CEO Executive AssistantLegal and regulatory compliance is non-negotiable for nonprofit organizations. Failure to file on time, maintain proper records, or comply with applicable laws can result in financial penalties, loss of tax-exempt status, and reputational damage. Yet many nonprofit CEOs are far too personally involved in compliance operations that qualified staff and counsel should handle.
This guide helps nonprofit CEOs build a compliance delegation framework that maintains strong oversight without requiring CEO management of routine compliance tasks.
The Compliance Accountability Paradox
The nonprofit CEO is ultimately accountable for organizational compliance. This accountability is real and cannot be delegated away. But being ultimately accountable is very different from being operationally responsible for compliance activities.
The CEO who personally manages compliance operations is not more accountable for compliance outcomes; they are simply less efficient. Effective compliance delegation creates layered accountability: staff and counsel manage compliance activities; the CEO maintains oversight through reporting and defined escalation triggers.
The CEO’s Compliance Role
Policy approval. The CEO approves key compliance-related policies: conflict-of-interest policy, whistleblower policy, document retention policy, and financial controls policy.
Compliance culture. The CEO establishes and models the organizational culture of integrity and compliance. This cultural tone-setting function is irreplaceable.
Board accountability reporting. The CEO reports on material compliance matters to the board, ensuring appropriate board oversight.
Legal counsel relationship. The CEO maintains the strategic relationship with outside general counsel. Routine legal matters are delegated; significant legal questions involve the CEO.
Signature authority. The CEO signs key regulatory filings (990), significant contracts, and legal certifications where executive signature is required.
Crisis response. When compliance failures or legal threats arise, the CEO leads the organizational response in partnership with legal counsel.
What to Delegate
To the CFO or Finance Director
990 preparation coordination. The CFO manages the 990 preparation process with outside accountants: gathering financial data, coordinating with program staff on program descriptions, and reviewing draft filings. The CEO reviews the final 990 and signs.
State filing compliance. Many states require nonprofit registration, annual report filings, and charitable solicitation registrations. The CFO or finance director coordinates these filings with legal counsel.
Financial internal controls maintenance. The CFO owns financial control policies, segregation of duties, audit preparation, and internal control monitoring.
Payroll tax compliance. Payroll tax filings and employment tax compliance are finance functions.
Grant compliance financial reporting. Financial reports to funders with grant compliance requirements are CFO responsibilities.
To Legal Counsel (Internal or External)
Regulatory compliance monitoring. Outside or in-house legal counsel monitors the regulatory environment for changes affecting the organization and advises the CEO and board on compliance implications.
Contract review. Routine contract review and approval for contracts within defined parameters belongs with legal counsel without CEO review.
Employment law compliance guidance. HR policies, employment agreements, and employment law questions are addressed by legal counsel in coordination with HR.
Intellectual property management. Trademark filings, copyright issues, and licensing agreements are legal counsel responsibilities.
State charitable registration maintenance. Most nonprofits are registered in multiple states for charitable solicitation. Legal counsel manages these registrations and annual renewals.
To the HR Director
Employment law compliance. Compliance with EEOC requirements, FMLA, ADA, and applicable state employment laws is an HR responsibility, with legal counsel guidance.
Employee handbook maintenance. Keeping the employee handbook current with applicable laws is an HR function.
Background check compliance. Managing background check policies and processes according to applicable law is HR’s responsibility.
Benefits compliance. ERISA compliance, ACA reporting, and benefits-related regulatory requirements are HR and CFO functions.
To an Operations or Compliance Director
Compliance calendar management. A master compliance calendar tracking all regulatory deadlines (federal and state filings, insurance renewals, license renewals, accreditation renewals) can be managed by an operations or compliance staff member.
Records management. Implementing and maintaining the document retention policy, managing organizational records, and overseeing record destruction according to retention schedules is an operations function.
Insurance program management. Managing the organization’s insurance portfolio (directors and officers, general liability, property, workers’ compensation, professional liability) is an operations or finance function.
Building the Compliance Delegation Infrastructure
Develop a Master Compliance Calendar
A comprehensive calendar of all regulatory filing deadlines, insurance renewals, contract renewals, license renewals, and accreditation requirements should be maintained by operations or finance staff. The CEO receives a quarterly preview of major upcoming compliance milestones.
Create a Compliance Reporting Mechanism
The CEO should receive a brief monthly or quarterly compliance report covering:
- Status of major regulatory filings
- Any compliance concerns or areas of risk
- Recent legal developments affecting the organization
- Insurance or contract renewals approaching
This report keeps the CEO informed without requiring operational involvement in compliance activities.
Define Escalation Triggers for CEO Involvement
Certain compliance matters require immediate CEO attention:
- Receipt of any government investigation inquiry or subpoena
- Discovery of a material compliance failure
- Threatened or actual litigation
- IRS or state revenue department inquiry
- Media inquiry related to compliance matters
- Whistleblower complaint
Everything else is managed within the compliance delegation system.
Establish a Conflict-of-Interest Management Process
Annual conflict-of-interest disclosure collection, review, and documentation is a governance compliance requirement. A board liaison or executive assistant can manage the disclosure process; the governance committee and CEO review disclosures and address conflicts.
For nonprofit CEOs who want to connect compliance delegation to comprehensive organizational governance, delegation guide for nonprofit CEO: board governance provides a framework that integrates compliance oversight with board management.
Understanding the broader scope of what nonprofit CEOs can delegate is covered in what nonprofit CEOs delegate to their chief of staff.
Conclusion
Legal and regulatory compliance is too important to be managed casually, and too operational to require CEO personal involvement in every filing and deadline. Build a layered compliance delegation system: capable staff and counsel manage operations; the CEO maintains strategic oversight and responds to material issues.
Invest in compliance infrastructure. Trust capable professionals. Stay informed through regular reporting. The organization will be well-protected, and the CEO will be well-positioned to lead.
For guidance on nonprofit legal compliance and governance, see McKinsey.com/industries/social-sector.
Related Reading
For further context, explore Nonprofit CEO Delegation for Annual Fund Operations and Nonprofit CEO Delegation for Capital Campaign Management.