Legal Framework / Risk Management · Director Liability

The Shield and Its Cracks: How Directors Lose Their Protection

The reason your name can appear on a lawsuit is also the reason you will almost certainly walk away from it: you are a volunteer director of a corporation, protected by a stack of shields. But every one of those shields was built on the same assumption — that you stayed inside your authority and decided on the record. Step outside the governance hierarchy, and the protection that was supposed to carry you through the lawsuit becomes the thing the plaintiff uses to pierce it.

The Bottom Line

A volunteer director is protected by five independent layers: the business judgment rule, statutory director immunity, volunteer-protection statutes, indemnification, and D&O insurance. Each catches what the one before it missed. But all five share a single foundation: they protect a director who acted in good faith, on an informed basis, and within the scope of the board’s authority. That last phrase is the whole game. A director who stays inside the governance hierarchy — deciding only what the board may decide, only as a body, only in a noticed meeting, only on a record — stands inside all five layers at once. A director who improvises outside it steps out from under every one of them at the same time. Clean process is the shield. Sloppy process is the crack in it.

Why Your Name Is on the Lawsuit

Owners sue directors individually for a tactical reason: it raises the stakes and the pressure. Naming the corporation is abstract; naming you personally — your full legal name on a petition delivered to your home — makes the dispute your problem. But being named is not the same as being liable. The law has watched this maneuver for more than a century, and it answers with the business judgment rule: courts will not second-guess the substance of a good-faith, informed decision made within a board’s authority.

The court does not ask whether the variance was a good idea or the repair method the best one. It asks a narrower set of questions: Did these directors act honestly? Did they do their homework? Did they stay within their power? If the answers are yes, the substance of the decision is off-limits to the judge. This is the bedrock rule of corporate law, and the community-association version of it was forged in a New York apartment building over a kitchen renovation.

Levandusky: The Shield Stated Out Loud

The four cracks are the negative image of the rule itself. The protection holds unless the challenger can show the board’s action fell into one of these four categories:

Read the four together and a pattern emerges: none is about whether the board was right. Each is about whether the board followed a clean process inside its lane. No legitimate purpose, singling someone out, no consideration of facts, exceeding authority — these are not substantive errors the court is policing. They are procedural failures. Keep the process clean, and the business judgment rule does the rest.

Texas

Texas applies a robust version of the same rule. Decisions made by directors who act in good faith, on an informed basis, and within the scope of their authority are protected from judicial second-guessing. The court’s inquiry focuses on whether the directors complied with the fiduciary standard codified at Tex. Bus. Orgs. Code § 22.221 — whether they acted with the care an ordinarily prudent person would exercise and in a manner reasonably believed to be in the association’s best interest — not on whether the outcome was correct. This is the structural reason most director claims do not survive summary judgment when the procedural record is clean, and why a messy record is so dangerous.

Florida

Florida courts apply the business judgment rule to community-association boards in substantially the same form, asking whether the board acted within its authority and whether its decision was reasonable, rather than re-deciding the underlying call. The deference is real, but it is conditional on the same things Levandusky named: authority, good faith, and a record showing the facts were considered.

Lamden: The Daily Shield

Levandusky protects you from challenges to discretionary decisions. A second landmark case extends the protection to the most common decisions a board makes — the ordinary, unglamorous calls about how to maintain and repair the place.

The three words that earn the deference are reasonable investigation. Get the engineer’s report. Get the bids. Write down why. That file is the deference — not a description of it, but the thing itself. If the record shows the investigation, the board is inside the shield. If the record is silent, the board has handed the plaintiff Crack 3.

The Five Layers, in the Order They Protect You

Picture the protection as five layers, each independent, each catching what the one before it missed. A director who relies on only one or two has a thinner margin than they realize. The outermost layer is common-law deference; the innermost is the contract that writes the check.

Each layer is independent. A claim that pierces one may still be stopped by the next — but all five assume you acted within your authority on a record.

Texas

The Texas stack is explicit. Statutory director immunity at Tex. Bus. Orgs. Code § 22.235 shifts the burden: a claimant generally must prove the director failed the § 22.221 fiduciary standard, rather than the director having to prove compliance. Volunteer protection comes from two directions at once — the Texas Charitable Immunity and Liability Act (Civ. Prac. & Rem. Code Ch. 84) and the federal Volunteer Protection Act (42 U.S.C. §§ 14501–14505) — each adding limited immunity for unpaid volunteers and each carving out gross negligence and intentional misconduct. Indemnification flows from the bylaws, echoing TBOC Chapter 8, which generally requires or permits the association to cover defense costs and judgments and requires it when the director prevails.

Florida

Florida directors are protected by an analogous structure: the business judgment rule at common law, statutory limits on director liability for HOAs and condominiums, the same federal Volunteer Protection Act, and indemnification provisions in the governing documents and nonprofit-corporation law. As in Texas, the volunteer-protection floor disappears for gross negligence and willful misconduct, and every layer presupposes the director acted within the board’s authority. The statutes’ names differ; the architecture does not.

D&O, Decoded in One Sitting

Directors-and-officers liability insurance protects the people at the table, not the building. Every other line in the association’s portfolio — property, general liability, fidelity — primarily protects the entity. D&O protects you. It pays defense costs, settlements, and judgments from claims like wrongful enforcement, election disputes, architectural-review fights, breach-of-fiduciary-duty allegations, discrimination claims, and defamation. It is built on three coverage parts.

A policy missing Side C — and most suits name both the directors and the association — makes the association pay its own defense out of operating funds. At renewal, confirming all three coverage parts are present is a five-minute act of self-protection.

What D&O does not cover is just as important. It does not cover bodily injury or property damage (a pool slip-and-fall is the general-liability policy), theft or embezzlement (the fidelity/crime policy), a director’s personal profit or self-dealing, and often construction defects and prior known claims. Two policies you must never confuse: D&O protects judgment; fidelity/crime protects the bank account. Both are required; neither substitutes for the other.

How Directors Lose the Shield

The shields are strong, but they are not magic, and the holes in them are almost always self-inflicted. There are five reliable ways a director walks out from under the protection — and every one of them is a process failure, which means every one of them is preventable.

1. Acting ultra vires — beyond the board’s authority.

This is the crack that ties directly back to the governance hierarchy. A board’s authority is not freestanding; it is granted, in defined amounts, by the layer above it — statute, the recorded declaration, the bylaws. When the board decides something only the members may decide (amending the declaration), adopts a rule that conflicts with or expands the declaration, or lets a single director act alone where the board may act only as a body, the action is ultra vires — and unprotected at the root. The business judgment rule defers only to decisions within authority, so a decision outside authority is the one category the rule was never built to cover. Staying inside the hierarchy is not a chore that happens to coincide with protection — it is the protection. The question CIC-SC teaches the board to ask before every consequential decision — “Where does our authority to do this come from?” — is the same question the court will ask afterward.

2. Self-dealing or voting a conflict.

A director with a personal financial interest in a decision — a contract with their own company, a variance for their own lot, a fee waiver for a relative — who participates in or votes on it has pierced the shield from the inside, and D&O policies exclude a director’s personal profit and self-dealing. The fix is procedural: disclose the conflict on the record and recuse from the vote. A recusal in the minutes is itself an exhibit that the board policed itself.

3. Gross negligence or willful misconduct.

The volunteer-protection statutes — both the Texas Charitable Immunity and Liability Act and the federal Volunteer Protection Act, and the immunity floor in Florida — explicitly carve out gross negligence and intentional misconduct. These are not ordinary mistakes. A director who knew the corporation was uninsured and let owners swim anyway, or who retaliated against an owner deliberately, has done something the immunity statutes refuse to forgive. Ordinary good-faith error is protected; conscious indifference and deliberate wrongdoing are not.

4. Letting the corporation lapse.

This one is quiet and catastrophic. The entire shield rests on the fact that you are acting as a director of a corporation. If the association loses its corporate good standing — an unfiled franchise or annual report, a forfeited registration — the corporate veil can collapse and the liability protection with it, exposing directors for acts taken while the entity was administratively dissolved. Confirming good standing is an annual, ten-minute act that protects every other layer.

5. Deciding in anger without a record.

The most common shield-killer is the meeting that never happened on paper. The business judgment rule and statutory immunity both depend on a record showing the board deliberated, considered the facts, and decided in good faith. A decision made in a hallway, a group text, or a fit of temper — with minutes that say only “motion carried” — gives the court nothing to defer to. That is Crack 3 from Levandusky, manufactured by your own hand. Minutes that reflect deliberation are the exhibit your defense lawyer prays exists.

Why This Matters

The five layers are one habit, not five separate decisions. The same conduct that satisfies the business judgment rule — act within authority, in good faith, on a record — keeps the immunity statutes available, satisfies what the volunteer-protection statutes require, triggers the indemnification promise, and keeps the D&O claim clean. You stand inside all of them, or step out from under all of them, with a single way of operating. And the foundation is authority: three of the four Levandusky cracks and at least two of the five shield-killers reduce to the board acting where it had no power to act.

The record is the defense. The board’s minutes, bids, reports, notice proofs, and recorded votes are the evidentiary file the carrier reviews to confirm coverage and the defense lawyer uses to win on summary judgment. A complete record supports the shield at every layer; an empty record undermines it at every layer. Being named is survivable; the undocumented hallway decision, the un-recused conflict, the lapsed corporation, and the angry word on the record are the failures the lawsuit exposes.

Best-Practice Guidance

1. Ask “where does our authority come from?” before every consequential vote.

If the answer is statute, declaration, or bylaws, proceed. If the answer is “the members, not the board,” route it to the membership at the document’s threshold. This single question forecloses the ultra vires crack.

2. Decide only as a body, only in a noticed meeting, only on a record — and investigate first.

No individual director, including the president, has authority alone, and no group text is a meeting. Before you decide, get the engineer’s report, the bids, the legal opinion: the Lamden file of reasonable investigation, documented, is what converts a discretionary call into a protected one.

3. Disclose conflicts and recuse on the record.

A director with a personal stake discloses it and steps out of the vote. The recusal entry in the minutes is an asset, not an admission.

4. Keep the corporation in good standing — and verify it annually.

File the reports, pay the fees, confirm the registration. The entire shield depends on the corporate form being intact.

5. Review the D&O policy for Side A, B, and C — and report claims the day they arrive.

Confirm all three coverage parts at renewal. The moment a demand or threat of suit appears, tender it to the carrier immediately. Claims-made coverage punishes delay.

6. Attack arguments, never people.

Deliberate hard, even harshly, about the issue — never about the person. Keep character and personnel discussion inside executive session and off the record.

Common Mistakes & Pitfalls

Key Takeaways

• The business judgment rule protects a director who acts in good faith, on an informed basis, and within the board’s authority — courts will not second-guess the substance of such a decision (Levandusky, N.Y. 1990; Lamden, Cal. 1999).
• Levandusky names four ways to pierce the shield — no legitimate purpose, singling someone out, no consideration of the facts, exceeding authority — and every one is a process failure, not a substantive error.
• Lamden adds the daily shield: reasonable investigation, documented, converts ordinary maintenance and budget calls into protected discretion.
• Five independent layers protect the director: business judgment rule → statutory immunity (TBOC § 22.235, standard § 22.221) → volunteer-protection statutes (Civ. Prac. & Rem. Code Ch. 84; 42 U.S.C. §§ 14501–14505) → indemnification (TBOC Ch. 8) → D&O insurance (Side A/B/C, claims-made — late notice kills coverage).
• Directors lose the shield by acting ultra vires, self-dealing or voting a conflict, gross negligence or willful misconduct, letting the corporation lapse, and deciding in anger without a record.
• Every shield-killer is preventable, and every one reduces to the same discipline: stay inside the governance hierarchy and decide on the record. Clean process is the shield.

Related in This Series

• Where Your Board’s Authority Actually Comes From — the granted, bounded source of every decision the board can protect.
• How Selective Enforcement Voids a Valid Rule — the “singling someone out” crack, seen from the enforcement side.
• The Open Meeting and the Walking Quorum: Decisions a Board Cannot Text — why the record the shield needs only exists when the meeting really happened.
• Things Your Board Can No Longer Do — the through-line of the series, and the catalog of ultra vires acts that crack the shield.

References & Sources

1. Levandusky v. One Fifth Avenue Apartment Corp., 75 N.Y.2d 530, 553 N.E.2d 1317 (N.Y. 1990) — adoption of the business judgment rule for community-association boards and its four limits.
2. Lamden v. La Jolla Shores Clubdominium Homeowners Assn., 21 Cal.4th 249, 980 P.2d 940 (Cal. 1999) — judicial deference to board maintenance decisions upon reasonable investigation.
3. Texas Business Organizations Code § 22.221 — fiduciary duty / standard of conduct for nonprofit directors.
4. Texas Business Organizations Code § 22.235 — statutory limitation on director liability.
5. Texas Business Organizations Code Chapter 8 — indemnification of directors and officers.
6. Texas Civil Practice & Remedies Code Chapter 84 — Charitable Immunity and Liability Act (volunteer protection).
7. Volunteer Protection Act, 42 U.S.C. §§ 14501–14505 — federal immunity for unpaid volunteers, with gross-negligence and intentional-misconduct exceptions.
8. Texas Property Code § 209.0051 — open board meetings (record and notice requirements underlying the protected decision).
9. Florida Statutes § 720.303 and § 718.112 — HOA and condominium board meeting, record, and director provisions.
10. Community Associations Institute — guidance on D&O insurance coverage structure (Side A/B/C) and claims-made reporting.

Tags: business judgment rule · Levandusky · Lamden · director liability · D&O insurance · ultra vires · statutory immunity · § 22.235 · volunteer protection · indemnification · self-dealing · governance hierarchy