Reading Time: 11 minutes

Nonprofit D&O Insurance: What Board Members Are Personally Liable for and the Coverage Gaps That Leave Your Assets Exposed

You joined a nonprofit board because you care about the mission. You didn’t join to put your personal assets at risk. But that’s exactly what’s happening — and most board members don’t realize it until a process server shows up at their door. When a nonprofit is sued for breach of fiduciary duty, mismanagement, or regulatory violations, the lawsuit typically names the organization AND its individual directors and officers. Your personal bank accounts, your house, your retirement savings are on the table.

Nonprofit D&O insurance exists to cover this exposure. But here’s what most guides about D&O won’t tell you: the standard nonprofit D&O policy has three structural gaps that leave board members partially exposed even WITH coverage in place. And the personal liability landscape for nonprofit leaders has gotten materially worse since 2023, thanks to increased DOL enforcement against nonprofit retirement plans, a wave of state attorney general investigations into fund misuse, and the IRS’s expanded use of intermediate sanctions against nonprofits.

We insure nonprofit boards across every 501(c) classification — arts organizations, foundations, religious institutions, charter schools, social service agencies, and healthcare nonprofits. What follows isn’t a product overview. It’s the liability analysis we walk board members through before they agree to serve.

What Are Nonprofit Board Members Personally Liable For?

Directors and officers of nonprofit organizations owe three legal duties that create personal liability when breached. These aren’t abstract concepts — they’re the specific allegations that show up in lawsuits.

Duty of Care

Board members must act with the care that a reasonably prudent person would exercise in a similar position. In practice, this means attending board meetings, reading financial statements before voting on budgets, asking questions about major expenditures, and making informed decisions. A board member who rubber-stamps a $2M construction project without reviewing the contractor’s qualifications or the organization’s ability to fund it has breached their duty of care. If the project goes sideways and donors or creditors sue, that board member is individually liable for the consequences of their inattention.

Duty of Loyalty

Board members must put the organization’s interests ahead of their own. The most common loyalty breach: self-dealing. A board member who steers a contract to their spouse’s consulting firm, votes on their own compensation package, or uses the organization’s donor list for personal business has violated their duty of loyalty. The IRS treats nonprofit self-dealing with particular severity through its intermediate sanctions regime under Section 4958 — excise taxes of 25% on the “excess benefit” (the amount above fair market value) levied directly on the person who received the benefit, with a 200% additional tax if not corrected within the taxable period.

Duty of Obedience

Board members must ensure the organization operates in accordance with its stated mission, articles of incorporation, and bylaws. Using restricted grant funds for purposes other than what the grantor specified, operating programs outside the organization’s stated charitable purpose, or failing to file required Form 990s with the IRS — all of these breach the duty of obedience. State attorneys general have standing to enforce these obligations, and they’ve been doing so with increasing frequency. New York’s AG office alone opened 47 investigations into nonprofit fund misuse in 2024, up from 31 in 2022.

How Much Does Nonprofit D&O Insurance Cost?

Less than most board members expect — which is part of the problem. When the coverage is this affordable relative to the exposure, there’s no justifiable reason for a nonprofit of any size to operate without it.

Compare those premiums to the cost of a single lawsuit defense — $150,000-$500,000 in legal fees even when the nonprofit wins. For a $5M-budget organization, a $3,500 annual D&O premium is 0.07% of the operating budget. It’s the most cost-effective insurance a nonprofit carries.

The Three Coverage Gaps in Standard Nonprofit D&O Policies

Having a D&O policy isn’t the same as being fully protected. Standard nonprofit D&O policies contain three structural gaps that most organizations — and most board members — don’t know about until a claim hits the excluded zone.

Gap 1: Fiduciary Liability for Retirement Plans

If your nonprofit sponsors a 403(b) or 457 retirement plan, the board members who oversee that plan have fiduciary obligations under ERISA (or state equivalents for government-entity nonprofits). These fiduciary duties — prudent investment selection, fee monitoring, plan document compliance — are SEPARATE from the general D&O duties of care/loyalty/obedience. A standard D&O policy typically excludes ERISA fiduciary claims or sublimits them to $250,000.

This gap has gotten materially worse. The Department of Labor’s Employee Benefits Security Administration (EBSA) opened 721 civil investigations into retirement plan fiduciary compliance in FY2024, a 16% increase over FY2023. Nonprofits are not exempt from these investigations. A board that hasn’t benchmarked 403(b) plan fees in three years, or that allowed the default investment option to underperform its benchmark by 200+ basis points without review, is exposed. The fix: a standalone fiduciary liability policy ($1,500-$4,000/year for most nonprofits) or a fiduciary liability endorsement added to the management liability package.

Gap 2: Regulatory Investigation Defense Costs

State AG investigations, IRS audits, DOL inquiries, and other regulatory proceedings don’t start with a lawsuit — they start with a letter. An information request. A subpoena for financial records. At this stage, the nonprofit needs legal counsel immediately. The problem: most D&O policies define a “claim” as a lawsuit or formal proceeding, not an informal investigation or inquiry. The legal fees incurred during the 6-to-18-month investigation phase — which can easily reach $100,000-$300,000 for a complex inquiry — fall outside the D&O policy’s trigger until a formal enforcement action or civil complaint is filed.

Some carriers offer a “regulatory investigation” sublimit or endorsement that covers defense costs from the date of the first written regulatory inquiry, regardless of whether it escalates to a formal proceeding. This coverage is not standard, and most nonprofit boards don’t know to ask for it. For organizations with government grants, federal contracts, or operations in states with aggressive AG enforcement (New York, California, Massachusetts, Illinois), this endorsement should be considered mandatory.

Gap 3: The D&O-to-EPLI Handoff

Employment-related claims are the single most common type of claim against nonprofit organizations. Wrongful termination, harassment, discrimination, retaliation — these claims name individual directors and officers as defendants but arise from employment practices. Standard D&O policies either exclude employment claims entirely (routing them to a separate EPLI policy) or cover them with a shared aggregate limit that erodes the D&O coverage available for non-employment claims.

The handoff problem works both ways. When a former executive director sues the board for wrongful termination AND breach of fiduciary duty in the same complaint, which policy responds? The D&O carrier argues it’s an employment claim (EPLI territory). The EPLI carrier argues the fiduciary duty allegation is a D&O claim. While the carriers argue allocation, the nonprofit’s defense stalls and the board members are left without counsel. The fix: a management liability package from a single carrier with shared defense coordination language, or at minimum, a written allocation agreement between the D&O and EPLI carriers established at policy inception — not after a claim is filed.

Side A, Side B, Side C: What Your D&O Policy Actually Covers

Nonprofit D&O policies have three coverage components that work differently depending on WHO is being sued and whether the organization can indemnify them. Most board members have never heard of these distinctions, but they determine whether your personal assets are protected.

Side A — Personal Asset Protection. Covers individual directors and officers when the organization CANNOT indemnify them. This happens when the organization is bankrupt, when state law prohibits indemnification for the specific claim, or when the organization’s bylaws don’t include an indemnification provision. Side A is the last line of defense for board members’ personal assets. It pays on a first-dollar basis — no deductible, no retention. For this reason, some larger nonprofits purchase a separate “Side A DIC” (Difference in Conditions) policy that sits on top of the main D&O policy and fills gaps in the primary coverage.

Side B — Organization Indemnification Reimbursement. Reimburses the organization when it indemnifies its directors and officers. Board member gets sued, organization pays the legal defense per its bylaws, and then the D&O policy reimburses the organization. This is the most common coverage trigger for nonprofits with adequate financial resources. The policy deductible (typically $1,000-$10,000 for nonprofit D&O) applies to Side B claims.

Side C — Entity Coverage. Covers the nonprofit organization itself when it’s named as a defendant alongside its directors and officers. This is important because most lawsuits against board members also name the organization. Without Side C, the organization bears its own defense costs even when the claim arises from board-level decisions. Most nonprofit D&O policies include Side C as standard, but verify — some economy-priced policies exclude it.

Why the Volunteer Protection Act Doesn’t Protect Most Board Members

Board members frequently assume they’re protected by the federal Volunteer Protection Act of 1997 (VPA). They’re usually wrong — or at least, the protection is far more limited than they believe.

The VPA shields unpaid volunteers from personal liability for negligence only. It does NOT protect against:

• Willful or criminal misconduct — if a board member knowingly approves a fraudulent transaction, the VPA doesn’t apply
• Gross negligence — a board that ignores repeated warnings about financial irregularities loses VPA protection
• Claims where the volunteer was operating a motor vehicle — auto liability claims are carved out
• Any state that opted out — the VPA allows states to opt out entirely, and some have modified its protections
• Paid board members — if your nonprofit compensates board members (stipends, per-meeting fees, anything beyond expense reimbursement), they don’t qualify as volunteers under the Act
• Employment claims — the VPA protects against negligence claims from third parties, not employment lawsuits from staff

Even when the VPA does apply, it only eliminates liability for damages — it does NOT cover the cost of defending the lawsuit. A board member protected by the VPA who gets sued for negligence will still spend $50,000-$150,000 in legal fees defending themselves before the case is resolved. D&O insurance covers that defense cost. The VPA does not.

Grantmaker D&O Requirements: What Funders Now Demand

Major foundations and government funders increasingly require D&O insurance as a condition of grant eligibility. This trend accelerated after several high-profile nonprofit governance failures in 2022-2024 prompted funders to add insurance requirements to their due diligence processes.

• Foundation grants over $500K: Most major foundations (Ford, MacArthur, Kresge, Packard, Hewlett) now require evidence of D&O coverage during the grant application process
• Government contracts and federal pass-through grants: OMB Uniform Guidance (2 CFR 200) doesn’t explicitly mandate D&O, but many federal agencies and state pass-through administrators include it in their supplemental requirements
• United Way and federated campaigns: Many local United Way chapters require participating agencies to carry D&O as a condition of receiving allocations
• Board recruitment: Experienced board candidates — the CFOs, attorneys, and executives you want on your board — increasingly ask whether D&O coverage is in place before agreeing to serve. The absence of D&O is a recruiting liability for the organization

Frequently Asked Questions