Standard of Conduct: Legal Rules, Breaches, and Penalties

A standard of conduct is the legal benchmark used to decide whether someone’s actions were acceptable in a given situation. In most contexts it comes down to one question: would a reasonable person have acted the same way under the same circumstances? For certain professionals, the bar is higher, measured against what a competent peer would have done. Falling short can mean a lawsuit, a lost license, a regulatory fine, or in the worst cases criminal charges.

The Reasonable Person Baseline

Everyone owes a basic duty not to create unreasonable risks for others. When someone is injured and sues for negligence, the central question is whether the person who caused the harm behaved the way a reasonably careful person would have in the same situation.

This is an objective test. It does not matter what the defendant personally thought was safe, and it does not matter what they intended. What matters is whether their behavior falls short of what an ordinary, prudent person would do. The principle was fixed in the 1837 English case Vaughan v. Menlove, where a farmer whose haystack caught fire and burned down a neighbor’s cabin argued he had never considered the risk. The court held him liable anyway. Personal blind spots do not excuse the duty to act with ordinary care.

Whether that duty was met is a question of fact. A jury looks at the evidence and decides what a careful person would have done, which is why negligence trials often turn on competing accounts of what was foreseeable and what precautions were available.

When a Statute Sets the Standard

Sometimes the legislature has already written down the expected behavior in a safety law. The doctrine of negligence per se treats a violation of that law as a shortcut: if you break a safety statute and someone is injured in exactly the way the statute was designed to prevent, you have breached the applicable standard of conduct. No expert testimony is needed to establish what a reasonable person would have done, because the statute already answers the question.

Jurisdictions differ on how far that shortcut goes. Some treat the violation as conclusive proof of negligence. Others treat it as a rebuttable presumption, letting the defendant show they acted reasonably despite the breach. Others treat it as evidence for the jury to weigh with everything else. The common thread: when a safety statute applies, it effectively becomes the standard of conduct for that activity.

Higher Standards for Professionals and Fiduciaries

Some professionals are held to a far more demanding standard than the reasonable person baseline because clients depend on their expertise and loyalty.

Investment Advisers

Under Section 206 of the Investment Advisers Act, it is unlawful for an investment adviser to employ any scheme to defraud a client or engage in any practice that operates as a fraud or deceit on a client.1GovInfo. 15 U.S. Code 80b-6 – Prohibited Transactions by Investment Advisers The SEC reads this as imposing a fiduciary duty with two parts: a duty of care, requiring advice that serves the client’s best interest, and a duty of loyalty, requiring full disclosure of any conflicts of interest.2U.S. Securities and Exchange Commission. Commission Interpretation Regarding Standard of Conduct for Investment Advisers

Broker-dealers operate under a separate rule, Regulation Best Interest, which requires acting in a customer’s best interest when recommending securities but does not impose the full fiduciary loyalty that applies to registered advisers. If you work with a financial professional and want to know what you can expect, ask which category they fall into.

Retirement Plan Fiduciaries

Anyone managing a retirement plan covered by the Employee Retirement Income Security Act must act solely in the interest of plan participants and beneficiaries.3Office of the Law Revision Counsel. 29 U.S. Code 1104 – Fiduciary Duties The statute borrows language from trust law: fiduciaries must act with the care, skill, and diligence of a prudent person familiar with such matters, and they must diversify investments to minimize the risk of large losses. A fiduciary who breaches these duties is personally liable to restore any losses the plan suffered and to give back any profits earned through misuse of plan assets.4Office of the Law Revision Counsel. 29 U.S. Code 1109 – Liability for Breach of Fiduciary Duty

Lawyers and Doctors

Attorneys are governed by state professional conduct rules, generally modeled on the ABA’s Model Rules. Those rules impose mandatory obligations around client confidentiality, conflicts of interest, and the handling of client funds. A violation can result in discipline ranging from reprimand to disbarment, and a breach that injures a client can also support a malpractice claim.

Doctors are judged against what a reasonably competent physician in the same specialty would have done under similar circumstances. A dermatologist is not measured against the average person. They are measured against a competent dermatologist. Expert testimony from other physicians is typically required to establish that standard in a malpractice case.

Standards of Conduct Inside the Workplace

Employers put the general concept into writing through codes of conduct and employee handbooks. These documents spell out the specific behaviors required as a condition of continued employment, covering things like handling confidential data, avoiding conflicts of interest, interacting with coworkers and customers, and reporting harassment or discrimination.

A code of conduct is not the same as a code of ethics. A code of ethics is aspirational, a statement of values that helps employees think through gray areas. A code of conduct is operational: specific actions required or prohibited, with real consequences attached. Most employers ask workers to sign an acknowledgment of the conduct policy, which creates a documented baseline the employer can rely on if a dispute later arises.

Workplace policies often overlap with the law. Provisions on anti-discrimination, workplace safety, and data privacy frequently restate obligations already imposed by federal or state statutes. When an employee crosses those lines, the fallout can reach beyond internal discipline and into regulatory investigations or civil liability for the company itself.

What Happens When Someone Falls Short

Consequences scale with the seriousness of the breach and the context in which it happens.

Workplace Discipline

For employees who violate a code of conduct, consequences typically begin with verbal or written warnings and escalate to suspension or termination. Gross misconduct, such as theft, violence, or fraud, can justify immediate dismissal. An employer that skips its own disciplinary process risks exposure to wrongful termination claims, so the code binds both sides.

Professional License Actions

Licensing boards can impose mandatory continuing education, practice restrictions, suspension, or permanent revocation of a professional license. Losing a license effectively ends a career in that field, and the proceedings are usually a matter of public record.

Civil Damages and Regulatory Fines

A person or company that fails to meet the applicable standard of conduct and causes harm can be ordered to pay compensatory damages covering the victim’s actual losses, plus punitive damages in cases of particularly reckless or willful conduct.

Regulatory fines can be steep. In the securities context, the SEC’s inflation-adjusted civil monetary penalties start at roughly $11,800 per violation for an individual and climb to over $236,000 per violation when fraud causes substantial losses to others. For entities, the top tier exceeds $1.18 million per violation.5U.S. Securities and Exchange Commission. Inflation Adjustments to Civil Monetary Penalties Under ERISA, a fiduciary who breaches their duties must personally make the plan whole and surrender any profits gained through misuse of plan assets.4Office of the Law Revision Counsel. 29 U.S. Code 1109 – Liability for Breach of Fiduciary Duty

Tax Treatment of Fines

Fines and penalties paid to a government for violating a law are generally not tax-deductible. A narrow exception exists for payments that qualify as restitution or amounts paid to come into compliance with the law, but only if a court order or settlement agreement specifically identifies the payment as restitution, and the taxpayer can independently establish that the money actually went to restoring harm to victims.6Office of the Law Revision Counsel. 26 U.S. Code 162 – Trade or Business Expenses Vague settlement language will not get it done. If the money ends up in a general government fund rather than reaching harmed parties, the deduction fails.

Criminal Exposure

The most serious breaches can cross into criminal conduct. Fraud, embezzlement, insider trading, and willful violations of safety regulations can all lead to criminal charges, with prison time and additional fines on top of civil and regulatory consequences. Professional liability insurance almost never covers intentional misconduct, so the financial hit from a deliberate breach falls on the individual.

Reporting Violations and Whistleblower Protections

Federal law offers meaningful protection to people who report violations of a standard of conduct at work. OSHA enforces whistleblower provisions in more than two dozen federal statutes covering industries from aviation to financial services to environmental compliance. The core rule across all of them is that an employer cannot fire, demote, suspend, or otherwise retaliate against an employee for reporting a violation.7Whistleblowers.gov. Statutes

Employees of publicly traded companies get additional protection under the Sarbanes-Oxley Act. If you report conduct you reasonably believe constitutes securities fraud, mail fraud, wire fraud, or bank fraud to a federal agency, Congress, or your own supervisor, your employer is prohibited from retaliating against you.8Office of the Law Revision Counsel. 18 U.S. Code 1514A – Civil Action to Protect Against Retaliation in Fraud Cases

The SEC’s whistleblower program adds a financial incentive. Original information that leads to an SEC enforcement action resulting in more than $1 million in sanctions can earn an award of 10 to 30 percent of the money collected.9U.S. Securities and Exchange Commission. Whistleblower Program If your employer retaliates, the Dodd-Frank Act gives you a private right of action in federal court. Remedies include reinstatement, double back pay with interest, and reimbursement of legal fees. You have up to six years from the date of retaliation to file suit, and no claim can be brought more than ten years after the violation occurred.10Office of the Law Revision Counsel. 15 U.S. Code 78u-6 – Securities Whistleblower Incentives and Protection