CORPORATE GOVERNANCE | 2026-10-14

Caremark Oversight Liability: When Directors Are Personally Liable for Failing to Monitor the Company — and How Marchand Revived the Claim

A Caremark claim holds directors personally liable for a sustained failure to oversee the corporation — historically called the hardest claim in corporate law to win. But Marchand v. Barnhill and the cases that followed have given the doctrine new force, especially where a board ignores a mission-critical risk. Here is what the duty of oversight requires and when it is breached.

Directors do not run the day-to-day business, but they are responsible for making sure the corporation has systems to catch serious problems before they become catastrophes. When a board utterly fails in that responsibility — and the company suffers a disaster that proper oversight would have caught

Corporate catastrophes — a deadly product-safety failure, a massive compliance breakdown, a fraud that festered for years — frequently prompt the question: where was the board? Delaware law answers that directors have an affirmative duty to make a good-faith effort to oversee the corporation, and that a sustained or systematic failure to do so can expose them to personal liability. This is the Caremark duty of oversight. Long considered nearly impossible to enforce, it has been revitalized in recent years, and it now imposes real obligations on boards to monitor the risks most central to their companies. This article explains the doctrine and its modern application.

The Origin: In re Caremark

The duty of oversight was articulated by the Delaware Court of Chancery in In re Caremark International Inc. Derivative Litigation (1996) 698 A.2d 959. Caremark held that directors have an obligation to attempt in good faith to assure that a corporate information and reporting system exists, and that the failure to do so — under some circumstances — could render a director liable for losses caused by non-compliance with legal standards. The court was careful to frame the standard as a demanding one: liability requires a sustained or systematic failure of the board to exercise oversight, such as an utter failure to attempt to assure a reasonable information and reporting system exists. Caremark thus located the duty of oversight within the directors’ fiduciary responsibilities and set a high bar, reflecting Delaware’s general reluctance to hold directors personally liable for business outcomes.

Stone v. Ritter: Oversight as a Duty of Loyalty and Good Faith

The Delaware Supreme Court adopted and refined the Caremark standard in Stone v. Ritter (Del. 2006) 911 A.2d 362. Stone v. Ritter grounded the oversight duty in the duty of loyalty, holding that the failure to act in good faith is a necessary condition for oversight liability. The court articulated the now-familiar two-pronged test: directors can face oversight liability where (a) they utterly failed to implement any reporting or information system or controls, or (b) having implemented such a system, they consciously failed to monitor or oversee its operations, thus disabling themselves from being informed of risks or problems requiring their attention. In either case, imposition of liability requires a showing that the directors knew they were not discharging their fiduciary obligations — a scienter-like element of bad faith. Because oversight liability is a loyalty violation requiring bad faith, it is not exculpated by the charter provisions (authorized by Delaware law) that shield directors from monetary liability for duty-of-care violations. This is what makes a Caremark claim potent: it survives the exculpation clause that defeats ordinary negligence claims against directors.

The Two Prongs of a Caremark Claim

The modern Caremark claim therefore comes in two varieties. A prong-one (or “Information-Systems”) claim alleges that the board failed to establish any reasonable system to monitor and report on the risk at issue — that the board had no committee, no protocol, no regular reporting on a critical area. A prong-two claim alleges that the board had a monitoring system but consciously ignored red flags that the system surfaced — that the directors knew of serious problems and did nothing. Both prongs require proof of bad faith: a conscious disregard of the duty to oversee, not mere negligence or a reasonable but mistaken business judgment. The distinction matters for how a claim is pleaded and proven, and prong-one claims — focused on the absence of any board-level system for a central risk — have been the vehicle for most of the recent successful cases.

Marchand v. Barnhill: The Revival

For years, Caremark claims were dismissed almost reflexively. That changed with Marchand v. Barnhill (Del. 2019) 212 A.3d 805, arising from a listeria outbreak at an ice-cream manufacturer that killed three people. The Delaware Supreme Court held that the complaint stated a Caremark claim because the board had made no effort to put in place a board-level system to monitor food safety — the single most central, mission-critical compliance risk for a company whose only product was a food. The court emphasized that while directors may rely on management for day-to-day operations, the board itself must make a good-faith effort to oversee the risks that are essential and mission critical to the company’s operations, and that where a company’s central compliance risk is concerned, the board cannot simply be passive. Marchand reinvigorated Caremark by making clear that a board’s total failure to address a mission-critical risk — even without evidence of self-dealing — can support oversight liability. It shifted the practical focus to whether the board had any genuine, board-level system for monitoring the company’s most important risks.

The Progeny: Clovis, Boeing, and the Mission-Critical Focus

Marchand was followed by a line of Chancery decisions sharpening the mission-critical theme. In In re Clovis Oncology, Inc. Derivative Litigation (Del. Ch. 2019), the court sustained a Caremark claim where a board of a monoline pharmaceutical company allegedly ignored red flags about the company’s compliance with clinical-trial protocols for its sole product in development. In In re The Boeing Co. Derivative Litigation (Del. Ch. 2021), the court sustained claims arising from the 737 MAX crashes, finding the board had no committee charged with airplane safety and received no regular safety reporting — again a failure to oversee the mission-critical safety risk of an aircraft manufacturer. These cases establish a pattern: where a risk is central to the company’s business and people’s safety or the enterprise’s survival depends on it, Delaware expects the board to have a dedicated, functioning oversight system, and the absence of one can state a claim. The decisions also underscore that board minutes and records showing genuine attention to the risk are often decisive evidence in the company’s favor.

Why Delaware Law Governs for California Investors

Most large public companies are incorporated in Delaware, and under the internal affairs doctrine — which California courts follow — the fiduciary duties of directors to the corporation and its shareholders are governed by the law of the state of incorporation. So a California shareholder evaluating whether a board can be held accountable for an oversight failure is almost always applying Delaware law — Caremark, Stone v. Ritter, Marchand, and their progeny — not California corporate statutes. This is why these Delaware decisions matter directly to California investors and to the directors of Delaware companies who live and work in California. (California’s own corporations law imposes fiduciary duties as well, but the controlling oversight-liability framework for a Delaware corporation is Delaware’s.)

Books-and-Records Demands as the Starting Point

Because a Caremark claim requires pleading particularized facts showing bad-faith failure of oversight, and because derivative plaintiffs must usually plead demand futility, the practical starting point is almost always a books-and-records demand under Delaware General Corporation Law § 220. A § 220 demand lets a stockholder inspect board-level materials — minutes, committee charters, management reports — to determine whether the board had and used an oversight system. Delaware courts have repeatedly encouraged plaintiffs to use § 220 before filing a Caremark suit, and the records obtained often make or break the claim: minutes showing regular, substantive board attention to the risk defeat the claim, while their absence supports it. A disciplined plaintiff investigates the board’s actual oversight record through § 220 before pleading.

Red Flags and the Prong-Two Claim

While most recent successful cases have been prong-one claims about the absence of any oversight system, prong-two claims — conscious disregard of red flags — remain important and are often harder to plead. A red flag is information that reaches the board (or should have), signaling a serious problem that demands attention. The classic prong-two case alleges that the board received repeated warnings — regulatory findings, whistleblower reports, failed audits, recurring compliance failures, litigation patterns — and did nothing. The difficulty for plaintiffs is proving that the directors actually knew of the red flags and consciously chose to ignore them, rather than merely failing to appreciate their significance, because conscious disregard (bad faith) is required. This is why books-and-records inspections are so important: board minutes and management presentations may show that warnings were presented to the board, which supports an inference of conscious disregard if the board then failed to act. Courts distinguish between a board that engaged with a problem but made an imperfect judgment (protected) and a board that was presented with evidence of serious wrongdoing and turned a blind eye (exposed). The line between the two is where prong-two litigation is fought.

Practical Oversight: Committees, Reporting, and Documentation

The Marchand line of cases has a clear operational message for boards about how to discharge the oversight duty and, not incidentally, how to build a record that defeats a future claim. Effective oversight of a mission-critical risk typically includes a board committee or defined board responsibility charged with that risk; a regular reporting cadence under which management brings the board substantive information about the risk, not just financial results; documented board engagement showing the directors asked questions, received answers, and followed up; and a protocol for escalation so that serious problems reach the board rather than being buried below it. The Boeing and Marchand decisions both turned in part on the absence of any board-level committee or regular reporting dedicated to the central safety risk. A board that can show, through its minutes and materials, that it identified its mission-critical risks and maintained genuine systems to monitor them has made the good-faith effort the law requires, and it has created the contemporaneous record that is the single best defense to a Caremark claim. The lesson is that oversight must be real and documented, not assumed.

What This Means for Boards and Directors

For directors, the modern Caremark doctrine is a call to action. The lesson of Marchand and its progeny is that a board must identify the risks that are mission-critical to the company — product safety, regulatory compliance, financial controls, and the like — and ensure there is a genuine, board-level system to monitor them: a responsible committee, a regular reporting cadence, documented attention, and a protocol for escalating red flags. The point is not perfection; a board that makes a good-faith effort to oversee and reasonably relies on the systems it has established is protected even if problems occur. The exposure arises from abdication — no system, or conscious disregard of warnings. Well-advised boards build and document their oversight of central risks precisely to establish the good-faith effort that defeats a Caremark claim.

Remedies and the Derivative Posture

A Caremark claim is typically brought derivatively — on behalf of the corporation against its directors — because the harm (the losses from the oversight failure) is to the company. A successful claim can result in a recovery to the corporation, governance reforms, and, because oversight liability is a loyalty/bad-faith violation, personal liability for directors that the exculpation clause does not shield. The derivative posture brings its own requirements, including demand futility and the special-litigation-committee dynamics that attend derivative suits. For shareholders, the value of a Caremark claim lies both in the potential recovery and in forcing the governance reforms that prevent the next failure.

How Trembach Law Firm Helps

Our firm advises California shareholders and directors on Delaware oversight liability. For investors, we evaluate whether a corporate disaster reflects an actionable failure of board oversight under Caremark, Stone v. Ritter, and Marchand, pursue books-and-records inspections under DGCL § 220 to build the record, and assess the demand-futility and derivative requirements. For directors, we advise on building and documenting the board-level systems that monitor mission-critical risks and establish the good-faith effort that defends against a claim. Our aim is to hold boards accountable where oversight truly failed and to help conscientious boards protect themselves.

• Securities & Corporate Governance News
• Private Equity Fund Formation: California GP Attorney Guide 2025
• Entire Fairness After Weinberger v. UOP: How California Shareholders Challenge Controlling-Stockholder Cash-Out Mergers
• Due Diligence Fundamentals: A California Buyer's Guide to M&A Risk Assessment

Frequently Asked Questions

What is a Caremark claim?

It is a claim that directors breached their duty of oversight — a component of the duty of loyalty — by failing to make a good-faith effort to monitor the corporation. It comes from In re Caremark (1996) 698 A.2d 959 and was adopted by the Delaware Supreme Court in Stone v. Ritter (2006) 911 A.2d 362. It can expose directors to personal liability.

What are the two ways to breach the duty of oversight?

Under Stone v. Ritter: (1) the directors utterly failed to implement any reporting or information system or controls, or (2) having implemented one, they consciously failed to monitor or oversee its operations, disabling themselves from learning of risks. Both require bad faith — a conscious disregard of the duty, not mere negligence.

Why is a Caremark claim considered so hard to win?

Because it requires proving bad faith — that the directors consciously disregarded their oversight duty — which is a demanding standard, and derivative plaintiffs must plead particularized facts and demand futility. For decades almost all such claims were dismissed. Marchand v. Barnhill (2019) revived the doctrine and more claims now survive dismissal.

What did Marchand v. Barnhill change?

Marchand (Del. 2019) 212 A.3d 805 held that a board’s total failure to establish any board-level system to monitor a mission-critical risk — there, food safety at an ice-cream company after a deadly listeria outbreak — can state a Caremark claim, even without self-dealing. It refocused the doctrine on whether the board actively oversees the risks central to the company’s business.

What does “mission critical” mean?

It refers to the risks most central to a company’s operations and survival — for a food company, food safety; for a drug company, clinical-trial compliance; for an aircraft maker, airplane safety. The Marchand line (including Clovis and Boeing) holds that boards must have dedicated, functioning systems to oversee these central risks, and the absence of one can support liability.

Why can’t directors use the exculpation clause to defeat these claims?

Because oversight liability is grounded in the duty of loyalty and requires bad faith, and Delaware charter provisions can exculpate directors only for duty-of-care (negligence) violations, not loyalty or bad-faith violations. That is what makes a Caremark claim potent — it survives the clause that defeats ordinary care-based claims.

How do shareholders investigate a potential Caremark claim?

Usually by first making a books-and-records demand under DGCL § 220 to inspect board minutes, committee charters, and management reports. These records show whether the board had and used an oversight system. Delaware courts encourage using § 220 before filing, because the records often determine whether the claim is viable.

Does Delaware law apply if the company operates in California?

Yes, if it is incorporated in Delaware. Under the internal affairs doctrine, which California follows, the law of the state of incorporation governs directors’ fiduciary duties, so a California investor evaluates an oversight-failure claim under Delaware’s Caremark framework. Call Trembach Law Firm at (818) 514-7680 for an evaluation.

Talk to a California Corporate Lawyer About Oversight Liability

When a corporate disaster traces to a board that failed to monitor the risks central to the business, Delaware’s Caremark doctrine — reinvigorated by Marchand — can hold the directors personally accountable. Trembach Law Firm, led by Anatolii Trembach (LL.M.; admitted in California), helps California shareholders evaluate oversight claims and helps directors build the systems that defend against them. Call (818) 514-7680 for a confidential consultation.

Contact Trembach Law Firm at (818) 514-7680 for a confidential consultation.

Trembach Law Firm | 27001 Agoura Road, Suite 350, Calabasas, CA 91301