missed warning. But when the bar is cleared, the consequences are severe.
Most boards delegate day-to-day risk monitoring to a committee, usually the audit committee. The committee makes sure management has identified the organization’s major risks, built processes to monitor them, and reports back to the full board on a regular schedule. The register should cover cybersecurity, regulatory change, financial fraud exposure, and reputational hazards. Boards that treat risk as a once-a-year conversation are the ones that get surprised.
Annual Filings for Tax-Exempt Organizations
Most tax-exempt organizations have to file an annual information return, usually Form 990, 990-EZ, or 990-N depending on size.5Internal Revenue Service. Exempt Organization Annual Filing Requirements Overview Late or incomplete filings trigger daily penalties that scale with the organization’s size and are adjusted each year for inflation.6Office of the Law Revision Counsel. 26 USC 6652 – Failure to File Certain Information Returns, Registration Statements, Etc.
The worst outcome is not the fine. An organization that fails to file any required annual return or notice for three consecutive years automatically loses its tax-exempt status. The IRS sends a warning after the second miss, but if the third filing is still outstanding by its due date, revocation happens automatically. There is no hearing, no discretion. Getting back on the exempt list means filing a new application and, absent reasonable cause, accepting the revocation period.7Office of the Law Revision Counsel. 26 USC 6033 – Returns by Exempt Organizations
Governance Policies the IRS Looks For
Form 990 asks directly whether the organization has adopted specific governance policies, and the answers are public. A conflict of interest policy is the most important. The IRS recommends it as a safeguard against charges of impropriety involving directors and officers, and an organization that checks “No” on that question invites scrutiny.8Internal Revenue Service. Form 1023 – Purpose of Conflict of Interest Policy A sound policy requires directors to disclose any financial interest in a pending transaction, recuse themselves from the vote, and leave the room during the deliberation.
A whistleblower protection policy sits alongside it. Provisions of the Sarbanes-Oxley Act that apply to all corporations, including nonprofits, prohibit retaliation against employees who report accounting fraud or other legal violations, and make document destruction tied to a federal investigation a crime. The board’s written policy should spell out how concerns are reported, who investigates them, and the organization’s commitment that retaliation will not be tolerated.
Document retention deserves its own policy. Articles of incorporation, bylaws, the IRS determination letter, and the original Form 1023 are kept permanently. Board minutes also warrant indefinite retention because they are the primary evidence of how and why the board made its decisions. Tax returns and supporting financial records should be preserved for at least seven years, and employment records for the period required by applicable labor laws.
Who Sits on the Board
Composition shapes everything the board does. Public companies have specific independence requirements under stock exchange listing standards: Nasdaq rules, for example, require that a majority of directors be independent and that the audit committee have at least three independent members able to read financial statements.9Nasdaq. Nasdaq Rule 5605 – Board of Directors and Committees
Private companies and nonprofits are not bound by exchange rules, but the underlying logic still holds. A board stocked with the CEO’s friends and business partners cannot exercise honest oversight. Best practice for nonprofits is to cap the number of staff who serve as voting directors and to recruit members whose skills fill real gaps on the board: finance, legal, fundraising, or mission-relevant subject expertise.
Meeting Formalities and Minutes
A board can only act when a quorum is present. The number comes from the bylaws; state law typically defaults to a majority of voting members, though some states let bylaws set the floor as low as one-third. Actions taken without a quorum are void, so attendance tracking matters more than it looks.
Minutes are the board’s first line of defense when a decision is later challenged. A plaintiff’s lawyer requests them before anything else, and what they contain can decide whether the suit targets only the organization or extends to directors personally. Good minutes record who attended, what information the board reviewed, how any conflicts were handled, what motions were made, and how the vote fell. They should not capture the substance of privileged conversations with legal counsel; noting that a privileged discussion occurred is enough.
Most state laws and the Model Business Corporation Act let boards act without a meeting through unanimous written consent. Every director has to sign, and the consent document should describe the action in the same detail a resolution would. The mechanism works for routine matters and does not substitute for real deliberation on anything complex or contested.
Personal Liability and How Directors Are Protected
Understanding personal exposure is what separates experienced directors from the ones who learn by surprise. Three layers of protection work together.
The business judgment rule is the first. A director who acts in good faith, stays informed, and honestly believes a decision serves the organization will not have that judgment second-guessed by a court even if the decision turns out badly. The rule protects honest business mistakes. It does not protect self-dealing, willful ignorance, or decisions made with no meaningful deliberation.
Indemnification is the second. State law generally authorizes organizations to reimburse directors for legal expenses and settlements tied to their board service, as long as the director acted in good faith and reasonably believed the conduct was lawful. Many organizations sign individual indemnification agreements with each director guaranteeing coverage to the fullest extent the law permits. Mandatory indemnification applies when a director successfully defends against a claim: the organization has to reimburse reasonable expenses regardless of what other provisions say.
Directors and officers insurance is the third layer and often the one that matters most in practice. A D&O policy covers legal fees, settlements, and judgments when directors are personally sued for alleged wrongful acts in managing the organization. It is the financial backstop behind the indemnification promise, because an indemnification agreement is only as good as the organization’s balance sheet. Illegal acts and illegal profits are generally excluded. For organizations trying to attract investors, lenders, or qualified board recruits, D&O coverage is effectively a prerequisite; few experienced professionals will take a seat without it.