Board Governance 101: Fiduciary Duty, Duty of Care, and Duty of Loyalty

Board service is not a ceremonial role. It's a legal position carrying real responsibilities and potential personal liability. Whether you're just appointed to your first nonprofit board or leading as chair, understanding fiduciary duties is non-negotiable. These duties form the legal and ethical foundation of nonprofit governance, and breach of them can expose board members to personal liability and jeopardize your organization's tax-exempt status.

This lecture cuts through the legal jargon and explains what fiduciary duties actually mean in practice — what you must do, what you must avoid, and how to protect yourself and your organization.

Fiduciary Duty: The Foundation of Board Service

Fiduciary duty is not a soft governance principle or aspirational ideal. It's a legal obligation. When you join a nonprofit board, you assume legal duties enforceable by donors, the IRS, state attorneys general, and individual stakeholders. Breach them and you face personal liability, even if you serve without compensation and acted in good faith.

The concept is ancient. Fiduciary law traces to English trust law — the notion that someone holding another's assets in trust must act in their interest, not their own. Nonprofit boards are modern fiduciaries. You hold the organization's assets in trust for its mission. You make decisions using the organization's authority. That power comes with obligation.

US law recognizes three fiduciary duties for nonprofit directors: duty of care (how you participate in decisions), duty of loyalty (whose interests you serve), and duty of obedience (ensuring legal compliance). These duties overlap and reinforce each other. Together, they define responsible board governance.

What's important to understand: These duties apply even if your bylaws don't mention them, even if no one holds you accountable, and even if you've never heard of them. They're statutory duties — part of nonprofit corporation law. Ignorance is not a defense. The moment you accepted a board position, you assumed these obligations.

The Duty of Care: Acting With Reasonable Judgment

The duty of care requires board members to act with the care and diligence a reasonably prudent person would exercise in similar circumstances. This is the practical governance duty — it's about how you participate in board decisions.

What Duty of Care Requires

1. Attend board meetings regularly. Board members must show up. Missing meetings repeatedly means you're not exercising reasonable judgment about organizational matters. State laws and bylaws often specify meeting attendance expectations. If you can't attend board meetings, you shouldn't accept the position. If circumstances change and you can't continue attending, you should resign.

2. Prepare for meetings. Read the board materials before meetings. Review financial statements. Understand agenda items. Don't rubber-stamp decisions without examination. A board member who shows up but doesn't prepare hasn't met the duty of care standard.

3. Ask questions. Duty of care includes asking informed questions about proposals, financial performance, staff decisions, and compliance matters. There's no such thing as a "dumb question" in governance. If you don't understand something, ask. If something doesn't make sense, voice it. Silence is not neutrality in board decisions.

4. Make informed decisions. Before voting on a major proposal — a budget, executive director decision, facility lease, or program launch — ensure you have sufficient information. Request additional details if needed. Don't vote on matters you haven't adequately reviewed.

5. Understand the organization's finances. Board members are not required to be accountants, but you must understand basic financial statements. You should know whether the organization is operating at surplus or deficit, what the fund balance represents, what revenue sources are declining or growing, and whether cash flow is healthy. "I'm not a numbers person" is not an excuse — if you don't understand the financials, learn or step aside.

6. Monitor executive leadership. The board hires and supervises the executive director or executive team. You must monitor their performance regularly — not just during annual reviews. This includes reviewing program outcomes, staff morale indicators, financial management, and compliance.

What Duty of Care Does NOT Require

Duty of care doesn't mean board members must be experts in nonprofit law, finance, or program delivery. You're not liable for honest mistakes in judgment made after reasonable deliberation. The standard is what a reasonably prudent person would do, not perfection.

You're also not personally responsible for staff misconduct you didn't know about and couldn't have discovered with reasonable oversight. However, if you become aware of misconduct and do nothing, that's a breach of duty.

Liability Protection: The Business Judgment Rule

Most states have adopted "business judgment rule" protections for nonprofit board members. If you act in good faith, with reasonable care, and in the organization's best interest, you're generally protected from personal liability even if the decision turns out poorly. This means a failed program, a lost grant opportunity, or a missed revenue projection doesn't automatically expose you to liability.

However, the business judgment rule doesn't protect you if you:

• Act with gross negligence (failing to read a budget before approving it, never attending meetings)
• Act in bad faith (voting for a decision you know will benefit you personally)
• Act in direct violation of bylaws or law (approving lobbying activities when bylaws forbid it)
• Fail to disclose material conflicts of interest

Directors and Officers (D&O) liability insurance provides additional protection against personal liability for governance decisions. Many nonprofits carry this insurance — confirm whether yours does.

The Duty of Loyalty: Putting the Mission First

The duty of loyalty requires board members to put the organization's interests ahead of personal or financial interests. This duty is straightforward in principle but nuanced in practice.

Conflicts of Interest: The Core Issue

A conflict of interest exists when a board member has a personal, family, or financial interest in a decision the board is making. Common conflicts include:

• Voting on compensation for yourself (board member salary or honorarium)
• Voting on contracts with a business you own or work for
• Voting on hiring decisions for family members
• Voting on grants to or partnerships with organizations where you sit on another board and have a financial interest
• Voting on real estate transactions involving property you own
• Voting on major donations from close family or business associates

The duty of loyalty doesn't mean you can never have conflicts — it means you must disclose them, avoid voting on conflicted decisions when possible, and ensure the organization gets fair value in any transaction where you have an interest.

What Duty of Loyalty Requires

1. Disclose conflicts immediately. You must disclose any conflict of interest before the board votes. If you realize mid-meeting that an item involves a conflict, speak up then. Don't disclose after the vote. Better yet, disclose during the annual conflict of interest review that responsible nonprofits conduct every year.

2. Recuse yourself from voting when appropriate. When a conflict exists, the standard practice is for the conflicted board member to recuse themselves from voting. You should leave the room or at least abstain from the vote. Some organizations require recusal from discussion; others allow you to explain your interest and then step back.

3. Don't benefit from your position. Using board position to steer contracts to yourself, direct donations to causes you personally benefit from, or leverage the nonprofit's donor relationships for personal gain is a clear breach of loyalty. This includes indirect benefits — steering a major grant to a nonprofit where your spouse works.

4. Maintain confidentiality.** Information you learn as a board member — including financial data, personnel matters, strategic plans, and donor information — is confidential. Don't share it with outsiders, use it for personal advantage, or discuss it publicly without authorization. This continues after you leave the board.

5. Act honestly and in good faith. Loyalty means you're genuinely trying to advance the organization's mission, not pursuing a hidden agenda. If you've decided the organization isn't a good fit for you or if personal interests consistently conflict with board decisions, resign rather than voting against the organization's interests.

Transactions Involving Board Members

Can a nonprofit buy goods or services from a board member's business? Yes, but only if:

• The transaction is disclosed fully and in advance
• The conflicted board member recuses from the vote
• The price is fair market value (not inflated or discounted)
• The organization gets value comparable to alternatives
• The transaction is documented with board approval

Some nonprofits prohibit board members from any business transactions with the organization. Others allow them under strict conditions. Your organization's conflict of interest policy should clarify the rules. If you're unclear, ask before the situation arises.

The Duty of Obedience: Ensuring Legal Compliance

The duty of obedience requires the board to ensure the organization operates consistently with its mission, bylaws, and applicable laws. This is less often discussed than the other two duties but equally important.

What Duty of Obedience Requires

1. Ensure alignment with stated mission. The organization must pursue activities that match its 501(c)(3) purpose statement or bylaws. If the board approves activities that drift from the mission, that's a breach of obedience. This matters for tax-exempt status — the IRS can revoke it if an organization's activities no longer match its stated purpose.

2. Enforce bylaws and policies. Board members should understand and follow the organization's bylaws. If the organization has policies on hiring, conflict of interest, whistleblower protection, or document retention, enforce them consistently. Bylaws that aren't followed create governance gaps.

3. Monitor legal compliance. Ensure the organization files required tax forms (Form 990), maintains necessary registrations, follows labor laws, honors donor restrictions, and complies with grant requirements. Board members don't need to personally file documents, but someone must track deadlines, and the board should receive compliance updates.

4. Respond to compliance issues. If you become aware that the organization isn't filing required reports, paying employment taxes, maintaining required insurance, or complying with donor restrictions, escalate the issue. A board member who notices noncompliance and says nothing has breached the duty of obedience.

5. Document board decisions.** Board decisions should be documented in minutes and resolutions. This protects the organization in audits and disputes and ensures continuity as board composition changes.

Whistleblower Protection and Duty of Obedience

If you become aware that the organization is breaking laws or violating its mission, you have a right — and arguably a duty — to raise concerns internally first. If the organization has a whistleblower policy, use it. If not, escalate to the executive director, board chair, or board committee responsible for compliance.

If internal channels don't resolve the issue, you can report to the IRS, state attorney general, or other regulators. You're protected from retaliation for good-faith reporting of legal violations.

Personal Liability: Understanding Your Risk

Board members ask: "Can I be sued personally for board decisions?" The answer is nuanced.

When You're Protected

Most states have nonprofit corporation laws that protect directors from personal liability for good-faith decisions. Specifically, you're protected if you:

• Act in good faith
• Exercise reasonable care
• Act in the organization's best interest
• Have no conflict of interest (or disclosed it)
• Don't act with gross negligence or willful misconduct

This protection is called "director immunity" and exists in virtually every state. It means decisions made within your authority, with reasonable diligence, and in good faith are generally not your personal liability.

When You're Exposed

Director immunity doesn't protect you if you:

• Act outside your authority (board members can't personally obligate the organization to a $500k contract)
• Breach fiduciary duty (voting on personal interests, withholding material information from the board)
• Engage in fraud (misrepresenting donor restrictions, falsifying financial statements)
• Violate your statutory duty of care (completely neglecting board oversight, never attending meetings)
• Violate state or federal laws (employment discrimination, sexual harassment, wage theft)
• Knowingly permit illegal activity

Additionally, immunity typically doesn't apply to employment matters. If the organization commits wage theft or employment discrimination, board members who participated in those decisions may have personal liability.

Insurance and Indemnification

Directors and Officers (D&O) liability insurance protects board members against personal liability for governance decisions and legal costs. It typically covers:

• Defense costs and settlements for lawsuits arising from board decisions
• Personal liability when the organization can't indemnify a board member
• Claims of breach of fiduciary duty, wrongful termination, and errors in judgment

D&O insurance doesn't cover fraud, intentional misconduct, or criminal acts. It's separate from general liability insurance (which covers accidents and injuries) and should be part of any nonprofit's risk management strategy.

Your nonprofit should also have an indemnification clause in bylaws, which means the organization will pay your legal defense for good-faith board decisions. Check whether yours does.

Practical Governance: Making These Duties Real

Understanding fiduciary duties is one thing. Implementing them is another. Here's how responsible boards operationalize these duties:

Red Flags: When to Act

If you see any of these situations, your duty of care and duty of obedience require action:

• Financial statements you can't understand or don't reconcile with reality
• Board members repeatedly missing meetings without explanation
• Major expenses approved without board discussion
• Form 990 or tax filings overdue
• Donor restrictions being ignored (restricted funds used for unrestricted purposes)
• Staff or board misconduct not being addressed
• Conflicts of interest not disclosed
• Whistleblower complaints not investigated
• No written policies for major organizational decisions
• Executive director compensation not set by independent board process

If you encounter red flags, don't ignore them. Raise them through appropriate channels — board committee, board chair, or audit process. Document your concerns. If the organization doesn't respond appropriately, consult with an attorney about your options, which may include resignation with explanation or reporting to regulators.

What to Do Next

If you're new to board service, move to Lecture 1.2.2: The Essential Policy Library to understand the policies that operationalize these duties. If you're concerned about conflicts of interest at your organization, Lecture 1.2.3 provides detailed template language and implementation guidance. For meeting management and board procedures, Lecture 1.2.4: Robert's Rules of Order for Nonprofits clarifies practical governance mechanics.