Skip to main content
Category: Ethics and Culture

Conflict of Interest

Also known as: COI, Competing interests, Conflicting interests
Simply put

A conflict of interest arises when a person or organization has multiple interests, financial or otherwise, and advancing one of those interests could improperly influence the way they carry out an official duty or responsibility. For example, an employee handling a matter that also involves an outside organization they are connected to may face a conflict between their private interests and their official responsibilities. The concern is typically the potential for divided loyalty to compromise objective judgment, regardless of whether any improper act actually occurs.

Formal definition

A conflict of interest is a situation in which a person or organization is subject to multiple interests, financial or otherwise, such that serving one interest may compromise, or appear to compromise, the impartial performance of an official role or fiduciary responsibility. In a governance context, it is commonly framed as a conflict between an individual's private interests and their official responsibilities in a position of trust, and it may exist as an actual, potential, or perceived conflict. Because the concern centers on the risk to objective judgment rather than on demonstrated wrongdoing, governance frameworks typically address conflicts of interest through disclosure, recusal, and independent oversight controls. This entry defines the concept and does not cover jurisdiction- or sector-specific disclosure requirements, statutory obligations, or implementation procedures, which vary by organization and legal context.

Why it matters

Conflicts of interest matter because they threaten the impartial exercise of judgment on which trusted roles depend. When a person subject to multiple interests carries out an official duty, the concern is not necessarily that wrongdoing has occurred, but that divided loyalty could compromise, or appear to compromise, objective decision-making. Governance structures rely on the credibility of those making decisions on behalf of an organization or its stakeholders, and even a perceived conflict can erode trust in that decision-making regardless of the actual outcome.

Because the risk centers on the potential for compromised judgment rather than on demonstrated misconduct, conflicts of interest are treated as a governance concern to be identified and managed proactively rather than only addressed after harm arises. Actual, potential, and perceived conflicts all warrant attention, since the appearance of a conflict can undermine confidence in a position of trust even where no interest is ultimately advanced improperly.

Addressing conflicts of interest supports the integrity of official roles and fiduciary responsibilities. The specific disclosure requirements, statutory obligations, and remediation steps vary considerably by jurisdiction, sector, and organization, so the concept described here should be applied within the relevant legal and organizational context rather than treated as a uniform standard.

Who it's relevant to

Governance professionals
Those responsible for board and organizational governance structures use conflict-of-interest concepts to design decision rights, disclosure expectations, and oversight arrangements that protect the impartiality of individuals in positions of trust.
Compliance officers
Compliance functions typically operationalize conflict-of-interest management through disclosure processes and policies, and must apply the concept within the specific statutory and internal requirements that govern their organization and jurisdiction.
Internal auditors and assurance functions
Independent assurance providers assess whether conflict-of-interest controls such as disclosure, recusal, and independent oversight are designed and operating effectively, while maintaining their own independence and objectivity from the activities they review.
Employees and fiduciaries in positions of trust
Individuals who carry out official duties or hold fiduciary responsibilities may encounter conflicts between their private interests and their official roles, and are commonly expected to recognize and disclose actual, potential, or perceived conflicts.

Inside COI

Actual Conflict
A situation in which a person's private interest currently and directly interferes with the duties or responsibilities they owe to the organization, affecting a decision or action already at hand.
Potential Conflict
A situation in which a private interest could foreseeably interfere with organizational duties in the future, even though no compromised decision has yet occurred.
Perceived (Apparent) Conflict
A situation in which a reasonable observer might conclude that a person's private interest could improperly influence their duties, regardless of whether actual influence exists. Managing perception is often as important as managing actual bias to preserve trust.
Interest at Stake
The private benefit that may bias judgment, which can be financial (ownership, gifts, outside compensation) or non-financial (personal, familial, or relationship-based).
Duty Owed
The obligation of loyalty, impartiality, or fiduciary care that the individual owes to the organization or its stakeholders, against which the competing interest is measured.
Disclosure
The mechanism by which affected individuals declare relevant interests so that the organization can assess and manage the situation. Disclosure is a component of governance and compliance processes but does not by itself resolve a conflict.
Management and Mitigation
The steps taken once a conflict is identified, which may include recusal, reassignment, oversight, divestment, or restriction of access. The appropriate response depends on severity, role, and applicable policy or jurisdictional requirements.

Common questions

Answers to the questions practitioners most commonly ask about COI.

Does a conflict of interest mean someone has actually acted improperly?
No. A conflict of interest describes a situation in which a person's competing interests, duties, or loyalties could improperly influence their judgment or actions in a role. Its existence reflects the potential for compromised objectivity, not proof that misconduct has occurred. Many frameworks distinguish actual conflicts from perceived and potential conflicts, and identifying a conflict typically triggers management or disclosure obligations rather than presuming wrongdoing.
Can a conflict of interest be eliminated simply by disclosing it?
Not necessarily. Disclosure is commonly a first step, but it does not by itself resolve the underlying conflict. Depending on the situation, additional treatment such as recusal, reassignment, independent review, or divestment may be appropriate. Disclosure supports transparency and informed decision-making, but the adequacy of any response typically depends on the significance of the conflict and applicable policies or obligations.
How should an organization capture and track disclosed conflicts?
Many organizations maintain a register or log in which disclosed interests are recorded, assessed, and linked to any agreed treatment such as recusal or monitoring. Practices vary by organization size, sector, and jurisdiction. The register typically supports periodic review and provides a record for assurance functions, though specific tooling and retention arrangements are out of scope here.
Who is typically responsible for assessing and managing a disclosed conflict?
Responsibility commonly rests first with the individual to disclose and with management to assess and decide on treatment, consistent with first line ownership of risks and controls. Compliance or a designated function may set policy, advise, and oversee the process, while assurance functions such as internal audit may independently evaluate whether the process operates effectively. The specific allocation depends on the organization's governance structure and policies.
When should conflicts of interest be reviewed or reconfirmed?
Many organizations require disclosure at defined points, such as on joining, on a periodic basis, and whenever circumstances change, for example on taking a new role or transaction. Reconfirmation helps ensure the record remains current, since interests may arise or lapse over time. The frequency and triggers vary by policy, sector, and jurisdiction.
What role does recusal play in managing a conflict?
Recusal involves withdrawing from a decision, discussion, or process where a person's objectivity may be compromised. It is one commonly used treatment among others, such as disclosure, reassignment, or independent oversight. Whether recusal is appropriate or sufficient typically depends on the significance of the conflict and the applicable policy; it is not a universal remedy and does not guarantee that all residual risk is removed.

Common misconceptions

A conflict of interest only exists when someone has actually acted improperly or gained a benefit.
A conflict can be actual, potential, or perceived. Its existence turns on the presence of a competing interest against a duty owed, not on whether wrongdoing has occurred. Perceived and potential conflicts warrant management even where no improper act has taken place.
Disclosing a conflict resolves it.
Disclosure is typically a necessary first step, but it does not by itself eliminate the conflict. Further management measures, such as recusal or oversight, are commonly required, and the appropriate response depends on the role, severity, and applicable policy.
Conflicts of interest are always financial.
The interest at stake may be non-financial, including familial relationships, personal loyalties, or outside affiliations. Limiting attention to financial interests can leave significant conflicts unaddressed.

Best practices

Maintain a clear conflict-of-interest policy that defines actual, potential, and perceived conflicts and specifies expected disclosure and management steps.
Require periodic and event-driven disclosure of relevant financial and non-financial interests, rather than relying on one-time declarations.
Treat disclosure as the start of a process, and document the specific mitigation applied, such as recusal, reassignment, or independent oversight.
Tailor the response to the role and severity of the conflict, recognizing that heightened duties may apply to those in fiduciary or decision-making positions.
Address perceived conflicts as well as actual ones to preserve stakeholder trust and the integrity of decisions.
Keep management responsibility for handling conflicts distinct from independent assurance review of whether the conflict process is operating effectively.
Promotional banner graphic asking if you are ready for PCI DSS 4.0 with a call-to-action to get the guide