Hablamos Español 310-837-6101

D&O risk management guide: Essential Steps for California Boards

by | Aug 23, 2026

Board members in California face real legal and financial risks that many organizations underestimate. Directors and officers liability claims have grown 23% over the past five years, and California’s regulatory environment makes boards particularly vulnerable.

At Tower Insurance Associates, Inc., we’ve created this D&O risk management guide to help you understand your exposure and take concrete steps to protect your organization. The right strategy combines solid governance, proper insurance coverage, and ongoing compliance work.

What D&O Insurance Actually Covers in California

The Three Core Components of D&O Protection

D&O insurance protects your board members from personal financial exposure when they face legal claims tied to their decisions and actions as directors or officers. The coverage has three core components, and understanding each one matters for your organization. Side A protects individual board members when the company cannot indemnify them-this is the personal shield that keeps your leaders from losing personal assets. Side B reimburses your organization when it indemnifies directors and officers for covered claims, protecting your company’s cash reserves. Side C covers the organization itself against securities claims and derivative lawsuits, which are increasingly common in California’s litigious environment.

Diagram showing Side A, Side B, and Side C protections within D&O insurance. - D&O risk management guide

Together, these three sides create a comprehensive layer of protection, but many boards fail to recognize they need all three or that gaps between them can leave exposure unprotected.

Real Claim Costs Show Why Coverage Matters

The numbers are stark. About 1 in 4 private companies in California experience a D&O loss, and 96% of those cases result in financial impact, with average losses around $387,000 per claim according to the Chubb Private Company Risk Survey. For public companies, the stakes are even higher-2024 federal securities class action filings reached 428 with median settlements exceeding $13.5 million, according to Emergen Research. These aren’t hypothetical risks.

Percentage of D&O loss cases that result in financial impact for private California companies.

Defense costs can mount quickly when a claim arrives, and your organization’s cash flow cannot absorb that hit without coverage. D&O insurance covers legal defense fees, settlements, judgments, and regulatory investigation costs-the expenses that accumulate immediately when a claim arrives, not months later after litigation drags on.

California law imposes specific fiduciary duties on directors and officers: the duty of care, the duty of loyalty, and the duty of good faith. The business judgment rule offers some protection when board members act in good faith and with reasonable care, but this rule has real limits. It does not shield directors from breaches of fiduciary duty, mismanagement, or misrepresentation. California’s courts actively enforce these standards, and regulatory agencies like the SEC increasingly scrutinize board conduct around ESG disclosures and data protection compliance. SEC ESG-related enforcement actions totaled 47 in 2024, signaling rising accountability for board-level disclosures and expanding D&O liability risk. Employment disputes-wrongful termination, discrimination, harassment, retaliation-trigger personal liability for board members who approve or oversee flawed HR decisions. In tech and growth companies, intellectual property disputes and data protection compliance failures create additional exposure. California’s regulatory environment is notably stringent, making tailored D&O coverage essential for leadership risk management.

Why Coverage Gaps Matter More Than You Think

Most boards assume their standard D&O policy covers all three sides equally, but policy language often creates gaps between Side A, Side B, and Side C protection. A gap in Side C coverage leaves your organization exposed to securities claims that individual directors cannot defend. Gaps between Side A and Side B mean your company may indemnify a director, but the insurer refuses to reimburse because the claim falls outside covered territory. These gaps expose your organization to unexpected out-of-pocket costs and force difficult choices about who pays for defense. Working with an experienced broker who understands California’s specific risks helps you identify these gaps before a claim arrives and structure your policy to close them.

Building Your D&O Risk Management Strategy

Assess Your Organization’s Actual Risk Profile

Your organization’s D&O coverage needs depend entirely on what you actually risk losing, not on industry averages or what competitors carry. Start by identifying your specific exposure: the size of your board, the types of decisions you make, your revenue, whether you’ve raised capital, and your regulatory obligations. A tech startup with venture funding faces entirely different risks than a nonprofit with volunteer directors. For companies with $5 million to $50 million in revenue, try for at least $2 million in combined Side A and Side B coverage, though higher limits become necessary if you’re fundraising or pursuing acquisitions.

Choose Deductibles That Match Your Risk Tolerance

The deductible you select directly affects both your premium and your out-of-pocket risk. Mid-range deductibles around $50,000 balance affordability with meaningful protection, but companies in higher-risk sectors like tech and financial services should consider lower deductibles ($25,000 to $50,000) because claim frequency tends to be higher in those industries. California premium ranges typically run 0.5% to 3% of revenue depending on your industry and risk profile, with tech and financial services paying toward the higher end due to greater claim exposure.

Quick guidelines for choosing D&O deductibles and understanding premium ranges in California. - D&O risk management guide

Bundle Coverage to Eliminate Dangerous Gaps

Bundling D&O with Employment Practices Liability Insurance, cyber liability, and technology errors and omissions coverage yields better rates and eliminates dangerous gaps between separate policies. This integrated approach protects your organization across multiple liability fronts without leaving exposure unprotected between different carriers or policy periods.

Finding the right policy requires working with a broker who understands California’s specific legal environment and your organization’s stage. An experienced local broker negotiates policy language to narrow exclusions, aligns your indemnification provisions with what the insurance actually covers, and identifies gaps between Side A, Side B, and Side C that could leave you exposed. Avoid brokers who simply quote generic policies; instead, work with someone who asks detailed questions about your governance practices, your board composition, your recent business decisions, and your emerging risks like artificial intelligence governance or data protection compliance.

Your broker should explain what the policy excludes, which claims typically get denied, and how your indemnification agreements interact with coverage. Request sample policies from multiple carriers and compare their specific language around securities claims, employment disputes, and regulatory investigations rather than focusing only on price. The goal is not the cheapest policy but the one that actually covers your real risks and won’t leave you fighting with your insurer when a claim arrives. Once you’ve selected coverage that matches your exposure, the next step involves strengthening the governance practices that actually prevent claims from happening in the first place.

How Strong Governance Prevents D&O Claims

Document Board Decisions with Precision

Strong governance practices directly reduce your organization’s exposure to D&O claims. Companies that maintain formal meeting documentation, clear conflict-of-interest disclosures, and transparent decision-making records face fewer claim denials when coverage is tested. Your board needs written protocols that demonstrate thoughtful decision-making, not policies that sit in a drawer.

Start with formal meeting minutes that capture who attended, what information was presented, what concerns were raised, and how the board reached its decision. These minutes become your defense when someone later claims the board acted recklessly or without adequate information. Include the rationale behind major decisions-whether you approved a related-party transaction, hired a key executive, or changed company direction. If a shareholder later sues claiming the board breached its duty of care, your detailed minutes show the board considered relevant facts and acted in good faith.

Establish Clear Conflict-of-Interest Protocols

Implement a written conflict-of-interest disclosure process that requires directors to identify any financial interest in transactions before the board votes. This simple step demonstrates compliance with California’s fiduciary duties and creates a clear record that the board was aware of conflicts and addressed them appropriately. Document cap table updates, related-party transactions, and any board member’s outside business interests.

For tech companies specifically, establish an intellectual property governance protocol that clarifies who owns employee-created IP, how licensing agreements work, and how the company protects its technology. Many tech disputes arise from unclear IP ownership, and a written protocol prevents those claims from reaching the D&O insurer in the first place.

Assign Accountability for Regulatory Compliance

Assign clear accountability for data protection and privacy compliance by having someone report quarterly to the board on your company’s compliance status. This shows your board actively oversees critical regulatory risks rather than ignoring them until a breach occurs. These governance practices cost nothing to implement but dramatically strengthen your D&O coverage when claims arrive.

Conduct Targeted Board Training Programs

Board training should focus on specific fiduciary duties and emerging risks rather than generic compliance lectures. Schedule annual training that covers California’s fiduciary duties and include sessions on emerging risks like artificial intelligence governance and data protection liability. Directors need to understand how their decisions create personal liability and what the insurance actually covers.

When your board members understand the connection between their decisions and their personal exposure, they make more careful choices. Training also creates documentation that shows your board was informed and thoughtful, which helps defend against claims that the board acted negligently. Consider bringing in external counsel to conduct these sessions so directors hear from someone other than management, which adds credibility and demonstrates the board takes governance seriously. Track training attendance and maintain records of what was covered. When an employment practices claim arrives, your documentation that the board received training on discrimination and harassment prevention becomes valuable evidence that the organization took reasonable steps to prevent the conduct. This strengthens your D&O coverage and may reduce the ultimate settlement amount.

Final Thoughts

California boards that wait until a claim arrives to think about D&O protection have already lost the advantage. The real work happens before litigation starts, when you assess your actual exposure, secure appropriate coverage, and build governance practices that prevent claims from happening in the first place. Your coverage must match your real risk, not industry averages or what competitors carry, because a startup with venture funding needs different limits and policy language than a nonprofit with volunteer directors.

Governance practices directly reduce your claim frequency and strengthen your position when coverage is tested. Formal meeting minutes, clear conflict-of-interest protocols, documented decision-making, and regular board training cost far less than defending a claim and demonstrate your board acted thoughtfully and in good faith. Your D&O program must also integrate with your broader risk management strategy by bundling D&O with employment practices liability, cyber coverage, and technology errors and omissions to eliminate dangerous gaps between separate policies.

At Tower Insurance Associates, Inc., we work with California boards to assess their actual exposure, structure coverage that closes gaps, and connect governance practices with insurance protection. Contact us to discuss your organization’s specific D&O risk management guide needs and build a protection strategy that actually covers your real risks.

Disclaimer: This blog post is for general informational purposes only and does not represent actual coverage, policy terms, or legal requirements. Insurance details vary by individual and jurisdiction. Please consult a licensed insurance professional for advice specific to your situation.

Tower Insurance Associates, Inc
Privacy Overview

This website uses cookies and similar technologies to help the site function properly, improve your browsing experience, understand how visitors use our website, and, where applicable, support advertising and marketing efforts. Some cookies are necessary for the website to operate, while others may be used for analytics, functionality, or advertising purposes.

You can choose which optional cookies you allow through the cookie settings. Disabling certain cookies may affect some website features or functionality. For more information about how we collect, use, and protect your information, please view our privacy policy.