Switzerland 2026: Bank Directors’ Duties & Liability, What Boards Must Do to Avoid Regulatory and Criminal Risk

Bank directors duties switzerland have moved sharply into focus as a 2026 wave of governance, anti-money laundering and sanctions reforms reshapes supervisory expectations for every board in the Swiss banking sector. Boards that once treated compliance oversight as a periodic agenda item now face a landscape in which the Swiss Financial Market Supervisory Authority (FINMA) expects demonstrable, documented engagement from directors themselves. Heightened sanctions enforcement, amended anti-money laundering rules and the implementation of exchange-level corporate governance expectations have raised the personal stakes for individual board members. This practical guide maps the statutory and fiduciary foundations of director duties to concrete, board-level actions, including checklists, minute-keeping discipline and directors’ and officers’ (D&O) structuring, that a bank board can implement immediately.

The objective is simple: reduce regulatory and criminal exposure while meeting the supervisory standard Swiss banks will be held to in 2026 and beyond.

This article is informational and does not constitute legal advice; boards should obtain tailored counsel before acting. It reflects the general Swiss legal and supervisory framework; readers should verify the current position of any specific rule before relying on it.

Legal Duties of Bank Directors, Statutory and Fiduciary Duties

Understanding bank directors duties switzerland begins with the recognition that Swiss banking boards operate under two overlapping legal regimes: the general corporate law applicable to all Swiss companies, and the specialised supervisory framework that applies to licensed banks. A director who grasps only one of these pictures is exposed. The combined effect is a duty of active, informed oversight that cannot be delegated away, even where day-to-day execution sits with management.

Duties under the Code of Obligations (CO)

The Swiss Code of Obligations (Obligationenrecht, OR / Code des obligations, CO) codifies the core duties that bind every board member of a Swiss company, including banks. Two obligations sit at the centre: the duty of care, requiring directors to perform their functions with the diligence that a conscientious person would exercise in comparable circumstances, and the duty of loyalty, requiring directors to act in the interests of the company and to safeguard it against conflicts of interest. The Code also sets out non-transferable and inalienable responsibilities of the board, including the overall direction of the company, the organisation of accounting and financial control, and supervision of the persons entrusted with management.

These are the baseline against which any allegation of director failure will be measured.

For bank directors, the practical significance is that the Code treats certain oversight functions as reserved to the board as a body. The board cannot contract out of its responsibility for the ultimate supervision of management or for ensuring that the institution has an adequate internal control environment. Where a compliance failure arises from an absence of that control environment, the board, not merely the relevant executive, is in the frame.

Banking Act (BankA) & the FINMA supervisory framework

Layered on top of the Code is the Federal Act on Banks and Savings Banks (Banking Act, BankG / BankA), which imposes governance and organisational requirements specific to licensed institutions. The Banking Act is the statutory base on which FINMA builds its supervisory expectations: adequate organisation, appropriate internal controls, fit-and-proper governance, and the guarantee of irreproachable business conduct expected of those who direct a bank. FINMA’s supervisory practice translates these statutory requirements into concrete expectations around board composition, the independence of control functions, risk appetite frameworks and the board’s role in approving and monitoring AML and sanctions programmes.

The 2026 environment sharpens these expectations. FINMA’s supervisory focus has intensified around beneficial ownership transparency, AML effectiveness and sanctions controls, meaning the board’s documented oversight of these areas is now a frontline supervisory metric. Satisfying FINMA board responsibilities is no longer a matter of approving policies once a year; it requires evidence that the board actively tested, challenged and followed up on the effectiveness of controls.

Duty of care versus the business judgment rule

Swiss courts, led by the Federal Supreme Court (Bundesgericht / Tribunal fédéral), recognise a business judgment rule that protects directors who make decisions on an informed basis, free of conflict, and through a proper process. The protection is procedural rather than substantive: it shields the outcome of a decision from second-guessing, but only where the process was sound. A board that documents informed deliberation, reliance on competent expert input and a conflict-free decision benefits from this protection. A board that cannot show how a decision was reached, or that ignored red flags, does not.

For bank directors, this distinction is decisive, because compliance failures frequently turn not on the substance of a single decision but on whether the board maintained an adequate process of supervision over time.

Personal Liability, Civil, Administrative and Criminal Triggers for Bank Directors Duties Switzerland

The most pressing question for any board member is: when does oversight failure convert into personal exposure? Bank directors liability switzerland arises across three distinct but interacting channels, civil, administrative and criminal, and a single event, such as an AML lapse, can trigger more than one simultaneously.

Civil liability

Under the Code of Obligations, directors can be held personally liable to the company, to shareholders and, in insolvency, to creditors for loss caused by an intentional or negligent breach of their duties. Three elements must generally coincide: a breach of duty, resulting damage, and a causal link between the two, together with fault. Liability is personal and, where several directors contributed, can be joint and several, subject to differentiation according to individual fault. A director who can demonstrate that they acted diligently, challenged the relevant decision, or recorded their dissent is far better positioned than one whose contribution is undocumented. This is why minute-keeping is not administrative housekeeping but a primary liability defence.

Administrative liability and FINMA enforcement

FINMA holds a broad supervisory toolkit. Where an institution breaches supervisory law, FINMA can issue declaratory rulings, order restorative measures, confiscate unlawfully generated profits, and, significantly for individuals, impose industry or activity bans on persons responsible for serious violations. An industry ban can effectively end a banking career, which makes administrative exposure as consequential for directors as a financial penalty. FINMA can also require governance remediation, appoint investigating agents and, in serious cases, withdraw a licence. Directors should understand that FINMA’s enforcement interest increasingly extends beyond the institution to the individuals whose oversight failed. This is a central feature of FINMA board responsibilities in 2026: accountability has a personal dimension.

Criminal liability

Criminal exposure is the gravest channel. The Swiss Criminal Code (StGB) establishes offences, including money laundering and, under its corporate criminal liability provisions, failures of organisational measures to prevent certain crimes, that can reach individuals who direct a bank where intent or culpable negligence is present. The Anti-Money Laundering Act (AMLA) imposes AML duties whose breach can carry sanctions, and sanctions-evasion conduct connected to measures administered through the State Secretariat for Economic Affairs (SECO) can attract criminal consequences. Criminal liability in the banking context frequently arises not from a director personally committing a predicate offence, but from a failure of supervision that allowed offences to occur within an inadequately controlled institution.

Where a board knew or should have known of deficiencies and failed to act, the negligence threshold may be met.

Because the criminal channel turns on knowledge, foreseeability and the adequacy of organisational measures, a documented, functioning compliance architecture is both a prevention mechanism and a defence. The absence of such architecture can itself be evidence of failure.

Six liability scenarios bank directors should actively guard against:

• Dormant AML programme. The board approves AML policies but never tests their effectiveness, and suspicious activity reporting breaks down.
• Beneficial ownership blind spots. Customer onboarding fails to identify ultimate beneficial owners, exposing the bank to laundering risk and the board to oversight criticism.
• Sanctions screening gaps. Screening systems miss listed parties or fail to escalate hits, resulting in prohibited transactions.
• Ignored red flags. Internal audit or compliance raises concerns that the board does not act on or document following up.
• Conflicted decision-making. A director with an undisclosed interest participates in a decision, undermining the loyalty duty.
• Undocumented deliberation. The board makes defensible decisions but cannot evidence an informed, conflict-free process.

FINMA & 2026 Supervisory Expectations, Board Checklist (AML, Sanctions, Beneficial Ownership)

This is the operational heart of bank directors duties switzerland in 2026. FINMA expects the board to own the institution’s risk posture and to evidence that ownership. The following sections map supervisory expectations to concrete board actions, distinguishing where a formal board resolution is advisable from where management execution suffices.

AML oversight, risk assessment, KYC, beneficial ownership and reporting

AML oversight boards switzerland must perform centres on four pillars. First, the board must approve the institution-wide money-laundering risk assessment and understand its conclusions, including the geographies, products and client segments that drive risk. Second, the board must ensure that know-your-customer and beneficial ownership identification controls are adequate, a 2026 priority given intensified supervisory focus on transparency. Third, the board must ensure that suspicious activity reporting procedures function and that reports reach the competent authority (the Money Laundering Reporting Office Switzerland, MROS) as required. Fourth, the board must ensure independent testing of the AML programme and must review the results.

Board action: Adopt the risk assessment by board resolution on a regular cycle; receive and minute a periodic AML effectiveness report; confirm that independent AML testing occurred and that findings are tracked to closure.

Sanctions compliance, screening, escalation and SECO interactions

Sanctions compliance banks switzerland has become a defining supervisory theme. Switzerland administers its sanctions measures under the Embargo Act, with ordinances enforced through SECO, and banks must screen clients and transactions against applicable lists, block or freeze where required, and report as the framework demands. The board’s role is to ensure that screening systems are fit for purpose, that escalation paths for hits are clear, and that the institution interacts correctly with SECO when freezing or reporting obligations arise. Given the volatility of sanctions lists, the board should expect frequent updates and should satisfy itself that the bank’s systems ingest list changes promptly.

Board action: Require a standing sanctions report at board meetings during periods of heightened geopolitical risk; confirm that the escalation and transaction-blocking protocol is documented; ensure a named senior individual owns the SECO interface.

Governance and internal controls, the three lines of defence

FINMA’s supervisory model expects a functioning three-lines-of-defence architecture: the business as the first line owning its risks, compliance and risk management as the independent second line, and internal audit as the third line providing assurance. The board must ensure the independence of the second and third lines, that they are adequately resourced, and that escalation to the board functions without inappropriate filtering by management. A board that receives only management-sanitised information cannot discharge its oversight duty. Direct reporting lines from the heads of compliance, risk and internal audit to the board or its relevant committee are a supervisory expectation, not a courtesy.

Board action: Confirm the independence and resourcing of control functions; establish direct reporting lines to the board or audit/risk committee; review the internal audit plan and ensure coverage of AML and sanctions.

Governance disclosure for listed banks

For banks listed on SIX Swiss Exchange, corporate governance disclosure and board-level transparency obligations operate alongside FINMA supervision. Listed institutions must align their governance reporting with the exchange’s corporate governance disclosure requirements while meeting the supervisory standard applicable to all banks. The practical effect for 2026 is that listed banks face a double lens, supervisory and disclosure, and the board should ensure that what it reports to the market is consistent with the governance reality FINMA will examine. Inconsistency between disclosed governance arrangements and actual practice is an avoidable risk.

The 12-point FINMA-ready board checklist

1. Board has formally adopted the institution-wide money-laundering risk assessment on a current cycle.
2. KYC and beneficial ownership identification controls have been reviewed for adequacy and reported to the board.
3. Suspicious activity reporting procedures are documented, tested and confirmed functional.
4. Independent AML testing has occurred and findings are tracked to closure with deadlines.
5. Sanctions screening systems ingest SECO list updates promptly and have been validated.
6. Escalation and transaction-blocking protocols for sanctions hits are documented and board-approved.
7. A named senior individual owns the SECO reporting and freezing interface.
8. The three lines of defence are resourced and the second and third lines are independent.
9. Heads of compliance, risk and internal audit have direct reporting access to the board or committee.
10. The internal audit plan covers AML, sanctions and governance, and results reach the board.
11. Board minutes evidence informed deliberation, challenge and follow-up on compliance matters.
12. For listed banks, disclosed governance arrangements are consistent with supervisory reality.

D&O Insurance & Indemnity Best Practice for Swiss Banks

Even a diligent board carries residual risk, which makes D&O insurance banks switzerland a core element of liability management. D&O cover and corporate indemnities are not substitutes for sound governance, but they are essential financial backstops, particularly for defence costs, which can be substantial even where a director is ultimately exonerated.

Key D&O clauses to negotiate

Boards should scrutinise policy wording rather than relying on headline cover. Priority points include: the scope of insured persons and whether it captures all board and senior roles; the breadth of the definition of a claim and whether regulatory investigations and FINMA proceedings trigger cover; the availability of defence-cost cover on an advance-payment basis; the treatment of severability so that one director’s misconduct does not void cover for innocent directors; and the position on run-off cover for departing directors and after a change of control. A critical Swiss-law caveat applies: coverage for criminal fines and certain regulatory penalties is generally restricted as a matter of public policy, so boards should not assume that a penalty itself will be reimbursed.

The more realistic and valuable protection often lies in defence-cost and investigation cover.

Structuring indemnities and board approval

Company-level indemnities can supplement insurance but must be structured within the limits of Swiss corporate law and the institution’s articles. Indemnities cannot lawfully excuse a director from liability for intentional or grossly negligent breaches of duty to the company, and insolvency can curtail their practical value. The board should ensure any indemnity arrangement is properly authorised, consistent with the articles, and does not create conflicts, directors approving their own indemnities raises loyalty-duty questions that should be managed through recusal and independent review.

Practical negotiation checklist with insurers

• Confirm that FINMA investigations and enforcement proceedings fall within the definition of a covered claim.
• Secure advancement of defence costs before final determination of liability.
• Obtain severability so innocent directors retain cover notwithstanding a co-director’s conduct.
• Negotiate adequate run-off cover for retiring directors and after corporate transactions.
• Clarify in writing the treatment of fines and penalties, recognising Swiss-law restrictions.
• Review aggregate limits and sub-limits for regulatory matters against realistic exposure.

Practical Board Playbook, Agendas, Minutes, Templates and Escalation Protocols

Good governance is evidenced, not assumed. The discipline of how a board meets, deliberates and records its decisions is often the deciding factor in whether bank directors duties switzerland are judged to have been discharged. The following playbook translates the supervisory expectations above into repeatable board practice.

Suggested standing agenda items

Every bank board meeting in 2026 should reserve dedicated time for compliance oversight rather than relegating it to “any other business.” Recommended standing items include: a compliance and AML dashboard with trend data; a sanctions status update, with frequency increasing during periods of geopolitical volatility; escalation of material red flags from the second and third lines; a review of open audit and compliance findings against deadlines; and a forward look at regulatory developments affecting the institution. Where a matter requires a decision reserved to the board, it should be recorded as a formal resolution.

Minute language and documentation discipline

Minutes should demonstrate that the board was informed, that it challenged where appropriate, and that it decided through a sound process. Generic minutes stating only that a report “was noted” offer little protection. A more defensible approach records the information presented, the questions directors raised, the basis for reliance on expert input, the decision reached, and the follow-up actions with owners and deadlines.

A safe, non-legal sample excerpt might read: “The Board received the quarterly AML effectiveness report presented by the Head of Compliance. Directors questioned the increase in alerts arising from higher-risk jurisdictions and the adequacy of resourcing in the investigations team. Having considered the report and the independent testing results, the Board resolved to approve additional resourcing and requested a follow-up report at the next meeting. Action owner: Head of Compliance; deadline: next scheduled meeting.”

When to escalate to supervisory counsel

Directors should escalate to external counsel where a matter could expose the institution or individuals to enforcement or criminal risk, for example, a significant suspected AML breach, a potential sanctions violation, or a credible indication that control functions are being obstructed. Early legal engagement helps protect privilege where available, structures any internal investigation properly, and ensures the board’s response is defensible. Documentation of the decision to seek counsel, and of the advice’s role in subsequent decisions, strengthens the board’s position under the business judgment rule.

Evidence retention: Boards should maintain minutes, supporting reports, risk assessments and records of follow-up for periods consistent with regulatory, accounting and limitation requirements, ensuring the record of diligent oversight survives personnel changes.

Comparison Table, Pre-2026 vs 2026+ Board Obligations and Enforcement Focus

Conclusion & Five Immediate Actions for Boards

The 2026 reforms have raised both the standard and the personal stakes associated with bank directors duties switzerland. The common thread across statutory duty, FINMA supervision and criminal exposure is the same: boards must own compliance oversight actively and evidence that they do. A board that approves a risk assessment, tests effectiveness, challenges management, documents its reasoning and secures appropriate D&O protection is well positioned; a board that cannot show these things is exposed on every channel of liability. To implement the essentials of bank directors duties switzerland, boards should prioritise the following five actions.

1. Re-adopt and minute the institution-wide AML risk assessment, recording the board’s challenge and conclusions.
2. Validate that sanctions screening ingests SECO list changes promptly and that escalation and freezing protocols are documented and board-approved.
3. Confirm the independence, resourcing and direct board reporting lines of compliance, risk and internal audit.
4. Upgrade board minute practice to evidence informed deliberation, expert reliance, decisions and tracked follow-up.
5. Review D&O cover and indemnities for regulatory-claim scope, defence-cost advancement, severability and run-off, recognising Swiss-law limits on penalty cover.

Need Legal Advice

For tailored guidance on board governance, FINMA engagement, AML and sanctions oversight and D&O structuring, you can connect with a qualified Swiss corporate lawyer through the Switzerland, Corporate practice area or by searching the Global Law Experts lawyer directory for Switzerland, Corporate.

Sources

1. Swiss Financial Market Supervisory Authority (FINMA)
2. Federal Act on Banks and Savings Banks (Banking Act), via Fedlex, the official compilation of Swiss federal law
3. Swiss Code of Obligations (Obligationenrecht / Code des obligations), via Fedlex
4. Swiss Criminal Code (StGB), via Fedlex
5. Federal Act on Combating Money Laundering and Terrorist Financing (Anti-Money Laundering Act, AMLA), via Fedlex
6. State Secretariat for Economic Affairs (SECO)
7. Money Laundering Reporting Office Switzerland (MROS), fedpol
8. Financial Action Task Force (FATF)
9. Swiss Federal Supreme Court (Bundesgericht / Tribunal fédéral)
10. Swiss Bar Association (SAV/FSA)