A persistent and genuinely dangerous misconception circulates among association directors: that incorporation itself protects board members from personal liability. It does not. Incorporation creates a legal entity separate from its members, which limits liability in many circumstances, but it does not shield an individual director from personal exposure where negligence, breach of duty, or misconduct can be shown. Directors and officers insurance exists precisely to sit underneath that gap, and understanding what it actually covers, and what it deliberately does not, matters more than simply confirming a policy exists.
The three layers of cover
D&O insurance is typically structured across three components. Side A protects an individual director's personal assets where the organisation is unable or unwilling to indemnify them directly. Side B reimburses the organisation itself for indemnity payments it has made to a director. Side C, less relevant to most associations, covers securities claims and is more commonly associated with publicly listed entities. For most associations, Sides A and B do the genuine protective work, and confirming both are actually included, rather than assuming a policy automatically covers both, is worth a direct question to your broker.
The legal limit insurance cannot work around
The Corporations Act specifically prohibits an organisation from indemnifying, or insuring, a director or officer against liability arising from a wilful breach of duty, or from improperly using their position or information to gain a personal advantage or to cause detriment to the organisation. This is not a policy design choice an insurer can offer around. It is a statutory boundary that applies regardless of how comprehensive the policy otherwise is. Genuine, good-faith decisions that turn out badly, exactly the scenario the business judgment rule discussed earlier in this series is built to protect, sit within what insurance can genuinely cover. Deliberate misconduct never does.
D&O insurance exists to protect directors who made honest, reasonably informed decisions that did not work out. It was never designed to, and legally cannot, protect a director from the consequences of deliberately misusing their position.
THE RIGHT PRODUCT FOR MOST ASSOCIATIONS ISN'T STANDALONE D&O
Standalone D&O insurance, common in the commercial sector, is often not the product that best fits an association's actual risk profile. Association Liability Insurance, a combined product purpose-built for not-for-profits, typically bundles Directors and Officers cover with Professional Indemnity, Employment Practices Liability, and often crime or fidelity cover, all within a single policy. Given that association boards face a genuinely broader mix of exposure than a typical commercial board, employment disputes, professional advice claims, volunteer management, alongside the standard governance liability risk, this combined structure often reflects the organisation's real risk profile more accurately than a narrower, standalone D&O policy would.
What to actually check in your policy
- Confirm insured persons are defined by role, current and former directors, committee members, office bearers, rather than by name alone, so the policy does not quietly exclude someone who joined the board after the policy was last renewed.
- Check for run-off cover, protecting directors for actions taken during their tenure even after they have left the board, since D&O claims can surface years after the relevant decision was made.
- Understand that most D&O policies operate on a claims-made basis, meaning the policy in place when a claim is actually made matters, not the policy in place when the underlying conduct occurred, which makes continuous, unbroken coverage genuinely important.
- Review standard exclusions carefully: fraud and dishonesty, known prior circumstances, and fines and penalties are commonly excluded, though a statutory liability extension can sometimes bring certain regulatory fines back into scope.
- Treat this as an annual review item connected to the risk appetite discipline discussed earlier this quarter, not a policy purchased once and forgotten as the organisation's risk profile changes.
Insurance does not replace good governance. Every discipline this series has argued for, documented decisions, genuine conflict management, informed judgment under the business judgment rule, is what actually keeps a claim from arising in the first place. But for the director who has genuinely done everything right and still finds themselves facing a claim, confirming the policy actually covers what you assumed it did is not a formality. It is the last line of protection this series has been building toward all along.
Explore the Board Director course
Want the fully branded, board-ready PDF of this article? Download the whole 52-part series — free.
Until next week,
Annie