What should an HOA board do when a director leaks executive session information?

By OurHOA · General information · Revised October 18, 2026

What an HOA board does when a director leaks executive session information: sort what got out, protect legal privilege and owner data, censure, and prevent repeats.

Part of the HOA board handbook: running the board.

The short answer

Treat a leak as two problems with different clocks. The first is damage control, and it has to happen within days: find out exactly what left the room, call the association's attorney if legal advice was part of it, and decide whether any owner whose private information got out should hear from the board. The second is the director, and that one can wait for a calm conversation and, if needed, a vote at the next meeting. Boards tend to do it backwards. They spend a week arguing about the director in email and forget that the attorney's opinion letter is now sitting on a neighborhood social media group. The board's options against the director are narrower than most directors assume. A board usually cannot remove another director; in Texas, Florida and Colorado that power belongs to the owners. What the board can do is censure, change officer roles, tighten how confidential material is handled, and, in a serious case, ask the owners to act. Rules vary by state and by your governing documents. This is general education, not legal advice for your community.

Sort what actually got out

Before anyone confronts anyone, write down what was disclosed, to whom, and how you know. A screenshot of a group chat post is evidence. 'Somebody told my neighbor' is not yet. Then put the information in one of four piles, because each one calls for a different response. Legal advice from the association's attorney, such as counsel's view of a pending lawsuit or a settlement number. This is the pile that can cost the association money. Owner private information: a delinquent balance, a violation history, a medical detail in an accommodation request, a phone number. Personnel and contract matters, such as what the board is willing to pay a new landscaper or why it is replacing the manager. And last, things that were never confidential to begin with. That last pile matters more than boards like to admit. In Texas, any decision made in executive session has to be summarized orally and placed in the minutes in general terms, including a general explanation of money spent (Tex. Prop. Code 209.0051(c)). In Colorado, the board cannot adopt a rule in executive session at all (C.R.S. 38-33.3-308(6)). In Florida, an HOA board may close a meeting only to meet with its attorney about proposed or pending litigation or to discuss personnel matters (Fla. Stat. 720.303(2)(b)); condo boards have the same two exceptions (718.112(2)(c)5.). If the board went behind closed doors to talk about the pool budget and a director told owners what happened, the director may have been right and the board wrong.

If legal advice leaked, call the attorney first

The attorney-client privilege belongs to the association, not to any one director. The Texas Rules of Evidence define a client to include an association or other organization, and the organization's representative claims the privilege (Tex. R. Evid. 503(a)(1), (c)). A privilege can be waived when its holder voluntarily discloses a significant part of the privileged matter (Rule 511(a)(1)), and a privilege claim is not defeated by a disclosure made without an opportunity to claim it (Rule 512(b)). Whether one director acting against the board's wishes counts as the association disclosing is a question for your lawyer, not for a board email thread. Federal courts and other states have their own versions of these rules. So the treasurer or president calls counsel the same day and says what got out and where. Ask three questions: does this affect our position in the dispute, should we ask the recipient or the site to take it down, and how should the board describe the leak in its own records. Colorado's statute is a useful reminder of who decides. Once a matter is resolved, the board may keep the privilege or choose to disclose the advice in an open meeting (C.R.S. 38-33.3-308(4.5)). That is a board decision, made by vote, and an individual director cannot make it alone.

If owner information leaked, protect the owner

State law already treats much of what boards discuss in closed session as information owners cannot see. Florida lists records that are not accessible to members, including privileged attorney records, personnel records, medical records and personal identifying information (Fla. Stat. 720.303(5)(g); 718.111(12)(c)5. for condos). It also says the association is not liable for disclosing that protected information unless the disclosure was made with a knowing or intentional disregard of its protected nature (720.303(4)(b)4.; 718.111(12)(g)3.). A director posting a neighbor's medical paperwork is the kind of disclosure that standard exists for. Colorado requires the association to withhold personnel, salary and medical records and owners' personal identification and account information (C.R.S. 38-33.3-317(3.5)). Texas lets the association withhold an owner's violation history, financial information and contact information (Tex. Prop. Code 209.005(k)). Ask counsel whether the board should tell the affected owner, and in most cases expect the answer to be yes. A short, factual letter from the president is better than the owner hearing it from the same neighbor who saw the post. Do not repeat the leaked detail in the letter, and do not guess in writing about who did it.

What the board can do about the director

Start with a private conversation between the president and the director, ideally with one other director present. Lay out what was disclosed and why it was confidential, and listen. Sometimes the director believed the board was hiding something it had no right to hide, and the right fix is to move that topic into the open meeting. Sometimes the director simply did not know. Write a short memo to the board file afterward. If it happens again or the first leak was serious, the board's tools are these. A resolution of censure, adopted in an open meeting, puts the board's position on the record without stating confidential details. If the bylaws let the board choose officers, the board can remove the director from an office such as president or secretary while the person stays on the board. The board can route privileged material through the attorney or the president, so documents are reviewed in the meeting rather than emailed. Ask counsel before shutting a director out of records, because directors need information to do their job. Removal is up to the owners. In Texas, a nonprofit director may be removed under the procedure in the certificate of formation or bylaws, or if those are silent, by the people entitled to elect the director, with or without cause (Tex. Bus. Orgs. Code 22.211). Florida HOA directors can be recalled by a majority of the total voting interests (Fla. Stat. 720.303(10)); condo recall is in 718.112(2)(l). Colorado owners can remove a board member with or without cause by 67 percent of those present and entitled to vote at a meeting with a quorum (C.R.S. 38-33.3-303(8)). Our guide on how to remove an HOA board member walks through that process.

Wording the board can copy

Censure motion: 'I move that the board censure Director [name] for disclosing information from the executive session held on [date], in conflict with the board's confidentiality policy, and that the board direct the president to send privileged legal communications only through the association's attorney until further notice.' Record each director's vote by name; Florida requires that for every vote (Fla. Stat. 720.303(3)). Minutes entry: 'The board discussed the unauthorized disclosure of information from the [date] executive session. Motion to censure carried 4 to 1. The board took no action on the underlying matter.' Leave out what the leaked information was. Letter to the affected owner: 'We are writing to let you know that information about your account, which the board reviewed in a closed session on [date], was shared outside the board without authorization. The board did not approve this disclosure. We have asked that it be removed and have reviewed how the board handles confidential information. Please contact [name] at [phone] with any questions.'

Mistakes that make a leak worse

Arguing about it by reply-all. Every email about the leak is a new record, and some of them will quote the confidential material. Keep the discussion to the phone, the attorney and the next executive session. Punishing the wrong thing. If the topic should have been in the open meeting, censuring the director who said so invites an owner complaint and loses the room. Fix the agenda first. Trying to remove the director by board vote. Unless your bylaws clearly allow it, a resolution declaring the seat vacant is likely invalid, and the dispute over it will do more damage than the leak did. Sending privileged memos to personal email accounts. Every inbox is another place a document can be forwarded from. Have the attorney present advice in the meeting, keep the written version in one restricted folder, and number copies if you must hand them out. No written policy. A director who signed a confidentiality clause is in a different position from one who was never told. Our guide on an HOA board code of conduct includes a clause to adapt, and the guide on writing minutes for an HOA executive session shows how to keep the closed record short enough that there is less to leak.

Sources

These guides are general education for HOA boards and residents, not legal, tax, or financial advice. Rules vary by state and by your community's governing documents - check with a professional for your situation.

More on board & governance

Or browse all hoa boards & governance guides.