1. Shadow Banking

2. Shadow Directors (Administrador de Hecho / Oculto)

3. Shadow IT / Shadow AI

4. Shadow Boards / Shadow Governance (Promoter / Family / Government)

All four have the same legal principle: If you exercise control, you bear liability - even if you are not on the organigram.

1. SHADOW BANKING - Credit Without a Bank Licence

FSB Definition: Credit intermediation involving entities and activities (fully or partially) outside the regular banking system.

Examples: Money Market Funds (MMFs), Hedge Funds, Securitisation vehicles, Repo, P2P lending, Buy-Now-Pay-Later, Stablecoin issuers, Non-bank lenders, SPVs.

Why it is a governance issue? Shadow banks do bank-like work (maturity transformation, leverage, liquidity transformation) but have no deposit insurance, no lender of last resort, no capital requirements, no board governance rules.

In Spain, shadow banking is very small - only 0.7% of global total, traditionally contained by regulation. CNMV Advisory Committee in its response to FSB said Spanish MMF, repo and securitisation regulation is designed to avoid shadow risks. But in EU as a whole, shadow banking is €22 trillion.

Governance Gap: Banks create shadow entities to move risk off balance sheet. Bank board says "it's not our risk, it's SPV's risk" - until SPV fails and bank has to bail it out for reputation.

Case Laws - Shadow Banking

a) Lehman Brothers - Repo 105 (2008) - The Original Shadow Case
Lehman used Repo 105 - classified repos as sales, moved $50B toxic assets off balance sheet before quarter-end to hide leverage. Board's Audit Committee approved it. Bankruptcy examiner found board failed to govern shadow accounting.
Lesson: Off-balance sheet = Off-governance = Fraud.

b) Greensill Capital (2021) - UK / Germany - Shadow Supply Chain Finance
Greensill, a non-bank, lent against "future receivables" that did not exist, sold them to Credit Suisse funds, insured by Tokio Marine. When insurance withdrawn, Greensill collapsed, Credit Suisse lost $10B, German bank Greensill Bank closed by BaFin.
Governance Lesson: Shadow bank had no bank board, no SREP, no capital. When it failed, regulated banks that funded it suffered.

c) Archegos Capital (2021) - Family Office as Shadow Bank
Archegos used total return swaps to get $100B exposure with $10B capital, via 6 prime brokers. No bank knew total exposure because Archegos was not a bank.
Result: Credit Suisse lost $5.5B, Nomura $2.9B.
Governance Lesson: Shadow entity exploited governance gap - each bank's board thought exposure was small, no one saw aggregate.

d) IL&FS (India, 2018) - Shadow Bank Crisis
IL&FS was NBFC (shadow bank) with 348 subsidiaries, Rs. 91,000 crore debt. Board created SPVs to hide debt. When it defaulted, it triggered NBFC crisis in India.
Lesson: Shadow banking + Shadow governance = Systemic crisis.

Spain / EU Regulation Response: FSB Framework, EU MMF Regulation 2017/1131, EU Securitisation Regulation 2017/2402, AIFMD for hedge funds. Spain implemented via CNMV. Under MiCA, stablecoin issuers are now regulated as banks.

2. SHADOW DIRECTORS - Power Without Appointment

This is the most litigated shadow issue.

Legal Definition - UK Companies Act 2006 Sec 251:

"A person in accordance with whose directions or instructions the directors of the company are accustomed to act."

Spanish Law: Administrador de hecho (de facto director) and Administrador oculto (shadow director) under Ley de Sociedades de Capital Art 236. Spanish courts treat them same as de jure directors for liability.

Indian Law: Companies Act 2013 Sec 2(59) - "Officer" includes any person in accordance with whose directions board is accustomed to act. Sec 149(12) + Sec 2(60) - Shadow director is officer in default.

Who is a Shadow Director?

• Promoter who resigned but still calls board members daily
• Parent company that instructs subsidiary board
• Government official who instructs PSB board
• Majority shareholder / Private equity partner who vetoes decisions
• Consultant / Lawyer who effectively runs company

Test: Not one-off advice. Must be pattern - directors are accustomed to act on his instructions. Professional advice (lawyer, accountant) is exempt - if board can reject it.

Case Laws - Shadow Directors

a) Re Hydrodan (Corby) Ltd [1994] BCC 161 - Classic Framework
Millett J set classic test: Shadow director must (1) give directions, (2) directors act on them, (3) directors are accustomed to do so. Parent company Hydrodan was held shadow director of subsidiary because subsidiary board always followed parent's instructions on loans.
Principle: Parent company can be shadow director of subsidiary.

b) Secretary of State for Trade and Industry v. Deverell [2001] Ch 340 - Leading Case
Deverell was not a director, but controlled company via nominees. Court held he was shadow director, liable for disqualification.
Principle: You cannot hide behind nominees. Substance over form.

c) Smithton Ltd v. Naggar [2014] EWCA Civ 939 - Court of Appeal Guidance
Naggar claimed he was only advisor, not shadow director. Court held: Need to prove directors accustomed to act, not just one transaction. Naggar was not shadow director for one property deal under Sec 190, but could be for other acts.
Principle: Shadow directorship is fact-specific, transaction by transaction.

d) Grimaldi v. Chameleon Mining NL (No 2) [2012] FCAFC 6 - Australia
Full Federal Court held shadow / de facto director owes same fiduciary duties as de jure director, liable for breach.

e) Indian / Spanish Application - Tata / Mistry & PSB Cases
In India, NCLT in Tata Sons case examined whether Ratan Tata as Chairman Emeritus was shadow director - held he was not, because board could reject his advice. But in PSBs, courts have held Government officials who instruct board on loans can be treated as shadow directors for vigilance purposes.

Liability of Shadow Director: Same as real director:

• Duty of care, skill, diligence (Sec 166)
• Wrongful trading - personally liable for debts if company trades while insolvent
• Fraud - Sec 447
• Disqualification - Sec 164

3. SHADOW IT / SHADOW AI - Technology Without Governance

Definition: Hardware, software, cloud storage, automation, AI tools used for company work without knowledge or approval of IT / Risk / Board.

Examples: Employee uses personal ChatGPT to draft credit memo, uses Google Drive to share customer data, uses unauthorised SaaS for KYC, uses WhatsApp for board decisions.

Why it is governance issue? According to Gartner, 1/3 of successful cyberattacks will be on data in Shadow IT by 2025. Up to 40% of IT spending in large enterprises is unauthorised.

In banks, Shadow IT = Shadow Risk. Under DORA (EU) and RBI IT Outsourcing Directions, board is responsible for all ICT, even if it did not approve it. Ignorance is not defence.

Case Laws - Shadow IT

a) Capital One - AWS Breach (2019) - Shadow Cloud Configuration
Capital One outsourced to AWS, but employee misconfigured firewall in shadow environment. Court held Capital One liable for $80M OCC fine - board failed to govern cloud.

b) TSB Bank (2018) - Shadow Migration
TSB's IT migration was governed by shadow project board, not main board. Migration failed, £48M FCA fine.

c) CrowdStrike (2024) - Shadow Vendor
Banks used CrowdStrike without board-approved exit plan. When it crashed, banks could not operate. ECB found DORA violation - board had not governed third-party ICT.

Governance Rule: If employee uses AI tool without approval and it leaks customer data, board is liable under GDPR / DPDP Act. Board must have Shadow IT Discovery - scan for unauthorised tools, ban or approve.

4. SHADOW BOARDS - Informal Governance

Two meanings - one good, one bad:

A) Good Shadow Board: Group of younger, diverse employees (Millennial Board) who advise formal board. KPMG created "Millennial Board" in 2018, refreshed as Next Generation Council in 2020. ICAEW praises it - improves transparency, generational perspective. This is legitimate if it has no vote, only advisory role, minutes recorded.

B) Bad Shadow Board: Informal cluster - promoter's family, friends, ex-CEO, political network - that actually decides strategy, capital allocation, appointments, while formal board just rubber-stamps.

Indian Example: Shadow Boards in Indian Corporates - advisory bodies outside Companies Act 2013 and SEBI LODR - operate in legal grey zone. If shadow board takes decision and formal board implements it without independent judgment, formal board breaches Sec 166 (independent judgment) and shadow board members become shadow directors.

Spanish Example: Cajas - Shadow governance by politicians, unions, Church. Formal board of Caja was controlled by shadow political board. This caused 2008 crisis. Bankia's formal board approved IPO, but real decision was taken by political shadow board.

Survey: 2023 survey of 500 S&P 500 firms found 27% of senior executives reported regular informal decision-making clusters steering strategy.

Case Law - Shadow Boards

Re: Satyam (2009): Formal board had independent directors, but real decisions were taken by Raju family shadow board. Independent directors who followed shadow board were held to have failed diligence.

Re: IL&FS: Shadow board of consultants / ex-officials controlled SPVs, formal board did not know true debt.

5. Common Governance Principles for All Shadows

Summary

Official Governance = What is in Annual Report
Shadow Governance = What actually happens

Courts in UK, Spain, India, Australia now apply one rule:

If you control, you are liable. Title is irrelevant.

Shadow director, shadow bank, shadow IT - all are punished not for being in shadow, but for creating a gap between real power and formal accountability.

The board's job is to bring shadows into light: consolidate shadow banks, name shadow directors, discover shadow IT, and formalise shadow boards.