Volunteers and the Law
A practical guide to volunteers and the law, covering liability, background checks, FCRA compliance, child safety, insurance, waivers, and policies.
On this page
A volunteer coordinator has just matched a new helper with an after-school mentoring program. The applicant seems reliable, the program needs support, and everyone wants the placement completed quickly. Yet the moment that person may work with children, several legal questions arise at once: whether screening is appropriate, whether a third-party report triggers the Fair Credit Reporting Act, what supervision the role requires, and how the organization should respond if something goes wrong.
That's the practical reality of volunteers and the law. Legal duties usually attach because of the work itself, the people served, and the organization's decisions, not because someone receives a paycheck. A careful nonprofit therefore treats each placement as a risk and compliance decision, with documentation, training, insurance, and local legal review working together.
Table of Contents
- A Volunteer Placement Can Create Multiple Legal Duties
- The Legal Foundation for Nonprofit Volunteers
- Distinguishing Volunteers From Employees
- Screening Volunteers and Following FCRA Rules
- Protecting Children and Exercising Duty of Care
- Using Insurance and Waivers Effectively
- Building a Compliant Volunteer Policy System
- Practical Takeaways for Nonprofit Leaders
A Volunteer Placement Can Create Multiple Legal Duties
The coordinator reviews the application and sees that the volunteer will mentor children, communicate with parents, and occasionally drive participants home. The organization uses a third-party screening company, so the coordinator must address the Fair Credit Reporting Act, or FCRA, before ordering a consumer report. The role may also involve state-specific child-protection and mandated-reporter requirements, while transportation creates separate safety and insurance questions.
Nothing about the volunteer's unpaid status removes those concerns. The role places the person in a position of trust, creates foreseeable safety risks, and gives the nonprofit responsibilities that continue after the initial screening.
The role determines the legal questions
A volunteer sorting donated clothing in a supervised warehouse may need a simple application, orientation, and safety briefing. A volunteer visiting older adults in their homes may require a different review of references, boundaries, transportation, and incident escalation. A youth mentor may require criminal-history screening, sex-offender-registry review, child-protection training, and carefully defined contact rules.
The nonprofit should ask:
- Who will the volunteer serve? Children, older adults, patients, and people with disabilities may require specialized safeguards.
- What access will the volunteer have? Consider unsupervised contact, homes, financial information, medications, vehicles, and confidential records.
- What decisions can the volunteer make? Authority over transportation, money, discipline, or emergency response raises the role's risk.
- What happens after a concern? The organization needs a reporting route, documentation process, and designated decision-maker.
Practical rule: A background check can inform placement, but it can't replace supervision, training, or a clear response plan.
Insurance should enter the conversation before the volunteer starts. The organization needs to understand whether its policies address volunteer activity, vehicle use, accidents, and claims involving minors. The coordinator's job isn't to eliminate every risk. It's to identify the risks created by the assignment and build controls around them.
The Legal Foundation for Nonprofit Volunteers
A nonprofit doesn't need a formal employment contract before legal responsibilities begin. A volunteer may sign an application or service agreement, but the organization's duties can arise from the relationship, the program, the conduct of its staff, and the foreseeable risks of the activity.
Think of the legal framework as a building with several layers. The foundation is the role itself and the organization's duty to operate responsibly. On top of that sit state rules, federal requirements, and sector-specific obligations.
The layers work together
State charitable-solicitation registration rules may affect how an organization asks for donations and represents its charitable work. Federal anti-discrimination requirements may govern how the nonprofit recruits, assigns, trains, and manages people. Tax and payroll rules become important when a supposedly unpaid role includes stipends, recurring payments, benefits, or other compensation-like arrangements.
Sector rules add another layer. A nonprofit handling protected health information may need to account for HIPAA requirements. A school or educational program may need to examine Title IX and other education-related obligations. A religious organization, youth league, library, or healthcare provider can face different combinations of federal, state, and local duties.
The Volunteer Protection Act of 1997 is a major part of the federal foundation. It became Public Law 105-19 on June 18, 1997, and took effect on September 16, 1997, according to the Congressional Research Service summary of the Volunteer Protection Act. The law was designed to encourage volunteerism by limiting tort liability for ordinary negligence when volunteers serve nonprofit organizations or governmental entities.
That protection has boundaries. It generally doesn't cover willful or criminal misconduct, gross negligence, reckless misconduct, or conscious and flagrant indifference to safety. Certain vehicle-related claims also remain outside the protection. The statute preempts inconsistent state law while allowing states to provide stronger volunteer protections.
Being unpaid doesn't mean a volunteer gives up legal protections or that the organization can ignore its own responsibilities. The foundation is stronger when the nonprofit uses written role descriptions, fair selection procedures, accessible training, and documented oversight.
Distinguishing Volunteers From Employees
The word “volunteer” describes the organization's intention, not always the legal result. A person who receives regular payments, performs work that replaces a paid position, follows employee-style schedules, or operates under extensive control may require a closer classification review.
| Factor | Volunteer | Employee | Independent Contractor |
|---|---|---|---|
| Compensation | Donates service without an expectation of wages, subject to applicable rules | Receives wages or salary for work | Receives payment under a service arrangement |
| Benefits eligibility | Usually not treated as an employee benefit recipient | May qualify for legally required and employer-provided benefits | Generally handles their own benefits |
| Tax treatment | Unpaid service doesn't automatically create payroll treatment | Employer payroll, withholding, and reporting duties may apply | Payment and reporting depend on the arrangement and applicable rules |
| Direction and control | Supports the mission with limited, role-appropriate direction | Employer controls significant aspects of the work | Organization generally controls the result more than the daily method |
| Typical relationship | Public, charitable, religious, civic, or humanitarian service | Ongoing service for the organization's business or program operations | Distinct business providing defined services |
The label can't carry the whole analysis
A nonprofit may call someone a volunteer, but labor authorities and courts can examine the actual relationship. Required hours, close day-to-day supervision, promises of future employment, and compensation-like benefits can make the arrangement look less like independent service and more like employment.
A paid employee also shouldn't perform the same work as an unpaid volunteer for the same organization just because they stay late or want to help. The organization should separate the person's paid duties from any voluntary activity and avoid pressure that makes the extra work feel compulsory.
Misclassification can affect wage and hour compliance, payroll taxes, unemployment insurance, workers' compensation, and the organization's insurance response to an injury. It can also damage staff morale when volunteers appear to be replacing employees or doing equivalent work without pay.
For-profit organizations require particular caution. Genuine volunteer arrangements generally fit charitable, public-service, religious, or humanitarian purposes, not ordinary commercial labor. A nonprofit should still obtain local labor advice when a role includes payment, a stipend, recurring hours, professional services, or operational duties that resemble a staff position.
Screening Volunteers and Following FCRA Rules
Screening should begin with the role, not with a favorite package from a vendor. A volunteer who helps with an open community event may need an application, references, and orientation. A person who mentors children, handles money, drives participants, enters homes, or accesses sensitive records may justify a more detailed review.
Match screening depth to exposure
A useful decision sequence looks like this:
- Define the assignment. Record contact with children or vulnerable adults, driving, home visits, financial access, confidential information, and unsupervised authority.
- Choose proportionate checks. Depending on the role and local law, this may include references, criminal-history searches, sex-offender-registry checks, driving-record review, identity verification, or credential confirmation.
- Check legal triggers. Federal law doesn't impose a blanket background-check requirement for every volunteer. State and sector-specific rules may require checks for youth, school, healthcare, or other sensitive roles.
- Document the decision. Note why the organization selected that screening level and who approved it.
If the nonprofit uses a third-party consumer reporting agency, FCRA duties generally apply to volunteers in the same framework used for job applicants. The organization should provide a standalone written disclosure, obtain written authorization before ordering the report, and follow the adverse-action process if the report may influence a rejection. The FCRA compliance guide for nonprofit volunteer background checks describes the required consent and notice workflow.
Before final adverse action, the organization should send a pre-adverse action notice with the report and the FCRA summary of rights, allow a reasonable opportunity to dispute inaccurate information, and then send a final adverse action notice if it still declines the placement. State ban-the-box rules, juvenile-record restrictions, and local fair-chance requirements may add further limits.
A simple test helps clarify the vendor relationship: if the nonprofit buys a report about an identifiable volunteer to help decide whether that person may serve, the nonprofit is generally using a consumer report as an end user. It isn't the consumer reporting agency merely because it receives the report.
Keep screening files separate from general volunteer records, restrict access, record authorization and notice dates, and retain evidence of disputes and decisions according to the organization's retention policy. The nonprofit volunteer background-check resource can help coordinators think through the operational side of this process.
A screening workflow should make compliance easier at the moment a decision occurs, not rely on a coordinator remembering every step under pressure.
Protecting Children and Exercising Duty of Care
A nonprofit's duty of care starts with reasonable steps to protect people participating in its programs. Children require heightened attention because they may have less ability to recognize danger, leave an unsafe situation, or report inappropriate conduct.
Screening is only one control. The organization also needs rules for supervision, communication, transportation, training, and incident response.
Safeguards should reflect the activity
A youth program might use two-adult or two-deep leadership, avoid isolated one-on-one settings, and maintain sight-and-sound expectations appropriate to the activity. Staff should define how volunteers may contact children through text, email, social platforms, and personal devices. Transportation policies should address approved drivers, vehicle ownership, passenger procedures, emergencies, and parent or guardian permissions.
| Safeguard | Legal Duty It Supports | Documentation Needed |
|---|---|---|
| Role-based screening | Reasonable selection and risk management | Screening decision, authorization, and result record |
| Supervision rules | Duty of care and prevention of foreseeable harm | Rosters, schedules, supervision assignments |
| Conduct standards | Prevention and response to boundary violations | Signed code acknowledgment and training record |
| Reporting procedure | Compliance with applicable reporting duties | Incident form, escalation record, required report confirmation |
| Transportation controls | Safe operation and activity-specific oversight | Driver approval, vehicle documentation, trip record |
Mandated-reporter categories vary by state and by role. A youth-serving volunteer may have reporting duties under local law, while an adult-serving program may use a different reporting structure. The nonprofit should identify the actual statutory trigger, the reporting recipient, the deadline if one applies, and the organization's internal escalation route.
Respond quickly and preserve facts
When someone raises a concern, the first task is safety. Stabilize the situation, separate people when appropriate, obtain urgent medical help if needed, and avoid conducting an improvised investigation that could compromise later processes. Document what was observed or reported, who received the information, and what actions followed.
The organization should report to authorities when the applicable law requires it, communicate with parents or guardians in accordance with law and policy, and conduct an internal review after immediate risks are addressed. Training should recur and records should show who attended, what material they received, and when the instruction occurred.
Organizations working in youth sports may also benefit from reviewing sports club safeguarding standards as a practical comparison point, while still adapting procedures to local law and the organization's own activities. A sex-offender-registry review may be one part of a broader process, and the sex offender registry check guidance for nonprofits shouldn't be treated as a substitute for supervision or reporting controls.
Cross-border programs need special care. In England, the supervision exemption for regulated activity with children is scheduled to be removed from the relevant framework on September 1, 2026, meaning some supervised volunteers who teach, train, care for, or supervise children may need an enhanced DBS check with barred-list information when the activity is frequent or overnight, as described by Experian's guidance on DBS checks for volunteers. A U.S. policy cannot be copied into an international program.
Using Insurance and Waivers Effectively
Insurance and waivers solve different problems. Insurance transfers defined financial risks to an insurer, while a waiver records consent, risk acknowledgment, and an attempted allocation of responsibility between the organization and participant.
| Tool | What It Can Address | What It Can't Replace |
|---|---|---|
| General liability | Bodily injury and property-damage claims within policy terms | Safe facilities and supervision |
| Volunteer accident coverage | Certain medical expenses when organizational liability isn't triggered | Medical advice and emergency planning |
| Directors and officers coverage | Certain governance and management claims | Responsible board decisions |
| Auto coverage | Vehicle use connected with organizational business, subject to policy terms | Driver qualification and vehicle safety |
| Waiver or release | Informed consent and defined risk allocation | Compliance with child-protection law or duties involving misconduct |
A waiver should describe the actual activity in clear, conspicuous language. It shouldn't hide important terms in dense text, assume a participant understands technical risks, or claim protection that local law won't recognize. Releases involving minors are especially limited and often require careful state-specific review.
The Volunteer Protection Act also reinforces why a waiver can't serve as blanket immunity. Statutory protection generally doesn't extend to willful or criminal misconduct, gross negligence, reckless misconduct, or conscious and flagrant indifference to safety, and certain vehicle-related liability remains preserved under the law's framework.
For organizations that rely on volunteers who drive vehicles they don't own, reviewing what non owners insurance covers can help frame the questions to ask an insurance professional. The nonprofit should confirm who is insured, which vehicles and activities are covered, and what exclusions apply.
A signed form cannot cure inadequate training or negligent supervision. Insurance and waivers are financial and documentary tools, not permission to operate carelessly.
Building a Compliant Volunteer Policy System
A compliant volunteer program needs more than a collection of forms. Each document should answer a specific operational question, assign responsibility, and create a record that someone can review later.
Start with role design
Create a written description for every volunteer position. Include the tasks, population served, access level, supervision arrangement, transportation duties, prohibited conduct, required training, and screening level. A role-based matrix prevents the organization from applying the same check to every person or leaving a sensitive role unreviewed.
The core policy set should include:
- Volunteer handbook: Explain expectations, boundaries, reporting routes, attendance, confidentiality, and removal procedures.
- Screening matrix: Connect each role's risks to the checks and approvals required.
- Code of conduct: Set rules for contact, gifts, technology, transportation, privacy, and conflicts.
- Incident-response procedure: State who receives concerns, how safety is stabilized, when authorities are contacted, and how records are preserved.
- Complaint channel: Give volunteers, participants, families, and staff a way to report concerns without relying solely on the person being complained about.
- Records-retention schedule: Identify what the organization keeps, where it stores it, who can access it, and when it is reviewed or securely destroyed.
The nonprofit compliance documentation guide offers a useful reference for connecting records to the underlying duty rather than collecting paperwork without a purpose.
Keep the system alive
Before a volunteer starts, obtain the required acknowledgments, complete assigned training, approve screening, and confirm supervision. Date every step. If the volunteer changes roles, revisit the risk assessment instead of assuming the original approval still fits.
Assign one person to own the system, with board or executive oversight. That owner should conduct policy reviews, bring material changes to the appropriate approval body, refresh training, audit missing records, and monitor state or sector developments affecting youth, healthcare, education, transportation, or reporting duties.
Version control matters. Put an effective date on policies, archive older versions, record who approved changes, and require volunteers to acknowledge meaningful updates. A policy sitting in a shared drive isn't a control unless staff know which version applies and can show that volunteers received it.
Practical Takeaways for Nonprofit Leaders
Before placing a volunteer, ask six direct questions:
- What is the role? Define the duties, population served, access, authority, transportation, and supervision.
- What screening is proportionate? Use the role's actual exposure, then check state and sector-specific requirements.
- Does a third-party report trigger FCRA duties? If it does, complete the standalone disclosure, written authorization, and adverse-action process before finalizing a denial.
- What safeguards protect participants? Confirm training, supervision, communication rules, reporting routes, and incident procedures.
- Does insurance match the activity? Review general liability, volunteer accident, directors and officers, and auto coverage as applicable.
- Who owns the record? Keep dated acknowledgments, training evidence, screening documentation, decisions, and escalation records in an accessible system.
The Volunteer Protection Act can provide conditional protection, but it doesn't erase liability for serious misconduct or poor safety practices. Written policies and recurring training reduce risk, yet they can't replace legal review when the organization enters a new jurisdiction, serves a different population, changes a role, or introduces transportation, home visits, or unsupervised access.
VolunteerBadge provides nonprofit-focused, FCRA-compliant background screening with digital disclosure and authorization workflows and automated pre-adverse and final adverse action notices. If your organization needs a more consistent way to manage volunteer screening decisions, visit VolunteerBadge and review how the platform can fit into your compliance process.
