Director liability for reputation risk: what section 180 expects
Reputational harm sits inside the foreseeable harm a director must guard against under section 180 of the Corporations Act 2001 (Cth). The practical consequence is that a board is expected to measure reputation risk, monitor it, and keep a record of what it decided.
Australian directors carry a duty of care and diligence under section 180 of the Corporations Act 2001 (Cth). The courts have held that the foreseeable harm a director must guard against under that section extends beyond financial loss to the interests of the corporation generally, including its reputation.
This article is general information about directors duties in Australia and the governance practice around them. It is not legal advice, and a board should obtain its own advice on its specific circumstances.
Contrlr is an AI-powered reputation intelligence platform that scores, monitors, and predicts how an organisation is described, and records what the board saw and did about it. Director liability for reputation risk is the governance question that record answers.
What does section 180 require of a director?
Section 180(1) requires a director or officer to exercise their powers and discharge their duties with the degree of care and diligence that a reasonable person would exercise in that position.
In the Storm Financial litigation, the Federal Court considered the scope of harm inside that test. As MinterEllison records in its case note on the appeal, the foreseeable risk of harm under section 180(1) is not confined to financial harm and extends to all the interests of the corporation, with reputation among them.
The duty is assessed by balancing the foreseeable risk of harm, meaning its magnitude and likelihood, against the burden of taking action to reduce it. That balance is what makes measurement relevant: when the risk is foreseeable and the tools to monitor it are inexpensive and available, the burden of acting is low.
Reputational harm sits inside the harm a director must anticipate under section 180 of the Corporations Act. Because reputation can now be measured continuously and monitored at low cost, a board that does neither is making a harder argument that its oversight was reasonable in the circumstances.
What did the Star Entertainment judgment settle?
In December 2022, ASIC commenced proceedings against 11 current and former directors and officers of The Star Entertainment Group, alleging breaches of the duty of care and diligence.
The Federal Court delivered judgment on 5 March 2026. As the Australian Institute of Company Directors records, the court found that the former Chief Executive Officer and the former Chief Legal and Risk Officer had breached section 180(1) in relation to some of the conduct alleged, while the claims against the non-executive directors failed.
Two lessons sit inside that split outcome. Executive proximity to the information carries weight, because those closest to the material are expected to act on it. And a claim against non-executive directors is defensible when the board can show what it was told, what it asked, and what it decided.
The regulatory environment around the same conduct is expensive independently of the personal claims. The Federal Court ordered SkyCity Adelaide to pay a $67 million penalty for anti-money-laundering and counter-terrorism-financing failures, following AUSTRAC proceedings.
Why is reputation risk becoming harder to govern?
The information environment moved faster than most board reporting cycles.
The World Economic Forum's Global Risks Report 2025 ranked misinformation and disinformation the top short-term global risk for the second consecutive year, noting that generative AI now produces false or misleading content at scale. Research in Science found that true news takes six times as long as false information to reach 1,500 people.
A board meeting monthly is receiving a report on an environment that resolves in hours. That gap is the governance problem, and it is why continuous measurement has become the practical answer.
What evidence shows that reputation risk was governed?
Three records, kept as the work happens rather than assembled afterwards:
- A measurement record: the organisation's reputation score and its movement over time, presented to the board as a standing item
- A monitoring record: the alerts raised, the assessments made, and who reviewed them
- An action record: what was decided, by whom, on what evidence, and what happened to the score afterwards
The distinction between a contemporaneous record and a reconstructed timeline is the whole point. A reconstruction assembled after an event answers what the organisation can now recall. A contemporaneous record answers what it knew at the time, which is the question a court, a regulator, or an insurer actually asks. The evidence trail is described in full here.
How does Contrlr support the duty?
Contrlr connects the three records into one workflow. It computes a continuous reputation score across seven pillars, raises alerts when the narrative moves, ranks the threats most likely to escalate, and records every finding, decision, and intervention with a timestamp as the communications team works.
A board using Contrlr can answer the three questions that follow any reputation event: what the organisation knew, when it knew it, and what it did. The record is produced as a by-product of the communications team's normal work rather than as a separate compliance exercise, which is why it survives the pressure of a live crisis.
The score is free at launch, which removes cost as a reason for a board not to hold a baseline measurement of its own reputation risk.
What should a board ask at its next meeting?
Four questions establish the current position quickly:
- What is our reputation score today, and which way has it moved this quarter?
- Which pillar is weakest, and what is driving it?
- Which reputation scenarios have we rehearsed, and when?
- If a regulator asked what we knew and when, what document would we produce?
An organisation that cannot answer the fourth question does not yet have the record the duty assumes.
What does good board reporting on reputation look like?
Four elements, presented as a standing item rather than an exception report.
The score and its direction come first, covering the current level, the movement this quarter, and the movement across the year. A single figure with a trend is what allows a board to notice deterioration early rather than receiving a briefing once a problem has become an incident.
The pillar breakdown comes second, identifying which of the seven signal groups moved the composite. This converts a general concern into a specific question for management.
The threat ranking comes third, drawn from the predictive pillar: which narratives are most likely to move against the organisation, ranked by likelihood and severity, and which of those have been rehearsed.
The action record comes fourth, showing what the organisation did in response to the previous period's movements and what happened to the score afterwards. That closing loop is what distinguishes oversight from observation.
A board paper containing those four elements answers, in advance, the questions a regulator or an insurer asks after a reputation event. The paper is generated from the same record the communications team creates through its normal work.
How often should reputation appear on the board agenda?
Every meeting, as a standing item with a short written summary. A quarterly deep review handles the trend, the pillar spread, and the scenario programme.
An exception-only approach, where reputation reaches the board when something goes wrong, produces a record showing the board engaged with the topic exclusively during incidents. A standing item produces a record of continuous oversight, which is the stronger position.
Frequently asked questions
Are Australian directors personally liable for reputation damage?
Directors owe a personal duty of care and diligence under section 180 of the Corporations Act 2001 (Cth), and the courts have held that the harm covered by that duty includes reputation. Liability depends on whether the director acted reasonably in the circumstances, which is why a record of oversight is central. This is general information and not legal advice.
What did the Star Entertainment judgment decide about directors duties?
The Federal Court found in March 2026 that the former Chief Executive Officer and the former Chief Legal and Risk Officer breached section 180(1) in relation to some of the conduct alleged, while claims against the non-executive directors failed. The outcome shows that documented board process is defensible and executive proximity to information carries weight.
Does a board need to monitor reputation continuously?
The duty requires reasonable care in the circumstances rather than a specific tool. The circumstances have changed: reputation can now be measured continuously at low cost, so a board that relies on monthly summaries faces a harder argument that its oversight matched the speed of the risk.
What records should a board keep about reputation risk?
Three: the measurement record showing the score and its movement, the monitoring record showing alerts and assessments, and the action record showing decisions, owners, evidence, and outcomes. All three should be contemporaneous, because a reconstruction after the event answers a different question.
How does a board start measuring reputation risk?
With a baseline. Contrlr provides the reputation score, continuous monitoring across seven pillars, and AI content writing free at launch, so a board can put a measured position on the agenda without a procurement process. Request a score here.