A board of directors is the small group of people legally responsible for steering an organization and protecting its interests. Think of it as the company’s guardian and compass: it sets direction, hires and evaluates the CEO, approves major decisions and budgets, oversees risk and compliance, and ensures the enterprise is run for the long-term benefit of its owners and stakeholders. The board does not manage day-to-day operations—that is management’s job—but it sets the rules of the game, asks the hard questions, and holds leadership to account with a fiduciary duty of care, loyalty, and good faith.
This article explains how boards work in practice and what the law expects of directors. You will learn the difference between board and management roles, common board structures (including one-tier and two-tier models used in the Netherlands and elsewhere), who sits on a board and why independence matters, and the core decision rights boards hold. We cover committees, meetings, conflicts of interest, risk, GDPR and cybersecurity oversight, director liability and D&O insurance, and special Dutch rules for BVs/NVs, works councils, and the Corporate Governance Code. Whether you are a founder, investor, executive, or nonprofit trustee, you’ll find a practical checklist and guidance on when to seek legal advice.
What a board of directors is and how it fits into corporate governance
The role of the board of directors is to serve as the organization’s governing body with fiduciary oversight. In corporate governance, it sits at the apex of the system of rules, practices, and controls that direct the company. Elected by shareholders in public companies and empowered by the articles and bylaws, the board sets strategy, appoints and evaluates the CEO, approves major capital and M&A decisions, and oversees risk, reporting, and ethics. Independent directors and board committees anchor accountability and long-term value creation.
Board versus management: dividing responsibilities clearly
Boards govern; management runs the business. The role of the board of directors is to set direction and safeguard integrity, while executives execute. Whatever the structure, the board acts as fiduciary, appoints and evaluates the CEO, defines risk appetite and capital priorities, and holds management accountable through independent oversight and reporting.
- Board: approve strategy/budgets; decide M&A and dividends; set pay policy; oversee risk, compliance, audit.
- Management: propose plans; run operations; manage people and controls; produce accounts; implement policies.
Board structures: one-tier vs two-tier (Netherlands and beyond)
Board structure shapes how oversight happens. In a one-tier (unitary) board, executives and non-executive/independent directors sit on a single board: management proposes and executes, while non-executives provide challenge, form committees, and hold the CEO to account. In a two-tier model, a management board runs the company and a separate supervisory board appoints, oversees, and approves major decisions but does not manage operations. The Netherlands permits both for BVs and NVs; many Dutch and German companies use two-tier, while US/UK markets favor one-tier.
Board composition and key roles (chair, CEO, independent and non-executive)
Effective board composition balances skills and independence. Many boards have five to ten directors; listed companies require a majority of independent directors and independent membership on key committees (per NYSE/Nasdaq rules). Boards mix executive (inside) directors—often the CEO—with non‑executive and truly independent directors to bring outside judgment and minimize conflicts.
- Chair: Sets the agenda, leads meetings, forms committees, and ensures board effectiveness.
- CEO (executive): Runs operations and proposes strategy/budgets; in some companies also serves as board chair.
- Independent non‑executives: Provide objective challenge, reduce conflicts of interest, and often chair audit, remuneration, and nomination committees.
Core duties and fiduciary obligations of directors
At the heart of the role of a board of directors are fiduciary duties owed to the company (and, in public firms, its shareholders). Directors must exercise the duty of care by being well‑informed, diligent, and probing; the duty of loyalty by putting the company’s interests first and managing conflicts; and the duty of good faith by acting lawfully and ethically. These obligations anchor independent oversight of strategy execution, risk and internal controls, accurate financial reporting, compliance, and executive performance—especially during major transactions or crises.
- Duty of care: Prepare, attend, question, and seek expert input.
- Duty of loyalty: Disclose conflicts, recuse where required, avoid self‑dealing/insider trading.
- Good faith and compliance: Ensure lawful, ethical operations and policies.
- Risk and reporting oversight: Set risk appetite; monitor controls and fair, balanced reporting.
- Accountability and transparency: Document decisions and communicate responsibly to stakeholders.
Powers and decision rights: what boards can and cannot do
A board’s authority comes from law, the articles of incorporation, and the bylaws. The role of the board of directors is to make high‑impact, long‑horizon decisions about strategy, leadership, capital, and oversight—not to run day‑to‑day operations.
- Set direction and risk appetite: Approve strategy, budgets, and key policies.
- Appoint and hold leaders to account: Hire, evaluate, compensate, and remove the CEO and senior executives.
- Authorize major transactions: Green‑light M&A, significant investments, asset sales, and financing.
- Safeguard reporting and controls: Oversee financials, audit, and compliance; approve plans and equity/compensation policies as permitted.
- Shape governance: Create committees, internal regulations, and ethics standards.
Boards cannot micromanage operations or overstep matters reserved to shareholders (for example, adopting annual accounts in many jurisdictions) and must act within their fiduciary duties and applicable listing or governance requirements.
Board committees: audit, remuneration, nomination, risk/ESG
Committees extend the role of the board of directors by focusing expertise on complex topics. Listed companies staff key committees with independent directors. Each works under a charter, reports to the board, and strengthens oversight without diluting collective responsibility.
- Audit: Oversees reporting, internal controls, and external auditor independence.
- Remuneration: Sets CEO pay, incentives, equity plans; ensures pay‑performance.
- Nomination/Governance: Shapes board composition, independence, succession, evaluations.
- Risk/ESG: Oversees enterprise risk, cybersecurity/privacy, climate and sustainability.
Appointment, tenure, and removal of directors
Directors are appointed under the articles and bylaws and applicable law. In public companies, candidates are typically nominated by the board’s nomination committee or by investors and elected by shareholders at the annual meeting. Tenure is defined in the bylaws; many boards use staggered terms to promote continuity while allowing periodic refresh.
- Private companies: Appoint directors as set out in bylaws or shareholder agreements.
- Independence: Listed companies must meet exchange rules (e.g., independent majorities, independent committees).
- Removal: By shareholder vote or under bylaw mechanisms for cause (e.g., fiduciary breaches).
- Re‑election: Directors stand for shareholder approval upon term expiry (often on a staggered basis).
Board procedures: meetings, quorum, voting, and minutes
Board procedures are set by law, the articles, and bylaws, and coordinated by the chair and secretary. Meetings follow an annual calendar (often quarterly), with timely board papers, and are held as permitted by the bylaws. A valid quorum usually means a majority of directors; each director has a voice and a vote for defensible decisions.
- Notice and agenda: The chair convenes meetings, sets the agenda, and ensures materials are circulated in advance.
- Minutes and records: The secretary records resolutions and any dissent; minutes are signed (typically by chair and secretary) and kept in the minute book.
Conflicts of interest and independence safeguards
The role of the board of directors includes preventing and handling conflicts of interest—situations where a director’s personal, financial, or stakeholder ties could compromise judgment. The duty of loyalty demands timely disclosure, documented recusals, and independent review (often by a majority‑independent board and independent audit, remuneration, and nomination committees as required by NYSE/Nasdaq). Robust safeguards include a related‑party transactions policy, prohibition on using insider information, annual independence attestations, and minutes that record disclosures and abstentions.
Risk oversight, compliance, and ethics (including GDPR and cybersecurity)
The role of the board of directors includes setting risk appetite and ensuring that robust systems manage risk, compliance, and ethics. Directors do not operate controls; they require evidence that management and independent committees identify, assess, and mitigate financial, legal, operational, privacy (GDPR), and cybersecurity risks. They expect fair, balanced reporting, credible remediation, and a culture that supports lawful, ethical conduct.
- Approve frameworks: Enterprise risk policy, compliance program, and code of conduct with speak‑up channels.
- Demand visibility: Regular dashboards on key risks, incidents, investigations, and regulatory changes.
- Protect data: GDPR‑aligned privacy governance, security hygiene, testing, and incident response planning.
- Oversee third parties/ESG: Supplier risk and emerging stakeholder obligations.
- Ensure crisis readiness: Clear escalation, crisis team roles, and documented post‑incident reviews.
Director liability and protections (including D&O insurance)
Directors can face personal civil and regulatory liability for breaches of fiduciary duty, misleading disclosures, failure of oversight on risk/compliance, conflicts of interest, or misuse of insider information or funds. Shareholders and regulators may investigate, remove, or sue; criminal exposure can arise for fraud or insider trading. Protections include lawful company indemnification, advancement of defense costs, disciplined processes, and dedicated directors’ and officers’ (D&O) insurance.
- D&O insurance basics: Side A (non‑indemnifiable loss), Side B (company reimbursement), Side C (entity securities claims).
Special considerations under Dutch law (BV/NV, works council, governance code)
Dutch companies most often take the form of a BV (private limited) or NV (public limited). Both can adopt either a one‑tier board (executives and non‑executives together) or a two‑tier model (separate management board and supervisory board). Dutch law and market practice add several governance features boards should heed.
- Works council (WOR): In qualifying companies, the works council has statutory consultation rights on major decisions and, in certain larger companies, influence over supervisory board appointments.
- Large company regime (structuurregime): Triggers enhanced powers for the supervisory board and specific appointment procedures.
- Dutch Corporate Governance Code: Applies on a “comply or explain” basis to listed companies, emphasizing independence, balanced remuneration, risk control, and transparent reporting.
Boards in nonprofits, foundations, and family businesses
Boards in nonprofits and foundations (often “trustees”) govern in service of a mission rather than shareholders. They set strategy and budgets, safeguard assets and public trust, oversee compliance and ethics, and frequently supervise fundraising; many members serve without pay. In family businesses, boards combine proprietary (owner) directors with independent voices to balance family interests with business performance. Whether advisory, one‑tier, or supervisory, they professionalize decision‑making, support long‑term continuity, manage conflicts of interest, and add accountability without displacing day‑to‑day management.
ESG and stakeholder expectations shaping modern boards
Stakeholder capitalism has raised the bar for accountability. Investors (including activists), employees, regulators, and the media now expect boards to lead on environmental, social, and governance priorities, not just approve them. As part of the role of the board of directors, ESG is treated as long‑term value and risk management, with transparent, fair, and balanced reporting to build trust.
- Climate and environmental risk: Integrate climate risks and goals into strategy and risk appetite.
- Human capital and inclusion: Oversee culture, safety, diversity, and succession.
- Ethics, data, and supply chain: Ensure privacy/cybersecurity and responsible sourcing.
- Pay and incentives: Align executive remuneration with sustainable performance.
- Stakeholder engagement and disclosure: Evidence‑based, balanced ESG reporting and dialogue.
A practical governance checklist for directors
Use this quick checklist to keep the role of the board of directors focused on oversight, not operations. Align with your articles/bylaws and applicable codes. Review at least annually and document decisions and any dissent.
- Board calendar & agendas: Annual plan; timely board papers.
- Independence & conflicts: Skills matrix; disclose, recuse, minute.
- Strategy, risk & reporting: Approve plans; fair, balanced oversight.
- CEO pay & succession: Evaluate performance; align incentives; pipeline.
- Committees & charters: Audit, remuneration, nomination, risk/ESG.
- Data, GDPR & cyber: Policies, testing, incident playbook.
- Stakeholder engagement: Shareholders, works council, regulators.
- D&O, indemnities & training: Coverage in place; onboarding; evaluations.
When to seek legal advice on board matters
Seek counsel early to prevent duty breaches, void resolutions, and regulatory or shareholder fallout. In the Netherlands, boards of BVs/NVs should obtain independent legal advice for conflicts of interest or related‑party deals, M&A and major financings, director appointments/removals or board deadlock, works council consultation and structuurregime questions, investigations and whistleblowing, GDPR/cyber incidents, and market‑sensitive disclosures or dividend decisions.
Conclusion
Strong boards make better companies. When directors understand their duties, powers, and limits, they sharpen strategy, strengthen controls, and build trust with shareholders, employees, and regulators. The board’s role is stewardship, not operations—setting direction, appointing and challenging leadership, safeguarding reporting and risk, and ensuring lawful, ethical conduct.
If you are forming a board, refreshing membership, or facing a pivotal decision—M&A, remuneration, conflicts, works council consultation, GDPR/cyber oversight, or D&O coverage—get tailored advice before you act. Clear charters, robust procedures, and documented judgments are your best protection. For practical, cross‑border support under Dutch law for BVs/NVs and international groups, speak with our governance and corporate specialists at Law & More. We help boards operate effectively, document decisions properly, and resolve disputes quickly—so you can focus on long‑term value.