A conflict of interest agreement should do six things: define who is covered and what counts as a conflict, require disclosure, set up a review process, list prohibited activities, spell out consequences, and protect people who report problems in good faith. Nonprofits, public companies, and federal contractors each have to add a few specifics on top of that base, but the framework is the same. A document that skips any of these pieces tends to sit unused; one that has all six actually shapes behavior.
Who and What the Agreement Covers
Start by drawing two lines: who is bound, and what qualifies as a conflict.
Coverage should reach beyond full-time employees. Board members, officers, committee members with decision-making authority, and contractors who influence purchasing or strategy all belong in scope. The IRS sample policy for tax-exempt organizations covers any director, principal officer, or member of a committee with governing board delegated powers who holds a direct or indirect financial interest.1Internal Revenue Service. Instructions for Form 1023
Then define “financial interest” broadly. The IRS sample sweeps in ownership or investment interests in entities that do business with the organization, compensation arrangements with those entities, and potential interests in entities the organization is negotiating with. Compensation here is not just salary. It includes consulting fees, honoraria, and non-trivial gifts.1Internal Revenue Service. Instructions for Form 1023
Define “immediate family” explicitly. Most policies name spouses, domestic partners, and dependent children; some cover anyone in the same household. The definition matters because a family member’s interest routinely creates a conflict for the person inside the organization.
Set Dollar Thresholds
Use concrete numbers for what counts as a “significant” interest. In federally funded research, the Public Health Service sets the bar at $5,000 in combined remuneration and equity from a publicly traded entity, or any equity stake in a non-publicly traded entity.2eCFR. 42 CFR 50.603 – Definitions The National Science Foundation uses $10,000. Private organizations pick their own figure. A vague standard like “substantial financial interest” invites the self-serving reading the policy is meant to prevent.
Types of Conflicts to Name
Name specific examples in three categories rather than leaning on abstract definitions.
Financial: owning stock in a vendor, receiving consulting fees from a competitor, holding an investment in a company seeking a contract, taking undisclosed referral payments. These are the easiest to catch once thresholds are specific.
Personal and relationship: hiring or supervising a family member, close ties to someone at a competing organization, using company resources for personal projects. No money has to change hands for the damage to be real.
Commitment: serving on a competitor’s board, running a side business in the same industry, or dedicating serious time to an outside venture. The agreement should require disclosure of outside board seats and business ventures. Not all of them will be prohibited; the organization just needs the information to evaluate them.
Across all three, the agreement should reach the appearance of a conflict, not only actual ones. A board member may genuinely believe a stock position doesn’t affect a vote, but perception alone can trigger regulatory scrutiny. Appearance provisions are often the most important protections in the document.
Mandatory Disclosure
Disclosure is the operational core. Impose two duties: an annual certification in which every covered person reviews the policy and reports current interests, and an immediate reporting duty when a new potential conflict surfaces mid-year. The IRS frames the goal as ensuring that “when actual or potential conflicts of interest arise, the organization has a process in place under which the affected individual will advise the governing body about all the relevant facts concerning the situation.”3Internal Revenue Service. Form 1023 Purpose of Conflict of Interest Policy
The annual certification usually takes the form of a questionnaire covering outside financial interests, board positions, family relationships inside the organization, and other circumstances that could create a conflict. It catches slowly developing situations nobody thought to flag in real time.
Route every disclosure to one recipient: a chief compliance officer, general counsel, or ethics committee. Centralized intake produces consistency and keeps disclosures from getting buried. State plainly that the duty is continuous and doesn’t reset when the annual form is signed.
Prohibited Activities and Gift Limits
Some conduct should be off-limits with no waiver available: misusing trade secrets, trading on inside information, accepting kickbacks. No mitigation can neutralize the risk, so they get zero tolerance.
Gifts need a specific number. Federal ethics rules allow government employees to accept unsolicited gifts worth $20 or less per occasion, capped at $50 per calendar year from any single source, and those limits exclude cash and investment interests.4eCFR. 5 CFR 2635.204 – Exceptions to the Prohibition for Acceptance of Gifts The Department of Justice applies the same $20/$50 framework.5U.S. Department of Justice. Gifts and Entertainment Private companies pick their own numbers, but the number has to be a number. “Reasonable” and “nominal” produce the same result as no gift policy at all.
Review and Mitigation
Once someone discloses, the agreement should name the decision-maker and the available responses. An independent committee, typically made up of members without their own conflict in the matter, reviews the disclosure and decides how to respond.
Recusal is the workhorse. The person with the conflict steps out of any discussion or vote on the relevant matter. For a board member who owns stock in a bidding vendor, that means leaving the room, not simply abstaining.
When recusal alone is not enough, the committee has other options:
- Divestiture, where the person sells the conflicting investment within a set timeframe.
- Reassignment, where duties shift away from the area of conflict so decision-making authority goes elsewhere.
- Enhanced monitoring, where internal audit adds scrutiny to the person’s decisions and transactions in the affected area.
Document every step. The committee’s reasoning, the strategy chosen, and the outcome all belong in a written record. A perfectly defensible decision looks indefensible when there is no paper trail.
Waivers
Not every conflict calls for termination or full divestiture. Include a formal waiver process for cases where the organization decides a manageable conflict is worth living with. Approval should come from the board or a governance committee, never a single executive. That structural rule prevents exactly what the policy is designed to prevent.
Federal contractors offer a workable model. Under the Federal Acquisition Regulation, agency heads can waive organizational conflict of interest rules when applying them “would not be in the Government’s interest,” but the request must be in writing, describe the extent of the conflict, and receive approval at or above the level of head of a contracting activity.6Acquisition.GOV. Subpart 9.5 – Organizational and Consultant Conflicts of Interest Private organizations can borrow the structure: written request, senior-level approval, documented rationale.
Amendments to the agreement itself should follow the same route. Requiring a board vote to change it keeps a conflicted insider from quietly softening the rules that apply to them.
Whistleblower Protections
An agreement that punishes violations but leaves reporters exposed will fail in practice. Include an explicit anti-retaliation provision covering anyone who reports a concern in good faith.
Federal law protects whistleblowers who report certain categories of wrongdoing, including gross mismanagement of contracts or grants, waste of federal funds, and violations of law related to federal contracts. A disclosure qualifies as protected when the person had a reasonable belief that wrongdoing occurred and reported it to someone authorized to receive it.7U.S. Department of Justice Office of the Inspector General. Whistleblower Rights and Protections
Name the authorized channels: a compliance officer, an ethics hotline, a designated board member. State that no adverse action will be taken against someone who reports in good faith, even if the investigation clears the subject. Without that language, the disclosure requirements elsewhere in the agreement carry no weight.
Enforcement and Clawback
The agreement’s credibility depends on what happens after a violation. Build a graduated response that reflects both intent and severity:
- First-time, unintentional violations draw a formal written reprimand in the personnel file.
- Repeated minor violations or a single significant breach trigger suspension without pay.
- Deliberate concealment or engaging in a prohibited activity results in immediate termination.
Discipline is not the only lever. The organization should reserve a right to recover money too. SEC Rule 10D-1 requires all listed companies to recover incentive-based compensation from executives when an accounting restatement occurs, with a three-year lookback covering the fiscal years before the restatement. The rule bars companies from indemnifying executives against those recoveries.8eCFR. 17 CFR 240.10D-1 – Listing Standards Relating to Recovery of Erroneously Awarded Compensation
Even outside the SEC mandate, a clawback clause gives the organization a contractual right to recover bonuses or incentive pay earned during a period of policy violation. The Department of Justice has encouraged this approach through its Compensation Incentives and Clawback Pilot.9U.S. Department of Justice. Corporate Enforcement Note Compensation Incentives and Clawback Pilot In practice, withholding deferred compensation or future bonuses is cleaner than trying to recover money already paid.
For violations involving fraud or misuse of confidential information, be ready to refer the matter to regulators. Failing to self-report serious violations can enlarge the organization’s own exposure.
Recordkeeping and Confidentiality
Disclosures contain sensitive financial and personal information. Address how it is stored, who can see it, and how long it is kept.
Federal confidential financial disclosure reports are exempt from public release under the Freedom of Information Act and can be disclosed only in narrow circumstances, such as a federal court order or specific Privacy Act provisions.10eCFR. 5 CFR 2634.901 – Policies of Confidential Financial Disclosure Reporting The same principle works for any organization: collect only what is needed to identify and manage conflicts, limit access to reviewers, and protect the data. People disclose honestly when they trust the information won’t circulate.
For retention, keep disclosure records and review documentation for at least three years after the conflict is resolved or the person leaves. Federal grant recipients are generally required to retain conflict of interest records for three years after the award terminates. Putting a retention schedule in the agreement removes the guesswork about when files can be destroyed.
Rules That Depend on Organization Type
The parts above apply broadly. Certain organizations have to add more.
Tax-Exempt Nonprofits
The IRS strongly recommends that tax-exempt organizations adopt a written conflict of interest policy and provides a detailed sample in the Form 1023 instructions.1Internal Revenue Service. Instructions for Form 1023 The annual Form 990 asks three pointed questions: whether the organization has a written COI policy, whether officers and directors disclose interests annually, and whether compliance is regularly monitored. The policy is not technically required for tax-exempt status, but the IRS has indicated that answering “no” — especially alongside insider transactions — raises audit risk.
Publicly Traded Companies
Sarbanes-Oxley Section 406 requires every public company to disclose whether it has adopted a code of ethics for its principal financial officer and principal accounting officer. That code must promote honest and ethical handling of actual or apparent conflicts, accurate financial reporting, and compliance with applicable laws. A company that has not adopted such a code must explain why.11Office of the Law Revision Counsel. 15 USC 7264 – Code of Ethics for Senior Financial Officers The agreement should satisfy that requirement while also covering the broader employee base.
Federal Contractors
Contractors have to comply with the organizational conflict of interest rules in FAR Subpart 9.5. Contracting officers are required to analyze planned acquisitions to avoid, neutralize, or mitigate significant potential conflicts before award, and a contracting officer cannot award a contract when a conflict exists that cannot be resolved.6Acquisition.GOV. Subpart 9.5 – Organizational and Consultant Conflicts of Interest The agreement should address the situations FAR flags specifically, including access to nonpublic government information and involvement in writing contract specifications that could create an unfair competitive advantage.
Post-Employment Obligations
A good agreement does not expire on someone’s last day. Include provisions that survive termination: ongoing confidentiality obligations for proprietary information learned during employment, restrictions on soliciting the organization’s clients or employees for a set period, and a prohibition on using inside knowledge to benefit a competitor.
Federal law offers a useful frame. Former government employees face a permanent restriction on representing anyone before their former agency on specific matters they personally worked on, and former senior employees face an additional one-year cooling-off period barring them from contacting their former agency on behalf of outside parties.12eCFR. 5 CFR Part 2641 – Post-Employment Conflict of Interest Restrictions The structure translates to private agreements: permanent restrictions on specific matters combined with time-limited cooling-off periods. Spell out what former employees cannot do, for how long, and what happens if they do it. Without a survival clause, the protections evaporate when someone walks out with knowledge of the organization’s vendors, pricing, and strategy.