Companies are separate legal persons, and courts treat them that way
A company can sue, be sued, be fined and settle claims in its own name. When a regulator announces a penalty against "Acme Pty Ltd", the respondent is the entity. Individuals are only bound by an outcome if they were joined as parties, gave personal undertakings, or were the subject of separate proceedings. This is not a technicality; it is the foundation of company law in every jurisdiction we cover, and enforcement practice reflects it. Large corporate penalties are routinely resolved with no individual charged at all. A well-documented example: in 2020 Westpac, one of Australia's largest banks, agreed to a civil penalty of A$1.3 billion for breaches of anti-money-laundering law. The penalty was corporate. Senior executives departed, but no individual was charged with an offence. Anyone later describing a Westpac director of that era as "fined for money laundering" would be wrong on the public record, yet that is precisely the compression that secondary sources perform every day.
What a corporate outcome does establish
It establishes that the entity did, or agreed not to contest that it did, whatever the instrument says. That can still matter for founder diligence in three ways. First, it dates the conduct: penalty notices and settlement documents almost always define a conduct period. Second, it may describe governance conditions, systems failures or cultural findings that existed while identifiable people were in charge. Third, it sometimes triggers follow-on actions in which individuals are named. So the corporate outcome is a lead, a dated pointer telling you where to look next. It is not, by itself, a finding about anyone.
What it does not establish
A corporate settlement does not establish that any individual acted wrongfully, and in most settlements the company does not even admit liability itself. It does not establish that the founder knew about the conduct, benefited from it, or was present when it occurred. And it establishes nothing at all about a person who had ceased to be a director or shareholder before the conduct period began. Consider a hypothetical: a founder builds a logistics company, sells her stake in 2017 and resigns her directorship the same year. In 2021 the company settles a safety prosecution over incidents in 2019. Every element of that settlement postdates her control. Attributing it to her is not a harsh-but-fair reading; it is a factual error. Yet a name search in 2024 will surface "founder of company fined over safety breaches" articles, because her name remains welded to the company's in every archive.
Control timelines are the whole game
Attribution therefore reduces to a dated question: who had the capacity to direct the company during the conduct period? Answering it takes three documents. The registry extract gives appointment and cessation dates for every director, as covered in our director history guide. The share register or its filings give ownership changes. The settlement, judgment or penalty notice gives the conduct window. Lay the three on one timeline and the question usually answers itself. If the founder's cessation date precedes the conduct window, the corporate outcome belongs to the successors. If the windows overlap, the founder's tenure is fairly in scope and you move to the harder questions of role and knowledge. Insolvency events follow the same logic: an administrator's report will state when the company's difficulties arose, which you can read against the directorship dates using our administration report guide.
Why media archives blur the line
Three mechanical reasons. Founders are the searchable, quotable human face of a company, so early coverage binds the two names together, and that binding persists in archives long after the founder leaves. Headlines compress: "Regulator fines Acme, company founded by Jane Doe" becomes, three reprints later, "Jane Doe's firm fined", and eventually "Jane Doe fined" in a machine-generated summary. And most stories about a corporate outcome simply never state who was on the board during the conduct period, because that fact takes a registry search the reporter did not run. None of this is usually malicious. It is lossy copying, and automated risk-screening tools then ingest the lossy copies and score the name, a failure mode we take apart in our adverse media guide.
When personal liability is real
The distinction cuts both ways, and diligence must catch the genuine cases. Individuals are personally on the hook when they are convicted of offences, when a court makes findings against them by name, when a regulator bans or disqualifies them, when they give personal undertakings, or when they guaranteed company debts. Directors can also face personal claims for insolvent trading and for breaches of directors' duties, but those require proceedings against the person, with the person's name on the originating documents. The test is always the same: find the individual's name in a primary instrument, not in a headline. If it is there, the record is personal and should be weighed as such. If it is not, what you have is a corporate fact plus a timeline still to be checked.
Never move an adverse event from a company to a person without two documents: a primary instrument naming the person, or a registry-verified control timeline showing the person held office during the conduct period. One or the other. A headline is neither.