HOA Board Member Personal Liability: What Volunteer Boards Need to Know

This is general information for board members, not legal advice. Personal liability, fiduciary duty, indemnification, and insurance requirements are governed by your state's HOA or condo statute, your state's nonprofit corporation law, and your own governing documents — and all of these vary significantly from one state and one association to the next. Nothing here is a substitute for advice from a community-association attorney and a qualified insurance broker about your specific situation. On anything with real legal or financial weight, confirm the specifics with counsel before you act.

If your board is weighing whether to run the community without a management company, one fear tends to sit underneath every other question: can we do this without personally getting sued or getting the legal side wrong? It's the most honest fear in self-management, and it deserves a calm, accurate answer rather than a scary one. The short version, laid out below: the duties are real, but the law in most places is built to protect a director who acts honestly, does the homework, and stays inside the board's authority. Personal liability isn't a lightning strike that hits good boards at random — it clusters around a small, recognizable set of behaviors a board can stay well clear of.

What "personal liability" actually means here

Serving on a board means acting on behalf of a nonprofit corporation — the association. As a general matter, the corporation, not the individual volunteer, carries its obligations; a board member is personally exposed only by breaching a duty owed to the association, acting outside their authority, or acting in bad faith. The exact standards and any liability limits vary by state and by your governing documents, so treat what follows as the general shape of it, not a statement of what your state requires.

The three fiduciary duties, in plain English

Board members owe the association a fiduciary duty — a heightened obligation to put the association's interests ahead of their own. It's usually broken into three pieces. None requires a law degree; all are mostly common sense held to a serious standard.

1. The duty of care — do your homework before you decide. Care means making decisions the way a reasonably prudent person would: informed, attentive, and deliberate. It doesn't demand that you be right every time — it asks that you try to be. Read the material before the vote, ask questions, and get a professional's input on things outside the board's competence — an engineer before a major repair, counsel on a legal question. A board that gathers the facts and makes an honest call has met this duty even if the outcome disappoints.

2. The duty of loyalty — the association's interest, not yours. Loyalty means acting for the community's benefit rather than your own. The classic breach is self-dealing: steering an association contract to your own company, or voting on a matter where you have a personal financial stake. The safe practice is old-fashioned and simple: disclose any conflict of interest, recuse yourself from the vote, and record that you did.

3. The duty to act within authority — stay inside the documents and the law. A board's power isn't unlimited. It comes from the CC&Rs, the bylaws, and applicable law, and it stops where those stop. Adopting a rule the documents don't authorize, spending outside an approved budget, or skipping a required process step before enforcement are all examples of acting outside authority — and a decision made outside the board's authority doesn't get the same protection as one made within it. This is the duty self-managed boards most need a handle on, because without a manager there's no outside party routinely checking whether an action is actually inside the board's power. Knowing which of your documents controls when they seem to overlap is a real part of staying inside authority.

When a volunteer director is protected — and when they're exposed

Here's the reassuring part, and it's why most volunteer directors sleep fine. The law in many states gives meaningful protection to board decisions made in good faith, on an informed basis, and within the board's authority — a principle often described as the business-judgment rule: an honest, informed decision is generally protected even if it turns out badly or a homeowner disagrees with it. How far that reaches varies by state and can depend on your governing documents, so treat it as a widely shared principle, not a guarantee that applies everywhere, and confirm how it works in your state with counsel.

The pattern in practice:

Generally protected:

An honest, informed decision that turns out badly.
A reasonable judgment call between two defensible options.
A good-faith reading of ambiguous documents, especially one the board took counsel on.

Where exposure actually lives:

Self-dealing and conflicts of interest — using the seat for personal benefit.
Bad faith — acting dishonestly, or with reckless disregard for the association or its owners.
Ignoring the documents or the law — acting outside authority, or skipping required process.
Willful or grossly negligent conduct — not an honest mistake, but a serious departure from any reasonable standard.

Notice what's not on the exposure list: being a volunteer, being unpaid, self-managing, or making a decision a homeowner later dislikes. The line isn't "did it go wrong." It's "did you act honestly, informed, and within your authority."

What D&O insurance does — and doesn't — do

Directors-and-officers (D&O) insurance is the board's financial backstop. If a decision is challenged, a D&O policy is generally what pays the legal defense costs and any covered settlement or judgment — so the exposure lands on the policy, not a volunteer's savings. For a self-managing board, adequate D&O coverage isn't optional; it's the single most important protection you carry.

What D&O typically does not cover matters just as much, in general terms:

Dishonesty and fraud. Coverage is built for honest mistakes in judgment, not deliberate wrongdoing — another reason the duties above matter.
Theft or mishandling of association funds. That's the job of a separate fidelity or crime policy (sometimes called a bond) covering anyone who touches the money. When a management company leaves, its bond leaves with it, so a self-managed board needs its own.
Bodily injury and property damage. Those sit with the association's general liability and property coverage.

Policy terms, exclusions, and limits vary widely, so don't rely on a summary like this one. Sit down with a broker who works with community associations, confirm the association carries D&O and adequate fidelity/crime coverage, and read the exclusions. Whether any coverage is required can depend on your state and your governing documents.

Indemnification: the association standing behind its board

Beyond insurance, most associations also provide indemnification — a commitment, usually written into the bylaws, that the association will stand behind and cover a board member for actions taken in good faith on its behalf. Indemnification and D&O work together: indemnification is the association's promise, and the D&O policy is often what funds it.

Two honest caveats. First, indemnification generally protects good-faith conduct within the board's authority — it typically does not rescue self-dealing, bad faith, or acts outside authority, which brings us right back to the three duties. Second, whether your association's indemnification is broad, narrow, or barely there depends on how your bylaws are written and what your state's law allows. Read your bylaws for the clause, and if it's thin or missing, take that to counsel well before you need it.

The habits that keep a board protected

Liability protection isn't a document you file once. It's a set of operating habits — the same ones that make a board good at its job.

Follow your own documents. The fastest way to stay within authority is to know what the CC&Rs, bylaws, and rules require before you act — and to check rather than assume when you're not sure.
Write decisions down. Minutes aren't busywork; they're the record that proves the board deliberated, was informed, and acted properly. A decision with a clear paper trail is a defended decision. (See how to take HOA meeting minutes.)
Disclose conflicts and recuse — every time, and record that you did.
Get counsel on the high-stakes calls. A short call before a big decision is far cheaper than cleaning up after a bad one.
Carry the right insurance, and keep it current — adequate D&O plus fidelity/crime coverage, reviewed at each renewal rather than auto-renewed on autopilot.
Don't let governance knowledge live in one person's head. The most common failure in self-managed communities isn't malice — it's a good board relying on one volunteer's memory of what the documents require, and that memory leaving at the next election.

Does self-managing increase personal liability?

This is the fear the whole post exists to answer, so let's be direct: no, self-managing does not inherently increase a board member's personal liability — provided the board operates properly. The duties attach to the board seat, not to the presence of a manager. What a manager provided was a routine outside check and a set of habits; take those in-house — the habits above — and a self-managing board carries the same protections a managed one does. What raises exposure is operating loosely, and that's a risk of how a board operates, not of whether it uses a manager.

When to call an attorney

Some moments are worth a call no matter how confident the board feels: a proposed rule or fine that might exceed the board's authority; a conflict of interest the board isn't sure how to handle; an enforcement matter headed toward a lien; a threatened lawsuit or demand letter; a records-request refusal; or any decision where two board members read the documents differently and can't agree. Calling counsel early on these is the cheapest insurance a board buys.

The bottom line

Volunteer directors serve under real, enforceable duties — but the law in most places is built to protect directors who act honestly, do their homework, and stay inside their authority. Personal liability clusters around a narrow set of behaviors a well-run board simply doesn't engage in. Build the protection, and the fear that opened this post stops being what decides whether your board can self-manage. For the broader picture, is it legal to self-manage an HOA? and how self-managed boards stay compliant are the natural next reads, and HOA board member roles explained covers who owns which piece of it.

Staying within authority comes down to one thing: knowing what your own documents require before you act. That's what BoardPath is built for — the cited, hierarchy-aware brain that tells a self-managing board what its CC&Rs, bylaws, and rules actually require and which one controls, so a board member can ask "does this fine need a hearing first?" or "can the board adopt this rule?" and get an answer sourced from the board's own governing documents instead of a guess that drifts outside authority. It's not a replacement for counsel on anything that turns legal — it's the system that keeps the routine calls from ever getting there. See it in the live demo, or join the founding cohort if your board is already weighing the exit.