Inside a corporation, personal liability can reach shareholders, directors, officers, and employees, depending on what went wrong and what role the person played. The corporate form keeps the company’s debts and lawsuits separate from the personal assets of the people behind it, but that separation has defined limits. Knowing who can be personally liable in a corporation means knowing where those limits sit: the court-made doctrines that strip the shield away, the federal statutes that target individuals by name, the duties built into certain roles, and the agreements people sign that waive the protection voluntarily.
Shareholders: The Default Protection and Its Two Exits
A shareholder’s exposure is ordinarily capped at what they put in. Buy $10,000 of stock in a company that later collapses, and $10,000 is the most you lose. Creditors of the corporation cannot reach your house, your car, or your savings.
Two things change that. A court can set the shield aside through veil piercing, discussed below. And a shareholder who also serves as a director or officer, or who signs a personal guarantee on a company loan, picks up the personal exposure that comes with those separate roles. The shareholder status itself still protects the invested capital; the other hats do not.
When a Court Pierces the Corporate Veil
Piercing the corporate veil is a court-imposed exception to limited liability. When a court pierces, it treats the corporation and the people behind it as the same party and holds those people personally responsible for the company’s obligations.1Legal Information Institute. Piercing the Corporate Veil Courts do this reluctantly, and only when the facts show the corporate structure was misused.
The dominant framework is the alter ego test. Courts look for two things: that the corporation and the individual are so intertwined that they lack separate identities, and that treating them as separate would reward fraud or produce a seriously unjust result.2Legal Information Institute. Disregarding the Corporate Entity The factors that feed into that analysis include:
- Commingling funds, such as paying personal expenses from the corporate account or depositing personal income into it.2Legal Information Institute. Disregarding the Corporate Entity
- Ignoring corporate formalities: skipping board meetings, failing to record minutes, missing annual filings, or never properly issuing stock.
- Undercapitalization, meaning forming the corporation without enough funds to cover the risks the business would foreseeably encounter.1Legal Information Institute. Piercing the Corporate Veil
- Using the entity for personal benefit, treating corporate assets as your own or running the company only to serve the controlling shareholder.
The risk is highest in small, closely held corporations where one person is the sole owner, officer, director, and employee. Courts look hard at whether the entity really operates as something separate or exists only on paper. Separate bank accounts, documented transactions between the owner and the company, at least annual meetings, and proper records are the minimum to keep the shield intact.
Directors and Officers: Where Personal Liability Attaches
Directors and officers get the benefit of limited liability for ordinary business decisions, but federal statutes and common-law duties carve out several areas where they answer personally.
Fiduciary Duties
Every director owes the corporation a duty of loyalty and a duty of care. The duty of loyalty requires putting the corporation’s interests ahead of personal ones; a director who diverts a business opportunity, trades on confidential information, or hides a conflict of interest breaches it.3Legal Information Institute. Duty of Loyalty The duty of care requires making informed decisions with the attention a reasonably prudent person would give to important personal affairs. Breach of either duty can expose the director personally to the resulting harm, and officers face the same duties within their areas of responsibility. Most personal claims against directors come through this door, often in shareholder derivative suits alleging self-dealing or reckless decisions.
Unpaid Payroll Taxes
Federal law hits “responsible persons” who willfully fail to collect and remit employee payroll taxes with a trust fund recovery penalty equal to 100% of the unpaid amount, covering withheld income tax and the employees’ share of Social Security and Medicare.4Office of the Law Revision Counsel. 26 U.S. Code 6672 – Failure to Collect and Pay Over Tax, or Attempt to Evade or Defeat Tax The IRS determines who qualifies based on the person’s duty, status, and authority inside the company.5Internal Revenue Service. Internal Revenue Manual 8.25.1 – Trust Fund Recovery Penalty Overview and Authority
The reach is wider than people expect. A CEO, a CFO, or a bookkeeper with check-signing authority can qualify, and the IRS can assess the full penalty against multiple people in the same company. When a struggling business pays rent or suppliers with money that was supposed to go to the IRS, everyone with authority over those payments is personally exposed.
Securities Certifications
Officers of publicly traded companies personally certify the accuracy of SEC filings under the Sarbanes-Oxley Act. The CEO and CFO must affirm, for each quarterly and annual report, that they reviewed it, that it contains no material misstatements, and that internal controls are working.6Office of the Law Revision Counsel. 15 U.S. Code 7241 – Corporate Responsibility for Financial Reports
Knowing certification of an inaccurate report carries fines up to $1 million and prison up to 10 years. Willful false certification raises the ceiling to a $5 million fine and 20 years.7Office of the Law Revision Counsel. 18 U.S. Code 1350 – Failure of Corporate Officers to Certify Financial Reports These penalties fall on the officer, not the corporation.
Environmental Cleanup
Under CERCLA, anyone who owned or operated a facility when hazardous substances were disposed of there can be held liable for the full cost of cleanup.8Office of the Law Revision Counsel. 42 U.S. Code 9607 – Liability Courts have interpreted “operator” to include corporate officers who had authority over waste disposal decisions and actively exercised it. CERCLA liability is strict and joint and several, so a single responsible party can be stuck with the entire bill regardless of fault allocation.
Wage and Hour Claims
The Fair Labor Standards Act defines “employer” to include any person acting in the interest of an employer in relation to an employee.9Office of the Law Revision Counsel. 29 U.S. Code 203 – Definitions That sweeps in managers and officers who actually control pay, hours, and hiring. A hands-on manager who sets schedules, approves timecards, and decides pay rates can be sued personally for unpaid overtime or minimum wage violations alongside the corporation. A figurehead with no operational involvement is less likely to qualify.
Workplace Fatalities
OSHA penalties usually hit the employer, but a willful violation of an OSHA standard that causes an employee’s death carries criminal exposure. First offenses can bring fines up to $10,000 and six months in prison; repeat offenses, up to $20,000 and one year.10Office of the Law Revision Counsel. 29 U.S. Code 666 – Civil and Criminal Penalties Individual officers can be reached through the responsible corporate officer doctrine when they had authority to prevent the violation and did not act.
Employees
A corporation is generally liable for what its employees do within the scope of employment under respondeat superior.11Legal Information Institute. Respondeat Superior That employer liability does not cancel the employee’s own.
An employee who commits an intentional wrong is almost always personally liable. Assault, fraud, defamation, and deliberate destruction of property are examples courts treat as outside the scope of employment; the employer may still be sued, but the employee cannot shelter behind the corporation. Negligence is murkier. When carelessness falls inside the general scope of the job, both the corporation and the employee can be held liable, and the injured party can pursue either or both. Plaintiffs usually chase the deeper pocket, but the employee stays legally exposed.
Trade Secret Misappropriation
The Defend Trade Secrets Act creates a federal civil claim against any person who acquires a trade secret through improper means or discloses one in breach of a confidentiality duty. Courts can award actual damages, the defendant’s unjust enrichment, and injunctive relief, and willful and malicious misappropriation opens the door to exemplary damages up to twice the compensatory award plus attorney’s fees.12Office of the Law Revision Counsel. 18 U.S. Code 1836 – Civil Proceedings Departing employees who take client lists, download proprietary formulas, or share pricing with a new employer regularly end up as named defendants.
Personal Guarantees
Limited liability protects you by default, but you can sign it away. A personal guarantee on a business loan commits your own assets to repay the debt if the corporation cannot. The shield is simply irrelevant for that obligation, because you took it on as an individual.
An unlimited guarantee covers the full balance plus interest, collection costs, and the lender’s legal fees. A limited guarantee caps exposure at a set dollar amount or percentage. Most small business lending requires some form of guarantee, which is why incorporation offers less protection than new owners often expect. When multiple owners co-sign, joint and several terms let the lender pursue any one signer for the whole amount regardless of ownership percentage, and the guarantee survives the business: if the corporation dissolves or goes bankrupt, your personal obligation continues.
What Indemnification and D&O Insurance Actually Cover
Corporations usually offset the personal risks of board and officer service through indemnification and insurance.
Indemnification is the corporation’s promise to reimburse a director or officer for legal costs, settlements, and judgments arising from their service. State statutes generally require it when the director successfully defends against a claim, and allow it in other situations when the director acted in good faith and reasonably believed the conduct was lawful or in the corporation’s best interest. The protection is only as good as the corporation’s willingness and ability to pay; an insolvent company or an unfavorable board decision leaves the director exposed.
D&O insurance fills those gaps. Side A coverage is the layer that matters most for individuals, paying directors and officers directly when the corporation cannot or will not indemnify, including during bankruptcy and in derivative suits where the company legally cannot indemnify. Defense costs alone can run into the millions, so anyone considering a board seat should confirm the corporation carries adequate coverage before accepting.
Criminal Exposure Through the Responsible Corporate Officer Doctrine
Most of what is described above is civil. Officers can also face criminal prosecution under the responsible corporate officer doctrine, which lets prosecutors charge executives who had the authority to prevent a corporate crime even when they did not personally participate in or know about the specific violation. It applies primarily in regulated areas like food and drug safety, environmental compliance, and workplace safety.
Unlike most criminal law, the doctrine does not require proof that the defendant intended to break the law; position and authority can be enough. Penalties are typically misdemeanor-level, but they can include imprisonment, and a conviction carries consequences well beyond the sentence.