Directors' and officers' liability insurance (D&O)
Policy covering the personal liability of directors and officers for alleged management failures, defense costs included.
D&O insurance, short for directors and officers liability insurance, pays the financial consequences of claims made personally against directors, officers and de facto managers, defense costs included. The usual allegations are mismanagement, misleading financial disclosure, breach of fiduciary duty and violation of a law or regulation; in France, Article L. 225-251 of the Commercial Code grounds the liability of directors and the CEO of a société anonyme. Claimants run from shareholders to creditors, employees, liquidators and regulators. A D&O policy has three parts. Side A pays the individual when the company cannot or will not indemnify, insolvency being the classic case; Side B reimburses the company that has indemnified its directors; Side C, entity coverage, protects the company itself, usually only for securities claims at a listed company. D&O is written on a claims-made basis, and the fraud or intentional misconduct exclusion usually bites only after a final adjudication, so defense costs are advanced in the meantime. It is often confused with professional liability, which answers for errors made toward clients, and with the company's general liability, which does not protect a director's personal assets. Large groups buy it as a tower, often with a Side A only layer at the top. The market is cyclical. Losses track the litigation climate, US securities class actions first, then social inflation and nuclear verdicts, and capacity tracks capital moving in and out of reinsurance. Directive (EU) 2022/2555, NIS2, Article 20: management bodies of essential and important entities approve the cybersecurity risk-management measures taken under Article 21, oversee their implementation, must undergo training and can be held liable for the entity's breaches. Due for transposition by October 17, 2024, it turned cybersecurity into a personal exposure for the board, which makes it a D&O exposure. Since NIS2, the boundary between D&O and cyber has blurred, and both wordings have to say which one responds to an incident that puts management in the frame.
In the second quarter of 2025, D&O rates for listed US companies posted their sixth straight decline, about 9.5 percent according to Lockton. A large US industrial group uses the soft market to extend its D&O policy to defense costs from cybersecurity investigations and NIS2 proceedings in Europe, for a small additional premium. At the same time, its D&O insurer works out a coordination endorsement with the group's cyber insurer, so that the two policies don't both pay if a cyber incident leads to claims against the executives personally.
D&O, directors and officers, management liability, D&O liability, D and O insurance, D&O insurance, directors and officers insurance, D&O liability insurance, D&O policy
Follow the research
One letter a week. First, the week's underwriting note, when one is published: a dated, argued decision, signed by Paul Bernardski. Then what the observatory published on cyber risk, political risk and insurance. No account, no tracking.
No spam, one-click unsubscribe, no data ever sold.