Summary

  • A director had received a pre-suit letter from a law firm in his home country, and the stated fourteen-day period was due to expire on 10 March 2022, one day after AFRINIC’s special Board meeting.
  • Resolution 202203.681 did two things: it authorised the company to cover directors’ legal defence costs, and it authorised Legal Department exchanges with any director’s legal representative on matters covered by a Non-Disclosure Agreement.
  • The recorded act proves authority, not execution. It does not by itself prove that counsel was instructed, an invoice arrived, money was paid, insurance responded, an indemnity became final, a case was filed, or the threatened action reached any outcome.
  • Confidentiality may properly protect advice, strategy, privilege and personal data, but the wording does not expressly classify every cost-control fact as secret. A separate member-safe receipt could preserve oversight without exposing protected substance.
  • The sound counterfactual is a dual ledger: a confidential legal file for the defence and a linked control register for authority, eligibility, ceiling, aggregate exposure, review, expiry and disposition.

One day left

The starting point is not an annual budget, a later lawsuit or a theory about institutional motive. It is a date. AFRINIC’s signed minutes say that a non-executive director had received, by email, a letter from a law firm in his home country. The sender’s identity was redacted. The person said to have originated the letter was also redacted. The letter allowed fourteen days and threatened legal action against the director personally if no action was taken. That period was due to expire on 10 March 2022.

On 9 March, the day before that deadline, the director had already referred the matter to the Board Chair. The Board then met in special session by online conference. The meeting opened at 14:06 UTC and closed at 15:42 UTC. In that compressed setting, the Board faced a practical problem with two sharply different dimensions. One was the exposure of a natural person serving as a director. The other was the possibility that the company, and therefore ultimately a member-funded institution, would take responsibility for costs arising from that exposure.

Those dimensions should not be collapsed. A pre-suit letter is not a filed case. A threatened action is not a judgment. An allegation is not established liability. A response deadline is not proof that the threatened claim had merit. The public record does not identify the country, court, jurisdiction, legal theory, opponent or law firm, and none should be reconstructed from the redactions. What the record does establish is the pressure of time and the personal form of the threat. The director was not described merely as receiving correspondence addressed to the company; the minutes recorded the possibility of action against him personally.

Urgency matters because it changes the responsible sequence of decision-making. A board may need to preserve a person’s ability to obtain advice before every question about eligibility, budget, insurance and final allocation has been settled. Yet urgency does not dissolve those questions. It may justify a provisional act, an emergency tranche or a rapid communication route; it does not turn the subsequent control trail into an optional courtesy. The closer the deadline, the stronger the case for separating immediate protection from later financial regularisation.

That separation is the heart of this resolution’s governance significance. AFRINIC could reasonably conclude that a director should not have to choose, overnight, between personal financial exposure and carrying out a corporate role. At the same time, the company’s intervention moved the risk boundary. What began as a personal threat could become a corporate cost. A sound institution needs a way to show that this movement occurred under defined authority, for a defined beneficiary class and within a reviewable financial perimeter—even when the legal substance stays confidential.

The public material lets readers see the first movement but not the full perimeter. That is a limitation of what has been published, not proof that private controls did not exist. There may have been legal analysis, a budget, a limit, insurance correspondence, invoice review or later reporting outside the available record. The responsible conclusion is narrower: the published minutes and resolution do not show those things. Good governance analysis must remain disciplined enough to distinguish “not shown” from “did not happen.”

A special meeting and an exact vote

Eight directors were listed as present: Eddy Kayihura, S. Moonesamy, Habib Youssef, Adewale Adedokun, Silvio Almada, Abdalla Omari, Benjamin Eshun and Oluwaseun Ojedeji. All members present agreed to waive fourteen days’ notice. The minutes recorded the meeting as quorate under bylaw article 19.2(ii). The waived meeting notice and the fourteen-day response period in the pre-suit letter were separate facts; their identical duration should not be mistaken for a legal connection.

Under the conflict-disclosure item, the signed minutes recorded no declaration of interest. That entry is evidence of what the meeting record says, not a finding about whether any private interest existed, whether the threatened director participated in every step, or whether an independent review occurred elsewhere. The beneficiary was redacted, while all eight directors were present. The record therefore cannot support an identity-based reconstruction.

It can support a control question: when institutional protection may extend from one threatened director to other directors in a similar predicament, how should eligibility and conflict treatment be documented without disclosing protected identities?

The sole substantive agenda item was the letter before court action against a non-executive director. After discussion, Eddy Kayihura proposed Resolution 202203.681 and Abdalla Omari seconded it. The first operative clause authorised the company to cover the legal costs in the directors’ defence. The second authorised AFRINIC’s Legal Department to communicate and exchange with the legal representative of any director on matters covered by the Non-Disclosure Agreement.

The roll call was unanimous: Eddy Kayihura, S. Moonesamy, Habib Youssef, Adewale Adedokun, Silvio Almada, Abdalla Omari, Benjamin Eshun and Oluwaseun Ojedeji were recorded as voting Yes. The tally was eight Yes, zero No and zero abstentions. Unanimity matters because it makes the corporate authority visible. It does not enlarge what was authorised, establish the merits of the threatened claim or prove that any later financial event occurred.

The two clauses addressed related but distinct needs. The cost clause placed the company behind the defence as an authorised funder. The communications clause permitted institutional lawyers to deal with the legal representative of any director within the scope of an NDA. One concerned financial protection in principle; the other concerned the protected movement of information.

Neither clause, as published, describes the operating machinery that might have followed: counsel selection, a letter of engagement, an approved rate, an invoice workflow, a payment instruction, an insurer notification, a recovery process, a repayment condition or a closing review.

This precision is not pedantry. Governance failures often begin when a verb is allowed to perform the work of several different states. “Authorise” is one state. “Instruct,” “commit,” “invoice,” “approve,” “pay,” “indemnify,” “recover” and “close” are others. A board may authorise coverage but never receive an invoice. It may advance money subject to repayment, reimburse costs already incurred, or grant final indemnification after eligibility is confirmed. Insurance may respond, partially respond or never be invoked. None of those possibilities can be selected from this record.

The resolution thus belongs at the opening of a control sequence, not at its imagined end. It shows the Board creating corporate permission under urgent conditions. It does not show the downstream execution of that permission. Any account that converts the unanimous vote directly into a paid expense, a completed indemnity or a resolved case would outrun the evidence.

What the NDA sentence does—and does not—say

The second clause deserves close reading because it is easy to make confidentiality either too weak or too powerful. The wording authorises Legal Department communication and exchange with a director’s legal representative “on matters covered by” the Non-Disclosure Agreement. The limiting phrase attaches the communication channel to covered matters. It does not publish the NDA, define those matters or identify the agreement’s parties, recipients, exceptions, duration, governing law, privilege treatment, termination rules or successor arrangements.

It would therefore be wrong to claim that the NDA was narrow in practice. It would be equally wrong to say the clause expressly made the entire resolution, Board vote, authority basis, financial ceiling, aggregate cost, review history and final disposition confidential. The available text does neither. It establishes an NDA-bounded communications route and leaves the actual perimeter unpublished.

That distinction protects legitimate secrecy. Advice about how to answer a threat, tactical assessments, personal data, communications that may attract legal privilege, draft pleadings and itemised descriptions of legal work can be highly sensitive. Publishing such material could damage the director’s position, expose private information or impair the institution’s own defence. Member accountability does not require opening the legal file.

But the same distinction also prevents a confidentiality label from swallowing the surrounding corporate receipt. Whether the Board passed a resolution is already public. The date, vote and general matter class are already public. Other categorical facts can often be reported without disclosing strategy: whether the authorised protection was an advance or reimbursement; whether a ceiling or budget band applied; how much was committed and paid in aggregate; whether insurance or recovery was pursued; when the authority would be reviewed; whether it expired; and whether the matter ended with no further corporate exposure.

Some of those facts might themselves require delay, aggregation or careful phrasing. An exact contemporaneous amount could occasionally reveal the intensity of work. A beneficiary class could be too small to anonymise safely. A live insurance negotiation may need temporary restriction. Those are reasons to design the reporting layer, not reasons to assume that every control fact shares the legal file’s confidentiality. Bands, lagged reporting, categorical statuses and final close-out notices can reduce inference risk.

The key question is not whether members should see the NDA. They should not be presumed entitled to protected legal substance. The question is whether an institution can keep the NDA protected while still providing a reliable trace of corporate authority and exposure. Resolution 202203.681 reveals the need for that trace because it joined a funding decision to a confidential communication channel without publicly specifying a separate member-safe control layer.