When a director repeatedly bypasses the CEO to pull information from staff, your board should treat it as a governance question, not a personality problem. The answer is not to scold the individual. Your board needs a clear, written rule about how information flows, and it needs to apply that rule to everyone. Individual directors have no authority to direct staff. Only the full board, acting together, holds authority, and it exercises that authority through the CEO.
Here is the principle underneath. A board governs as a body, not as a collection of individuals. One director asking a nurse manager for patient throughput numbers, or a foundation trustee emailing a program officer for grant details, is acting alone. That single director speaks for no one but themselves. When staff receive these requests, they face an impossible choice: serve the director or serve their actual manager. Your CEO remains accountable for outcomes, but directors who reroute information flow can undermine the CEO's ability to manage staff responses and coordinate board-level reporting.
Directors who request information from staff outside proper channels create structural problems. Staff learn that individual board members can pull them off task, which fragments their attention away from their primary responsibilities and from the direction set by the CEO. Priorities blur as staff try to respond to competing demands from individual directors while also fulfilling their regular duties. The CEO loses the ability to give the board one accurate, complete picture, because pieces of information now travel through private channels. Staff can mitigate this by forwarding any director request to the CEO immediately, but the underlying problem remains: information shared privately with one director may never reach the full board unless that director voluntarily shares it. A hospital trustee who calls the chief of surgery directly may get one version of a staffing dispute. The other seven trustees get nothing, or get it later, or get it filtered. Your board now deliberates on unequal information, and unless that director voluntarily shares what they learned, the rest of the board operates without the same context.
The effective approach separates the director's legitimate need from the improper channel. The need is real. Directors require information to govern well. Your response should say yes to the need and redirect the channel. Route requests through the CEO or the board chair, who can then route them to the CEO. For time-sensitive matters, the chair should act as a fast conduit, not a bottleneck. This is not about protecting the CEO's ego. It ensures every director receives the same information at the same time, and it keeps staff answering to one line of authority.
Sometimes a director bypasses the CEO because they suspect the CEO is hiding something. That is a serious concern, and your rule about information flow must not become a way to suppress it. If a director believes the CEO is withholding material facts, the answer is still not private calls to staff. The answer is to raise the concern with the full board, recognizing that a split or dysfunctional board may not act. If the full board does not act, or if the board itself is split or dysfunctional and cannot exercise proper oversight, then the proper channels for a director exercising fiduciary duty to investigate include requesting an independent external audit, commissioning an independent investigation by a third party, or escalating to regulatory or accrediting bodies where applicable. A nonprofit association board that suspects its executive director is misreporting membership numbers does not solve that by having one director interrogate the membership coordinator. It solves it by directing an audit as a body. The channel protects the organization even when the CEO is the subject of the inquiry.
What this looks like in practice: a policy, a conversation, and consistent application. Not a reprimand delivered in the hallway.
- Write the rule before you need it. Adopt a board policy stating that individual directors have no authority to direct staff, and that requests for operational information go through the CEO or the chair. Say plainly that any information one director receives becomes available to all directors. Vote on it as a body so it belongs to everyone, not to the chair alone.
- Have the chair speak to the director privately and specifically. Not "you're overstepping." Instead: "When you called the program officer last week, she stopped her work to answer you, and the rest of us didn't have that information. Our policy routes those requests through me or the CEO. What are you trying to find out? Let's get it for the whole board."
- Give staff a scripted, respectful way to redirect. Tell your CEO to equip staff with one line: "I'd be glad to help. Board information requests go through [CEO/chair], so let me loop them in." This removes the burden from the individual employee, who should never be forced to refuse a director alone. Recognize that directors may frame requests as informal questions, and staff should feel empowered to redirect without escalation.
- Make board information flow faster and more responsive. Even with excellent reporting, some directors will bypass for reasons unrelated to data delays, suspicion, habit, or a desire for private influence. Good information flow reduces one motivation for bypassing but cannot eliminate behavioral and governance issues. Build a regular reporting rhythm that answers the questions directors actually ask. When the front door works, fewer people climb through windows.
- Watch the pattern over time, not the single incident. One bypass may be a habit from a prior board culture. Repeated bypasses after a clear conversation signal something else, perhaps a director who doesn't accept the board's collective authority. Address that directly at the board level. This is ongoing work, not a matter you close after one meeting.