Fiduciary responsibility: how board members meet it and prove it

In 1980, the Trans Union board approved the sale of the company after a meeting of about two hours. No director had read the merger agreement before it was signed. Five years later, the Delaware Supreme Court found the directors grossly negligent, even though the deal paid shareholders a premium.

The price wasn’t the problem. The process was.

That’s what fiduciary responsibility comes down to in practice. Courts rarely ask whether your board made the right call. They ask whether it made an informed, loyal, good-faith call, and whether the record shows it.

Fiduciary responsibility is the legal and ethical obligation of a person entrusted with another’s interests (a fiduciary) to act in those interests rather than their own. For board members, it means acting in the best interests of the company and its shareholders through three core duties: care, loyalty and obedience.

In short

  • Fiduciary responsibility rests on three duties: care, loyalty and obedience.
  • Courts judge the decision-making process, not the business outcome.
  • The business judgment rule protects directors who decide on an informed basis, in good faith.
  • Boards that fail to put any reporting system in place for critical risks face oversight claims.
  • Your best defense is a complete, retrievable record: board materials, minutes, conflict declarations and votes.

What is fiduciary responsibility?

A fiduciary relationship exists when one party is trusted to act on behalf of another. The fiduciary must put the beneficiary’s interests first, avoid conflicts and never profit from the position without consent.

In a corporate setting, the fiduciary is the director (and often the officer). The beneficiary is the company and, through it, its shareholders. Fiduciary responsibility breaks down into three duties:

  1. Duty of care: make informed decisions with reasonable diligence.
  2. Duty of loyalty: put the company’s interests ahead of your own.
  3. Duty of obedience: act within the company’s purpose, governing documents and the law.

Fiduciary duty vs. fiduciary responsibility

The two terms are often used interchangeably, and in most contexts that’s fine. There is a useful nuance, though.

A fiduciary duty is a specific legal standard you must meet, such as the duty of care. Fiduciary responsibility is the broader accountability that ties those standards together. It’s what makes your conduct as a director reviewable by the board, by shareholders and, if it comes to that, by a court.

Put simply: duties tell you what the standard is. Responsibility means you can be asked to show you met it.

The three core fiduciary duties of board members

Every serious governance framework comes back to the same three duties. Here’s how they compare before we look at each one.

DutyWhat it requiresTypical failureWhat the record should show
CareInformed, diligent decision-makingApproving a major deal without reading the materialsMaterials sent in advance, questions asked, advice obtained
LoyaltyCompany interests over personal interestsUndisclosed self-dealing; ignoring red flagsDeclared interests, recusals, oversight reporting
ObedienceActing within purpose, bylaws and lawUsing assets outside the mandateDecisions checked against articles, bylaws and regulation

Duty of care

The duty of care asks one question: did you do your homework? Under UK law, a director must exercise “reasonable care, skill and diligence”, measured both against what’s expected of someone in that role and against the director’s own experience.

In Delaware, the test is whether directors informed themselves “of all material information reasonably available to them” before deciding. Liability turns on gross negligence.

In practice, the duty of care looks like this:

  • Reading the board pack before the meeting, not during it
  • Asking management questions until the answer is clear
  • Getting independent advice on complex or high-value decisions
  • Taking enough time: a two-hour vote on selling the company is a warning sign

Duty of loyalty

The duty of loyalty is about whose interests you serve. A director who steers a contract toward a company they own, without telling the board, breaches it. So does a director who uses confidential board information for personal gain.

UK law makes the conflict rule explicit. If you have any direct or indirect interest in a proposed transaction with the company, you must declare its nature and extent to the other directors.

Loyalty also covers oversight. In Marchand v. Barnhill (2019), the Delaware Supreme Court let a claim proceed against the Blue Bell Creameries board after a deadly listeria outbreak. The complaint alleged the board had no food safety committee, no board-level process and no protocol for being told about food safety reports, even though food safety was central to the business.

The message to boards was blunt. You don’t have to catch every problem, but you must make a good-faith effort to put a reasonable reporting system in place for the risks that matter most.

Duty of obedience

The duty of obedience requires the board to act within the organization’s purpose, its governing documents and the law. Cornell lists it alongside care and loyalty as one of the three categories of fiduciary duty.

It carries the most weight for nonprofits, where a board must keep assets aligned with the charitable mission. Corporate law has a close equivalent: UK directors must act in accordance with the company’s constitution and use their powers only for the purposes they were given.

If you approve a decision that your articles or bylaws don’t allow, good intentions won’t save it.

Who carries fiduciary responsibility on a board?

Fiduciary responsibility isn’t limited to the chair or to independent directors. It applies to everyone with authority over the company’s affairs.

  • All directors, executive and non-executive: The UK general duties apply to every director of the company. Non-executives don’t get a lighter standard because they attend fewer meetings.
  • The chair: Same duties, plus a practical role in making sure the board gets the information it needs. See our guide to the role of the chairman of the board.
  • Committee members: Audit, risk and remuneration committees often hold the most detailed information, and with it, the most exposure. Read more on the committee chair’s role.
  • Officers: In Delaware, corporate officers owe fiduciary duties too. Since 2022, companies can exculpate senior officers from some duty of care claims, but never for loyalty breaches.

Board secretaries and General Counsels are often not directors themselves. Their role is to make sure directors can meet their fiduciary responsibility: complete materials, accurate minutes, proper conflict procedures. Our article on board secretary responsibilities covers this in more detail.

Trustees, attorneys and financial advisors also owe fiduciary duties, but the rules for them differ and this guide focuses on boards.

How to prove your board met its fiduciary responsibility

Here’s the part most guides skip. Knowing the duties is easy. Showing you met them, two or three years later, under pressure from a regulator, an auditor or a shareholder’s lawyer, is where boards struggle.

Delaware’s business judgment rule presumes that directors “acted on an informed basis, in good faith and in the honest belief that the action taken was in the best interests of the company”. That presumption is your strongest protection. Your records are what keep it intact.

These six steps build that record.

1. Send board materials early enough to read them

A director can’t be informed by documents that arrive the night before. Set a fixed deadline for distributing the board pack, typically several days before the meeting, and track when it went out.

If a director challenges a decision later, “materials were available five days in advance” is a far better answer than “we sent a PDF by email that morning.”

2. Minute the discussion, not just the decision

Minutes that say “the board approved the acquisition” protect nobody. Minutes that record the advice received, the questions raised, the alternatives considered and any dissent show a board doing its job.

You don’t need a transcript. You need enough detail that a reader can see the board weighed the decision. For a template and structure, see our guide to writing a board report.

3. Declare, record and manage conflicts of interest

Ask directors to declare interests at the start of every meeting, and keep an up-to-date register of standing interests. When a conflict arises, minute the declaration and the recusal from discussion and vote.

This is the clearest evidence of loyalty you can produce. It also catches the conflicts directors forget they have.

4. Build a reporting line for your critical risks

After Marchand, ask a simple question: for each risk that could seriously damage the company, how does the board hear about it?

That might mean a standing committee, a recurring agenda item or a defined escalation route from management. Whatever form it takes, write it down and make sure it shows up in the agenda and minutes.

5. Keep director mandates and statutory records current

Fiduciary responsibility starts the day a director is appointed. You need to know who sits on which board, since when, until when and in what capacity, especially across subsidiaries.

Outdated registers create a different kind of exposure: decisions taken by someone whose mandate had expired, or filings missed in another jurisdiction.

6. Make the record retrievable in minutes, not weeks

When an auditor asks for the minutes and supporting materials behind a decision from 18 months ago, can you find them in under five minutes? If the answer is “it depends who saved them,” your record is weaker than you think.

A single, access-controlled archive of agendas, board packs, minutes, votes and resolutions turns this from a scramble into a search.

What counts as a breach of fiduciary duty?

A breach occurs when a fiduciary fails to meet the duty of care, loyalty or obedience. Common examples include:

  • Self-dealing or failing to disclose a conflict of interest
  • Approving major transactions without adequate information
  • Using confidential information for personal gain
  • Ignoring red flags or having no oversight of critical risks
  • Acting outside the powers set by the articles or bylaws

The four elements of a breach claim

To succeed, a claimant generally has to establish:

  1. A fiduciary relationship existed.
  2. The duty was breached through a failure of care, loyalty or obedience.
  3. Damage resulted for the beneficiary.
  4. Causation links the breach to the damage.

Standards and burdens of proof vary by jurisdiction, so treat this as a framework rather than a checklist for any specific case.

Consequences for directors and the company

The fallout from a breach can include personal liability for damages, repayment of profits made from the position, removal from office and regulatory sanctions. For the company, it often means shareholder litigation and lasting reputational harm.

Where exculpation and D&O insurance stop

Delaware lets companies limit directors’ personal liability for duty of care breaches in their charter. That protection doesn’t extend to breaches of the duty of loyalty or to bad-faith conduct (Delaware Code, Title 8, §102(b)(7)).

Directors’ and officers’ insurance helps cover defense costs and settlements, but policies typically exclude deliberate fraud and dishonest conduct. Read our guide to D&O insurance for what it does and doesn’t cover.

The pattern is clear: the law and insurers will forgive an honest mistake far more readily than disloyalty. Your records are what show which one happened.

How a board portal supports your fiduciary record

Software doesn’t discharge anyone’s fiduciary responsibility. Directors do. What the right tool can do is make the six steps above the default rather than the exception, and keep the evidence in one place.

With DiliTrust Board Portal, board secretaries can:

  • Distribute board materials on time: Publish the meeting when it’s ready, generate a single meeting bundle with every agenda item and its documents, and notify directors when materials are available.
  • Draft and validate minutes: Generate minutes from a template or with AI assistance in your own format. AI drafts are reviewed by a person, and only authorized users can validate them.
  • Record votes and resolutions: Link votes to agenda items or documents, manage proxy voting and keep resolutions in one central place.
  • Control who sees what: Set view, download and print rights down to the document level, with watermarks, so sensitive committee material stays with the right people.
  • Show who was informed: Track attendance and see who opened a meeting and its documents.
  • Find past decisions quickly: Search across meetings and minutes from a central, access-controlled archive.

      For groups with many subsidiaries, DiliTrust Entity Management keeps director mandates (with appointment and expiry dates) and statutory registers current across entities, so you always know who has authority to decide.

      See DiliTrust Board Portal in action →

      Frequently asked questions

      What is fiduciary responsibility in simple terms?

      It’s the obligation to act in someone else’s best interests rather than your own when you’ve been trusted to manage their affairs. For board members, that means putting the company and its shareholders first.

      What are the three fiduciary duties of directors?

      The duty of care (make informed, diligent decisions), the duty of loyalty (put the company’s interests ahead of your own) and the duty of obedience (act within the company’s purpose, governing documents and the law).

      Do non-executive directors have the same fiduciary responsibility as executives?

      Yes. In the UK, the general duties in the Companies Act 2006 apply to every director. What a “reasonable” level of care looks like can depend on the role and the director’s experience, but the duties themselves are the same.

      What is the business judgment rule?

      It’s a Delaware legal presumption that directors acted on an informed basis, in good faith and in the honest belief that their decision served the company. Courts won’t second-guess a decision protected by the rule, but the protection disappears if directors were grossly uninformed or conflicted.

      What happens if a board member breaches their fiduciary duty?

      Consequences can include personal liability for damages, repayment of profits, removal from the board and regulatory sanctions. Charter exculpation and D&O insurance may cover some duty of care claims, but generally not loyalty breaches or deliberate misconduct.

      How can a board show it met its fiduciary responsibility?

      Through its records: board materials distributed in advance, minutes that capture the discussion, declared and minuted conflicts, documented votes, and a clear reporting line for critical risks.

      Avatar photo
      Author

      Jana Haberkern

      Marketing Manager at DiliTrust

      Jana Haberkern leads marketing for the DACH region at DiliTrust and works across global teams. She has spent several years in Legal Tech, including at a Legal AI startup that successfully exited. Jana focuses on the questions that matter most to legal teams right now: how AI is changing their day to day, what digitalization really means for legal departments, and where Legal AI is heading next.