For years, Caremark claims were treated like the corporate-law equivalent of spotting a unicorn in a boardroom: talked about often, proven rarely, and usually accompanied by a lot of nervous memo-writing. That reputation still exists. Delaware courts continue to say oversight liability is one of the hardest theories in corporate law for plaintiffs to win. But a recent Delaware Chancery decision, Brewer v. Turner, has lawyers, directors, compliance officers, and general counsels leaning a little closer to the table.
Why? Because the case suggests something important about the future of board oversight litigation. The issue was not simply whether the board ignored compliance red flags altogether. The more provocative point was whether a board that saw a serious warning, hired outside counsel, discussed the problem, and then moved too slowly to stop allegedly unlawful conduct could still face a viable Caremark claim. In other words, the danger may no longer be limited to doing nothing. Doing too little, too late may also get you invited into expensive fiduciary-duty litigation. Nobody wants that invitation.
This article explains what the Delaware Chancery Court decided, why the decision matters, how it fits with the broader Caremark trend, and what boards should do now if they prefer their meeting minutes not to become courtroom exhibits.
What Is a Caremark Claim, Really?
A Caremark claim is a fiduciary-duty claim based on a board’s duty of oversight. In practical terms, it asks whether directors made a good-faith effort to put in place systems that would help them monitor legal compliance and major business risk, and whether they responded appropriately when warning signs appeared.
The Two Basic Paths to Oversight Liability
Over time, Delaware law has framed oversight claims in two familiar buckets. The first is the so-called information-systems theory. That is the claim that directors failed to implement a reasonable board-level system for receiving information about mission-critical risks, legal compliance, or major operational issues. Think of it as the “no dashboard, no gauges, no warning lights, and somehow we still drove at highway speed” theory.
The second is the red-flags theory. That claim assumes some oversight system exists, but alleges that directors consciously ignored clear warning signs of misconduct or legal risk. This is usually the harder practical argument because boards rarely admit they ignored danger. More often, they say they reviewed reports, called lawyers, formed committees, and did their best under messy circumstances. Courts have often been reluctant to second-guess those kinds of responses at the pleading stage.
That is exactly why Brewer v. Turner feels notable. The court did not say Regions lacked an information system. In fact, the opinion essentially rejected that angle. The action centered on the red-flags theory and whether delay itself could support an inference of bad faith.
What Happened in Brewer v. Turner?
The case arose from Regions Financial Corporation and Regions Bank. In 2022, the Consumer Financial Protection Bureau entered a consent order requiring Regions to pay $191 million tied to overdraft-fee practices the agency described as unlawful surprise overdraft fees. The relevant conduct involved authorized-positive, settle-negative transactions, where a consumer appeared to have enough money at the time of authorization but was later charged an overdraft fee when the transaction settled. That kind of fee practice has been a magnet for regulatory attention for years, especially in consumer banking.
A stockholder then brought a derivative action seeking to recover the $191 million from fiduciaries who allegedly caused the company to adopt and continue the overdraft practice. The plaintiff relied on both Caremark and Massey theories, arguing in substance that the company kept profiting from conduct that allegedly violated positive law.
The Red Flags the Court Evaluated
The opinion reviewed several possible warning signs. Some did not do much work. Letters from senators were treated as too general or exploratory. A separate consent order involving USAA mattered somewhat because it prompted discussion, but standing alone it did not neatly match the exact legal problem facing Regions. The court did not treat every piece of noise in the compliance environment as a true red flag. That is important. Delaware still is not saying every uncomfortable document equals fiduciary doom.
The strongest red flag, according to the court, was a draft whistleblower complaint from former Deputy General Counsel Jeffrey Lee. The complaint allegedly told a detailed story: that Regions’ overdraft-fee practices were illegal, that Lee had been fired after raising the issue, and that executives delayed ending the practice while looking for replacement revenue. The court regarded that draft complaint as powerful because it came from a senior in-house legal executive whose job included identifying legal risks. A whistleblower memo from a random bystander is one thing. A detailed warning from former in-house counsel is another creature entirely.
After receiving the complaint, the board’s audit committee engaged outside counsel, Buckley LLP, to review the issue. That response gave the defendants an argument: this was not a board asleep at the wheel. They investigated. They discussed. They acted. Yet the court still allowed the claim to proceed against key directors who served during the relevant period.
Why the Delay Mattered
Here is where the decision gets spicy by Delaware standards. The alleged problem was not simply that the board ignored the whistleblower warning. It was that the company continued the challenged practice while seeking alternative fee revenue, rather than cutting the practice off promptly. The court indicated that conscious delay in ending conduct the board allegedly understood to be illegal could support an inference of bad faith.
That idea is what makes commentators talk about possible Caremark expansion. In many older oversight cases, once directors could show they responded in some fashion, courts were hesitant to treat the adequacy or timing of that response as disloyal conduct. Brewer suggests there is a limit to that protective instinct. Hiring lawyers may help. Discussing the issue may help. But if the core allegation is that the board kept unlawful conduct running because the revenue was nice and the replacement plan was not ready yet, then the board may not be rescued by saying, “We were working on it.”
That phrase tends to age badly in litigation.
Does the Decision Really Expand Caremark?
The careful answer is yes and no.
No, because Brewer v. Turner did not rewrite Delaware doctrine. The court did not announce a new formal test. It did not say directors become liable every time remediation takes longer than plaintiffs would prefer. It did not erase the high bar that still governs oversight claims. And it did not hold anyone liable on the merits. This was a motion-to-dismiss decision, not a final judgment after trial.
But also yes, because doctrine can expand through application even when the legal standard stays the same on paper. The opinion widens the practical space in which a plaintiff can plausibly plead bad faith. Before Brewer, many boards likely took comfort in the idea that once they retained outside counsel and put the issue on the agenda, they had largely inoculated themselves from a red-flags claim. The decision makes that assumption look shakier.
Put differently, the court signaled that the difference between “response” and “good-faith response” may matter more than some directors hoped. A slow response motivated by commercial convenience can start to look less like business judgment and more like conscious disregard. That is not a tiny shift. It is not a doctrinal earthquake either. It is more like discovering the ground under your feet is less concrete than you thought.
How Brewer Fits Into the Broader Caremark Trend
Brewer did not arrive out of nowhere. It sits in a line of Delaware decisions that have gradually made oversight law more serious in practice while still paying homage to the doctrine’s famously high threshold.
Marchand and Mission-Critical Risk
Marchand v. Barnhill was a major turning point. There, the Delaware Supreme Court revived claims against Blue Bell directors after a listeria crisis. The big lesson was that boards must have a real system to monitor mission-critical risk. If a company’s central business depends on food safety, airplane safety, clinical trial integrity, or regulatory compliance, directors cannot operate as if those topics are side quests.
Clovis and Boeing
Clovis and Boeing reinforced that idea. In Clovis, the court allowed a claim to proceed where directors allegedly failed to monitor compliance with the clinical-trial standards that sat at the heart of the company’s business. In Boeing, aircraft safety became the mission-critical issue, and the court focused heavily on whether the board had a meaningful system for monitoring that risk at the board level. These cases told directors that “mission critical” is not just a dramatic phrase lawyers use in slide decks. It is a litigation concept with teeth.
McDonald’s and Officer Oversight
Then came In re McDonald’s, where the Court of Chancery made clear that officers, not just directors, can owe oversight duties. That mattered because officers are the people who often sit closest to the facts. If directors are responsible for the oversight architecture, officers are usually the ones walking the hallways where problems first start whispering.
Still, later decisions such as Segway warned that Caremark is not a catch-all for ordinary business problems. Delaware has not transformed oversight law into a universal complaint box for disappointing management performance. The bar remains high, and not every mistake is bad faith.
Collis and Pleading-Stage Momentum
The Delaware Supreme Court’s decision in Collis, involving AmerisourceBergen, added another notable data point. The court revived a Caremark claim after rejecting the Chancery Court’s use of another court’s factual findings at the pleading stage. That decision did not make plaintiff success easy, but it reinforced that well-pleaded oversight cases can survive dismissal when the facts are serious and the red flags are concrete.
Against that background, Brewer looks less like a random outlier and more like the next chapter in a broader story: Delaware courts are still saying Caremark is hard, but they are increasingly willing to scrutinize how boards oversee legal compliance when the risk is central, the warning is specific, and the harm is substantial.
Why This Matters for Boards and General Counsel
The practical lesson from Brewer is not that boards should panic every time a whistleblower appears. It is that boards need to treat certain warnings like live wires, not paperwork. A detailed allegation from in-house legal personnel about ongoing illegal conduct is not something to “circle back on” six quarters later after budget season. That is how companies end up starring in law review articles and unhappy earnings calls.
1. Separate Revenue Logic From Compliance Logic
One of the most dangerous allegations in oversight cases is that a company kept questionable conduct going because it liked the money. Boards do not have to destroy value to be compliant, but they do have to avoid creating a record that implies the business deliberately tolerated illegality while it searched for a softer landing.
2. Do More Than Hire Outside Counsel
Outside counsel can be critical, but they are not magic dust. Retaining a law firm is a step, not a defense in itself. Boards should ask what counsel found, what management changed, what interim controls went live, and what timeline exists for remediation. If the answer is vague, the risk is not gone. It is just better dressed.
3. Treat Whistleblower Reports Like Potential Governance Events
Not every whistleblower is correct. Some complaints are exaggerated, emotional, strategic, or all three before lunch. But a complaint from someone with direct legal or compliance responsibility deserves disciplined escalation. Brewer shows how a whistleblower submission can become the center of a red-flags theory years later.
4. Document Action, Not Just Conversation
Minutes that show discussion are useful. Minutes that show follow-through are better. Courts often examine whether directors merely received information or actually pushed for solutions. A board that asks for updates, sets deadlines, demands remediation, and confirms closure is in a much stronger position than a board that “reviewed matters” and then drifted into the next agenda item about executive compensation.
Experience From the Real World: What These Oversight Problems Usually Feel Like Inside a Company
In real corporate life, oversight failures rarely look dramatic at first. They do not usually arrive with thunder, violin music, and a giant sign reading “future derivative lawsuit.” They start small, awkward, and annoyingly procedural.
A compliance officer raises a concern. A business leader says the issue is being reviewed. Someone notes that regulators have been asking similar questions elsewhere in the industry. The legal department says there may be exposure but wants more facts. The board hears that outside counsel has been engaged, which sounds reassuring because it is reassuring, up to a point. Then everybody moves to the next agenda item because the company still has earnings targets, integration work, technology headaches, and a CEO who would prefer not to spend the entire meeting discussing fee disclosures.
That is exactly why cases like Brewer matter. They capture the lived experience of governance risk: not obvious villainy, but organizational drift. One month becomes one quarter. One quarter becomes a year. The “temporary” decision to keep a challenged practice in place turns into a business habit. By the time the company finally fixes the issue, regulators, plaintiffs, and judges may look back and ask a brutally simple question: if the risk was real enough to investigate, why was it not urgent enough to stop?
General counsels and chief compliance officers know this tension well. They often live in the uncomfortable space between legal caution and commercial impatience. They may advise that a practice should stop immediately, while finance teams ask about revenue replacement, customer communications, system reprogramming, contractual fallout, or operational disruption. None of those concerns is illegitimate. Companies are complex machines, and shutting off one process can affect ten others. But the governance problem starts when the conversation becomes less about how to end the risk safely and more about how long the company can tolerate the risk while it protects the income statement.
Board members also face a practical challenge that court opinions only partly capture: they depend heavily on management and committees for escalation. Directors are not sitting in customer-service queues or reading every internal complaint in real time. Their job is to insist on a system that pulls serious issues upward fast enough for them to act. In that sense, one of the clearest real-world lessons from modern Caremark cases is that information architecture matters almost as much as judgment. Bad reporting systems produce slow boards. Slow boards produce ugly hindsight.
Another common experience is the false comfort of “we hired experts.” Boards often feel safer once outside counsel, consultants, or forensic reviewers are involved. That instinct is understandable. Experts help frame facts, test assumptions, and reduce error. But no outside adviser can substitute for a board decision. At some point, directors must choose whether to halt conduct, change policy, discipline executives, enhance controls, self-report, or accept short-term financial pain. Outsourcing the investigation is not the same as owning the response.
And finally, there is the minute-book problem. When litigation arrives, every vague sentence ages like milk. A record that says the board “reviewed legal matters” sounds harmless during the meeting and painfully thin in court. By contrast, a record showing who presented, what was known, what follow-up was ordered, when management had to report back, and what interim controls were adopted can be the difference between a board that looks careful and a board that looks politely absent.
That is why Brewer resonates beyond banking. The case reflects ordinary corporate experience: a serious warning, a measured investigation, a slow remediation path, and a later allegation that the delay itself was disloyal. Directors, officers, and counsel should read that sequence not as a freak event, but as a familiar governance pattern with sharper legal consequences than before.
Conclusion
The Delaware Chancery decision in Brewer v. Turner does not mean every delayed response to a compliance issue will become a winning Caremark claim. The doctrine remains demanding, and courts are still careful not to convert oversight law into a general-purpose negligence regime. But the case does suggest a meaningful expansion in practical risk. A board may no longer feel safe merely because it investigated a serious warning. If the alleged facts support an inference that directors knowingly allowed questionable conduct to continue while protecting revenue or buying time, that delay itself may be enough to keep a claim alive.
That is the deeper lesson. Modern Delaware oversight law is less interested in formal gestures and more interested in whether fiduciaries made a genuine good-faith effort to stop mission-critical legal risk. For boards, that means compliance cannot be treated like a background soundtrack. When the warning is concrete, the source is credible, and the conduct touches the heart of the business, speed, documentation, and follow-through matter. In the post-Brewer world, a board that responds too slowly may find that “we were handling it” is not quite the shield it used to be.