Board members can be held personally liable when they breach a fiduciary duty to the organization, run the entity so loosely that a court disregards the corporate form, or trigger one of several federal statutes that reach individuals by role rather than by intent. The corporate shield is real, but it has well-defined holes. Knowing where those holes are matters more than knowing the shield exists, because by the time personal liability attaches, the exposure can dwarf anything a director earned from the seat.
Breaches of Fiduciary Duty
Every board member owes the organization fiduciary duties, and violating them is the most common route to personal liability. Two duties apply universally: care and loyalty. Nonprofit directors carry a third, the duty of obedience.
The duty of care is the “do your homework” obligation. Attend meetings, read the financials before voting on them, ask hard questions when something looks off. A breach happens when a director acts with gross negligence — rubber-stamping a major acquisition without reviewing any due diligence materials, or ignoring repeated warnings about financial irregularities. The yardstick is what a reasonably prudent person in the same position would do under similar circumstances.
The duty of loyalty requires putting the organization’s interests ahead of your own. Self-dealing is the classic violation: steering a contract to a company you own, taking a business opportunity that belongs to the organization, voting on a transaction where you have an undisclosed financial interest. The operative word is undisclosed. Many conflict transactions are permissible if the director fully discloses the conflict, recuses from the vote, and the rest of the board approves the deal on fair terms. Skipping that process is what creates liability.
The duty of obedience applies to nonprofit directors specifically. It requires ensuring the organization follows applicable laws, its own bylaws, and its stated mission. A nonprofit board that diverts charitable funds to purposes outside the organization’s charter, or ignores regulatory requirements, exposes its members to claims under this duty.
Piercing the Corporate Veil
The corporate veil is the legal separation between the organization and the people running it. Courts set that separation aside and hold individuals personally liable when two conditions are met. First, the line between the entity and the individual has effectively disappeared — what courts call “unity of interest” or “alter ego.” That shows up when directors commingle personal and corporate funds, skip the basic formalities of holding meetings and keeping minutes, or treat the organization’s account as a personal piggy bank. Second, respecting the separation would produce an unjust result, typically because a creditor or injured party would have no other way to recover.
No single statute governs veil-piercing. Judges decide case by case on the totality of the facts. The pattern is consistent, though: when directors ignore the formalities that make a corporation a distinct legal entity, courts stop treating it as one.
Federal Statutes That Reach Individual Directors
Several federal laws create personal liability regardless of whether a director acted in bad faith. These statutes care about your role and your authority, not necessarily your intent.
Unpaid Payroll Trust Fund Taxes
The trust fund recovery penalty under Internal Revenue Code Section 6672 is one of the most aggressive tools the IRS has. When an employer withholds income taxes and the employee share of Social Security taxes from paychecks, that money is held in trust for the government. If it is never remitted, the IRS can assess a penalty equal to 100% of the unpaid amount against any “responsible person” who willfully failed to see that the taxes were paid over.1Office of the Law Revision Counsel. 26 USC 6672 – Failure to Collect and Pay Over Tax, or Attempt to Evade or Defeat Tax
A board member qualifies as a responsible person based on their duty, status, and authority within the organization. The IRS looks at whether you had the power to decide which creditors got paid. If the company was struggling and you chose to pay suppliers instead of remitting payroll taxes, that is the kind of decision that triggers the penalty. The amount equals the full unpaid trust fund taxes, not a percentage, and it applies to each responsible person individually.2Internal Revenue Service. Trust Fund Recovery Penalty (TFRP) Overview and Authority
Nonprofit Excess Benefit Transactions
Nonprofit directors face a separate IRS exposure through intermediate sanctions under IRC Section 4958. When a “disqualified person” — someone in a position to exercise substantial influence over a tax-exempt organization — receives an economic benefit that exceeds the value of what they provided in return, the IRS imposes escalating excise taxes. The disqualified person owes an initial tax of 25% of the excess benefit, and if the transaction is not corrected within the required timeframe, an additional 200% tax follows.3Internal Revenue Service. Intermediate Sanctions – Excise Taxes
Board members who are not themselves disqualified persons can still face penalties as “organization managers.” Knowingly approving an excess benefit transaction can trigger a tax of 10% of the excess benefit, imposed on the manager personally and capped at $20,000 per transaction. The tax applies only when the manager’s participation was willful and not due to reasonable cause.3Internal Revenue Service. Intermediate Sanctions – Excise Taxes Family members of disqualified persons and entities they control are also treated as disqualified persons, which makes the web of exposure wider than many directors realize.4Internal Revenue Service. Disqualified Person – Intermediate Sanctions
Wage and Hour Violations
The Fair Labor Standards Act defines “employer” broadly enough to reach individuals who act in the interest of an employer in relation to employees.5Office of the Law Revision Counsel. 29 USC 203 – Definitions That definition can pull in directors and officers who exercise real control over worker pay and conditions. Courts look at whether the individual had power to hire and fire, supervised schedules, or made compensation decisions. A board title alone is not enough. What matters is actual operational authority over the employees in question.
Environmental Cleanup Costs
Under the Comprehensive Environmental Response, Compensation, and Liability Act, liability for hazardous waste cleanup falls on owners and operators of contaminated facilities, parties who arranged for disposal, and transporters who selected the disposal site.6Office of the Law Revision Counsel. 42 USC 9607 – Liability The “operator” category is where directors get pulled in. Courts have found that corporate officers or directors who actively participated in or controlled hazardous waste handling decisions can be treated as operators. Cleanup costs under CERCLA routinely run into the millions, and the liability is joint and several, so the government can pursue any single responsible party for the entire bill.
Securities Law Violations
Directors who sign a registration statement for a securities offering face liability under Section 11 of the Securities Act of 1933 if that statement contains material misstatements or omissions. The issuing company is strictly liable. Directors have an escape valve: the due diligence defense. A director who conducted a reasonable investigation and genuinely believed the statements were accurate can avoid liability. The standard is what a prudent person would do managing their own property. Passive directors who sign without reading lose this defense.
Under the Securities Exchange Act of 1934, the bar is higher. Claims under Section 10(b) and Rule 10b-5 require proof of scienter: the plaintiff must show the director intended to deceive, manipulate, or defraud. Negligence alone is not enough. An honest mistake in a periodic filing lives in a very different legal landscape than a knowing sign-off on false financial statements.
Employee Benefit Plan Mismanagement
Directors who serve as fiduciaries of employee retirement or benefit plans carry personal liability under the Employee Retirement Income Security Act. Any fiduciary who breaches their responsibilities is “personally liable to make good to such plan any losses to the plan resulting from each such breach” and must return any profits made through misuse of plan assets.7Office of the Law Revision Counsel. 29 USC 1109 – Liability for Breach of Fiduciary Duty Common triggers include selecting investment options with excessive fees, failing to monitor plan performance, and allowing prohibited transactions between the plan and parties with a financial interest.
One useful feature of the statute: a fiduciary is not liable for breaches committed before taking on the role or after ceasing to serve in that capacity.7Office of the Law Revision Counsel. 29 USC 1109 – Liability for Breach of Fiduciary Duty That clean break does not exist for every type of board liability.
How These Claims Actually Arrive
Most lawsuits alleging board misconduct arrive as derivative suits. A shareholder or member files on behalf of the organization, arguing the board harmed the entity. The claim belongs to the organization, and any recovery goes back to the organization rather than to the plaintiff personally. Before filing, the plaintiff generally has to make a written demand on the board asking it to take corrective action, then either wait for a response or show that making the demand would have been futile.8Legal Information Institute. Federal Rules of Civil Procedure Rule 23.1 – Derivative Actions
Direct claims are also possible when a board member’s conduct harms a specific person rather than the organization. Creditors, employees, and regulators can all bring direct claims in the right circumstances, particularly under the federal statutes above.
What Reduces the Personal Exposure
The law does not leave directors defenseless. Several overlapping protections exist, and the time to confirm you have them is before you need any of them.
The Business Judgment Rule
The business judgment rule is the day-to-day workhorse of director protection. It presumes directors acted in good faith, on an informed basis, and in the honest belief that their decision served the organization’s best interests. When the rule applies, courts will not second-guess a business decision even if it turned out badly. The rule protects process, not outcomes. A board that thoroughly researches a risky acquisition and then approves it is protected if the deal collapses; a board that approves the same deal without reading the materials is not.
The presumption fails when a plaintiff shows bad faith, gross negligence in the decision-making process, a conflict of interest, or self-dealing. Fraud and intentional misconduct also destroy the protection. The quality of the board’s process documentation often decides the outcome.
Exculpation Provisions
Most states let a corporation include a charter provision that eliminates director liability for monetary damages from duty-of-care breaches. These clauses are powerful but limited. They do not protect against breaches of the duty of loyalty, bad faith, intentional misconduct, knowing violations of law, or improper personal benefits. The Model Business Corporation Act, which underlies corporate law in a majority of states, authorizes these provisions while carving out those same exceptions. In practice, a director who makes a careless but honest mistake is shielded from paying damages personally; a director who engages in self-dealing is not.
Indemnification
Organizations can agree to reimburse directors for legal expenses, settlements, and judgments incurred because of their service. Indemnification is typically laid out in the bylaws or a separate written agreement, and the coverage extends only to actions taken in good faith and within the scope of the director’s duties. The catch many directors miss: indemnification depends on the organization’s willingness and financial ability to pay. A company in bankruptcy may owe indemnification it cannot fund. That is why experienced directors insist on both indemnification agreements and insurance.
Directors and Officers Insurance
D&O insurance provides a financial backstop that does not depend on the organization’s solvency. Policies cover defense costs, settlements, and judgments arising from claims of wrongful acts in a director’s or officer’s capacity. D&O does not cover fraud, criminal conduct, or knowingly illegal acts, so it complements good governance rather than replacing it.
Federal Volunteer Protection Act
Unpaid directors of nonprofits get an additional layer of protection under the federal Volunteer Protection Act. The statute generally shields volunteers from personal liability for harm caused by their actions on behalf of the organization, as long as they acted within the scope of their responsibilities and were properly licensed for the activity. The protection disappears for willful or criminal misconduct, gross negligence, or reckless disregard for the rights of the person harmed. Many states have enacted their own volunteer protection laws with similar or broader coverage, so nonprofit directors typically carry less personal exposure than their for-profit counterparts for ordinary negligence.