Halvorsen & Reith

D&O cover gap review in Cyprus: scope and consequences

There is no statutory requirement in Cyprus for a company to carry directors' and officers' liability insurance. The gap that matters is not the absence of a mandate but the limit built into the indemnity a Cyprus company is permitted to give its own directors, and confirming where that limit falls before a claim arrives is what a D&O cover gap review in Cyprus actually does.

Picture a Cyprus subsidiary of a foreign group, three years old, whose articles contain a standard indemnity clause copied from the parent's template. No one has checked whether that clause covers negligence or only defence costs, and no board minute records a decision on insurance either way. The gap sits between what the articles promise and what the law allows the company to honour.

This page sets out what drives that check in Cyprus, what becomes visible on the public record once a director is appointed or removed, and where the advisory work stops.

What changes in Cyprus for a D&O cover gap review

Cyprus company law permits a company to indemnify a director against liability incurred in defending proceedings, but the indemnity cannot extend to liability for negligence, default, breach of duty or breach of trust once that liability has been established by judgment against the director, unless insurance is in place to answer for it. 01 That single distinction is the reason the review exists. An indemnity clause reads the same whether or not cover sits behind it, and the board that has never tested the distinction has no way of knowing which version of the clause it is actually relying on.

A director who breaches a statutory duty under the Companies Law can face personal liability for the resulting loss, and that exposure runs independently of whatever the articles say about indemnification. 02 Where the indemnity cannot bite because no judgment-stage cover exists, the loss lands on the director personally, and the company's promise in the articles turns out to have been aspirational rather than operative. This is the point at which a group discovers, usually at the worst possible moment, that the indemnity clause and the insurance policy were never the same instrument.

Cyprus company law does not itself require directors' and officers' liability insurance. 03 The absence of a mandate is often read as the absence of a problem. It is the opposite: because nothing forces the question, no one asks it until a claim, a regulatory inquiry, or a due diligence exercise on a sale forces it instead. A review that confirms the answer in writing, before either of those events, is cheaper than discovering the gap during one of them.

The local requirement or test that drives the work

The test the review applies is narrow and mechanical, which is why it can be done properly rather than impressionistically. First: does the company's constitution, or a board resolution, purport to indemnify directors for breach of duty, not merely for the cost of defending a claim. Second: is there insurance in force that would respond if a court found against a director on the merits. Third: does the scope of that insurance, where it exists, actually match the class of claim the indemnity purports to cover, including claims brought by the company itself, a liquidator, or a shareholder acting derivatively.

Each answer is binary, and a "no" at any stage tells the board something specific rather than something vague. A "no" at the first stage means the articles are silent and the director has whatever protection the general law gives, no more. A "no" at the second stage means the indemnity is legally unenforceable for the class of claim that actually matters. A "no" at the third stage is the most common finding in practice: cover exists, but it excludes claims brought by the company against its own directors, which is precisely the claim a liquidator or an incoming shareholder is most likely to bring.

Directors' duties and personal liability under Cyprus law do not turn on whether the company is foreign-owned, listed, or a wholly domestic private company; the statutory duties attach to the office, not to the shareholding structure above it. Doing business in Cyprus through a locally incorporated vehicle means the board of directors of that vehicle carries this exposure directly, and a parent company's own insurance arrangements, wherever they are written, do not automatically extend to cover a Cyprus subsidiary's directors unless the policy names them.

The filing or register consequence in Cyprus

The Registrar of Companies maintains a public register of directors and secretaries, and any change to who holds those offices must be filed and becomes visible on the register once processed. 04 A director who resigns, or is removed, after a governance failure has surfaced does not disappear from the historical record; the filing that removes them from the current register does not erase the period during which they held office and the duties that attached to it. Once the filing is made, the sequence of who was in office when a decision was taken is fixed on the public record, and a claimant reconstructing that sequence later works from the register, not from internal memory.

Cyprus also maintains a beneficial ownership register, parts of which are accessible to competent authorities and, within limits, to the public. 05 A gap in D&O cover does not itself trigger a beneficial ownership disclosure, but the two registers are read together by a counterparty conducting due diligence on a Cyprus target: an inconsistent or thin director history, combined with no visible insurance arrangement, is exactly the pattern that turns a routine disclosure exercise on a sale into a longer one. What was a private governance question becomes visible to a buyer's lawyers the moment the data room is opened, and by then the timing for fixing it has already closed.

None of this depends on a statutory filing deadline unique to insurance; there is none. The consequence is structural rather than procedural, which is why a review conducted on the group's own timetable, rather than in response to a transaction or a claim, is the version that actually works.

What this service does not include in Cyprus

The review does not include acting as, supplying, sourcing or arranging a director, secretary, nominee shareholder or trustee for the Cyprus entity, and it does not include any activity for which a trust or corporate service provider licence is required. In Cyprus, providing administrative services of that kind to third parties is a regulated activity supervised by the Cyprus Securities and Exchange Commission, and arranging for a person to act as director for a company outside one's own group falls within that regulation. 06 That boundary is a licensing condition, not a matter of firm preference, and it holds regardless of how the engagement is described commercially.

What the client receives instead is the mapped position: the indemnity clause read against the statutory limit, the insurance policy (where one exists) checked against the class of claim it needs to answer, the register entries checked for gaps or inconsistencies, and a written statement of where the exposure currently sits. Where a director appointment is being reviewed rather than made, the appointment terms themselves are examined against this same standard.

The D&O cover gap review service page sets out the same work at practice level, across jurisdictions; the local test above is what changes when the entity being reviewed is incorporated in Cyprus rather than elsewhere. A comparative view of how this exposure differs by jurisdiction sits in this comparison of director liability positions, and the underlying documents a board should have to hand before commissioning the review are listed in this note on what to gather first. Where the entity's constitutional arrangements are the live question rather than its insurance position, the Cyprus brief on shareholder agreement enforceability is the adjacent piece, and the same test applied to a different jurisdiction is set out in the Delaware version of this review.

Frequently asked questions

What happens if a D&O cover gap review in Cyprus is not carried out?
The gap does not announce itself until a claim, a liquidator or a buyer's due diligence team goes looking for the answer. At that point the board discovers whether the indemnity was ever backed by insurance, and it discovers this at the least convenient moment, with the director's personal liability already in issue rather than merely theoretical.
How often should this review be repeated?
It should be repeated whenever the board changes, whenever the insurance policy is renewed or replaced, and before any transaction that will put the company's records in front of an outside party. A review done once at incorporation and never revisited answers a question that has usually changed by the time anyone reads it.
Does the position change for a foreign-owned company?
The statutory duties attach to the office of director in Cyprus regardless of who holds the shares above it. A parent company's own insurance, written on a foreign policy, does not automatically extend to a Cyprus subsidiary's directors unless they are named on it, which is a common and avoidable gap in group structures.
What does the review actually require from the client in practice?
The current articles of association, any board resolutions on indemnification, the insurance policy documents if any exist, and the current register of directors and secretaries. Where any of these is missing, that absence is itself part of the finding, not a reason to delay the review.
Who inside the company is responsible for confirming the position?
The board of directors is responsible for satisfying itself of the position; the duty cannot be delegated away by leaving it to whichever director drafted the original indemnity clause. A common misconception is that a director's role is largely formal in a subsidiary structure. The statutory exposure attaches to the individual holding office, not to how active or nominal the group considers the role to be.

A board that has never tested its own indemnity clause against the insurance sitting behind it is carrying a disclosure exposure it cannot currently describe. Once that exposure becomes visible to a buyer's lawyers or a liquidator, the position is fixed on the record and can no longer be corrected quietly.

Assess your director exposure

Write to info@hreithlaw.com with the jurisdiction and the structure.

By Amara Diallo