Nonprofit D&O Insurance: What Board Members Are Personally Liable for and the Coverage Gaps That Leave Your Assets Exposed

Nonprofit D&O insurance exists to cover this exposure. But here’s what most guides about D&O won’t tell you: the standard nonprofit D&O policy has three structural gaps that leave board members partially exposed even WITH coverage in place. And the personal liability landscape for nonprofit leaders has gotten materially worse since 2023, thanks to increased DOL enforcement against nonprofit retirement plans, a wave of state attorney general investigations into fund misuse, and the IRS’s expanded use of intermediate sanctions against nonprofits. For comprehensive guidance on structuring coverage for mission-driven organizations, see our complete nonprofit insurance guide.

We insure nonprofit boards across every 501(c) classification — arts organizations, foundations, religious institutions, charter schools, social service agencies, and healthcare nonprofits. What follows isn’t a product overview. It’s the liability analysis we walk board members through before they agree to serve.

Social service nonprofits face client-facing liability that differs from governance-level D&O exposure — insurance for social service organizations covers the coverage stack specific to direct-service organizations.

What Are Nonprofit Board Members Personally Liable For?

Directors and officers of nonprofit organizations owe three legal duties that create personal liability when breached. These aren’t abstract concepts — they’re the specific allegations that show up in lawsuits.

Duty of Care

Board members must act with the care that a reasonably prudent person would exercise in a similar position. In practice, this means attending board meetings, reading financial statements before voting on budgets, asking questions about major expenditures, and making informed decisions. A board member who rubber-stamps a $2M construction project without reviewing the contractor’s qualifications or the organization’s ability to fund it has breached their duty of care. If the project goes sideways and donors or creditors sue, that board member is individually liable for the consequences of their inattention.

Duty of Loyalty

Board members must put the organization’s interests ahead of their own. The most common loyalty breach: self-dealing. A board member who steers a contract to their spouse’s consulting firm, votes on their own compensation package, or uses the organization’s donor list for personal business has violated their duty of loyalty. The IRS treats nonprofit self-dealing with particular severity through its intermediate sanctions regime under Section 4958 — excise taxes of 25% on the “excess benefit” (the amount above fair market value) levied directly on the person who received the benefit, with a 200% additional tax if not corrected within the taxable period.

Board members with personal life insurance should understand what disqualifies a life insurance payout, as certain D&O-related legal actions can trigger policy exclusion clauses.

Duty of Obedience

Board members must ensure the organization operates in accordance with its stated mission, articles of incorporation, and bylaws. Using restricted grant funds for purposes other than what the grantor specified, operating programs outside the organization’s stated charitable purpose, or failing to file required Form 990s with the IRS — all of these breach the duty of obedience. State attorneys general have standing to enforce these obligations, and they’ve been doing so with increasing frequency. New York’s AG office alone opened 47 investigations into nonprofit fund misuse in 2024, up from 31 in 2022. New York businesses face distinct regulatory requirements — our NYC commercial insurance guide covers what the state mandates.

How Much Does Nonprofit D&O Insurance Cost?

Less than most board members expect — which is part of the problem. When the coverage is this affordable relative to the exposure, there’s no justifiable reason for a nonprofit of any size to operate without it.

After understanding D&O exposure, boards need to budget for it — nonprofit insurance costs and what drives the premium in 2026 provides the 2026 cost benchmarks across the full nonprofit coverage stack.

Compare those premiums to the cost of a single lawsuit defense — $150,000-$500,000 in legal fees even when the nonprofit wins. For a $5M-budget organization, a $3,500 annual D&O premium is 0.07% of the operating budget. It’s the most cost-effective insurance a nonprofit carries.

D&O protects board decisions, but nonprofits also need nonprofit general liability insurance requirements to cover premises liability, volunteer injuries, and event-related claims.

The Three Coverage Gaps in Standard Nonprofit D&O Policies

Having a D&O policy isn’t the same as being fully protected. Standard nonprofit D&O policies contain three structural gaps that most organizations — and most board members — don’t know about until a claim hits the excluded zone.

Gap 1: Fiduciary Liability for Retirement Plans

If your nonprofit sponsors a 403(b) or 457 retirement plan, the board members who oversee that plan have fiduciary obligations under ERISA (or state equivalents for government-entity nonprofits). These fiduciary duties — prudent investment selection, fee monitoring, plan document compliance — are SEPARATE from the general D&O duties of care/loyalty/obedience. A standard D&O policy typically excludes ERISA fiduciary claims or sublimits them to $250,000.

Gap 2: Regulatory Investigation Defense Costs

State AG investigations, IRS audits, DOL inquiries, and other regulatory proceedings don’t start with a lawsuit — they start with a letter. An information request. A subpoena for financial records. At this stage, the nonprofit needs legal counsel immediately. The problem: most D&O policies define a “claim” as a lawsuit or formal proceeding, not an informal investigation or inquiry. The legal fees incurred during the 6-to-18-month investigation phase — which can easily reach $100,000-$300,000 for a complex inquiry — fall outside the D&O policy’s trigger until a formal enforcement action or civil complaint is filed.

Some carriers offer a “regulatory investigation” sublimit or endorsement that covers defense costs from the date of the first written regulatory inquiry, regardless of whether it escalates to a formal proceeding. This coverage is not standard, and most nonprofit boards don’t know to ask for it. For organizations with government grants, federal contracts, or operations in states with aggressive AG enforcement (New York, California, Massachusetts, Illinois), this endorsement should be considered mandatory.

Gap 3: The D&O-to-EPLI Handoff

Employment-related claims are the single most common type of claim against nonprofit organizations. Wrongful termination, harassment, discrimination, retaliation — these claims name individual directors and officers as defendants but arise from employment practices. Standard D&O policies either exclude employment claims entirely (routing them to a separate EPLI policy) or cover them with a shared aggregate limit that erodes the D&O coverage available for non-employment claims.

Nonprofits competing for talent on restricted budgets need specialized guidance — our guide to selecting an employee benefits broker for nonprofit employers covers what smaller plan sponsors should prioritize. For a broader perspective on the role benefits play in talent strategy, see our analysis of why employee benefits matter in today’s job market. Our guide on integrating gap insurance into employee benefits shows how it fits into a mid-market benefits architecture.

Attracting qualified executives requires more than D&O protection — employee benefits strategies for nonprofit organizations covers the benefits packages that help nonprofits compete for talent against private-sector employers.

Liability exposure extends beyond business operations — our guide to personal liability insurance explains how individual coverage complements commercial programs.

The handoff problem works both ways. When a former executive director sues the board for wrongful termination AND breach of fiduciary duty in the same complaint, which policy responds? The D&O carrier argues it’s an employment claim (EPLI territory). The EPLI carrier argues the fiduciary duty allegation is a D&O claim. While the carriers argue allocation, the nonprofit’s defense stalls and the board members are left without counsel. The fix: a management liability package from a single carrier with shared defense coordination language, or at minimum, a written allocation agreement between the D&O and EPLI carriers established at policy inception — not after a claim is filed.

Side A, Side B, Side C: What Your D&O Policy Actually Covers

Nonprofit D&O policies have three coverage components that work differently depending on WHO is being sued and whether the organization can indemnify them. Most board members have never heard of these distinctions, but they determine whether your personal assets are protected.

Side A — Personal Asset Protection. Covers individual directors and officers when the organization CANNOT indemnify them. This happens when the organization is bankrupt, when state law prohibits indemnification for the specific claim, or when the organization’s bylaws don’t include an indemnification provision. Side A is the last line of defense for board members’ personal assets. It pays on a first-dollar basis — no deductible, no retention. For this reason, some larger nonprofits purchase a separate “Side A DIC” (Difference in Conditions) policy that sits on top of the main D&O policy and fills gaps in the primary coverage.

Side B — Organization Indemnification Reimbursement. Reimburses the organization when it indemnifies its directors and officers. Board member gets sued, organization pays the legal defense per its bylaws, and then the D&O policy reimburses the organization. This is the most common coverage trigger for nonprofits with adequate financial resources. The policy deductible (typically $1,000-$10,000 for nonprofit D&O) applies to Side B claims.

Side C — Entity Coverage. Covers the nonprofit organization itself when it’s named as a defendant alongside its directors and officers. This is important because most lawsuits against board members also name the organization. Without Side C, the organization bears its own defense costs even when the claim arises from board-level decisions. Most nonprofit D&O policies include Side C as standard, but verify — some economy-priced policies exclude it.

Why the Volunteer Protection Act Doesn’t Protect Most Board Members

Board members frequently assume they’re protected by the federal Volunteer Protection Act of 1997 (VPA). They’re usually wrong — or at least, the protection is far more limited than they believe.

The VPA shields unpaid volunteers from personal liability for negligence only. It does NOT protect against:. Our comprehensive guide to E&O insurance costs and coverage details what mid-market companies actually pay for professional liability protection. Companies producing content or advertising should evaluate media liability insurance to cover defamation, copyright, and content-related exposures.

• Willful or criminal misconduct — if a board member knowingly approves a fraudulent transaction, the VPA doesn’t apply
• Gross negligence — a board that ignores repeated warnings about financial irregularities loses VPA protection
• Claims where the volunteer was operating a motor vehicle — auto liability claims are carved out
• Any state that opted out — the VPA allows states to opt out entirely, and some have modified its protections
• Paid board members — if your nonprofit compensates board members (stipends, per-meeting fees, anything beyond expense reimbursement), they don’t qualify as volunteers under the Act
• Employment claims — the VPA protects against negligence claims from third parties, not employment lawsuits from staff

Even when the VPA does apply, it only eliminates liability for damages — it does NOT cover the cost of defending the lawsuit. A board member protected by the VPA who gets sued for negligence will still spend $50,000-$150,000 in legal fees defending themselves before the case is resolved. D&O insurance covers that defense cost. The VPA does not.

Grantmaker D&O Requirements: What Funders Now Demand

Major foundations and government funders increasingly require D&O insurance as a condition of grant eligibility. This trend accelerated after several high-profile nonprofit governance failures in 2022-2024 prompted funders to add insurance requirements to their due diligence processes.

• Foundation grants over $500K: Most major foundations (Ford, MacArthur, Kresge, Packard, Hewlett) now require evidence of D&O coverage during the grant application process
• Government contracts and federal pass-through grants: OMB Uniform Guidance (2 CFR 200) doesn’t explicitly mandate D&O, but many federal agencies and state pass-through administrators include it in their supplemental requirements
• United Way and federated campaigns: Many local United Way chapters require participating agencies to carry D&O as a condition of receiving allocations
• Board recruitment: Experienced board candidates — the CFOs, attorneys, and executives you want on your board — increasingly ask whether D&O coverage is in place before agreeing to serve. The absence of D&O is a recruiting liability for the organization

Frequently Asked Questions