Skip to main content
Regulatory Council
Promotional banner for the pentest readiness checklist
Category: GRC Governance Frameworks

Duty of Loyalty

Simply put

The duty of loyalty is the obligation of people in positions of trust, such as company directors, officers, and employees, to act in the best interests of the organization they serve rather than for their own personal gain. It means putting the organization's interests ahead of conflicting personal or outside interests. It is one of the core responsibilities that comes with a fiduciary relationship.

Formal definition

The duty of loyalty is a fiduciary obligation requiring individuals such as corporate directors, officers, and employees to act at all times in the best interests of the entity to which the duty is owed, subordinating personal gain and avoiding conflicting loyalties. In the employment context it typically includes an obligation not to act, during the period of employment, on behalf of persons whose interests conflict with those of the employer. Often described as a cardinal principle of fiduciary relationships, the duty is generally applied with particular strictness in the law of trusts. Its precise scope, standards of proof, and remedies for breach are jurisdiction- and context-dependent and turn on legal interpretation for which professional advice should be sought.

Why it matters

The duty of loyalty sits at the heart of corporate governance because it defines whose interests those with decision-making power are obligated to serve. When directors, officers, and employees hold positions of trust, they typically gain access to assets, information, and opportunities that could be diverted for personal benefit. The duty of loyalty is the legal and ethical constraint that requires such individuals to subordinate their own gain to the interests of the organization, and it underpins the confidence that shareholders, boards, regulators, and other stakeholders place in an entity's leadership.

Breaches of the duty of loyalty, such as self-dealing, usurping corporate opportunities, or acting on behalf of parties whose interests conflict with the organization's, can expose individuals to personal liability and undermine the integrity of governance structures. Because the duty is often described as a cardinal principle of fiduciary relationships and is applied with particular strictness in the law of trusts, courts and regulators tend to scrutinize conduct that suggests divided loyalties. For compliance and governance professionals, the duty of loyalty is therefore a foundation on which conflict-of-interest policies, related-party transaction controls, and codes of conduct are built.

It is important to note that the precise scope, standards of proof, and remedies for breach are jurisdiction- and context-dependent and turn on legal interpretation. Organizations should treat the duty of loyalty as a governance principle to be operationalized through policy and oversight, while recognizing that specific applications, particularly questions of liability, require professional legal advice.

Who it's relevant to

Boards of Directors and Corporate Officers
Directors and officers owe the duty of loyalty directly to the company they serve and are typically expected to act in its best interests rather than their own. This makes the duty central to how boards manage conflicts of interest, evaluate related-party transactions, and demonstrate that decisions are made for the benefit of the organization.
General Counsel and Legal Teams
Because the scope, standards of proof, and remedies for breach of the duty of loyalty are jurisdiction- and context-dependent, legal teams play a key role in interpreting how the duty applies to specific circumstances, advising on potential conflicts, and assessing liability exposure where a breach is alleged.
Compliance and Governance Professionals
Compliance and governance functions operationalize the duty of loyalty through conflict-of-interest policies, disclosure processes, and codes of conduct. Understanding the duty helps these professionals design controls that address self-dealing and conflicting loyalties before they materialize into breaches.
Employees in Positions of Trust
The duty of loyalty can extend to employees, who may be obligated not to act during their employment on behalf of persons whose interests conflict with those of the employer. This is particularly relevant to those with access to confidential information, business opportunities, or decision-making authority.

Inside Duty of Loyalty

Fiduciary Foundation
The duty of loyalty is one of the core fiduciary duties owed by directors, officers, and certain other agents to the organization and, in many jurisdictions, its stakeholders. It typically requires that the fiduciary act in the best interests of the organization rather than in their own personal interest or that of a third party. The precise scope and enforceability vary by jurisdiction and entity type, and legal interpretation should be sought for specific situations.
Avoidance of Conflicts of Interest
A central element is the obligation to avoid situations where personal interests conflict, or may appear to conflict, with those of the organization. Where such conflicts arise, the duty generally calls for disclosure and, in many frameworks, recusal from related decisions. What constitutes a disqualifying conflict is often context-dependent and governed by applicable law and internal policy.
No Improper Personal Benefit
The duty typically prohibits fiduciaries from using their position, organizational property, or confidential information for personal gain at the organization's expense. This includes concepts often described as usurping corporate opportunities, though the specific legal tests differ across jurisdictions.
Good Faith and Confidentiality
Acting in good faith and protecting confidential information entrusted through the fiduciary role are commonly treated as aspects of, or closely related to, the duty of loyalty. The exact boundary between the duty of loyalty and adjacent duties such as good faith or care can be contested and varies by legal framework.
Governance Placement
As a governance concept, the duty of loyalty concerns the roles, decision rights, and accountability by which an organization is directed and controlled. It intersects with compliance where laws or regulations codify related obligations, but it is not itself a risk or a control; rather, breaches of it may represent risks that governance controls seek to modify.

Common questions

Answers to the questions practitioners most commonly ask about Duty of Loyalty.

Is the duty of loyalty the same as the duty of care?
No. These are distinct fiduciary duties often discussed together but addressing different concerns. The duty of loyalty typically requires directors and officers to act in the best interests of the organization rather than their own personal or conflicting interests, addressing matters such as conflicts of interest, self-dealing, and misappropriation of corporate opportunities. The duty of care, by contrast, generally concerns the diligence, attention, and informed judgment expected in decision-making. Conflating the two can obscure the specific loyalty question of whose interests are being served. Note that the precise formulation and enforcement of these duties varies by jurisdiction and legal interpretation, and specific matters warrant professional legal advice.
Does the duty of loyalty only apply to board members?
Not necessarily. While the duty of loyalty is most commonly discussed in relation to directors, in many jurisdictions comparable loyalty obligations extend to officers, and sometimes to other agents or employees acting in a fiduciary capacity. The scope, however, is context-dependent: to whom the duty attaches, and its precise contours, is determined by the applicable law, the nature of the role, and the organizational form. Treating the duty as exclusively a board-level concern can lead to gaps in how conflicts are identified and managed at the officer or management level. Applicability and enforceability should be verified against the relevant jurisdiction and confirmed with legal counsel.
How can an organization operationalize the duty of loyalty in its governance structures?
Organizations often translate the duty of loyalty into concrete governance practices such as conflict-of-interest policies, periodic disclosure requirements, recusal procedures for affected individuals, and documented processes for approving related-party transactions. These measures are governance controls that support adherence to the duty rather than substitutes for it; they modify but do not eliminate the risk of conflicted decision-making. The appropriate design depends on organizational size, sector, and legal form, and specific requirements may be shaped by binding law or by voluntary governance codes. Legal advice is typically advisable when designing procedures intended to satisfy fiduciary obligations.
What role does conflict-of-interest disclosure play in supporting the duty of loyalty?
Disclosure is a commonly used mechanism through which individuals identify actual, potential, or perceived conflicts so that the organization can decide how to manage them, for example through recusal, independent review, or abstention from a decision. Disclosure supports the duty of loyalty by making conflicts visible, but disclosure alone does not resolve a conflict or guarantee compliance with the duty; the organization must still act appropriately on the information. The frequency, form, and consequences of disclosure vary by jurisdiction and by internal policy, and the legal sufficiency of any particular disclosure process is a matter for professional advice.
How should recusal be handled when a director has a conflicting interest?
In many governance frameworks, a conflicted director is expected to disclose the conflict and abstain from participating in relevant deliberations or votes, with the recusal documented in the meeting record. Practices often address whether the individual leaves the discussion, whether quorum is affected, and how the decision is otherwise reviewed for independence. The specific requirements depend on applicable law, the organization's bylaws or charter, and any governing code, so what constitutes an adequate recusal is context-dependent. Because improperly handled conflicts can carry legal consequences, organizations typically confirm their approach with legal counsel.
How can internal audit or compliance functions provide assurance over duty-of-loyalty controls?
Assurance activities may include reviewing the completeness and timeliness of conflict-of-interest disclosures, testing whether recusal and related-party approval procedures were followed, and evaluating whether the governance framework assigns clear responsibility for managing conflicts. These reviews assess the operation of controls that support the duty rather than rendering a legal opinion on whether the duty was met, which is a matter of legal interpretation. The scope and depth of such assurance vary with organizational size, sector, and risk profile, and findings involving potential breaches often warrant escalation and professional legal advice.

Common misconceptions

The duty of loyalty and the duty of care are the same thing.
These are generally treated as distinct fiduciary duties. The duty of loyalty typically addresses acting in the organization's interest and avoiding conflicts and improper personal benefit, whereas the duty of care typically addresses the diligence and prudence exercised in decision-making. The precise distinction and how each is applied depend on the governing jurisdiction and entity type.
Disclosing a conflict of interest fully satisfies the duty of loyalty.
Disclosure is often a necessary step, but in many frameworks it is not by itself sufficient. Depending on applicable law and internal policy, additional measures such as recusal, independent approval, or refraining from the transaction may be expected. What is required is context-dependent and may require legal advice.
The duty of loyalty is purely a compliance matter.
It is primarily a governance concept concerning decision rights and accountability, though it can overlap with compliance where related obligations are codified in law or regulation. Treating it solely as a compliance checkbox may overlook its broader governance and stakeholder dimensions.

Best practices

Establish and maintain a clear conflict-of-interest policy that defines disclosure obligations, recusal procedures, and approval pathways, and align it with applicable legal requirements for your jurisdiction and entity type.
Require periodic and event-driven disclosure of potential conflicts from directors, officers, and relevant agents, and document how each disclosed conflict is evaluated and managed.
Document board and committee decisions where loyalty questions arise, including recusals and independent approvals, to create a defensible record of the process followed.
Provide targeted education for fiduciaries on the distinction between the duty of loyalty and related duties such as care and good faith, noting that specific obligations vary by jurisdiction.
Consult qualified legal counsel on jurisdiction-specific tests and remedies before acting on transactions that may involve personal benefit or corporate opportunities.
Periodically review governance charters and policies to confirm they reflect current legal expectations, and verify any specific statutory or regulatory requirements against primary sources.
Promotional banner for the Pentest Readiness checklist download