D&O Insurance or Board Indemnification for NYC Nonprofits

Your bylaws say the organization will indemnify. Your broker sold you a policy called D&O. Two separate things, two separate price tags, two separate failure modes, and a startling number of New York nonprofit boards have never bothered to read either document closely enough to know where one ends and the other begins. We have sat across from directors who discovered, after a regulator's letter arrived, that "we have coverage" was a phrase closer to faith than to fact. So let us walk through the actual mechanics — the kind a board chair can defend at a public meeting without sounding like a seminar.

Indemnification is a corporate obligation. D&O insurance is a contract. One is created by statute and your governing documents; the other is created by an underwriter who can, and will, exclude whatever they wish. Confusing the two is the single most common governance mistake we see in New York charities, and it tends to surface precisely when the organization can least afford the surprise.

The Legal Framework: What N-PCL Actually Promises Your Board

New York's Not-for-Profit Corporation Law does not hand directors a blank check. Section 721 lays out where indemnification and advancement rights can live: in the certificate of incorporation, the bylaws, member or board resolutions where authorized, or in an agreement. That sentence matters more than it looks. Most nonprofit boards adopt a one-line indemnification clause and call it governance. The statute is telling you that the text of those four documents — your charter, your bylaws, your board resolutions, and any individual indemnification agreement with a director — is what determines the protective floor your people actually stand on.

Section 722 is the meat. In third-party civil or criminal proceedings, a New York nonprofit may indemnify a director or officer for judgments, fines, settlements, and the reasonable necessary expenses — read: attorneys' fees — if that person acted in good faith and for a purpose reasonably believed to be in, or not opposed to, the corporation's best interests. Criminal matters add a further requirement: reasonable belief that the conduct was lawful. That is not a low bar; it is the bar that separates "I thought it was fine" from "I was deliberately lying."

For actions brought by or in the right of the corporation itself — derivative suits, essentially — Section 722 tightens the screws considerably. Indemnification is available only for settlement amounts and reasonable necessary defense or settlement expenses. The reason is old and ugly: you cannot have the organization paying the judgment that the director owed the organization. Indemnification is unavailable when the matter is settled or disposed of without a court finding, or when the person was adjudged liable to the corporation, unless a court steps in and decides indemnity is nevertheless fair and reasonable.

Indemnification is not a bonus. It is a defined legal mechanism with statutory tripwires, and "we'll cover it" is not the same as "we can cover it."

How D&O Insurance Complements — and Does Not Replace — Corporate Indemnification

Now the insurance piece, which is where boards tend to relax because a broker smile was involved. N-PCL § 726 expressly authorizes a nonprofit to purchase insurance for two distinct purposes. The first is to reimburse the corporation for indemnification it has already paid or owes — a funding mechanism. The second is to indemnify directors and officers directly under the policy, sometimes in situations where the corporation could not otherwise indemnify them. That second bucket is the one underwriters love and boards misunderstand. Direct-indemnification insurance is the part that can step outside the statutory good-faith framework in limited ways, but only if the policy carries a retention amount and co-insurance acceptable to the Superintendent of Financial Services. Without those features, you do not have the expanded protection; you have a reimbursement policy dressed up to look like one.

Here is the comparison worth pinning above the desk:

Most organizations think they bought the right column and forget that the left column is the actual obligation. The left column is the one that survives even when the carrier walks.

Navigating the Statutory Limits Everyone Glosses Over

The Attorney General's Charities Bureau guidance for nonprofit boards is blunt: determine whether the organization indemnifies, whether it carries D&O liability insurance, and — critically — identify what is covered and what is not. That last clause exists because too many boards answered the first two questions with confidence and the third with vibes.

The statutory ceiling on both protections is the same ugly phrase: active and deliberate dishonesty material to the claim, or a finding that the director personally received an unlawful financial profit or advantage. Once a final adverse adjudication lands on either of those facts, neither indemnification nor insurance may pay anything other than defense costs. This is not a soft preference; it is a hard prohibition written into the law. A board member who quietly funneled grant money to a related LLC and then claims "I thought it was permitted" is going to find their D&O carrier denying coverage with a polite letter citing the dishonesty exclusion, and the corporation's indemnification clause will not save them either.

The dishonesty exclusion is not a footnote. It is the wall your protection runs into when the conduct was, in fact, what the regulator said it was.

There is also the procedural scaffolding most directors never see. Section 723 requires indemnification when a director or officer successfully defends a covered civil or criminal action on the merits or otherwise. Non-court indemnification requires authorization in the specific case by disinterested directors, independent legal counsel, or members, applying the statutory standards of conduct. This is why a board cannot just vote to indemnify the ED after a heated executive session and consider the matter closed — the disinterested-director mechanism is designed to prevent the very people under scrutiny from rubber-stamping their own protection.

Advancing Defense Expenses: The Money You Borrow Before the Verdict

Lawyers are expensive; regulators do not wait for budgets. N-PCL lets a nonprofit advance defense expenses before a matter is finally resolved, but only after the recipient signs an undertaking to repay. If the recipient is later found not entitled to indemnification, or to the extent the advance exceeds the permitted indemnification, the money comes back. We have watched boards authorize six-figure advances for executives under regulatory cloud, then flinch when the repayment obligation materialized. The advance is not a gift; it is a loan with a default scenario built in.

A few practical points worth noting. Section 725 requires written notice to members by the next annual meeting or within three months of the payment or action, whichever comes first. Member notice is not a courtesy; it is a statutory requirement, and skipping it converts a defensible indemnification into a governance finding.

The advance mechanism is also where insurance and indemnification most often collide in ugly ways. A carrier may fund the defense under a duty-to-defend provision, but the policy's selection-of-counsel clause, billing rates, and consent-to-settle provisions can put the organization and the insurer in direct conflict over who runs the defense. Boards that have never pressure-tested that coordination before a claim hits learn about it during one.

Aligning Bylaws, Agreements, and the Actual Policy

Here is the part that requires adult supervision. The indemnification clause in your bylaws is only as good as the resolution that authorizes it, the agreement that defines its scope, and the D&O policy that funds or extends it. We have seen bylaws with broad, generous language paired with a D&O policy that excludes the exact conduct the bylaws contemplated. We have seen executive-director indemnification agreements signed without a corresponding policy endorsement naming the ED as an insured. We have seen retention levels and co-insurance percentages that the corporation could not meet out of cash on hand if the carrier tendered a denial.

The strategic alignment problem has three moving parts.

First, the bylaws. If the indemnification clause is a one-paragraph adoption of the statutory minimum, the protective floor is exactly what the statute provides, no more. A board that wants to indemnify directors for actions taken in good faith on reliance on professional advice, for example, has to write that in. The statute permits it; silence does not create it.

Second, the D&O policy. Read the named-insured schedule. Read the definitions of "director," "officer," "insured person," and "wrongful act." Read the exclusions — especially the dishonesty, prior-knowledge, bodily-injury, professional-services, and outside-entity exclusions. Read the retention, the co-insurance, the limits by coverage part, the consent-to-settle provisions, and the priority-of-payments language. If your broker has never walked you through these line by line, the broker has not done the job.

Third, the certificate and any individual agreements. Some directors negotiated separate indemnification agreements when they joined the board. Those agreements survive bylaw amendments and can create obligations the corporation has not funded through insurance. That is not a hypothetical; we have seen it produce litigation between former directors and the organization years after a board transition.

A bill currently sitting in the Senate Corporations, Authorities and Commissions Committee — S5160 — would substantially reorganize these provisions, add key persons to the principal indemnification section, and repeal §§ 721–723. As of the most recent status page we reviewed, it remains a bill, not law. Any governance work you do now must rest on the existing N-PCL framework, not on the proposed one. Pretending otherwise is a fast path to bylaws that contradict statute.

The Reality Check Nobody Wants to Give the Board Chair

Three things need to land before the next board meeting. The first: indemnification and D&O insurance are not redundant, and neither one substitutes for the other. The second: the protection you bought is only the protection written into the documents, and those documents have exclusions, retentions, and conduct thresholds that are not negotiable in the moment of crisis. The third: governance theater — passing a resolution, declaring "we have coverage," and moving on — is the single most expensive habit a nonprofit board can develop, because it converts ignorance into a public finding when the Attorney General or a plaintiff starts asking questions.

Coverage is not what you paid for. Coverage is what your bylaws and your policy actually deliver when a regulator, a plaintiff, or a creditor puts them to the test.

If your board has not reviewed the indemnification clause, the latest D&O policy, and the retention/co-insurance structure within the last twelve months, that is the project for next quarter. Bring your counsel. Bring your broker. Bring the actual documents, not summaries. And bring the willingness to discover that what you thought you had is not what you have — because that discovery, made at a planning meeting, is a gift. Made at a deposition, it is a cash-flow hemorrhage the organization will not survive.

The law is on the books. The insurance market is open. The board's job is to make sure the two actually meet before a claim forces the conversation.