Nonprofit Board Fiduciary Duties: Care, Loyalty and Obedience

Most people join a nonprofit board because they care about the work. Very few join because they want to be a fiduciary, and a good number do not know that is what they have become. The gap between those two things is where governance failures live.

US nonprofit directors owe three duties — care, loyalty and obedience — and they can be held personally liable against them. That last point tends to focus attention. But the duties are not primarily about liability; they are a description of what a board is for. A board that understands them behaves differently in a meeting: it asks for the financials before the vote rather than after, it notices when a decision benefits somebody in the room, and it checks that the organization is still doing what it told the IRS it would do.

This guide sets out what each duty requires in practice, and why Form 990 turned governance from a private matter into a public disclosure.

The duty of care

Board members must bring the care and attention a reasonably prudent person would bring in the same circumstances. In practice that is a duty of active oversight of financial health, compliance and strategic direction — not passive attendance.

What it requires concretely:

Turn up, prepared. A director who does not read the board pack is not exercising care by being in the room. Chronic absence is itself a breach in most formulations.

Ask for what you need to decide. Approving a budget you have not seen, or a strategy without financial projections, is the classic failure. The duty of care includes obtaining information, not just receiving it.

Monitor financial health continuously. Not the annual audit alone: reserves, cash position, whether revenue concentration is dangerous, whether expenditure is tracking budget.

Delegate without abdicating. A board may rely on staff, committees and professional advisers, and is expected to. What it cannot do is stop asking whether the reliance is still justified.

Have the record show it. Minutes that record only decisions are weak evidence of care. Minutes that record what was considered — the question raised, the information requested, the dissent — are what demonstrate deliberation later.

The duty of loyalty

Board members must put the organization's interests ahead of their own. Conflicts must be disclosed, and board service must not be a route to personal or commercial gain.

The duty is often read as "do not steal," which sets the bar far too low. Most loyalty problems are not theft; they are ordinary transactions that nobody flagged.

Disclose annually and at the point of decision. An annual conflicts declaration is table stakes. The harder discipline is disclosing when a specific item arises — including the conflicts that developed since the form was signed.

Recuse properly. Declaring an interest and then joining the discussion is not recusal. Leaving the room, and recording that you left, is.

Watch related-party transactions. Contracting with a director's company, renting from a board member, hiring a relative — these are not automatically prohibited, but they require disclosure, independent approval, and evidence the terms are fair.

Understand private inurement. No part of a 501(c)(3)'s earnings may benefit an insider. This is not a technicality: it goes to exempt status, and the IRS asks about it.

Keep confidences. Board information is the organization's, not the director's.

The duty of obedience

Board members must ensure the organization complies with applicable federal, state and local law, and stays faithful to its stated mission.

The compliance half is concrete: filings made on time — Form 990 among them — state registrations current, employment and licensing obligations met, restricted funds spent on what they were restricted to.

The mission half is subtler and more often breached. Nonprofits drift. A grant is available for adjacent work; a major donor wants a program the organization would not otherwise run; a merger opportunity arrives. Each step is defensible and the cumulative result is an organization doing something it never chose. The duty of obedience makes noticing that drift a board responsibility, not a philosophical one — and if the mission genuinely should change, the answer is to change the governing documents, not to quietly operate outside them.

Why Form 990 changed the governance conversation

Fiduciary duty used to be a matter of state law and private conduct. Form 990 made a substantial part of it a public disclosure question.

The return asks about the governing body and management, minute-taking, conflict of interest policy, and private inurement. It asks whether the organization has written policies on conflicts, whistleblowing and document retention. And it asks whether the board — or a committee of it — reviewed the Form 990 before it was filed, and describes the process.

That question deserves particular attention, because it converts a governance practice into a disclosure. Answering "no" is permitted and highly visible: to funders performing due diligence, to charity raters, to journalists, and to anyone reading the filing.

Reviewing the return is also substantively useful. The 990 is where a board can see, in one document, the compensation disclosures, the related-party transactions and the program expense breakdown that its own board packs may present more favorably.

What good governance looks like in practice

The duties translate into a fairly short list of habits.

Board packs go out far enough ahead to be read. Financial reporting shows position and trend rather than a single month in isolation. Conflicts are a standing agenda item, not an annual form. Minutes record the reasoning as well as the vote. The 990 is reviewed before filing, on a scheduled date. New directors are onboarded onto their duties, not just the org chart. And the board periodically asks whether what the organization is doing is still what its governing documents say it does.

None of that requires sophistication. It requires that somebody owns the calendar and that the records exist.

The recording side is where boards most often fall down, and it is the part that matters most when duties are examined after the fact. If your program data, grant records and financial position sit in separate systems that must be manually reconciled before every meeting, the board pack becomes a compilation exercise — and the effort goes into assembling it rather than interrogating it. Plinth draws reporting from the same underlying records as the operational work, so what a board sees is the live position rather than a hand-built snapshot, and portfolio insights surface patterns across a grant portfolio that a monthly summary flattens out.

What actually protects a director

Personal liability is the part that alarms new directors, and the protections are more substantial than most realize — though none of them covers self-dealing.

The federal Volunteer Protection Act of 1997 limits tort liability for volunteers of nonprofit organizations, and a "volunteer" under the Act includes a director, officer or trustee who receives no compensation. The protection applies where the volunteer was acting within the scope of their responsibilities, was properly licensed or authorized where required, and where the harm was not caused by willful or criminal misconduct, gross negligence, reckless misconduct or flagrant indifference to rights or safety. Harm caused while operating a vehicle is carved out.

The Act's most important limitation is who it does not protect: it shields the volunteer, not the organization (Nonprofit Association of the Midlands). The nonprofit may still be liable for a volunteer's negligence.

State volunteer immunity statutes sit alongside it and vary in scope, sometimes offering broader protection.

Directors and officers insurance covers defense costs, which is often the real exposure — a claim that goes nowhere still has to be defended. Check whether the policy covers employment practices claims, which are the most common source of nonprofit D&O claims.

Indemnification provisions in bylaws commit the organization to covering directors, which is worth only as much as the organization's ability to pay.

None of these protects a director who benefited personally, concealed a conflict, or ignored a known problem. Protection follows conduct.

Board composition and independence

Form 990 asks how many voting members the governing body has and how many are independent — and asks about family and business relationships between officers, directors and key employees. It asks because independence is a proxy for whether oversight is real.

A director is generally not independent if they are compensated as an officer or employee, receive significant payment from the organization, or are involved in a related-party transaction — and the definition extends to family members.

The practical point is not to chase a ratio. It is that a board where several members have financial relationships with the organization, or with each other, will find the duty of loyalty harder to exercise: recusals cascade, quorum becomes fragile, and the remaining directors are asked to assess transactions involving colleagues. Boards in that position should be deliberate about recruiting genuinely independent members before a contested decision arrives, not after.

Warning signs a board is not exercising its duties

Governance failures are usually visible long before they become incidents. The signals are mundane.

The pack arrives the night before, or at the meeting. Directors cannot exercise care over material they have not read, and a board that tolerates this has decided oversight is ceremonial.

Financial reporting is a single number. A cash figure with no trend, no comparison to budget and no reserves position tells the board nothing it can act on.

Nobody has ever voted against anything. Unanimity across every decision for years is not evidence of alignment; it is usually evidence that dissent has stopped being expressed.

Minutes record only outcomes. "The budget was approved" leaves no evidence of deliberation, which is precisely what is examined if a decision is later challenged.

The conflicts register is an annual ritual. Forms signed in January and never mentioned again do not surface the conflict that arose in June.

One person holds all the context. Where only the executive director understands the finances, the funding pipeline and the key relationships, the board cannot oversee and the organization has a single point of failure.

The board has not read the 990. It is a public document describing your organization, and directors are asked on it whether they reviewed it.

None of these requires a governance consultant to fix. Each is a scheduling or habit change, and boards that address them find the duties largely take care of themselves.

Frequently asked questions

What are the three fiduciary duties of a nonprofit board member?

Care, loyalty and obedience. Care requires active oversight of finances, compliance and strategy. Loyalty requires putting the organization ahead of personal interest. Obedience requires compliance with law and fidelity to the stated mission.

Can nonprofit board members be held personally liable?

Yes. Directors can be held personally liable for breaches of the three duties. Directors and officers insurance, indemnification provisions and state volunteer protection statutes reduce exposure but do not eliminate it, and none protects against self-dealing.

Does the board have to review Form 990 before filing?

It is not universally mandatory, but the return asks whether the board reviewed it before filing and how. Answering "no" is a visible governance signal to funders and raters, and the review is a genuinely useful control.

What should a conflict of interest policy contain?

A definition of conflicts, a duty to disclose both annually and when a specific matter arises, a recusal procedure, a process for approving related-party transactions on independent and fair terms, and a record of how each was handled.

How involved should a board be in operations?

The board governs; staff manage. The duty of care requires monitoring and asking, not running programs. The line is crossed when directors make operational decisions rather than assuring themselves that management is making them well.

What does the duty of obedience mean if our mission needs to change?

Change the governing documents. The duty is not a prohibition on evolving — it is a requirement that the organization operates within what it has formally adopted, and that changes are made deliberately rather than by drift.

How often should a nonprofit board meet?

Often enough to exercise oversight, which for most organizations means at least quarterly. Frequency matters less than whether directors arrive prepared and receive information early enough to act on it.

Do these duties apply to advisory board members?

Advisory boards without voting authority generally do not carry the same fiduciary duties, because they do not govern. The distinction should be documented, since an advisory body that in practice makes binding decisions may be treated as governing regardless of its name.

What should a new director be given on appointment?

The governing documents, the most recent Form 990 and audited financials, the conflicts policy and a declaration to sign, the current budget and strategy, minutes from recent meetings, and a plain explanation of the three duties. Boards that skip the last item should not be surprised when directors do not exercise duties nobody described.

Recommended next pages

• What your 990-PF reveals — Reading a foundation's own filing closely
• Private foundation vs public charity — Why classification changes obligations
• Managing conflict of interest in grants — Conflicts on the grantmaking side
• Risk management in grantmaking — Board oversight of grant risk
• Mandated reporting for nonprofits — A compliance area boards increasingly own

Last updated: August 2026