D&O insurance traps for NYC nonprofit boards

Wrongful termination suits, harassment allegations, discrimination complaints, and retaliation claims can name the organization, its executive director, and individual board members at the same time. Yet the Directors and Officers liability policy sitting in a filing cabinet at many New York City nonprofits may exclude employment claims entirely or provide only a narrow sublimit. A separate Employment Practices Liability Insurance policy may be necessary.

That is only one of the traps. A board may believe that volunteer status protects its members personally. It may assume that D&O insurance covers any lawsuit connected to a board decision. It may change carriers without preserving prior acts coverage. It may discover, after a dispute begins, that an insured-versus-insured exclusion applies because the plaintiff is a former officer, employee, or board member.

New York’s Not-for-Profit Corporation Law Section 720-a contributes to the confusion. The statute can provide qualified protection for uncompensated directors and officers of certain charitable organizations, but it is not blanket immunity. It has boundaries, and insurance policies have boundaries of their own. The places where those limitations overlap are where nonprofit board members can be left defending themselves without the coverage they assumed they had.

The Myth of N-PCL 720-a Immunity: Where Personal Liability Remains

N-PCL Section 720-a provides a legal shield for qualifying directors and officers who serve without compensation. In broad terms, the protection applies to personal liability arising from third-party claims when the director or officer acted in good faith and within the scope of their duties. For a volunteer board, that protection matters. It recognizes the public value of unpaid nonprofit service and limits the circumstances in which a volunteer should face personal exposure for an organizational decision.

The protection is qualified, not absolute.

A director cannot treat Section 720-a as a substitute for sound governance, and the statute does not convert every dispute involving a nonprofit into a covered insurance claim. The analysis may turn on the nature of the claim, the defendant’s conduct, the source of the alleged duty, and the specific statutory requirements.

Claims brought by the nonprofit itself

The statute is aimed primarily at certain third-party claims. It does not provide a general shield against claims brought by the organization itself or by those acting on its behalf.

That distinction becomes important when a nonprofit alleges that a director mismanaged funds, breached fiduciary duties, approved an unauthorized transaction, or made commitments beyond the authority granted by the board. The organization may seek damages or other relief from the director. A faction of the board may also pursue claims against another director, depending on the governance structure and the procedural posture of the dispute.

Whether Section 720-a applies is a legal question, not something a board can resolve by pointing to the director’s volunteer status. Nor does the existence of D&O insurance guarantee a defense. The policy may contain an insured-versus-insured exclusion, a claim brought by or on behalf of the organization exclusion, or another provision that changes the result.

Actions by the New York Attorney General

The New York Attorney General has statutory authority concerning charitable organizations and nonprofit governance. An action or proceeding brought by the Attorney General is not automatically transformed into a protected third-party claim simply because the defendants are volunteer directors.

The supplied facts establish an important but narrower point: statutory immunity under N-PCL Section 720-a may not apply to Attorney General actions. That does not establish a categorical government-action exclusion in every D&O policy, and it does not mean that coverage is automatically denied whenever the Attorney General becomes involved. Coverage depends on the policy wording, the nature of the proceeding, the relief sought, and any applicable exclusions.

A board reviewing its policy should therefore avoid a simple yes-or-no assumption. Some policies distinguish between a government investigation, a civil enforcement proceeding, a demand, and a formal claim. Others may exclude fines, penalties, restitution, or the cost of complying with a non-monetary order even if some defense coverage is available. The policy may also treat defense costs differently from indemnity.

Gross negligence and intentional misconduct

Section 720-a is built around good-faith conduct. Allegations that a director knowingly approved an improper transaction, ignored a material conflict of interest, or acted with reckless disregard for the organization’s obligations can take the dispute outside the protection the director expected.

The distinction between ordinary negligence, gross negligence, and intentional misconduct is often contested. A complaint may use aggressive language before the facts have been established. That is one reason the policy’s defense provisions matter. A conduct exclusion may apply only after a final adjudication, or it may be written broadly enough to create an earlier coverage dispute. The wording controls.

N-PCL Section 720-a protects qualifying volunteer service within defined limits. It does not erase fiduciary duties, and it does not turn every board dispute into an insured loss.

The practical result is that statutory protection and D&O coverage must be analyzed separately. A director may have a statutory defense but no insurance for a particular cost. Conversely, a policy may provide defense coverage for a claim even where the director cannot ultimately rely on Section 720-a. The two systems overlap, but neither replaces the other.

Internal Conflict and the “Insured vs. Insured” Exclusion Trap

The insured-versus-insured exclusion is one of the most consequential provisions in nonprofit D&O insurance. It generally limits or excludes claims brought by one insured person or entity against another insured person or entity. The purpose is understandable: insurers do not want a policy to fund disputes manufactured or managed entirely within the insured group.

Nonprofit governance makes the exclusion difficult because the people involved are often connected through several roles. An executive director may also be an officer. A founder may remain listed as an insured after stepping away from day-to-day management. A board member may bring a derivative action against fellow directors. A former employee may have been an insured person during the relevant period.

Consider the kinds of disputes that create pressure at the same time the exclusion becomes relevant:

• A former executive director, terminated by the board, files suit alleging wrongful removal, retaliation, or breach of an employment agreement.
• A founder who remains an officer challenges a board decision to restructure the organization and brings claims against the directors.
• A sitting or former board member alleges that fellow directors mismanaged funds or approved a transaction without proper authorization.
• The nonprofit itself seeks recovery from a director after discovering an allegedly unauthorized commitment.
• Two groups within the board disagree over control of the organization and use litigation to challenge one another’s authority.

The plaintiff’s status is only the beginning of the analysis. The policy may contain carve-backs for claims brought by a former director or officer, derivative actions, bankruptcy-related claims, or certain employment disputes. Some carve-backs apply only when the claimant has acted independently and not at the direction of another insured. Some restore defense coverage but not indemnity. Others apply only to a specific type of claim.

That is why the declarations page is not enough. The relevant answer may be buried in the exclusion, an endorsement, or a definition of “insured.” A board should know whether the policy treats volunteers, committee members, former directors, employees, and the nonprofit entity itself as insureds, and whether those definitions change for different coverage parts.

A founder dispute is a useful stress test. If the founder is still an officer under the policy, a claim against the board may be treated differently from a claim brought by an outside donor. If the founder resigned before filing suit, the policy may still consider the person an insured for conduct that occurred while the person held office. The result depends on the wording and the facts, not on the label the organization uses internally.

The same caution applies to derivative claims. A derivative action may be brought in the name of the organization, but the person directing or initiating the action may also be an insured. The policy may contain a specific carve-back, or it may exclude the claim. A board should not assume that calling a dispute “derivative” resolves the insurance question.

Why Professional Services and Contractual Liabilities Require Separate Coverage

D&O insurance is governance coverage. It is not a universal policy for every service an organization performs or every contract it signs.

Professional services exclusions

Many D&O policies exclude liability arising from the provision of professional services. The exclusion is particularly important for New York City nonprofits that provide counseling, health care, legal assistance, education, housing support, case management, or other regulated or specialized services.

The issue is not limited to a claim against the employee who performed the service. A claimant may name individual directors and allege that the board failed to create adequate supervision, credentialing, safety, or quality-control procedures. If the substance of the claim arises from the professional service itself, the D&O carrier may rely on the professional-services exclusion even though the defendants are board members rather than clinicians, attorneys, or direct-service staff.

The organization may need Errors & Omissions or Professional Liability coverage for that exposure. The D&O policy addresses allegations about management and governance; the E&O policy addresses allegations that the organization or its professionals performed a service improperly. The same lawsuit can implicate both policies, which makes coordination important. The policies may have different definitions, retentions, limits, defense-cost treatment, and consent-to-settle provisions.

A board should be especially careful when its programs combine governance decisions with direct service delivery. For example, approving a clinical program is a governance decision. The alleged negligent treatment provided through that program is a professional-services issue. A complaint can contain both allegations, but the insurer may separate them and apply different coverage parts.

Contractual liability exclusions

Contract disputes create a different gap. D&O policies commonly exclude liability assumed under a contract, subject to policy-specific exceptions. A nonprofit that signs a lease, vendor agreement, grant-related commitment, partnership agreement, or multi-year services contract may create obligations that are not covered simply because the board approved the agreement.

If a vendor alleges that the nonprofit failed to pay, breached a delivery obligation, or terminated the agreement improperly, the D&O carrier may treat the matter as a contractual dispute. The policy may not cover the amount the organization was required to pay under the contract, and it may not cover every form of defense or consequential loss associated with the dispute.

The distinction is between a contract claim and a separate wrongful act. A board member may face an allegation that the board knowingly misrepresented the organization’s financial condition when entering a contract. That allegation may be analyzed differently from a straightforward claim for unpaid invoices. The policy language and the pleaded facts determine the result.

Negotiated carve-backs can restore limited coverage for particular contractual liabilities, but they are not automatic. A board should ask what the carve-back actually restores, whether it applies to the entity as well as individuals, and whether it is limited to defense costs. A short endorsement can change the result, but only if someone reads it closely enough to understand its scope.

Employment Practices Liability: The Most Common Source of Board Litigation

Employment claims are a recurring governance risk because boards make or supervise decisions about executive leadership, compensation, workplace policies, investigations, and termination. The underlying allegation may concern the conduct of a supervisor, but the complaint can name directors for approving, ratifying, or failing to prevent the conduct.

The most common categories include:

1. Wrongful termination. A former employee alleges that the dismissal violated an employment agreement, internal policy, public policy, or an applicable anti-retaliation rule.

2. Harassment and hostile work environment. The claim may focus on the alleged conduct itself or on the board’s response after a complaint was made.

3. Discrimination. Employees may allege disparate treatment or failure to accommodate based on protected characteristics under federal, New York State, or New York City law.

4. Retaliation. A worker claims that discipline, demotion, termination, or another adverse action followed a complaint or participation in an investigation.

5. Wage and hour violations. Misclassification, overtime disputes, and improper deductions can create organizational exposure and, in some circumstances, personal exposure for individuals involved in the employment decision.

The board does not need to be accused of personally making a discriminatory remark to become part of the case. Plaintiffs often allege that directors knew about a problem, failed to investigate, approved a termination, or allowed a deficient management system to continue. The organization’s bylaws and governance practices can also become part of the factual record.

Basic D&O programs generally handle employment claims in one of several ways:

• Full exclusion. Employment practices liability is carved out, leaving the D&O policy unavailable for the claim.
• Sublimited coverage. The policy provides a smaller limit for employment claims, sometimes with a separate retention and narrower terms.
• EPLI endorsement. Employment Practices Liability Insurance is added to the D&O program, with terms that may still differ from a standalone policy.
• Standalone EPLI. The organization purchases dedicated employment-practices limits and defense provisions.

A sublimit can look adequate until a single matter consumes defense costs over an extended period. The board should also determine whether defense expenses reduce the limit, whether the limit is shared by the entity and the individuals, and whether the policy covers third-party harassment claims involving clients, volunteers, interns, or program participants.

Employment coverage is not only about the limit. Claims-made reporting requirements, the definition of “claim,” the treatment of prior knowledge, and the scope of the insured-versus-insured exclusion can be equally important. A former employee’s demand letter may trigger reporting obligations before a lawsuit is filed. A board that waits for formal service of process may already have created a notice problem.

The question is not whether a nonprofit has an employment policy in a binder. The question is whether the insurance program can fund the defense when the board’s own employment decision becomes the dispute.

The board should also separate insurance from prevention. A strong EPLI policy cannot replace clear reporting channels, prompt investigations, consistent documentation, and disciplined executive oversight. Those controls can affect the facts of a claim, the insurer’s assessment, and the organization’s ability to respond quickly.

The Dangers of “Claims-Made” Policies During Carrier Transitions

D&O policies generally operate on a claims-made basis. This differs from an occurrence-based General Liability policy, where the timing of the injury or occurrence is usually central. Under a claims-made D&O policy, the timing of the claim and the applicable retroactive date must be reviewed together.

In simplified terms, coverage typically depends on two conditions:

1. The alleged wrongful act occurred on or after the policy’s retroactive date.

2. The claim was first made during the policy period, or during an applicable extended reporting period.

The exact requirements vary by policy. Some policies also require that the claim be reported within the policy period or within a specified reporting window. A board should read the notice provisions rather than rely on a general understanding of claims-made coverage.

The retroactive date is particularly important during a carrier transition. If the new carrier does not preserve prior acts coverage, the new policy may not respond to conduct that occurred before its retroactive date. The prior carrier may also refuse to respond if the claim was first made after that policy expired.

For example, a board may have approved a contract several years ago, changed carriers later, and then receive a claim alleging that the earlier decision caused damage. The answer will depend on the prior policy’s retroactive date, the new policy’s prior-acts provisions, the date the claim was first made, and whether the organization provided timely notice. It is possible for a gap to appear if those pieces do not line up.

When a carrier changes, the board should obtain written confirmation of:

• The new policy’s retroactive date.
• Whether full prior acts coverage is included.
• Whether the new policy contains a continuity or prior-notice provision.
• Whether known circumstances or prior demands are excluded.
• How claims first reported to the prior carrier will be handled.
• Which policy responds if a demand was made before the transition but litigation begins afterward.

The goal is not simply to carry the old date forward on paper. The board must understand how the new policy treats acts, circumstances, demands, and claims that straddle the transition.

An extended reporting period, commonly called a tail, may be available when a policy expires, is canceled, or is not renewed. It does not usually create new coverage for acts that were never covered. Instead, it may provide additional time to report claims arising from covered acts, subject to the policy’s terms. The length, cost, election deadline, and scope are policy-specific.

A board should not wait until the renewal date to ask about a tail. If the organization is merging, dissolving, changing control, or moving to a different insurance structure, the reporting-period provisions can become central to protecting former directors. The board should also preserve the expired policy, endorsements, applications, notices, and correspondence. Claims-made coverage cannot be reconstructed easily after the documents disappear.

The Coverage Program Is Layered, Not Singular

The most persistent mistake is treating D&O insurance as the nonprofit’s complete liability program. It is one layer.

Volunteer coverage may require specific treatment. Volunteers involved in events, transportation, direct service delivery, or program operations may not occupy the same status under every policy. A D&O policy is focused on management liability, while General Liability is focused on bodily injury, property damage, and related claims. Whether volunteers are insureds, additional insureds, or excluded parties depends on the policy language and the activity involved.

Fiduciary liability is another separate concern. A board that oversees retirement plans, health benefits, or other employee benefit arrangements may owe fiduciary duties under applicable law. D&O policies often exclude liabilities arising from the administration of benefit plans. A Fiduciary Liability policy may be needed for allegations involving imprudent investment decisions, excessive fees, or administrative errors.

Crime and cyber risks should not be folded casually into D&O. Theft of organizational funds, fraudulent instructions, social-engineering losses, a data breach, and failure to protect personal information generally call for crime, cyber, or privacy coverage. A board member may be accused of inadequate oversight after such an event, but the underlying loss may remain outside the D&O insuring agreement.

The resulting structure may include:

• D&O coverage for governance and management liability.
• EPLI for employment-related allegations.
• E&O or Professional Liability coverage for services provided by the organization or its professionals.
• General Liability for bodily injury, property damage, and premises-related claims.
• Fiduciary Liability for benefit-plan administration.
• Crime coverage for theft and fraud.
• Cyber coverage for network, privacy, and data-security incidents.

The policies should not be evaluated in isolation. Definitions of “claim,” “wrongful act,” “loss,” and “insured” can differ from one policy to another. A claim may sit at the boundary between two coverage parts, and the organization needs to know in advance how defense costs will be allocated.

What the Board Should Ask Before Renewal

A policy review should involve more than confirming the limit and premium. The board, treasurer, risk committee, or designated management team should be able to answer the following questions from the policy and endorsements:

1. What is the retroactive date? Does it match the organization’s original D&O inception date? If the carrier changed, is full prior acts coverage stated clearly?

2. Who is an insured? Does the definition include current and former directors, officers, employees, committee members, volunteers, and the nonprofit entity?

3. How does the insured-versus-insured exclusion operate? Are there carve-backs for derivative actions, former directors, employment disputes, bankruptcy, or claims brought independently of the organization?

4. What happens in an Attorney General matter? Does the policy address investigations, subpoenas, proceedings, defense costs, fines, penalties, restitution, and non-monetary relief?

5. Where are employment claims covered? Is there a full exclusion, a sublimit, an endorsement, or a standalone EPLI policy? Do defense costs erode the limit?

6. What professional services are excluded? Does the organization have E&O or Professional Liability coverage that matches the services it actually provides?

7. How are contracts treated? Is there a contractual-liability exclusion, and do any carve-backs apply to the agreements the nonprofit uses most often?

8. Are benefit-plan duties insured? If the organization administers employee benefits, is Fiduciary Liability coverage active?

9. Are volunteers covered for the work they perform? Check both management liability and General Liability rather than assuming one policy extends automatically to the other.

10. What are the notice deadlines? Identify the reporting process for lawsuits, demands, investigations, and circumstances that may reasonably lead to a claim.

11. What happens at a transition? Confirm the treatment of prior notices, known circumstances, pending claims, and the extended reporting period before the old policy ends.

The review should include the application submitted to the carrier. Claims-made policies may contain representations about known circumstances, prior demands, or potential claims. If the organization has received a complaint, demand letter, internal report, or threatened lawsuit, the board should not decide on its own that the matter is too informal to report.

Insurance cannot cure a governance failure after the fact. A board that documents conflicts, records the basis for major decisions, separates oversight from day-to-day management, and responds seriously to employment complaints is in a stronger position than one that treats the policy as the primary risk-control mechanism.

The central point is straightforward: nonprofit board liability in New York is shaped by several different systems at once. N-PCL Section 720-a may provide qualified statutory protection. D&O insurance may provide a defense or indemnity for some claims. Exclusions may remove internal disputes, professional services, contractual obligations, employment practices, or other exposures. A carrier transition may change the timing analysis altogether.

For an NYC nonprofit, the right question is not whether the organization has D&O insurance. It is whether the policy actually follows the risks the board is taking on—and whether the rest of the insurance program covers the risks that D&O was never meant to carry.