Nonprofit Board Member Personal Liability: When You're Actually at Risk

Nonprofit Board Member Personal Liability: The Short Answer, Then the Real One

Most nonprofit board members will never face personal liability. Incorporating creates a separate legal entity, and directors of that entity are generally not responsible for its debts, contracts, or the ordinary mistakes it makes along the way. Courts also apply the business judgment rule to nonprofit boards, meaning a decision made in good faith, with reasonable information, in what the director believed was the organization's interest, is not second-guessed just because it turned out badly.

That is the short answer, and it is true. The problem is that it gets repeated so often that boards stop asking the more useful question: what are the exceptions?

Because the exceptions are not vague. They are specific, well-documented, and — this is the part that matters — mostly preventable through governance practices you can put in place in an afternoon. Personal liability for nonprofit directors is rarely a bolt from the blue. It is usually the end of a chain of events the board could see coming.

Here is what actually puts a director at risk, and what the protections you are counting on do and do not cover.

The Exceptions That Actually Bite

1. Unpaid Payroll Taxes

This is the big one, and most boards have never heard of it.

When an organization withholds income tax and the employee share of Social Security and Medicare from a paycheck, that money is not the organization's money. It is held in trust for the government. If it is not remitted, Internal Revenue Code section 6672 lets the IRS assess a trust fund recovery penalty — 100% of the unremitted trust fund amount — personally against any "responsible person" who "willfully" failed to pay it.

Both of those terms are broader than they sound. A responsible person is anyone with the authority and duty to direct which creditors get paid. Board members who sign checks, approve payments, or control the bank accounts can qualify. So can a treasurer, an executive director, and sometimes a bookkeeper. "Willful" does not require bad intent — it just means you knew the taxes were unpaid and authorized other payments anyway. A board that votes to make payroll and pay the landlord while deferring the tax deposits has, in the IRS's view, made a willful choice.

Two features make this uniquely dangerous. The penalty is assessed against each responsible person individually, so multiple board members can each be on the hook for the full amount. And it is generally not dischargeable in bankruptcy.

This is why "are we current on payroll tax deposits?" belongs on the treasurer's report at every meeting, in writing, not as a verbal reassurance. If your organization is in a cash crunch and someone suggests deferring a tax deposit to make payroll, that is the moment to get outside help.

2. Excess Benefit Transactions

If the organization pays an insider more than their services are worth — an inflated salary, a below-market lease to a board member's company, a "consulting fee" to a director's spouse — the IRS can impose excise taxes under section 4958, known as intermediate sanctions (called that because they let the IRS penalize the transaction without revoking the organization's exemption).

The insider who received the benefit owes a 25% excise tax, rising to 200% if it is not corrected. But there is a second tier aimed squarely at the board: any organization manager — meaning a director, officer, or trustee — who knowingly participated in approving the transaction owes a 10% excise tax personally, up to $20,000 per transaction. Approving a compensation package without any market data, then finding out later it was far above market, is exactly the fact pattern this provision was written for.

The defense is procedural and well-established. If the board approves compensation in advance, using comparability data from similar organizations, with conflicted parties recused, and documents all of it contemporaneously in the minutes, the burden shifts to the IRS to prove the amount was unreasonable. This is called the rebuttable presumption of reasonableness, and it is the single highest-value hour a compensation committee will ever spend. Our guide to what a nonprofit conflict of interest policy needs to cover walks through the recusal mechanics, and the post on nonprofit founder salary covers the comparability piece in detail.

Private foundation directors face a stricter version of this. Self-dealing under section 4941 has no reasonableness defense at all — the transaction is prohibited regardless of whether the terms were fair — and foundation managers who knowingly approve one owe their own excise tax. See private foundation self-dealing rules for how differently that regime works.

3. Personal Guarantees

The most avoidable item on this list. When a landlord, lender, or vendor asks a board member to personally guarantee an obligation, and that board member signs, the corporate shield is irrelevant. They have voluntarily agreed to be liable.

This happens most often with office leases and lines of credit for young organizations with no credit history. Sometimes it is genuinely necessary. But it should never happen casually, it should never be signed without the full board knowing, and the guaranteeing director should understand that indemnification and D&O insurance will not cover it.

4. Misuse of Restricted or Charitable Funds

Donor-restricted gifts, grant funds with specified purposes, and endowment principal are all subject to legal restrictions on their use. When a board spends restricted money on general operations — usually during a cash crisis, usually intending to "pay it back" — that is a breach of the duty of obedience, and it is the fact pattern that most reliably draws a state attorney general.

State AGs have standing to sue nonprofit directors for breach of fiduciary duty, and they are the primary enforcers of charitable asset stewardship. Unlike a private plaintiff, they are not deterred by the organization's lack of assets, and — importantly — volunteer immunity statutes generally do not bar their actions.

5. Willful, Criminal, or Self-Serving Conduct

Fraud, embezzlement, knowingly filing a false Form 990, discrimination or retaliation the board participated in, and self-dealing done deliberately all fall outside every protection discussed below. Indemnification typically excludes them, D&O policies exclude them, and volunteer immunity statutes exclude them. There is no governance structure that protects a director from their own bad faith.

The Protections — and What They Don't Cover

Volunteer Immunity Laws

The federal Volunteer Protection Act of 1997 shields uncompensated volunteers, including unpaid directors, from liability for harm caused by ordinary negligence while acting within the scope of their responsibilities. Every state also has some form of volunteer immunity statute, and several are broader than the federal law.

The limits matter more than the protection:

• It covers uncompensated volunteers. A director receiving anything beyond reimbursement of actual expenses may fall outside it.
• It does not apply to willful or criminal misconduct, gross negligence, or reckless misconduct.
• It carves out operation of a motor vehicle, vessel, or aircraft.
• It does not bar suits brought by a state attorney general or other government enforcement.
• It protects the individual, not the organization — the nonprofit can still be sued for the same conduct.
• It does not stop anyone from filing a lawsuit. Immunity is a defense you raise after you have already hired a lawyer.

That last point is the practical one. Volunteer immunity may win the case. It does not pay for the case.

Indemnification

Indemnification is a promise in your bylaws — permitted, and sometimes partially required, by your state's nonprofit corporation act — that the organization will cover a director's legal expenses and judgments arising from board service. Well-drafted provisions also include advancement of expenses, meaning the organization pays defense costs as they are incurred rather than reimbursing at the end, which is the difference between a usable protection and a theoretical one.

Check that your bylaws actually contain this language. Many older bylaw sets are silent on it, and a few use permissive wording ("the corporation may indemnify") that gives a future board discretion to decline. Mandatory language is stronger. Our guide to what to include in nonprofit bylaws covers how the provision should be structured.

Then note the built-in weakness: indemnification is only worth what the organization can pay. The scenarios that generate director liability — insolvency, fraud, a catastrophic uninsured claim — are precisely the scenarios in which a nonprofit cannot fund anyone's defense. Indemnification without insurance behind it is a promissory note from an entity that may be broke by the time you need it.

D&O Insurance

Directors and Officers insurance is what makes indemnification real. For a small nonprofit it typically runs $500 to $1,500 a year, which is less than most boards assume and less than a single hour of litigation defense.

A few things to check on the actual policy, not just confirm that one exists:

Employment practices coverage. The most common nonprofit D&O claims are employment-related — wrongful termination, discrimination, harassment, retaliation. Some policies include employment practices liability (EPLI); many require it as an endorsement. A D&O policy without it misses the majority of claims your organization is likely to face.

Claims-made structure and retroactive date. Nearly all D&O policies cover claims made during the policy period, not acts committed during it. If you switch carriers, the new policy's retroactive date determines whether prior conduct is covered. A gap here can leave years of board decisions uninsured.

Defense costs inside or outside the limit. If defense costs erode the policy limit, a long case can exhaust coverage before any settlement is paid.

The insured-versus-insured exclusion. This bars claims brought by one insured against another, which can exclude the scenario where the organization itself sues a former director. Nonprofit-specific policies often narrow this exclusion — check that yours does.

Entity coverage. Confirm whether the policy covers the organization as well as individuals, and how a shared limit is allocated between them.

What Actually Reduces Risk

Every protection above is a backstop. The things that keep directors out of trouble in the first place are ordinary governance practices:

• Show up and read the materials. The duty of care is measured by whether you were informed. A director who attended and asked questions is in a fundamentally different position from one who rubber-stamped minutes for two years.
• Get financials at every meeting, including payroll tax status. Not annually. Every meeting.
• Keep real minutes. Minutes are the evidence that the process happened — that comparability data was reviewed, that the conflicted director recused, that the board asked about the shortfall. A decision that is not documented is, for practical purposes, a decision you cannot prove you made carefully. Our board meeting agenda guide covers what belongs in the record.
• Run an actual conflict of interest process. Annual disclosure forms, recusal from discussion as well as voting, and documentation in the minutes.
• Register your dissent. If you vote against something you believe is improper, make sure the minutes reflect it. A director recorded as voting no is generally not treated as having approved the action.
• Confirm insurance and indemnification before you join. Both are fair questions to ask during recruitment, and a board that cannot answer them has told you something useful about its governance.

Most of these are things a functioning board already does. If several of them sound aspirational for your organization, the liability exposure is a symptom rather than the underlying problem — see is your nonprofit board actually functioning and nonprofit board member responsibilities for the broader picture.

Where to Get Help

If you are joining a board and want to know what you are stepping into, the questions above are the right ones to ask before you accept the seat.

If you are already on a board and just realized you cannot answer several of them, that is a governance gap rather than a crisis — and it is fixable. A Governance Review examines whether your bylaws contain workable indemnification language, whether your conflict of interest process would survive scrutiny, whether compensation was approved in a way that establishes the rebuttable presumption, and whether your insurance matches your actual risk profile. If the fixes are known and you just need them executed, Governance Remediation handles individual items à la carte. For boards that need the full structure built out — policies, minute-taking practices, orientation materials, an annual governance calendar — the Board Governance Package covers it end to end.

And if you are facing a specific situation right now — a payroll tax shortfall, a compensation decision you are unsure about, a director who wants to do business with the organization — a single advisory call is usually enough to tell you whether you are in ordinary-governance territory or need an attorney. Knowing which one you are in is most of the value.