Directors and officers insurance covers the legal defense costs, settlements, and judgments that arise when someone sues a company’s leadership for decisions made in their official roles. It protects individual executives from paying those costs personally, and in most policies it also reimburses the company when it indemnifies its leaders. A shareholder securities suit, a regulatory investigation, a wrongful termination claim against a senior executive: these are the situations a D&O policy is built for.
What actually gets paid, and to whom, depends on the policy’s structure and its exclusions. Both deserve a close look.
The Three Coverage Parts
Most D&O policies bundle three coverage parts, each answering a different question about who owes what.
Side A pays directors and officers directly when the company cannot or will not reimburse them. This is the coverage that matters most during a bankruptcy or when the company refuses to indemnify. There is no deductible on Side A claims, because the executive is already absorbing a loss the company should have covered.
Side B reimburses the company after it indemnifies a director or officer for a covered claim. If your company pays your legal bills and then submits those costs to the insurer, that is Side B. A corporate retention (the company’s deductible) applies here.
Side C covers the company itself. For publicly traded companies, Side C is almost always limited to securities claims, such as shareholder class actions alleging the stock price was inflated by misleading statements. Private companies and nonprofits usually get broader entity coverage under Side C, extending to most claim types unless specifically excluded.
All three sides typically share a single aggregate policy limit. That creates a real tension: if the company burns through the limit defending itself under Side C, individual executives may find nothing left for their own defense under Side A. Many policies include a priority-of-payments clause that forces the insurer to pay Side A claims first and hold back Side C payments until non-indemnifiable losses are covered. Companies with heavy litigation exposure often add a standalone Side A policy, sometimes called a Side A DIC (difference-in-conditions) policy, with its own dedicated limit, broader terms, and fewer exclusions.
Claims That Typically Trigger Coverage
D&O claims come from shareholders, employees, customers, competitors, and regulators. A few categories dominate.
Shareholder and Mismanagement Suits
The most visible D&O claims involve shareholders alleging that leadership decisions caused financial harm. Securities class action filings against public companies reached 222 in 2024, and median settlements ran around $9 million. These lawsuits typically allege that executives made misleading statements about the company’s financial condition, failed to disclose material risks, or pursued strategies that destroyed shareholder value. Derivative lawsuits, where a shareholder sues on the company’s behalf alleging the board breached its fiduciary duties, are another common vehicle. Private companies face a version of this risk when minority shareholders or investors claim they were misled during fundraising.
Regulatory Investigations
Government investigations can trigger D&O coverage, though policies differ on exactly when. Some require a formal proceeding or lawsuit before benefits apply; others start covering defense costs at the investigation stage. For publicly traded companies, the SEC is the most frequent source of regulatory D&O exposure. Under Sarbanes-Oxley, CEOs and CFOs must personally certify that their company’s periodic financial reports are accurate and complete. A knowing false certification carries fines up to $1 million and up to 10 years in prison; a willful false certification raises those penalties to $5 million and 20 years.1Office of the Law Revision Counsel. 18 USC 1350 – Failure of Corporate Officers to Certify Financial Reports Those personal stakes make D&O coverage essential for any executive signing SEC filings.
Employment Claims Against Executives
Allegations of wrongful termination, discrimination, or harassment involving senior executives regularly generate D&O claims. These often overlap with Employment Practices Liability Insurance (EPLI), but a D&O policy can still respond when the claim specifically targets a director or officer for failing to address workplace misconduct or for breaching a duty of oversight. The line between the two policies is not always clean, and gaps can exist if the organization has not coordinated its coverage.
Cybersecurity Oversight Failures
Board-level accountability for cybersecurity is a fast-growing source of D&O exposure. The SEC now requires public companies to disclose material cybersecurity incidents on Form 8-K and to describe the board’s oversight of cybersecurity risks in annual filings under Regulation S-K Item 106.2U.S. Securities and Exchange Commission. Public Company Cybersecurity Disclosures Final Rules Fact Sheet When a data breach occurs and the stock price drops, shareholders increasingly sue arguing the board failed to implement adequate cybersecurity systems or misled investors about its preparedness. Research tracking these cases found that the probability of a public company facing a securities class action in a given year jumps from roughly 5% to 68% after a substantial cyber incident. Directors who never set up a reporting structure for cybersecurity risks, or who ignored red flags from management, face the most exposure.
Who Counts as an Insured
The named insureds on a D&O policy include current directors and officers, and virtually all policies extend protection to former directors and officers for acts committed while they held those roles. Many policies also cover the estates, heirs, and legal representatives of deceased or incapacitated executives, so a director’s family is not left defending a lawsuit after their death.
Coverage frequently extends beyond the boardroom to senior managers, committee members, and employees named in lawsuits arising from managerial decisions. The exact scope depends on how the policy defines “insured person,” and that definition is worth reading carefully because it determines whether a VP of finance dragged into a regulatory action is covered or on their own.
Nonprofit board members sit in a different position. The federal Volunteer Protection Act shields volunteers of nonprofits from personal liability for harm caused while acting within the scope of their responsibilities, as long as the conduct does not involve willful misconduct, gross negligence, criminal behavior, or motor vehicle operation.3Office of the Law Revision Counsel. 42 USC 14503 – Limitation on Liability for Volunteers But the statute does not prevent someone from filing a lawsuit; it only limits the volunteer’s ultimate liability if the case reaches judgment. D&O insurance fills the gap by covering legal defense costs from the moment a claim arrives, regardless of whether the volunteer would ultimately be found liable. Paid officers and directors receive no protection under the Volunteer Protection Act at all, which makes D&O coverage their primary shield.
What D&O Insurance Does Not Cover
Every D&O policy contains exclusions, and a claim that falls into one of these categories leaves the executive paying out of pocket.
Fraud and Intentional Misconduct
If a director or officer is found to have committed fraud, embezzlement, or another deliberately illegal act, the policy will not pay. Most policies include a “final adjudication” provision that keeps coverage in place until a court actually enters a judgment of guilt, so defense costs are covered throughout the litigation. Once that judgment arrives, the insurer has no obligation to pay the underlying loss and may seek reimbursement for defense costs already advanced.
Illegal Personal Profit
Coverage does not extend to situations where an executive gained an illegal financial advantage. Insider trading profits, undisclosed self-dealing transactions, and unauthorized compensation are all excluded. Like the fraud exclusion, this one typically requires a final adjudication before it takes effect.
Bodily Injury and Property Damage
D&O policies are built for financial and management liability claims, not physical harm or property damage. Those risks are handled by general liability, professional liability, and other insurance products. The exclusion keeps D&O coverage from duplicating protection the company should already carry elsewhere.
Insured-Versus-Insured Claims
Most D&O policies exclude claims brought by one insured against another, such as when the company sues one of its own directors or when one officer sues a fellow officer. This exclusion exists to prevent collusion: without it, a company could manufacture a lawsuit against its own director as a vehicle for extracting insurance proceeds. It also blocks internal disputes and employment claims between insured parties. Some policies carve out exceptions for whistleblower actions or claims by former directors after they have left the organization.
Prior and Pending Litigation
Claims arising from lawsuits or disputes already underway before the policy took effect are excluded. If the company was aware of ongoing litigation when it applied for coverage, any claims stemming from those matters fall outside the policy. This exclusion works alongside the claims-made structure: the insurer is only accepting the risk of future, unknown claims, not pre-existing problems.
Coverage Gaps to Watch For
Knowing what a D&O policy covers on paper is only part of the picture. Several structural features determine whether the coverage actually delivers when a claim arrives.
Claims-Made Timing and the Retroactive Date
D&O insurance is almost universally written on a claims-made basis, meaning the policy responds only to claims first reported during the active policy period. When the claim was made matters more than when the underlying conduct occurred. Most policies include a retroactive date that sets a floor: any alleged wrongful act that took place before that date is not covered, even if the claim itself arrives during the policy period.
This creates gap risk when policies are not renewed or when an executive leaves. If a former officer is sued two years after departing, the current policy may not cover them unless it specifically extends to former directors and officers and the claim relates to conduct during their tenure. Extended reporting periods, called “tail” coverage, keep the reporting window open after a policy expires. Six-year tails are common in merger and acquisition deals, where the target company’s standalone policy terminates at closing and legacy directors need continued protection for pre-transaction decisions. Tail coverage is worth treating as a non-negotiable deal term rather than an afterthought.
Bankruptcy and Access to the Proceeds
The moments when directors need D&O coverage most are often the moments when access to it becomes most complicated. When a company files for bankruptcy, the automatic stay under the Bankruptcy Code freezes most actions involving the company’s assets. Courts consistently treat the D&O policy itself as estate property. The critical question is whether the policy proceeds are also part of the estate. If the policy includes Side C entity coverage, the proceeds used to defend the company are generally considered estate property, and the bankruptcy court controls access to them. But Side A proceeds, which pay only individual directors and officers for losses the company did not indemnify, are generally not estate property because the company never had a right to those funds. A January 2026 bankruptcy court ruling reinforced this distinction, granting former executives immediate access to tens of millions in Side A limits while keeping Side ABC policy proceeds subject to the bankruptcy stay.
This is why standalone Side A policies matter in distressed situations. Because the company is not an insured under a Side A-only policy, the bankruptcy estate has no claim to its proceeds. Directors of companies carrying significant debt should confirm that their Side A coverage exists on a standalone basis with its own separate limit, not just as part of the standard ABC tower.
Application Misstatements and Severability
The D&O application is a warranty statement, not a formality. It asks about the company’s financial condition, pending litigation, regulatory history, and internal governance. Financial statements and corporate bylaws submitted alongside it become part of the policy’s foundation. If an insurer later discovers materially inaccurate information in the application, it can seek to rescind the policy entirely, voiding it as though it never existed. Rescission wipes out coverage for every insured, not just the person who signed.
Severability clauses limit that damage. A strong severability provision treats each insured as if they had their own separate policy: if the CEO made a misrepresentation, only the CEO’s coverage is voided, and innocent board members retain theirs. Full severability means no insured’s knowledge is attributed to any other. Limited severability carves out an exception, imputing the knowledge of the application signer or a designated executive like the CEO or CFO to every insured. Carriers have moved toward limited severability as a default, so innocent directors should push for the broadest protection available during policy negotiations.
Defense Costs Inside or Outside the Limit
The choice between defense costs inside the policy limit versus outside it changes the real value of coverage. When defense costs erode the aggregate limit, a $5 million policy can be reduced to $2 million or less before any settlement is paid. Policies that cover defense costs in addition to the limit provide more total protection, at a higher premium. This matters most in long-running securities cases and regulatory investigations, where defense costs alone can run into eight figures before anyone reaches a settlement discussion.