Due diligence is legally required in roughly a dozen specific situations under federal and state law, including buying real property, acquiring a business, issuing securities, serving on a corporate or non-profit board, opening customer accounts at a financial institution, hiring employees, and importing goods. In most of these contexts the statute does not simply tell you to investigate; it conditions a legal defense, a tax exemption, or the right to move your goods through customs on your ability to prove you did. That is the practical answer to when due diligence is legally required: whenever skipping the investigation forfeits a protection the law would otherwise give you.
What follows is the map of those situations, what each one requires, and what you lose by cutting the corner.
Buying Real Property, Especially Commercial Sites
Under CERCLA, the current owner of contaminated property is strictly liable for cleanup costs, even if someone else caused the contamination decades earlier.1Office of the Law Revision Counsel. 42 U.S. Code 9607 – Liability Not knowing is not a defense on its own. The limited escapes written into the statute are acts of God, acts of war, and a narrow third-party defense.
Congress added an innocent landowner defense for buyers who investigated before purchasing. To qualify, a buyer must show they carried out “all appropriate inquiries” into previous ownership and uses of the property before closing, and had no reason to know about contamination.2Office of the Law Revision Counsel. 42 U.S. Code 9601 – Definitions The EPA defines what those inquiries look like in 40 CFR Part 312: the investigation must be done by a qualified environmental professional within one year before acquisition, and it must include historical records, government databases, and environmental cleanup liens.3eCFR. 40 CFR Part 312 – Innocent Landowners, Standards for Conducting All Appropriate Inquiries
In practice that means a Phase I Environmental Site Assessment, typically costing between $1,600 and $6,500 for a standard site. Cleanup costs on a contaminated parcel routinely reach six or seven figures, so the inquiry is cheap insurance against inheriting someone else’s problem.
Separate from CERCLA, two other layers tend to make inspection effectively mandatory on any real estate deal. Standard purchase agreements give the buyer a fixed due diligence window, and missing it usually forfeits an earnest money deposit of 1% to 3% of the price. Mortgage lenders will not fund without a title search confirming clear ownership, and commercial lenders routinely require the Phase I as a condition of the loan.
Buying a Business
Buying a business without investigating its tax position can leave you holding the seller’s unpaid taxes. Under the successor liability doctrine recognized in most states, a buyer can inherit the seller’s tax debts if the transaction amounts to a de facto merger, if the buyer is a mere continuation of the seller, or if the deal was structured to evade the seller’s obligations. The federal government uses this doctrine to pursue buyers for a predecessor’s unpaid federal taxes.4Internal Revenue Service. Chief Counsel Advice Memorandum – Successor Liability
A federal tax lien attaches to all of the taxpayer’s property, which means assets you acquire from a seller with an unpaid lien remain reachable by the IRS in your hands. The IRS maintains a centralized lien verification line at 800-913-6050 for basic inquiries.5Internal Revenue Service. Understanding a Federal Tax Lien Running that check before closing takes minutes.
Asset acquisitions involving goodwill or going concern value also require both buyer and seller to file IRS Form 8594, allocating the purchase price across seven asset classes using a residual method, with no asset allocated above its fair market value on the purchase date.6Internal Revenue Service. Instructions for Form 8594 A mismatched or sloppy allocation creates audit exposure on both sides.
Raising Capital or Selling Securities
Securities law is the clearest example of due diligence as a liability shield. Under Section 11 of the Securities Act, anyone who buys a security in a public offering can sue the issuer’s directors, signing officers, underwriters, and any accountant or expert who helped prepare the registration statement if that document contained a material misstatement or left out something important.7Office of the Law Revision Counsel. 15 U.S. Code 77k – Civil Liabilities on Account of False Registration Statement
The issuer’s liability is strict. Every other defendant can invoke a due diligence defense by proving they conducted a reasonable investigation and genuinely believed the statements were true. That is the entire reason underwriters spend weeks on financial records, management interviews, and independent audits before an offering goes to market. Section 12 extends similar liability to anyone who sells a security using a false or misleading prospectus or oral pitch, and the seller can escape only by proving they could not have known about the misstatement even after exercising reasonable care.8Office of the Law Revision Counsel. 15 U.S. Code 77l – Civil Liabilities Arising in Connection With Prospectuses and Communications
Private placements under SEC Regulation D carry their own verification duty. A Rule 506(b) offering requires a “reasonable belief” that each investor is accredited. A Rule 506(c) offering, which allows general solicitation, requires “reasonable steps to verify” accredited status.9SEC.gov. Assessing Accredited Investors Under Regulation D An investor currently qualifies through individual income above $200,000 (or $300,000 jointly) in each of the prior two years, or a net worth above $1 million excluding the primary residence.10SEC.gov. Accredited Investors Having investors self-certify by checking a box does not satisfy either standard. The SEC expects review of tax returns, bank statements, or brokerage records, or written confirmation from a broker-dealer, registered investment adviser, or CPA who has independently verified the investor. Selling to an unaccredited investor can collapse the exemption, converting the deal into an unregistered public offering.
Serving on a Corporate or Non-Profit Board
Corporate directors owe a duty of care to the company and its shareholders. Under Delaware law, which governs most large U.S. corporations, the board is responsible for managing the business and affairs of the corporation.11Justia Law. Delaware Code Title 8, Chapter 1, Subchapter IV, Section 141 The business judgment rule shields directors from courts second-guessing their decisions, but only when the board acted with due care, in good faith, and without conflicts. Delaware applies a gross negligence standard and will intervene where directors drastically departed from what a careful fiduciary would do.12State of Delaware. The Delaware Way – Deference to the Business Judgment of Directors A board approving a merger without reviewing financial terms, consulting advisors, or spending meaningful time on the materials loses that protection. The investigation earns the shield.
Non-profit directors face parallel duties through the tax code. The IRS requires tax-exempt organizations to file a complete and accurate annual return, and failing to file for three consecutive years automatically revokes exempt status with no warning letter. Beyond filing, the IRS expects boards to adopt conflict-of-interest, whistleblower, and document retention policies, and to follow specific steps when approving executive pay: reviewing comparable salary data, excluding anyone with a personal stake, and documenting the deliberations. Following that process creates a rebuttable presumption that the compensation is reasonable, which matters if the IRS later questions whether insiders are enriching themselves.13Internal Revenue Service. Instructions for Form 990 Return of Organization Exempt From Income Tax
Opening Customer Accounts at a Financial Institution
Banks, broker-dealers, and other covered institutions must verify the identity of every person opening an account and maintain anti-money laundering programs under the Bank Secrecy Act and the USA PATRIOT Act.14Office of the Law Revision Counsel. 31 U.S.C. 5318 – Compliance, Exemptions, and Summons Authority High-risk clients, complex corporate structures, and accounts touching foreign jurisdictions trigger Enhanced Due Diligence: deeper investigation into the source of funds and the nature of the client’s business.
Falling short is expensive. In 2024 FinCEN assessed a record $1.3 billion penalty against TD Bank for Bank Secrecy Act violations, the largest such penalty ever imposed on a depository institution.15FinCEN. FinCEN Assesses Record $1.3 Billion Penalty Against TD Bank Individual employees have faced criminal charges in compliance failures.
Hiring Employees
Every U.S. employer must verify work authorization for new hires using Form I-9. The employee completes their section on or before the first day of work, and the employer must examine identity and work authorization documents and complete the employer section within three business days of the hire date. For jobs lasting fewer than three days, the review must be finished on the first day.16U.S. Citizenship and Immigration Services. Completing Section 2, Employer Review and Attestation
Each completed form stays on file for three years after the hire date or one year after the employee leaves, whichever is later.17U.S. Citizenship and Immigration Services. I-9, Employment Eligibility Verification Paperwork violations carry civil penalties in the hundreds to low thousands per form. Knowingly hiring unauthorized workers triggers escalating fines reaching tens of thousands per violation for repeat offenders.
Importing Goods
Section 307 of the Tariff Act bars all merchandise produced through forced or indentured labor from entering U.S. ports.18Office of the Law Revision Counsel. 19 U.S. Code 1307 – Convict-Made Goods; Importation Prohibited The Uyghur Forced Labor Prevention Act layered a rebuttable presumption on top: any goods produced wholly or in part in China’s Xinjiang region, or by entities on a government-maintained list, are presumed to be products of forced labor and are automatically barred from entry.19U.S. Customs and Border Protection. Uyghur Forced Labor Prevention Act
To get detained goods released, an importer must provide clear and convincing evidence that forced labor was not used. That is an unusually high evidentiary standard for a civil matter, matching the standard used in fraud cases. Meeting it requires mapped supplier and subcontractor records, audited worker records, preserved payroll and timekeeping data, and often independent social compliance audits by certified auditors. Customs and Border Protection reviews the evidence case by case and expects corroboration from multiple independent sources. Without that documentation, shipments can sit in a CBP warehouse indefinitely.
Across all of these contexts, the pattern is the same. The statute does not reward diligence as a virtue; it penalizes the absence of it by taking away a defense, an exemption, or the right to proceed. Treat the investigation as part of the transaction, not as something extra, and keep the paperwork that proves you did it.