. . . . "If your governing body, such as a council or board of directors, approves a policy, the liability for actions taken under that policy falls on them." .