Examples of nonprofit directors and officers insurance claims cluster into four recurring categories: employment lawsuits brought by current or former staff, breach of fiduciary duty allegations against the board itself, third-party suits from donors or people the organization serves, and government enforcement actions by state attorneys general or the IRS. In each one, a demand letter or complaint names individual directors personally, and a D&O policy is what pays the defense lawyer and any settlement that follows.
Employment Claims Against the Board
Employment disputes are the single most common source of D&O claims against nonprofit boards. The complaints typically allege wrongful termination, harassment, or discrimination based on a protected characteristic under Title VII of the Civil Rights Act1U.S. Equal Employment Opportunity Commission. Title VII of the Civil Rights Act of 1964 or failure to provide reasonable accommodations under the Americans with Disabilities Act.2U.S. Equal Employment Opportunity Commission. The ADA: Your Responsibilities as an Employer These federal laws apply to small charities, not only large employers, and board members are often surprised to find that out from a lawsuit.
A representative scenario: an executive director creates a hostile work environment, and a former employee sues the individual board members for negligent supervision. If the board knew about the behavior and did nothing, each director named in the complaint has personal exposure. Plaintiff attorneys routinely name individual directors precisely because the pressure on volunteers with personal assets at stake tends to produce quick settlements.
Defense costs alone regularly run between $50,000 and $150,000, even for claims that ultimately lack merit. Settlements for harassment or discrimination cases can reach well into six figures depending on the severity of the emotional distress and lost wages involved. A D&O policy pays for specialized employment defense counsel and any negotiated settlement or court-ordered damages that would otherwise come out of a director’s personal savings.
Breach of Fiduciary Duty Claims
Every nonprofit director owes two core legal obligations to the organization: the duty of care and the duty of loyalty. The duty of care means staying informed and exercising the judgment a reasonable person in the same position would use. The duty of loyalty means avoiding conflicts of interest and never using a board seat for personal financial gain. State nonprofit corporation statutes define the specifics, but the framework is consistent: act in good faith, stay informed, put the organization’s interests first.
Duty-of-care claims often arise from passive oversight failures. If a board rubber-stamps financial reports for years while the CFO embezzles funds, the directors face claims for failing their oversight role. The lawsuit doesn’t allege that the directors stole anything, only that they didn’t pay enough attention. These cases turn on whether the board had reasonable processes for monitoring finances, and forensic accounting to trace losses can push legal costs well into six figures.
Duty-of-loyalty claims look different. The classic example involves a director who steers a contract to their own private business without disclosing the relationship. Other board members or the state attorney general can then file suit to recover the lost funds. These derivative suits seek the return of every dollar the organization overpaid, plus the director’s removal from the board.
Cybersecurity Oversight as a Fiduciary Claim
A growing category of fiduciary claims involves data breaches. Boards that collect donor information, client health records, or payment data have an obligation to ensure those systems are reasonably secure. After a breach, affected individuals and regulators ask the same question: did the board allocate any budget for cybersecurity, or did they ignore the risk entirely? A board that never discussed data security, never reviewed IT practices, and never funded basic protections is in a weak position to argue it satisfied its duty of care. These claims are relatively new in the nonprofit space but follow the same oversight-failure logic as financial mismanagement cases.
Claims From Donors and Beneficiaries
People outside the organization can sue the board too. Donor lawsuits are the most straightforward: a donor gives $100,000 earmarked for a building fund, the board redirects it to cover operating expenses, and the donor sues for misrepresentation. These claims lean on state consumer protection and deceptive trade practice laws to demand the money back, and defense costs fall on the directors who approved the reallocation.
Beneficiary claims are more complex. If a nonprofit provides counseling, medical care, or shelter and a client is harmed, the directors may be named alongside the organization in a negligence suit alleging the board failed to implement proper safety protocols, background checks, or quality controls.
One boundary trips up many nonprofit leaders. D&O insurance covers claims arising from management decisions, not from the delivery of professional services. If a counselor at a nonprofit mental health clinic commits malpractice, that is a professional liability claim, not a D&O claim. D&O policies specifically exclude bodily injury and property damage, which fall under general liability or professional liability coverage instead. A board that carries only a D&O policy has a dangerous gap if the organization provides direct services to clients.
Regulatory and IRS Enforcement
Government agencies investigate nonprofit leadership more aggressively than most board members expect. A state attorney general who suspects charitable funds are being diverted for personal gain can subpoena financial records, depose directors individually, and seek civil penalties. In extreme cases the attorney general can petition a court to dissolve the nonprofit entirely or permanently bar individuals from serving on any charitable board. Responding requires specialized compliance attorneys whose hourly rates create substantial bills even when no wrongdoing is found.
The IRS enforces its own rules through the excess benefit transaction provisions of the tax code. When a director or officer receives financial benefits that exceed the fair market value of the services they provide, the IRS can impose an initial excise tax of 25% of the excess benefit on the person who received it. If the excess benefit is not corrected within the taxable period, that tax jumps to 200%. Board members who knowingly approved the transaction face a separate 10% tax on the excess benefit, capped at $20,000 per transaction.3Office of the Law Revision Counsel. 26 USC 4958 – Taxes on Excess Benefit Transactions An inflated executive salary or a below-market loan to an officer are textbook triggers.
Filing obligations create their own exposure. An organization with gross receipts under $1,208,500 that files its Form 990 late faces a penalty of $20 per day, up to $12,000. Organizations above that threshold face $120 per day, up to $60,000.4Internal Revenue Service. Exempt Organizations Annual Reporting Requirements – Filing Procedures: Late Filing of Annual Returns Individual officers who fail to comply with an IRS request for correct information can be charged $10 per day, with a $5,000 cap per person.5Internal Revenue Service. Annual Exempt Organization Return: Penalties for Failure to File The penalties themselves rarely feel catastrophic, but the legal fees required to navigate an IRS audit or state investigation routinely dwarf them.
The Volunteer Protection Act Does Not Cover These Claims
Federal law provides baseline liability protection for nonprofit volunteers, but the exceptions are wide enough to drive most lawsuits through. Under the Volunteer Protection Act, a volunteer is generally shielded from personal liability for harm caused while acting within the scope of their nonprofit responsibilities.6Office of the Law Revision Counsel. 42 USC 14503 – Limitation on Liability for Volunteers That protection disappears for gross negligence, reckless or willful misconduct, criminal acts, civil rights violations, and sexual offenses or hate crimes.
Almost every lawsuit against a nonprofit board alleges some form of gross negligence or reckless indifference, because plaintiff attorneys know the Act exists and draft their complaints specifically to get around it. The Act also does not prevent anyone from filing suit. A director still has to hire a lawyer, respond to discovery, and go through the full litigation process before a court rules that the immunity applies. D&O insurance pays for that entire defense regardless of how the immunity question resolves.
How a D&O Policy Responds to a Claim
Nonprofit D&O coverage is built in three layers, and each responds to a different situation:
- Side A pays defense costs and damages directly to a director or officer when the organization cannot or will not indemnify them. It triggers most often when the nonprofit is insolvent or when state law prohibits indemnification for the particular type of claim, and it typically carries no deductible.
- Side B reimburses the nonprofit after it indemnifies a director or officer out of its own funds. This is the most frequently triggered layer in practice, and a deductible usually applies.
- Side C covers the nonprofit itself when it is named directly in a claim.
Side A is the layer that matters most when things go seriously wrong. If the organization files for bankruptcy, a standalone Side A policy protects directors directly and sits outside the bankruptcy estate. Directors who serve on financially fragile boards should confirm the policy includes robust Side A coverage, because that is what stands between a lawsuit and personal savings if the organization collapses.
Exclusions That Catch Boards Off Guard
Every D&O policy contains exclusions, and the ones that surprise nonprofit directors tend to follow a pattern. Fraud and dishonesty are excluded, though the exclusion usually requires an actual adjudication of fraud rather than just an allegation. Bodily injury and property damage are excluded because they belong under a general liability policy. Prior litigation already pending when the policy took effect is excluded. And the insured-versus-insured exclusion blocks coverage when one director or officer sues another, or when the organization itself sues a current director.
The insured-versus-insured exclusion deserves attention in the nonprofit context. When a board discovers that a former executive director committed financial fraud, the instinct is to sue to recover the money. But if that executive director was an insured under the D&O policy, the exclusion may block coverage for the organization’s own claim. Boards that anticipate this kind of internal recovery action should negotiate carve-outs in the policy before a problem surfaces.
Reporting a Claim on Time
D&O insurance operates on a claims-made basis, which means the policy that responds is the one in effect when the claim is first reported, not the one in effect when the underlying conduct occurred. A board that lets a policy lapse or switches carriers without understanding the reporting window can lose coverage entirely for conduct that happened years earlier.
Most claims-made policies require reporting “as soon as reasonably practicable” after the board becomes aware of a claim. Some impose a harder deadline, requiring the claim to be reported within 30 days after the policy period ends. Missing that window can result in a flat denial. Report any demand letter, lawsuit, or credible written threat to the insurer immediately; waiting to see whether a situation escalates is how coverage gets lost.
When a director leaves the board or the organization dissolves, an extended reporting period (sometimes called tail coverage) allows claims to be reported for a defined window after the policy expires. These extensions typically last one to six years and cover wrongful acts that occurred while the policy was active but were not discovered until later. Any director leaving a board should confirm whether the organization has purchased tail coverage or whether they need to arrange it independently.