Are nominee directors personally liable in Cyprus?

Yes. Section 2 of the Cyprus Companies Law (Cap. 113) defines a director as 'any person occupying the position of a director by whatever name called.' There is one definition. De jure, de facto, shadow and nominee directors are all in scope, and the same statutory duties, fiduciary duties and common-law duty of care apply. A nominee director carries the same personal liability as any other director under the Companies Law.

What is the difference between an executive and a non-executive director under Cyprus Companies Law?

At the level of the underlying duties, none. The Cyprus Companies Law does not distinguish executive, non-executive, independent or nominee directors. Distinctions arise in the Cyprus Stock Exchange Corporate Governance Code for listed companies and in the regulated-entity regimes of the Cyprus Securities and Exchange Commission (for Cyprus Investment Firms) and the Central Bank of Cyprus (for credit institutions), which mandate independent non-executive directors and board committees for regulated firms. The underlying personal duties under the Companies Law are undifferentiated.

What is a sole director responsible for in Cyprus?

For a sole director of a Cyprus private company, the full board-level duty rests on one person. Section 170 of the Cyprus Companies Law permits a sole director for private companies. The sole director carries the full collective duty of the board: there is no other director to share collective responsibility, no executive layer above to defer to, and the duty to acquire and maintain a sufficient understanding of the company's business is at its maximum demand. The sole-director configuration is the most exposed position on the spectrum of director roles.

Does 'I did not know' work as a defence for a Cyprus director?

Generally no. The common-law duty of care that Cyprus applies expects a director to acquire and maintain the knowledge necessary to perform the role. The operative standard derives from Re D'Jan of London Ltd [1993] BCC 646: the general knowledge, skill and experience reasonably expected of a person carrying out the same functions, raised by the actual knowledge of the specific director. Re Barings plc (No 5) [1999] 1 BCLC 433 and Equitable Life Assurance Society v Bowley [2003] EWHC 2263 confirm that non-executive directors have a continuing duty to inform themselves and cannot rely solely on management. The 'ought to have known' test is the operative one.

Does D&O insurance cover nominee directors in Cyprus?

Yes, subject to policy terms and standard exclusions. D&O policies in the Cyprus market typically extend to nominee directors alongside other directors. Standard exclusions apply for fraud, dishonesty, intentional wrongful acts, acts for personal profit or improper benefit, and acts exceeding granted authority. Side A coverage is the relevant component for nominee and non-executive directors because it pays the director directly where the company cannot or will not indemnify, including the case where Section 197 has voided the contractual indemnity. D&O insurance covers legitimate, in-scope wrongful acts arising despite diligent performance of the role. It does not cover the director who is not in a position to perform the duty in the first place.

Cyprus director duties: one law, one definition

Q: Can a Cyprus company indemnify its directors against liability?

No, in the cases that matter. Section 197 of the Cyprus Companies Law (Cap. 113) voids any provision in a contract or in the company's articles of association that purports to exempt a director from, or indemnify a director against, liability for negligence, default, breach of duty or breach of trust. The same section expressly permits the company to take out and maintain directors and officers (D&O) liability insurance for its directors. The law denies the contractual route and opens the insurance route.

People accept board seats with assumptions. A nominee director will be insulated because they are a nominee. A non-executive will be insulated because they are not executive. A director who did not know about the decision will be insulated by their absence. The Cyprus Companies Law does not see any of this.

One definition. Section 2 of the Cyprus Companies Law: any person occupying the position of a director by whatever name called. No distinction between executive and non-executive. No carve-out for nominees. No reduced standard for the absent.

The labels arise outside the Companies Law, in the Cyprus Stock Exchange Corporate Governance Code, in the Cyprus Securities and Exchange Commission's rulebooks for investment firms, in the Central Bank of Cyprus directives for credit institutions. They affect board composition and supervisory structure. They do not affect the underlying duty.

For the person being asked to take a board seat, the question is not which label minimises the risk. There are no labels that minimise the risk. There are different questions to ask, and they start with what the role actually is.

One definition, one duty

The Companies Law's definition is deliberately wide. It catches the formally appointed director. It catches the person who acts as a director without ever having been formally appointed. It catches the person in accordance with whose instructions the formally appointed directors are accustomed to act. It catches the nominee appointed by a shareholder to represent its interests on the board. The label is irrelevant. The position is the thing.

Three sets of duties attach. The Companies Law's own statutory duties: keep books, prepare accounts, file the annual return, declare interests in contracts. The fiduciary duties, drawn from English common law and applied in Cyprus through the Companies Law's English inheritance: loyalty to the company, acting in the company's best interests, no secret profits, no conflicts of interest, no fettering of future discretion. And the common-law duty of care, skill and diligence, which sets the standard against which any specific act or omission is measured.

None of the three depends on the label on the director's business card.

The duty of care, and what "ought to have known" means

The standard of care has two limbs that run together. The general knowledge, skill and experience that may reasonably be expected of a person carrying out the same functions as that director, plus the actual knowledge, skill and experience that the particular director happens to have. A director with more is judged by more. A director who is being asked to discharge a particular function is judged by the knowledge needed for that function. The Companies Law does not let the second limb pull the standard down. It only lets it raise it.

This is the source of the phrase that does most of the work in director-liability cases: "ought to have known". The duty of care does not cover only the facts a director was told. It covers the facts the director would have known if they had been performing the role properly. Non-executive directors learnt this in Re Barings, when the bank's board collectively failed to ask the right questions about its Singapore desk. Equitable Life v Bowley put it in one line: it is no longer good law that directors might leave the conduct of the company's business to competent management. In Lexi Holdings v Luqman, two non-executive directors were held jointly liable for tens of millions of pounds for failing to act on what they ought to have known about their executive brother's conduct.

The duty of care, in other words, includes a duty to inform oneself. Passive ignorance is not a defence.

The sole director, where every doctrine maxes out

Cyprus law permits a private company to have a single director. Section 170. This is also the configuration in which much of the international structuring industry operates: one Cyprus-resident director, often provided through a regulated administrative service provider, holding the management and control of the company in Cyprus for tax-residency, substance and banking purposes.

It is also the most exposed configuration on the spectrum. Every doctrine the article has touched so far reaches its maximum here. There is no other director with whom to share collective board responsibility. There is no executive layer above or below to defer to: the sole director is the executive layer. The "I deferred to colleagues" pivot does not exist. The "I was non-executive and not involved in day-to-day" pivot does not exist either. The "I was absent at that meeting" pivot does not exist either, because a meeting the sole director did not attend was, by definition, not a board meeting at all. The duty to acquire and maintain a sufficient understanding of the company's business sits on one person, undiluted, throughout the appointment.

Taking on a sole directorship is taking on 100 per cent of the board's responsibility. There is no one else on the board to share it.

The regulated overlay: structure helps, structure does not remove

For Cyprus Investment Firms and credit institutions, the governance frame is more structured than the Companies Law alone provides. The Cyprus Securities and Exchange Commission and the Central Bank of Cyprus require fit-and-proper assessments of every proposed director, mandate independent non-executive directors, prescribe board committees, and run their own supervisory and disciplinary processes. The structure is real, and it helps. Decisions get challenged in committees. Independent voices are formally separated from executive ones. The process documents the substance.

What the structure does not do is remove the underlying duty. The Cyprus Securities and Exchange Commission's decision of 25 August 2025 against the Cyprus Investment Firm Ayers Alliance Financial Group, publicly announced on 12 September 2025, is the clearest contemporary illustration. Personal sanctions were imposed on five directors, including five-year management bans on the two independent non-executive directors and administrative fines and ten- and five-year bans on the three executive directors. Independence and non-executive status were not a defence at the regulatory level. They sat on top of the duty under the Companies Law, not in place of it.

It is no longer good law that directors might leave the conduct of the company's business to competent management.

Section 197: what the law denies, and what it permits

The Companies Law has a precise position on a director being released from the consequences of their own conduct. Section 197 voids any provision in a contract or in the company's articles of association that purports to exempt a director from, or indemnify a director against, liability for negligence, default, breach of duty or breach of trust. The four things a director is most likely to be sued for are exactly the four things the Companies Law says cannot be written away by agreement.

The same section permits the company to take out and maintain directors and officers liability insurance for the benefit of its directors. The law denies the contractual route. It opens the insurance route.

There is also a deeper problem with contractual indemnities, the kind written into board appointment letters and shareholder agreements. A contractual indemnity from the company is only as good as the company's solvency. A contractual indemnity from a shareholder is only as good as the shareholder's solvency. When a director needs the indemnity, the company is often the reason. The shareholder is often in difficulty too. The indemnity is worth what its writer's balance sheet says it is worth at that moment.

Picture the worst case. The company is in default on its obligations and heading for insolvent winding-up. The shareholder who gave the back-stop indemnity is in personal bankruptcy. The Cyprus Tax Department is seeking personal recovery from the sole director for a substantial unpaid corporate tax liability, on the strength of one of the statutory provisions that pierces the limited-liability veil for director default. The contractual indemnities exist on paper. Nobody can honour them. The sole director is alone with the claim.

Insurance answers a different question. The first one is whether the role can be performed.

D&O insurance is the third-party transfer of risk that does not depend on the company's or the shareholder's solvency. The insurer is the counterparty; their balance sheet, not the company's, stands behind the cover. Side A of a typical policy pays the director directly where the company cannot or will not indemnify, including the case where Section 197 has voided the contract. Policies advance defence costs in real time. Cover follows wrongful acts within the policy's scope: negligence-based claims, errors and omissions, statutory claims that are not excluded.

But cover has limits, and the worst case from the previous section shows where the limits bite. Standard D&O wordings carve out civil tax liabilities and most statutory fines and penalties, both because of policy language and because the common-law position is that you generally cannot insure against statutory tax burdens. Defence costs might be advanced. The tax bill is not paid by the insurer either. The sole director who is alone with the claim is, on this kind of liability, also alone with the bill.

The other standard exclusions reach fraud, dishonesty, intentional wrongful acts, acts for personal profit or improper benefit, and acts exceeding the authority granted to the director. Insurance covers the director who is doing the job. It does not cover the director who is not.

And insurance does not buy capacity. A working nominee director sits, by definition, on a portfolio of companies that are not in the same business. Pharmaceuticals one day, foreign exchange the next, real estate the next, a software company, a family holding structure. They cannot be a specialist in all of these sectors at the same time. They cannot hold in their head the operational risk of each, week to week. The duty of care, however, does not bend to the breadth of the book. The standard expects the director to know what the role requires for this particular company. A director already responsible for thirty companies does not gain the ability to perform the duty on the thirty-first by adding cover. Insurance does not change what the duty asks.

The first question for someone being asked to accept a board seat is therefore not which policy to buy. It is whether the role can be performed for this company in particular, given everything else the person is already responsible for. If the answer is no, no policy fixes that. If the answer is yes, the steps that follow are familiar. Understand the role. Perform it. Then transfer the residual financial exposure to a third party.

In Cyprus law, a director is a director.Nominee, non-executive, sole: the duties are the same.