Most SME directors became directors in ten minutes — a form at incorporation, a signature, done. What the form doesn't mention is that the title transfers genuine personal exposure: statutory duties with teeth, personal liability for certain company tax debts, and a set of traps that catch precisely the people who think of themselves as "just running my own business." This isn't lawyer-bait; it's a practical tour of what you signed up for, and the small habits that keep the exposure theoretical.
The duties, in plain English
The Corporations Act imposes core duties on every director — of any company, however small: act with care and diligence (the standard a reasonable person in your seat would meet — which includes actually understanding the company's financial position, not delegating awareness along with the bookkeeping); act in good faith in the company's interests and for proper purposes; don't misuse the position or information for personal gain; and prevent insolvent trading — the big one for SMEs, covered below. Two practical translations matter most. First, these duties attach to you personally, regardless of company size or the fact that you own all the shares — "it's my company, I'll run it how I like" is true commercially and false legally in specific, expensive ways. Second, the care-and-diligence duty makes financial literacy non-optional: a director who "leaves the numbers to the accountant" hasn't delegated the duty, just the evidence of breaching it.
Where personal liability actually bites
Director penalty notices (DPNs). The ATO can make directors personally liable for the company's unpaid PAYG withholding, super guarantee charge and net GST through the DPN regime — and in the "lockdown" form (where lodgements weren't made on time), the personal liability can crystallise with no remission path even if the company later folds. The defensive habits are mundane and absolute: lodge on time even when you can't pay (lodgement is what preserves your options), never use withheld tax or super as working capital, and treat those obligations as untouchable. New directors inherit exposure for existing unpaid amounts within weeks of appointment — joining a board (or a spouse's company) deserves the same diligence as buying in.
Insolvent trading. Directors can be personally liable for debts incurred while the company was insolvent (unable to pay debts as they fall due). The danger pattern in SMEs is drift: a tightening cash position, creditors stretched further each month, the owner-director privately propping things up — each week of "trading through it" potentially adding personal exposure. The protections are knowledge and speed: current books (you can't assess solvency from three-month-old accounts), the 13-week cash forecast as your early-warning instrument, and early professional advice when the trend is bad — safe-harbour protections exist precisely for directors who get advice and pursue a credible restructuring plan, and they reward the proactive, not the hopeful.
Guarantees and the quiet stack. Beyond statute sits contract: the personal guarantees signed for the lease, the trade accounts, the equipment finance, the bank facility. Individually rational; collectively, many directors have personally underwritten far more than they realise. Keep a one-page register of every guarantee you've given — and ask for releases as accounts age well or facilities are refinanced. Guarantees outlive the circumstances that justified them unless someone asks.
The compliance perimeter. Add the supporting cast: keeping ASIC records current (addresses, officeholders — penalties are automatic and the "we never got the notice" defence fails when the address was wrong), the obligation to keep adequate financial records (their absence creates a presumption of insolvency in disputes — bad bookkeeping literally worsens your legal position), your director ID requirement, and exposure under specific regimes (WHS officer duties, certain employment and environmental laws) where "the company did it" doesn't end the inquiry.
The habits that keep it boring
The protective routine is short: books current monthly and actually reviewed (the same management rhythm we recommend for performance doubles as your duties evidence); tax and super lodged on time, always, with the buffer-account habit funding them; the guarantee register maintained; ASIC details checked annually; significant decisions minuted in even a few lines (contemporaneous records are what "care and diligence" looks like in hindsight); and the early call to your accountant or an insolvency-literate advisor the month the trend turns, not the month the bank does. None of this is onerous — it's the same discipline that makes a business well-run, with the side effect of making its director defensible. The directors who get hurt are rarely the reckless; they're the unaware, six months late.
FAQ
Does a company structure still protect my personal assets?
Yes — limited liability remains real for ordinary trading debts. The structure's shield has specific, known holes: DPN liabilities, insolvent trading, personal guarantees, and conduct breaches. Director risk management is just hole management.
My spouse is a director but not involved in the business. Are they exposed?
Fully — the law doesn't recognise "director in name only." Silent directors carry the same duties and DPN exposure with less of the knowledge that protects against them. Either involve them in the oversight rhythm or reconsider the appointment.
What insurance covers this?
Management liability / D&O policies cover defence costs and some liabilities — worth having as businesses grow — but nothing insures unpaid super, tax or deliberate breaches. Insurance is the second layer; the habits are the first.
Solvency awareness starts with current numbers and a cash forecast. Our free Business Health Check is a five-minute look at whether you'd see trouble coming.
If this is the problem you are working on, Valont’s Finance hub runs bookkeeping and managed payroll as part of a connected back office, and the back-office cost calculator shows where to start.
About the author
Nick Lucock
Chief Executive Officer, Valont
Nick Lucock is the Chief Executive Officer of Valont and leads its day-to-day operations across Finance, People, Operations and Growth. He runs the team that does the work Valont publishes about: the bookkeeping, BAS and payroll runs, the award interpretation on every pay cycle, the IT and security layer, and the advisor cadence that keeps an owner's back office current. Nick writes the practical side of Valont's library, the processes, systems and tools that keep Australian SMEs compliant and growing, and he is the author of most of the operational articles on the site. He works with owners across construction and trades, health, hospitality and professional services.
LinkedIn →