Cyprus Director's Duties and Directors & Officers Insurance 2026 — Personal Liability Map

1. Fiduciary duties (common-law-derived)

• Duty to act in good faith in the company's best interests.
• Duty of skill + care — the standard expected of someone with the director's actual + reasonable knowledge.
• Duty to avoid conflicts of interest.
• Duty not to make unauthorised profits.
• Duty to exercise independent judgment.
• Duty to consider creditors when the company is or may become insolvent.

2. Statutory duties under Companies Law Cap. 113

• File annual return HE32 + financial statements (Section 376+).
• Maintain books of account (Section 141+).
• Hold AGM (Section 125+).
• Maintain registers (members, directors, beneficial owners).
• Approve audited financial statements.
• Authorise dividend distributions only out of distributable profits.
• Notify Registrar of Changes (HE32, HE57 for share transfers, HE4 for officer changes).

3. Key personal-liability exposures

• AML breaches — Cyprus AML Law 188(I)/2007 imposes personal criminal liability on directors for failures in customer due diligence, suspicious-activity reporting, AML governance. Penalties: imprisonment + fines up to €1M per offence in egregious cases.
• Tax breaches — wilful tax evasion, false returns, failure to pay collected VAT / PAYE / social insurance trigger personal liability of directors under Cyprus Tax Law.
• Wrongful trading — continuing to trade when insolvent may trigger personal liability for incurred debts (Cyprus Companies Law + insolvency framework).
• GDPR breaches — Cyprus Data Protection Commissioner can fine the company up to 4% turnover; in egregious cases director's personal accountability is asserted.
• Health-and-safety on Cyprus premises — strict-liability framework can reach directors.
• Securities regulatory breaches (for CySEC-supervised firms) — personal sanctions including disqualification.

4. D&O insurance — what it covers

• Defence costs in civil + regulatory proceedings.
• Damages awarded against the director (where insurable).
• Investigation costs (regulatory inquiries, internal reviews).
• Reputational protection (some policies).
• Coverage limits typically €1M–€20M per claim / aggregate; case-by-case sizing.

5. D&O exclusions

• Wilful / dishonest acts (most policies exclude fraud).
• Fines + penalties (criminal fines generally not insurable as public policy).
• Personal benefit / profit gained unlawfully.
• Prior known claims (must disclose at policy inception).
• Conduct-of-business breaches (regulatory) — some D&O policies exclude or restrict regulatory coverage.
• Specific carve-outs by industry (financial services typically has tighter exclusions).

6. Practical D&O sizing for Cyprus directors

• Sole-director SaaS / consulting Ltd: typically €1-3M coverage.
• Mid-market operating company with multiple directors: €5-10M.
• CySEC-licensed CIF / EMI / PI / AIFM: €5-15M+ depending on AuM + activity.
• VC-backed scaling startup: €5-10M (often investor-mandated).
• M&A — extended reporting period / 'tail' coverage typically purchased post-completion.

Official verification starting points

Cyprus Registrar company lifecycle and Cyprus Registrar forms and guidance publish the controlling material for this topic. Check the current law, form, circular or portal instructions before acting; this article is general information and the live official material prevails.

Frequently Asked Questions

Share this article

Disclaimer: This article is for informational purposes only and does not constitute legal, tax, or financial advice. Tax laws change frequently. Consult a qualified Cyprus adviser for guidance specific to your situation. The information on this page is general guidance only and does not constitute legal, tax, accounting, immigration or financial advice. Specific advice should be obtained based on the facts of each case.