Nonprofit compliance in California

California requires DOJ fingerprint checks for regular volunteers of youth service organizations under AB 506 — adults with more than 16 hours a month or 32 hours a year of direct contact with, or supervision of, children — and CDSS clearances for volunteers with client contact in licensed child care, community care and elder care facilities, with narrow exemptions. The DOJ’s CalVECHS program lets qualified entities authorized under Penal Code § 11105.3 — public, private, for-profit or nonprofit — receive state and unsanitized federal records. Not all volunteer roles are covered — requirements hinge on contact frequency, sector, and whether the organization is licensed or a youth-serving entity under the Business and Professions Code.

• Assembly Bill 506 (AB 506) — California Business and Professions Code § 18975 (Cal. Bus. & Prof. Code § 18975 (Chapter 2.9)) — Requires administrators, employees, and 'regular volunteers' (18 or older with direct contact with, or supervision of, children for more than 16 hours per month or 32 hours per year) of youth service organizations to undergo a fingerprint-based DOJ check under Penal Code § 11105.3 (phase-in for organizations not already screening ended January 1, 2024), complete child abuse identification and reporting training, and adopt policies including, to the greatest extent possible, two mandated reporters present with children.
• California Penal Code § 11105.3 — Live Scan Fingerprint Check (Cal. Pen. Code § 11105.3) — Authorizes the California DOJ to release criminal history information for employment, licensing, and volunteer screening purposes for organizations serving vulnerable populations, including children and elderly adults.
• California Health and Safety Code §§ 1522 et seq. — Community Care Facility Background Checks (Cal. Health & Safety Code § 1522) — Requires criminal background checks for all applicants, licensees, adult residents, certain volunteers, and employees at community care facilities who have contact with clients. Applies to licensed community care facilities, including residential facilities and adult day programs; licensed child day care is governed separately by Health and Safety Code § 1596.871.
• Investigative Consumer Reporting Agencies Act (ICRAA) (Cal. Civ. Code §§ 1786–1786.60) — California analog to the federal FCRA that governs investigative consumer reports from private agencies: for employment purposes, a standalone written disclosure naming the agency, written authorization, and a check box to request a copy (sent within three business days); most records, including convictions, limited to seven years.
• Who it reaches: Regular volunteers (18+) at youth service organizations (more than 16 hrs/month or 32 hrs/year of direct contact with or supervision of children); Volunteers with contact with children at CDSS-licensed child care centers and family child care homes (a directly supervised volunteer providing time-limited specialized services, at the facility no more than 16 hours a week and never alone with children, is exempt, as are relatives of a child in care); Volunteers with client contact at licensed community care facilities and residential care facilities for the elderly (supervised, limited-role volunteers exempt).
• Check types in use: Live Scan fingerprint-based state criminal history check (DOJ); FBI national criminal history check (via Live Scan); Sex offender registry check (National Sex Offender Public Website; California's Megan's Law site may be used “only to protect a person at risk” — Penal Code § 290.46(j)); Child Abuse Central Index check — only where statute authorizes it (CDSS-licensed child care, TrustLine, CASA programs).
• Administered by: California Department of Justice (DOJ), Bureau of Criminal Information and Analysis (BCIA); CalVECHS program for qualified entities authorized under Penal Code § 11105.3; CDSS for community care licensing.
• Typical processing: DOJ says no-hit Live Scan results are generally processed electronically within 48 to 72 hours; records that match require manual review that can take an indeterminate amount of time..

California is one of the 39 states that generally require a charitable organization to register before soliciting contributions from its residents — typically before the first ask, not after the first gift, and usually with an annual renewal.

• Registration is generally required before soliciting, including by mail, phone, email, or a public donate page.
• Soliciting residents of other states can trigger registration in those states regardless of where you are based — an online donate button reaches all fifty.
• Exemptions exist in most registering states (small organizations, religious organizations, membership appeals) but they are specific and usually must be claimed rather than assumed.
• Confirm current requirements with your state charity office before relying on this — thresholds and exemptions are amended frequently.

These apply regardless of which state you operate in, and they are the ones most commonly missed by small organizations that assume state registration is the whole picture.

• Annual Form 990, 990-EZ, or 990-N. Three consecutive years of non-filing revokes exempt status automatically — this is the single most common way small nonprofits lose their status.
• If you run background checks on volunteers, the Fair Credit Reporting Act applies to you as a user of consumer reports: a standalone written disclosure, separate written authorization, and the pre-adverse and adverse action sequence before acting on a result.
• Public disclosure: your exemption application and recent 990s must be made available on request.
• Employment obligations attach to paid staff regardless of exempt status — payroll tax, worker classification, and wage and hour law all apply.