Directors celebrate the IPO. Six months later, a claim arrives for something the company did before listing. The D&O policy has already expired. Now there’s a problem.

This scenario plays out regularly. A board goes public, the main D&O policy runs for 12 months, and when it ends, the board assumes the risk is managed. But pre-IPO exposure doesn’t disappear when a policy renews or expires. It gets claimed years later—after directors have left office, after the company may have been acquired, or after the policy that protected them no longer exists.

That’s what extended D&O coverage, or “tail coverage,” is for. And it’s the easiest piece of an IPO placement to leave off—and the hardest to add back.

What Tail Coverage Actually Does

Extended D&O coverage keeps your IPO policy active for claims arising from acts that occurred before the policy ended. Without it, claims for pre-IPO conduct made after the policy expires may fall outside coverage entirely.

The policy ends on a specific date. Claims don’t. A director who retires in month six can be sued in year three for a decision made before the IPO. Without tail coverage, that director has no protection.

Tail coverage extends the reporting period—the window during which claims can be reported to the insurer and still receive coverage. Instead of a fixed end date, tail coverage can extend for three, five, or even seven years, depending on what the board purchases.

Why Boards Leave Tail Coverage Off

Tail coverage has a significant cost. It’s typically 150% to 300% of the annual premium—a material expense that comes due upfront, often during the IPO process when the board is focused on other spending.

The purchase also requires a decision. The board must ask: How long do we want extended coverage? Three years? Five years? Seven years? Each option has a different price. And the decision has to be made before the main policy expires. Once the trigger date passes, the insurer won’t write the tail at any price.

Many boards defer the decision, intending to reconsider it at renewal. But renewal happens 12 months after listing, when the IPO momentum has faded, when the board’s attention has moved to operations, and when the cost seems like an afterthought. By then, the opportunity to price and place the tail—at a predictable cost—has passed.

The Cost of Leaving Tail Coverage Off

A departing director who retires at or shortly after the IPO faces personal exposure for years. Under Hong Kong’s Companies Ordinance Section 40, directors who authorize a prospectus remain liable for untrue statements in it for years after they leave office. Without tail coverage, they absorb that risk personally.

A change of control—an acquisition or merger—typically triggers a runoff on the existing D&O policy. The acquiring company’s insurers take over, but they have no obligation to cover historic liability of the acquired company’s directors. If tail coverage wasn’t purchased before the change of control, those directors are exposed.

A delisting or going-private transaction also triggers policy termination. Again, without tail coverage, exposure continues but protection ends.

Tail Coverage Pricing Is Set Upfront

The cost of tail coverage is negotiated and fixed at the time it’s purchased. Once the policy expires or a trigger event occurs, that pricing opportunity is gone. Insurers will not write tail coverage retroactively, and if they do, the cost is substantially higher—or they refuse entirely.

This creates urgency. The board has to decide on tail coverage before the IPO closes, not after. It’s part of the placement conversation, not a post-listing decision.

A Defensible IPO Programme Includes the Tail

An IPO D&O programme that protects directors only while they’re in office is incomplete. Departing directors, regulatory investigations reaching into pre-IPO conduct, and change-of-control scenarios all create exposure that extends well beyond the main policy period.

A defensible programme includes the tail as part of the initial placement. The board discusses it upfront, prices it upfront, and purchases it upfront. This isn’t an afterthought. It’s a core component of the coverage.

Directors who understand this difference are the ones protected when claims arrive years later. Boards that leave tail coverage off are the ones that discover the gap when it’s too late to add it back.

Ready to review your tail coverage? Contact Continuum to ensure your IPO D&O programme includes extended protection for directors.

Directors celebrate listing day. Investors start watching in the months that follow. And that’s when securities claims arrive.

When does a shareholder lawsuit actually get filed after an IPO? Not on listing day. Not at closing. The highest-risk window for securities class actions is between lockup expiry and the second full earnings cycle—roughly months 3 through 9 after trading begins.

This matters because most boards size their D&O coverage for steady-state risk, not year-one risk. They discover the gap when a claim arrives in month five.

The Pattern: Three Trigger Events

Post-IPO securities claims follow a recognizable pattern. Understanding this pattern helps boards prepare coverage that actually responds when claims hit.

Trigger 1: Lockup Expiry

When insiders can finally sell shares, the market absorbs selling pressure and investors scrutinize what was promised in the prospectus. Under SEC Rule 144, insiders typically face a six-month lockup before they can sell. When that period ends, stock volatility increases and shareholder attention sharpens.

Lawyers monitoring IPOs watch lockup expiry dates carefully. They begin reviewing the prospectus and comparing prospectus claims to actual performance. Class action filings often follow within weeks.

Trigger 2: First Earnings Miss

When a company misses earnings guidance or issues a disappointing update, investors connect it to prospectus projections. Under Regulation FD (Fair Disclosure), all investors receive material information simultaneously, which means litigation lawyers see the miss at the same moment as the market.

An earnings miss doesn’t just hurt stock price. It creates evidence that prospectus projections were inaccurate. Filing lag between a trigger event and a class action complaint has shortened materially in recent years—often from months to weeks. A company that misses guidance on a Tuesday may face a complaint filed by the following Monday.

Trigger 3: Quiet Stock Declines

Not all claims follow dramatic collapses. Sometimes a steady decline over months is more dangerous. A slow decline gives investors and lawyers time to build a case. They review prospectus disclosures, compare them to actual performance, and identify discrepancies.

A sharp 50% decline in two weeks may avoid litigation. A 40% decline over six months almost certainly triggers it.

Board Decisions in Year One Shape the Risk Profile

The board’s conduct in the first year directly affects the severity of claims that may follow. Two decisions matter most:

Guidance Policy: Aggressive earnings guidance or optimistic forward-looking statements increase prospectus liability. Under Section 27A of the Securities Act, forward-looking statements receive safe harbor protection only if they include meaningful cautionary language. Boards that issue aggressive guidance without adequate disclaimers create larger gaps between expectations and actual results—exactly the evidence plaintiffs’ lawyers need.

Disclosure Calibration: What the company chooses to disclose in quarterly reports and current reports affects litigation risk. Delayed disclosure of negative information creates claims. Aggressive disclosure language minimizes them. These are board-level decisions made in real time during the first year.

Sizing Coverage for Year One, Not Years Three Through Five

Most D&O programs are sized for years three through five—the steady-state years after the IPO dust has settled. But year one is different. Claim frequency is higher. Claim severity can be larger. And board directors are named personally in almost every securities class action.

The coverage retention and limits need to reflect this reality. A $50 million Side A limit that seems adequate for year three may be insufficient for a year-one claim involving all eight board members and a settlement in the eight figures.

Retention selection is a board-level decision because the retention is the CFO’s own working capital in a claim scenario. If the board selects a $5 million retention, the company absorbs the first $5 million of defense and settlement costs. That comes directly from operating cash reserves during the year when the company needs flexibility most.

Ongoing Review: Month 6 and Month 12

D&O placement is often reviewed only at annual renewal. For newly listed companies, this is inadequate. The insurance market understands year-one risk better than it did five years ago, and coverage pricing and terms have evolved accordingly.

At the six-month mark, the board should review whether limits and retention still align with the company’s actual year-one exposure. Has the stock declined? Have earnings misses occurred? Has the board’s conduct created additional risk?

At the twelve-month mark, a comprehensive review should assess whether the program is adequate for the claim environment the company actually faces. Many boards discover at this point that their year-one coverage was undersized and make adjustments before renewal.

The First Year Is Different

Listing day is the ribbon-cutting. Year one is when your D&O coverage gets tested.

Most boards that have experienced a securities claim in year one report that they underestimated the frequency and severity. They sized coverage based on historical data from years two and beyond. They didn’t account for the lockup expiry surge, the first earnings miss, or the concentrated legal attention year-one claims receive.

Understanding the pattern—that claims follow a recognizable timeline tied to lockup expiry, earnings misses, and stock declines—allows boards to size retention and limits appropriately. It’s not guesswork. It’s preparation.

Before your company lists, confirm that your D&O coverage is sized for the claim environment of year one, not the calmer waters that may follow.

Ready to review your D&O coverage timing? Contact Continuum to ensure your limits and retention are sized for the first year after listing.

Listed companies face three categories of liability. Directors face personal exposure. Companies face entity exposure. And the company’s obligation to indemnify creates its own liability. A well-crafted D&O policy protects directors, the company, and independent directors from unforeseen claims.

The Three Sides of D&O Coverage Explained

Directors and officers insurance comes in three distinct components: Side A, Side B, and Side C. Each responds to different liability scenarios. These three sides work together to form a complete protection structure for listed companies.

The problem: most policies don’t cover all three adequately. Many companies discover coverage gaps when claims arrive.

Side A: Individual Director Protection When Company Indemnification Fails

Side A coverage is the layer that protects individual directors and officers when the company cannot or will not indemnify them. This is the foundation of personal director protection.

When Side A Responds: Four Key Scenarios

The company becomes insolvent and lacks the financial capacity to fund indemnification. Under insolvency law in Hong Kong and Singapore, directors cannot be indemnified when the company lacks resources. When insolvency looms, Side A becomes the only layer protecting the director personally.

A conflict of interest prevents the company from providing indemnification. Under corporate governance principles in Hong Kong and MAS guidelines in Singapore, when the company’s interests diverge from a director’s interests, indemnification may be legally barred. In securities litigation, this happens frequently: the company settles a claim, cutting a deal that leaves directors exposed. The company then cannot indemnify those directors because doing so would contradict the settlement.

The company’s own policy limits are exhausted. If a large claim depletes Side B and Side C coverage, those layers are no longer available to indemnify directors. Side A then steps in to protect the director directly.

The company chooses not to indemnify. In some claim scenarios, the company has the legal right to indemnify but chooses not to as a matter of business strategy. For example, the company may settle a regulatory investigation and decide not to fund director defense costs. Side A protects the director in this scenario.

Why Side A Matters for Listed Companies

The critical importance of Side A for listed companies stems from how public company liability creates scenarios where company and director interests split regularly. In securities litigation under Hong Kong’s Securities and Futures Ordinance, independent directors frequently face personal exposure that the company won’t cover. Side A exists precisely for these situations.

Independent directors care most about Side A limits because they have the least control over indemnification decisions when claims hit. Consider an independent director who votes against management on a strategic issue—that director faces unique exposure if the decision later becomes the subject of shareholder litigation. When company and director interests conflict, the director cannot rely on company indemnification. Only Side A protection stands between the director and personal liability.

Side B: Company Reimbursement for Indemnification Already Paid

Side B coverage reimburses the company for its obligation to indemnify directors and officers for losses they incur in their official capacity. This is the layer most exposed in ordinary operational claims.

Side B responds when:

The company indemnifies a director for defense costs or settlements in an employment dispute, a contract breach, or a regulatory investigation. The company pays the director’s legal fees and settlement amount from company assets. Side B then reimburses the company for that outlay.

A director faces personal liability from a product liability claim, an employment lawsuit, or a contract dispute. The company chooses to indemnify the director because the director was acting in their official capacity. Side B covers the company’s cost of doing so.

Under Hong Kong corporate law, companies have the statutory right and often the obligation to indemnify directors for losses incurred in their official capacity, provided the indemnification is lawful. Singapore’s Companies Act contains similar provisions. Side B ensures that when the company exercises this indemnification right, the insurance reimburses the company.

In most listed company scenarios, Side B represents the most frequently triggered layer because operational claims—employment disputes, contract breaches, regulatory investigations—happen regularly. Consider a director facing an employment claim for wrongful termination: the company indemnifies the director, and Side B reimburses the company for that cost.

The critical point: Side B protects the company’s balance sheet, not the director personally. Inadequate Side B limits mean the company absorbs the difference, creating pressure on company assets and reducing its capacity to fund operations or investment. Robust Side B coverage shields company assets from depletion.

Side C: Entity Coverage in Securities Claims and Regulatory Proceedings

Side C coverage covers the company itself as a defendant in liability claims. For listed companies, Side C is almost always limited to securities claims and regulatory proceedings.

Side C responds when:

The company faces a shareholder lawsuit alleging securities fraud, misrepresentation, or disclosure failure. Under Hong Kong’s Securities and Futures Ordinance, shareholders can sue the company for untrue statements in prospectuses, continuous disclosure documents, or public statements. Side C covers the company’s defense and settlement in these claims.

Regulators investigate the company for disclosure violations, listing rule breaches, or market misconduct. Under Hong Kong’s Listing Rules, the SFC has investigative authority over listed companies. In Singapore, the MAS and SGX conduct similar investigations. Side C covers the company’s defense costs and potential penalties in regulatory investigations.

The company itself is sued in a securities claim. Shareholders allege that prospectus disclosures were false or that earnings guidance was misleading. Side C protects the company’s assets from being depleted by defense costs and settlement.

Typically, Side C limits are much smaller than Side A or Side B in listed company structures. The reasoning is pragmatic: securities claims are enormous. Shareholder class actions in Hong Kong or Singapore can settle for tens or hundreds of millions of dollars, and no practical insurance limit can cover the full exposure. Companies therefore purchase modest Side C limits as a first layer of protection, knowing that large securities claims will exhaust the policy and require company resources to fund the remainder.

The critical limitation: Side C does not protect directors personally in securities claims—coverage flows to the company as defendant only. When a director is individually named in a securities lawsuit, protection comes from Side A or Side B, not Side C. This is precisely why Side A becomes critical in listed company structures: securities litigation routinely names individual directors, and Side A remains the only layer protecting them directly.

Why All Three Sides Matter for Listed Companies

Listed companies need all three sides in balance. Private company policies often focus on Side B, but public company exposure requires equal attention to all three.

When directors, the company, and the company’s indemnification obligation are all exposed—and only one side is adequately covered—the entire structure is vulnerable. Securities litigation targets both the company and individual directors. Regulatory investigations hit the company’s bottom line. Operational claims deplete company reserves through indemnification.

A well-crafted D&O policy ensures that when one claim hits, all three protections respond appropriately.

Independent Directors Face Unique Exposure

Independent directors carry personal risk that executive directors often don’t realize. Under Hong Kong’s Companies Ordinance Section 40, all directors who authorize a prospectus face equal statutory liability for untrue statements—regardless of whether they’re independent, non-executive, or executive.

In securities litigation, company and director interests frequently diverge. The company settles a claim in a way that protects the company but exposes the director. The company chooses not to indemnify. The director had minimal control over the decision that triggered the claim, yet faces full personal liability.

In these situations, only Side A protects the independent director. If you’re an independent director, make sure your D&O policy covers your personal exposure before the company goes public.

Coverage Limits Matter as Much as Structure

The three sides are essential, but limits matter equally. A policy with all three sides but inadequate limits leaves directors and the company underprotected.

Securities claims can exceed $100 million in losses. Inadequate Side A limits force directors to absorb the gap personally. Inadequate Side B limits drain company assets. Inadequate Side C limits exhaust quickly on large shareholder claims.

Before going public, confirm that each side has sufficient limits for your actual exposure.

The Cost of Misunderstanding Your Coverage

Companies that don’t understand their D&O structure often discover coverage gaps when claims arrive. A director receives a claim letter, calls the broker, and waits days to learn whether the policy covers it. The insurer may deny coverage because the claim falls outside policy scope or exceeds limits.

By then, it’s too late. The director is uninsured for a claim that could cost millions.

Companies that understand Side A, B, and C structures go public knowing their directors are protected. They ask the right questions before listing: What claims are most likely? Which side should be largest? Are independent directors adequately protected? Does the insurer understand our jurisdiction?

These questions aren’t optional for listed companies.

Understand Your D&O Anatomy Before You List

The difference between adequate insurance and coverage gaps is understanding how Side A, Side B, and Side C work.

Before going public, review your coverage with your CFO, General Counsel, and independent directors. Confirm each side is sized for your actual exposure. Verify the structure protects directors personally, covers company indemnification, and responds to securities claims.

Ready to Review Your D&O Structure?

Understand your D&O coverage before you go public. Contact Continuum to ensure your Side A, Side B, and Side C structure protects your directors.

When a company files a prospectus to go public in any APAC market, the document becomes a liability instrument the moment regulators receive it. Directors who sign off on that prospectus assume personal liability for every statement in it. Whether you’re listing in Hong Kong, Singapore, or elsewhere in Asia-Pacific, this isn’t corporate liability. This is individual exposure that can attach to directors’ personal assets, regardless of their role or seniority on the board.

The Prospectus Creates Statutory Liability for Individual Directors Across APAC

A prospectus is more than marketing material. Across APAC markets, statutory frameworks create binding liability for individuals who authorise prospectus disclosures.

In Hong Kong, Section 40 of the Companies (Winding Up and Miscellaneous Provisions) Ordinance establishes civil liability for directors, promoters, and anyone who authorised the issue of a prospectus. In Singapore, the Securities and Futures Act imposes similar personal liability on directors for prospectus misstatements. Across APAC, the pattern is consistent: statutory frameworks place liability directly on individuals.

This liability is strict. Investors who subscribed for shares based on an untrue statement in the prospectus can recover losses directly from named individuals. The statute doesn’t require investors to prove negligence or intent. It doesn’t require proof that the director personally knew the statement was false. If the statement was untrue, and an investor relied on it, the director faces civil liability across APAC jurisdictions.

The scope is broad. The prospectus includes not just the formal offering document filed with the Securities and Futures Commission (SFC), but also supplementary information, amendments, and any documents incorporated by reference. Every statement in these documents becomes a director’s personal exposure.

Criminal Liability Extends Beyond Civil Claims Across APAC

Civil liability is only the first layer. Across APAC, statutory frameworks create criminal exposure for prospectus misstatements. In Hong Kong, Section 40A of the Companies Ordinance creates criminal liability. In Singapore, Section 340 of the Securities and Futures Act establishes similar criminal exposure. This is criminal liability—not just money damages, but potential criminal prosecution.

The civil-criminal distinction is critical. Civil liability is often strict (no proof of intent required). Criminal liability typically requires knowledge or recklessness, but the penalties are steeper. Directors can face criminal fines and imprisonment for fraudulent prospectus disclosures across APAC markets.

Most private-company D&O policies were never designed to cover criminal defence costs. When criminal exposure emerges, directors discover that their insurance doesn’t extend to legal defence in regulatory investigations or criminal proceedings. This gap becomes acute when regulatory investigations follow a prospectus dispute.

Cross-Border Prospectus Liability Across APAC

Directors of companies listing across multiple APAC markets face layered liability across jurisdictions. A company listing in Hong Kong via Section 342E of the Companies Ordinance faces Hong Kong prospectus liability. A company simultaneously or subsequently listing in Singapore faces liability under the Singapore Securities and Futures Act. Companies listing across APAC markets accumulate prospectus liability in each jurisdiction.

This matters because directors often assume that prospectus liability attaches only to the jurisdiction where the IPO occurs. APAC market reality is different. A director of an Indonesian, Thai, or Malaysian company listing on the Hong Kong Stock Exchange faces Hong Kong prospectus liability even if the director is not resident in Hong Kong and the company is incorporated abroad. Similarly, a Singapore company listing in Hong Kong faces both Singapore and Hong Kong prospectus liability simultaneously.

Roadshow Statements Create Undocumented Liability Across APAC

The formal prospectus is filed and documented. Roadshow presentations are not. Yet across APAC, securities laws and listing rules treat roadshow statements as part of the offering record. Hong Kong’s Listing Rules and Singapore’s listing requirements both recognize roadshow materials as part of the disclosure process.

When executives present to institutional investors before an IPO, they make claims about business performance, market opportunity, competitive position, and financial projections. These oral statements form investor expectations. When investors later subscribe based on prospectus disclosures, they rely on consistency between what was said in the roadshow and what appears in the prospectus across all APAC markets where the company is listing.

If there’s a discrepancy, or if roadshow claims diverge from prospectus language, directors face liability for the roadshow statements even though they sit outside the formal prospectus. Roadshow materials—slide decks, notes, recordings—become evidence in litigation. What was said informally becomes part of the liability record formally.

Pre-IPO Communications Sit in the Offering Record Across APAC

Roadshow presentations aren’t the only pre-IPO communications that create liability. Analyst briefings, pre-IPO investor presentations, management meetings with underwriters, and even guidance given to major investors can form part of the offering record across APAC.

Under Hong Kong’s Securities and Futures Ordinance and Singapore’s Securities and Futures Act, liability attaches to any statement a director made in connection with the offering, not just statements in the prospectus itself. This extends liability backward to everything said during the IPO process and forward to statements made after listing if they’re connected to prospectus disclosures. APAC regulators treat the entire offering communication record—not just the formal prospectus—as the basis for director liability.

Directors face a paradox: the prospectus must be comprehensive to satisfy regulators, yet it can’t contain all the nuance and context directors want to communicate. Statements made outside the prospectus to flesh out context or address investor concerns create liability if they later diverge from prospectus language or if investors claim those outside statements affected their investment decision.

Forward-Looking Statements Create Ongoing Exposure

Prospectus liability doesn’t end when the prospectus is filed. Forward-looking statements—projections, guidance, and forecasts—create liability that extends well past the IPO.

When directors include revenue projections, earnings guidance, or market growth assumptions in the prospectus, those projections become the benchmark against which future performance is measured. If actual results diverge significantly from prospectus projections, investors can claim they were misled by forward-looking statements.

This exposure extends across years. A projection made in the prospectus can become the subject of litigation three years later, when actual performance falls short. The statute of limitations for Section 40 claims is typically long enough to accommodate this lag. Directors need to anticipate that prospectus projections will be scrutinised against actual results for years after the IPO.

Independent Directors Carry Equal Statutory Liability

A common misconception is that independent directors carry less liability than executives. The statute says otherwise. Section 40 applies equally to all directors who authorized the prospectus, regardless of whether they’re independent, non-executive, or executive.

This matters because it means independent directors can’t rely on the assumption that executives bore responsibility for the prospectus. Each director who signed off on the prospectus—or whose board approval was required for the prospectus—faces personal liability. Independent directors, audit committee chairs, and even newer board members can be named as defendants in prospectus litigation.

The exposure is uniform across the board. This is why a properly designed D&O programme has to provide Side A coverage (individual director protection) that protects all directors equally, not just the executives.

The Role of Reasonable Grounds Defence

Section 40A creates an exception: criminal liability only applies if a director made an untrue statement “without reasonable grounds to believe it true.” This “reasonable grounds” defence is the only statutory escape hatch from criminal exposure.

But the defence is narrow and fact-intensive. It requires that a director conducted reasonable due diligence, had credible information supporting the statement, and actually believed the statement was true. In practice, this defence is difficult to sustain without documented evidence of the director’s investigation and the basis for their belief.

Demonstrating reasonable grounds requires contemporaneous documentation—emails, due diligence reports, legal opinions, financial audit work papers, market research, and management representations. Without this documentation, a director’s claim to have had reasonable grounds collapses. With it, the defence has teeth.

This is why prospectus due diligence processes matter so much. They create the documentary evidence that can later support a reasonable grounds defence if liability questions emerge.

D&O Insurance Has to Respond to Statutory Liability

Private-company D&O policies focus on operational claims: employment disputes, product liability, contract breaches. Prospectus liability is categorically different. It’s statutory liability that attaches the moment the prospectus is filed.

A properly structured D&O programme for an IPO has to include coverage that explicitly addresses prospectus liability. This means:

First, statutory liability coverage that responds to Section 40 civil claims by investors. This coverage has to be broad enough to cover not just the formal prospectus, but all communications that form part of the offering record (roadshow materials, analyst briefings, pre-IPO presentations).

Second, criminal defence coverage that addresses Section 40A exposure and regulatory investigation costs. Most private-company policies exclude or sub-limit criminal defence. At IPO, this becomes a critical gap.

Third, Side A coverage that protects individual directors when the company’s interests diverge from theirs. In a prospectus claim, company and individual directors can be on opposite sides. Side A is the only coverage layer that protects directors independently of the company.

Fourth, sufficient limits to address the scale of prospectus claims. Investor class actions arising from prospectus misstatements can settle in the tens or hundreds of millions. Inadequate limits leave directors personally exposed for the shortfall.

Prospectus Liability Begins the Moment the Document Is Filed

IPO liability doesn’t start at trading commencement or at the close of the offering. It starts the moment the prospectus is filed with regulators. From that moment forward, every statement in the prospectus creates potential director liability.

This timing matters for insurance placement. D&O coverage has to be in place before the prospectus is filed, not after. Insurance purchased after filing leaves directors unprotected for the initial exposure period. Some claims arise immediately—from investors who read the prospectus and invest based on statements later shown to be false. Coverage gaps in the initial period leave directors bearing this early exposure personally.

Moreover, the prospectus filing date typically occurs months before the IPO actually closes. This extended period—from prospectus filing through trading commencement—is when most of the investor acquisition happens. It’s also when most prospectus-related disputes emerge if there are issues with prospectus accuracy or completeness.

The First Three Years Post-IPO Are the Highest-Risk Period

Prospectus claims cluster in the years immediately after an IPO. Stock volatility is high in early trading. Investor expectations are fresh from the prospectus disclosures. When stock prices decline or company performance misses guidance, investor litigation follows within months or a few years.

This means directors face the highest prospectus liability exposure in the first three years after going public. This is when regulatory investigations are most likely to commence. This is when shareholder derivative actions targeting prospectus representations are most likely to be filed. This is when forensic questions about prospectus accuracy are most acutely litigated.

A defensible D&O programme has to prioritise coverage in this window. Claims-made policies have to be carefully structured to ensure continuous coverage through this period. Tail coverage or extended reporting period endorsements have to be considered to protect directors for claims arising from the prospectus but reported after the initial D&O policy period ends.

Building a Defensible D&O Programme Around Prospectus Liability

Understanding prospectus liability is the foundation of a defensible D&O programme for IPO. The liability is personal, it’s statutory, and it’s immediate. It attaches to directors individually, it doesn’t require proof of negligence, and it begins the moment the prospectus is filed.

Directors who understand this exposure can take steps to minimise it: rigorous due diligence on every prospectus statement, documented reasonable grounds for forward-looking projections, careful alignment between roadshow materials and prospectus language, and insurance coverage that actually responds to statutory prospectus liability.

The prospectus isn’t just an offering document. For directors, it’s a personal liability instrument. The D&O programme has to be built on that foundation.

IPO day transforms director liability. Directors who sign the prospectus assume statutory and civil liability personally. Public disclosure obligations—quarterly filings, earnings guidance, regulatory updates—carry personal exposure. Stock price movements trigger shareholder claims naming them as defendants. Meanwhile, the private-company D&O insurance policy, built to protect against operational claims, fails to contemplate this exposure category.

D&O Insurance Becomes Essential at Listing

Most companies treat D&O insurance as a renewal item, something the broker handles on an annual cycle. However, IPO changes that entirely. D&O insurance becomes a placement document, sitting alongside the prospectus and underwriter agreements as a core piece of the IPO structure.

The reason is straightforward: going public creates new director liability that didn’t exist as a private company. Consequently, the D&O policy must protect against this new exposure. Otherwise, directors absorb the risk personally.

Most companies attempt to layer IPO-specific coverage onto their existing private-company policy through endorsements and side letters. Unfortunately, this approach fails because private-company wordings were never designed to contemplate securities claims. Bolt-on coverage creates gaps, sub-limits, and conflicts that expose directors exactly when they need protection most.

The Prospectus Creates Statutory and Civil Director Liability

The prospectus is the liability document of the IPO. Every statement in it carries personal exposure for the directors who sign off on its accuracy.

In Hong Kong, the Companies (WUMP) Ordinance imposes dual liability for prospectus misstatements. Section 40 establishes civil liability on directors for untrue statements in the prospectus, creating exposure to shareholder claims for losses incurred based on prospectus reliance. Section 40A further establishes criminal liability for knowingly including untrue statements.

This dual regime matters significantly because it expands exposure beyond the traditional insurance coverage model. D&O insurance typically covers civil claims. Criminal liability, by contrast, sits in a different category entirely—and most private-company policies were never drafted to include criminal defense costs.

Moreover, the prospectus exposes directors to underwriter liability. Underwriters conduct due diligence on prospectus disclosures. When that diligence identifies issues, underwriter disputes and indemnification claims follow—and those disputes often name individual directors, not just the company.

Critically, this exposure begins the moment the prospectus is filed. It doesn’t wait for closing or trading to commence. Directors face liability from filing day forward.

Post-Listing Disclosure Obligations Attach Personally

IPO liability doesn’t end with the prospectus. Instead, it accelerates.

Going public imposes continuous disclosure obligations on directors. They face personal exposure for quarterly earnings announcements, annual financial reporting, regulatory filings, and forward-looking guidance given to the market. Each disclosure carries potential liability to investors who rely on inaccurate statements.

Public disclosure liability differs fundamentally from prospectus liability. Prospectus liability is a one-time event. Public disclosure liability, by contrast, is recurring—quarterly, annually, whenever material information must be disclosed. It persists for as long as the company remains listed.

Under Hong Kong’s Securities and Futures Ordinance and the Listing Rules, directors bear responsibility for the accuracy of continuous disclosure. Failure to disclose material information creates regulatory exposure and shareholder liability. Additionally, misleading guidance in earnings calls creates reliance claims, and forward-looking statements that don’t materialize trigger securities litigation.

The cumulative effect is substantial: directors carry ongoing personal exposure for every material disclosure the company makes. This exposure class barely exists for private companies. Yet for public companies, it becomes a permanent liability category.

Securities Claims Are A New Loss Type

Private companies face operational claims: employment disputes, product liability, contract breaches, regulatory investigations. Standard commercial insurance and D&O policies built around operational risk typically cover these claims.

Public companies face securities claims—a different liability category entirely. Securities class actions are triggered by stock price movements and name directors as individual defendants. Moreover, these actions involve regulatory investigations by the SEC or equivalent authorities and carry reputational costs that far exceed the financial settlement.

Securities claims are not optional exposure for public companies. Rather, they are inevitable. A stock price decline of sufficient magnitude will trigger shareholder litigation, name directors, and force the company’s insurance to contemplate this as core exposure.

Most private-company D&O policies were not designed with securities claims in mind. Coverage language focuses on operational claims. Additionally, sub-limits apply to securities exposure, and exclusions carve out entire categories of securities liability. When the securities claim arrives, coverage gaps emerge—and directors discover they are underinsured.

Side A Cover Becomes The Single Most Important Layer

D&O insurance has three components: Side A, Side B, and Side C.

Side A covers individual directors and officers for their personal liability when the company cannot indemnify them—either because the company lacks financial capacity, because the company’s own coverage is exhausted, or because a conflict of interest prevents the company from providing indemnification.

For private companies, this distinction is largely academic. The company and board typically share aligned interests, and the company indemnifies directors as a matter of course.

For public companies, this alignment breaks down significantly. In securities litigation, the company’s interests often diverge from the board’s. The company may settle, cutting a deal that leaves directors exposed. Alternatively, the company may become insolvent, unable to fund indemnification. Or conflicts of interest may prevent the company from providing coverage.

When these situations arise, Side A becomes the only protection directors have. It covers them personally, independently of the company’s financial status or indemnification decision.

This is why Side A becomes the single most important part of the policy at IPO. It’s not ancillary—it’s essential. Directors need it to protect themselves when company and board interests split.

Finally, Side A coverage levels, attachment points, and exclusions must be carefully calibrated at placement. Underestimating Side A need ranks among the most common errors in IPO policy restructuring.

Historic Pre-IPO Acts Create Runoff Exposure

IPO liability doesn’t start at listing. Instead, it reaches backward.

Actions taken before going public face new scrutiny under securities claim standards after listing. A pre-IPO business decision that seemed reasonable in a private context can become the subject of shareholder litigation after the company goes public, based on its impact on future performance or market expectations.

Additionally, regulatory investigations reach into pre-listing conduct. Audits and SEC investigations often examine decisions made months or years before the public offering, looking for patterns or disclosure failures that should have been disclosed in the prospectus.

This backward reach creates runoff exposure. Directors need protection not just for forward-looking liability, but for the liability legacy they’re bringing to the public markets from their private-company past.

Typically, this runoff exposure requires either tail coverage (extended reporting period endorsements that continue coverage after the D&O policy ends) or runoff policies purchased specifically to cover pre-IPO acts. However, standard placement coverage may not adequately address this exposure.

Many companies overlook runoff exposure because they assume IPO coverage begins at listing and protects from listing forward. Unfortunately, this assumption is wrong. Runoff protection must be built into the policy structure.

Restructuring the Policy: Placement, Not Renewal

The timing of D&O restructuring is critical. It must happen at placement, not at renewal.

IPO placements create a window of opportunity. The IPO working group includes legal counsel, underwriters, and investment bankers all focused on disclosure and risk management. Moreover, the underwriter’s due diligence process creates a forum for reviewing insurance coverage gaps, and the prospectus itself provides an opportunity to disclose insurance arrangements and policy details to investors.

If companies defer D&O restructuring to the renewal cycle—months or a year after listing—these opportunities disappear. The IPO working group has disbanded. Underwriter leverage has evaporated. The prospectus is filed and locked.

More importantly, deferring restructuring leaves directors exposed in the months immediately after listing, when securities risk is highest. Stock volatility is pronounced around IPO. Investor expectations are freshly set by prospectus disclosures. Shareholder litigation risk is most acute in the weeks and months following public trading.

Conversely, restructuring at placement means coverage is in place before any of this exposure hits. Additionally, the D&O policy is built with IPO-specific knowledge—what the prospectus actually says, what disclosures were made, what exposure the underwriter identified.

The placement timing also affects pricing and terms. Underwriters and insurers are engaged in the IPO process, so companies can negotiate coverage as part of the broader placement transaction. Deferring to renewal means negotiating D&O coverage in isolation, without the context or leverage of the IPO itself.

Know Your D&O Coverage

Typically, companies treat D&O insurance as a back-office function. However, at IPO, it becomes a front-office issue. Directors need to know exactly what they’re protected against and what gaps remain.

Companies should take the following steps:

First, review what prospectus liability the policy actually covers—including criminal defense costs and underwriter indemnification disputes.

Next, confirm that securities claims protection is built into the core coverage, not carved out or sub-limited.

Additionally, understand Side A coverage levels and confirm they’re sufficient for worst-case scenarios where the company and board diverge.

Further, verify that runoff and tail coverage address pre-IPO acts and historic exposures.

Finally, test the vendor relationships and claims processes before an actual incident occurs.

The companies that complete this work are the ones that discover coverage gaps in time to fix them. Conversely, the companies that don’t are the ones that discover gaps when a securities claim arrives—months after the prospectus was filed.

Continuum helps companies audit their D&O policy before going public and build coverage that actually protects directors when it matters most: on listing day and in the months that follow.

The D&O policy your company has today isn’t the policy it needs on listing day.

Understand the VC term sheet risks for founders before signing.

A VC term sheet may look like a golden ticket, but it often carries hidden liabilities that founders can easily overlook.

From liquidation preferences to board control and personal legal exposure, we break down what every founder should know before signing.

Real case: A controversial term sheet from a Malaysian VC firm shows how investor-friendly terms can cost founders control—and trust.

Learn how smart insurance strategies like D&O can protect your leadership when things get complicated.

Scroll through to uncover the hidden risks and how to protect yourself.

D&O lawsuits arise when leaders are accused of wrongdoing in their fiduciary duties — whether from fraud, breach of duty, negligence, or misrepresentation. These risks extend not only to executives within portfolio companies, but also to fund managers who hold board seats and shape governance. The following case studies highlight where things have gone wrong — and how D&O insurance can act as a critical safety net.

Case Study 1: When Investors Get Sued – Temasek, SoftBank and the FTX Fallout

What Happened: In 2023, Temasek, SoftBank, and other major VC firms were named in a U.S. class-action lawsuit for allegedly “aiding and abetting” fraud at crypto exchange FTX. Despite extensive due diligence claims, investors alleged the VCs failed to catch red flags and helped validate the now-defunct platform.

D&O Risk: Investor-side liability. Fund managers and investment committee members faced accusations of fiduciary failure and public misrepresentation. Even though they weren’t directly operating FTX, their reputations and legal exposure were on the line.

Consequences: Temasek wrote off its entire $275M investment and cut internal executive pay. Legal defense costs, reputational damage, and tighter scrutiny from regulators and LPs followed.

Mitigation: Tailored D&O insurance can cover legal defense and settlements (excluding proven fraud). Global coverage with U.S. jurisdiction protection is key. Stronger due diligence processes and ongoing monitoring could have further reduced risk.

This case illustrates a clear instance of D&O liability for Asian based private equity and venture capital, especially when investors play an active governance role.

Case Study 2: Board Oversight Failure – The Collapse of Zilingo

What Happened: Zilingo, a Singapore-based fashion startup once valued at $1B, collapsed in 2023 after CEO Ankiti Bose was terminated over financial misconduct. A forensic audit uncovered US$9M in dubious consulting fees, unapproved salary hikes, and mismatched revenue reporting.

D&O Risk: The CEO faced termination and potential legal action. Investor-appointed board members risked reputational damage and potential litigation from creditors and minority shareholders who lost out during liquidation.

Consequences: Over $300M in investor capital was wiped out. Zilingo entered liquidation. Investors like Temasek and Sequoia publicly distanced themselves to preserve credibility.

Mitigation: Better governance could have flagged issues earlier. A robust D&O policy would cover innocent directors for defense costs in harassment or negligence claims. Coverage for insolvency-related lawsuits is especially relevant in wind-down scenarios.

Zilingo’s collapse shows how unchecked executive actions can lead to major D&O liability for Asian based private equity and venture capital, especially in fast-scaling startups.

Actionable Risk Management for PE/VC in Asia.

To protect against D&O liability private equity and venture capital, fund managers must embed governance, monitor continuously, and secure tailored coverage.

1. Embed Governance: Ensure portfolio companies adopt basic internal controls, audits, and board-level accountability.
2. Due Diligence Beyond the Term Sheet: Continue oversight well after investing, with metric verification and periodic audits.
3. Tailor Your D&O Insurance: Make sure policies include:
   1. Outside Directorship Liability (for board seats in portfolio companies)
   2. Global and regulatory investigation coverage
   3. Severability clauses and coverage for legal costs up to final adjudication
4. Crisis Readiness: Have a response plan for internal investigations, PR management, and insurer notifications.

How Continuum Can Help

At Continuum, we specialize in providing tailored D&O and professional risk coverage for private equity and venture capital firms operating in Asia. Our advisory-driven approach ensures:

1. Policies reflect multi-fund and cross-border structures
2. Investor-side and portfolio-level risks are aligned
3. Rapid claims response and legal support when it matters most

We help you protect not just your capital, but your leadership. Contact us today to structure the right protection for your investment team and portfolio.

From venture capital firms to private equity funds and asset managers, the risks are not just reputational. They’re legal, financial, and systemic. Yet, many firms still operate with outdated governance frameworks and insurance programs that fall dangerously short of real-world exposure. To mitigate governance failures at financial institutions, a tailored risk and insurance strategy is essential.

The High Stakes of Governance Missteps

Financial institutions manage billions in assets, investor trust, and systemic responsibility. A single lapse in governance—be it undisclosed conflicts of interest, failed fiduciary oversight, or executive misconduct—can trigger investor lawsuits, regulatory action, and irreversible damage to market credibility.

Recent cases across APAC and beyond have revealed a troubling pattern: governance gaps are often not due to a lack of rules but a failure to anticipate how emerging risks—digital infrastructure, cross-border operations, decentralized investment models—interact with old playbooks.

Common Policy Gaps

1. Directors & Officers (D&O) Insurance Misalignment

   Many financial institutions carry D&O policies that were designed years ago, with little adjustment for today’s realities. Cross-jurisdictional risks, ESG-related litigation, and investor activism demand bespoke protection that reflects the institution’s risk profile—not boilerplate coverage.

2. Professional Indemnity (PI) Exclusions

   Errors in financial advice, misrepresentation, or operational failure can all trigger client lawsuits. Yet many PI policies include narrow definitions or outdated exclusions that fail to reflect the institution’s current service offerings, especially in digital asset or algorithm-based models.

3. Cyber & Operational Risk Blind Spots

   Increasing reliance on cloud infrastructure, third-party vendors, and digital platforms means institutions are only as secure as their weakest link. But few align cyber insurance with their actual tech exposure—leaving critical systems uninsured or underinsured.

4. Lack of Crime & Fidelity Coverage

   Internal fraud, rogue employees, and vendor collusion continue to represent substantial threats—particularly in firms with decentralized teams or rapid deal flow. Crime insurance is often treated as an afterthought despite its relevance in both front-office and back-office operations.

Real-World Example: Internal Governance Failures at Saigon Joint Stock Commercial Bank 

Between 2012 and 2022, Saigon Joint Stock Commercial Bank (SCB) in Vietnam became the epicenter of one of Southeast Asia’s most significant financial scandals, primarily due to internal governance failures. Truong My Lan, a prominent real estate tycoon, clandestinely gained control over SCB through a network of proxies and shell companies. Over this period, she orchestrated the embezzlement of approximately $12.5 billion from the bank by approving over 2,500 fraudulent loans to entities under her control. 

This massive internal fraud was facilitated by a lack of effective oversight within SCB. Key executives and board members failed to implement robust risk management practices, allowing Lan to manipulate the bank’s operations extensively. The bank’s internal audit and compliance mechanisms were either ineffective or complicit, failing to detect or report the irregularities over a decade.

The consequences were severe: SCB faced a liquidity crisis, leading to a loss of customer confidence and significant financial instability. The scandal not only tarnished the bank’s reputation but also raised concerns about the robustness of internal governance frameworks within financial institutions in the region.

This case underscores the critical importance of strong internal governance structures, including independent oversight, effective risk management, and a culture of accountability, to prevent such catastrophic failures.

The Continuum Approach

At Continuum, we work with financial institutions to close these policy gaps—before they become liabilities.

Our approach includes:

• Crime Insurance that aligns with operational infrastructure and addresses insider threats.

• D&O Coverage that reflects current regulatory realities, shareholder activism trends, and global exposures.

• Modernized PI Policies tailored for firms offering complex or cross-border financial services.

• Cyber Insurance that aligns with the use of third-party vendors and decentralised IT operations to address unknown external and threats.

We believe risk management should evolve with innovation. Because in a fast-moving financial landscape, governance isn’t just about compliance—it’s about resilience.

The Growing Threat of Data Breaches in Education

The education sector is an attractive target for cybercriminals. Institutions collect and store highly valuable personal information, often with weaker cybersecurity protections compared to financial or healthcare organizations. Common causes of student data breaches include:

Recent breaches in educational institutions highlight the scale of the problem. In 2022, the Los Angeles Unified School District suffered a massive ransomware attack, exposing sensitive student and employee data. Similar incidents have occurred across Southeast Asia, with hackers targeting universities and EdTech companies for financial gain.

Who is Liable for a Student Data Breach?

1. Educational Institutions as Data Controllers

Schools and universities are the primary data controllers responsible for safeguarding student information. Under various data protection laws, institutions are expected to implement cybersecurity measures to prevent unauthorized access. If a breach results from negligence, such as failing to update security protocols, the institution could be held liable for damages.

Example:  In 2023, a hacker attacked a well-known Vietnamese school’s website, claiming to have obtained 30 million records containing full names, emails, phone numbers, birthdays, grades, schools, and locations. This breach exposed significant vulnerabilities in the institution’s data security practices.

2. EdTech Providers and Third-Party Vendors

Many educational institutions rely on third-party providers for learning management systems, online assessments, and cloud storage. If a breach occurs due to a vendor’s security lapse, liability may shift to the third party. However, institutions must still conduct due diligence when selecting service providers.

Example:  In 2020, GeniusU, an EdTech firm based in Singapore, suffered a data breach affecting 1.26 million users. The breach exposed personal information, leading to scrutiny over the company’s data security practices. 

3. Regulatory Authorities

Government agencies establish data protection frameworks that dictate liability. Countries with stringent data protection laws, such as Singapore’s Personal Data Protection Act (PDPA), require institutions to notify affected individuals and regulators after a breach. Non-compliance can result in hefty fines and legal action.

Example: In 2021, Singapore’s Ministry of Education experienced a data breach where personal information of approximately 300,000 individuals, including teachers and students, was leaked due to a phishing attack. The breach highlighted the importance of compliance with data protection regulations and timely notification.

4. Cyber Insurance and Legal Recourse

Educational institutions and EdTech providers can mitigate financial losses through cyber insurance, which covers legal fees, forensic investigations, and financial penalties resulting from a breach. Without proper coverage, organizations risk significant financial and reputational damage.

Example: In 2024, a cyberattack targeted a Singaporean network overseeing school-provided iPads, affecting 13,000 students and users. The breach led to the loss of important data and significant disruptions to learning. Institutions with cyber insurance were better equipped to handle the financial repercussions, including costs associated with data recovery and legal liabilities.

How Continuum’s Educator’s Liability Insurance Protects Institutions

Given the rising legal and financial risks associated with student data breaches, institutions must adopt a proactive risk management approach. A single data breach can lead to regulatory fines, lawsuits, and reputational damage—threatening the long-term stability of an educational institution.

Continuum offers Educator’s Liability Insurance, a comprehensive protection package covering Directors & Officers (D&O) Insurance, Professional Indemnity (PI) Insurance, and Cyber Insurance to help institutions mitigate liability risks.

What Continuum’s Educator’s Liability Insurance Covers

Why Educational Institutions Need Educator’s Liability Insurance

As educational institutions increasingly rely on digital platforms for student management, learning tools, and administrative functions, the risk of cyber breaches, legal disputes, and regulatory scrutiny continues to grow. A single data breach or lawsuit can have devastating financial and reputational consequences. This is why Educator’s Liability Insurance is essential in today’s education sector.

How Institutions Can Reduce Liability and Strengthen Data Security

While no system is 100% secure, institutions can take proactive steps to minimize breach risks and mitigate legal exposure:

Conclusion

When student data gets breached, liability is not always straightforward. Educational institutions, EdTech providers, and regulatory bodies all play a role in ensuring data security. With cyber threats on the rise, schools and universities must adopt robust security practices and risk management strategies—including digital asset and cyber insurance—to protect students, maintain compliance, and minimize financial fallout.

For institutions looking to strengthen their cybersecurity posture, investing in cyber insurance is no longer optional—it’s essential. Protecting student data today ensures a more secure and resilient education sector for the future.

Want to ensure your institution is fully protected? Contact us today to learn how Continuum’s tailored insurance solutions can safeguard your organization against student data breaches and liability risks.