Conflict Of Interest Policy: Clauses, Risks And Review Points For US Businesses

Conflicts of interest can catch US business owners and nonprofit leaders off guard. Whether you are a founder, board member, or operator, personal interests, like investments, family ties, or outside jobs, can overlap with your organization's decisions. If these overlaps are not managed, they can lead to legal, financial, and reputational problems. Common mistakes include using a generic template that misses state requirements, failing to train your team, or assuming informal agreements are enough. This guide answers what a conflict of interest policy should cover, why it matters for US businesses and nonprofits, and what practical steps you should take to review or update your policy.

What Is a Conflict of Interest Policy and Who Needs One?

A conflict of interest policy is a written set of rules that helps organizations spot, disclose, and manage situations where someone's personal interests could affect their duty to act in the best interest of the business or nonprofit. This policy is not just for large corporations, small businesses, startups, and nonprofits all face situations where conflicts can arise. In fact, the smaller the organization, the more likely it is that personal and professional interests will overlap.

Here is who typically needs a conflict of interest policy:

• Nonprofits: The IRS expects all 501(c)(3) and other tax-exempt organizations to have a written policy. Many states require it for charitable registration or renewal.
• Corporations: Businesses with boards of directors, advisory boards, or investors benefit from a clear policy to manage director and officer conflicts.
• Startups: Founders, early employees, and investors often have multiple roles or outside interests. A policy helps clarify expectations and prevent disputes.
• LLCs and Partnerships: Even if your state does not require a formal policy, written rules can help manage member or partner conflicts and reduce the risk of lawsuits.

Examples of conflicts of interest that can affect US organizations:

• A board member's spouse is hired as a vendor or consultant
• An employee owns a stake in a company bidding for your business
• A founder invests in a competitor or starts a side business in the same industry
• A director votes on a transaction that benefits their own company or family member
• A nonprofit executive directs grants to an organization where they serve on the board

Even if your business is small or closely held, a conflict of interest policy can clarify what is expected, help avoid misunderstandings, and provide a defense if someone alleges self-dealing or unfair practices. For nonprofits, lacking a policy can jeopardize tax-exempt status or lead to state investigations.

Checklist: Do You Need a Conflict of Interest Policy?

• Are you applying for or maintaining IRS tax-exempt status?
• Do you have a board, outside investors, or key employees with other business interests?
• Does your state require a written policy for corporations or nonprofits?
• Do your funders, grantors, or contracts require a conflict of interest policy?
• Have you had any disputes or concerns about personal interests affecting decisions?

If you answered yes to any of these, you should have a written conflict of interest policy tailored to your organization.

Key Clauses to Include in a Conflict of Interest Policy

While every organization's policy should be customized, most effective conflict of interest policies include the following core clauses:

1. Definition of Conflict: Explain what counts as a conflict of interest, including financial, family, business, and other personal interests that could influence decisions. Some states, like New York, require specific language about related party transactions.
2. Duty to Disclose: Require directors, officers, and key employees to promptly disclose any actual or potential conflicts to the board or compliance officer. For example, California expects nonprofits to have clear disclosure procedures.
3. Procedures for Handling Conflicts: Outline how conflicts are reviewed, documented, and resolved. This usually includes recusal from discussions and votes where a conflict exists. Delaware law, for example, allows conflicted directors to be counted for quorum but not to vote on the project.
4. Recordkeeping: Specify how disclosures and board actions are documented in meeting minutes or a conflict log. Good recordkeeping is essential if your actions are ever questioned by the IRS or a state agency.
5. Annual Affirmation: Require covered individuals to review and sign the policy each year, confirming they understand and will comply. This is a best practice and sometimes required by funders or regulators.
6. Consequences for Violations: State what actions may be taken if someone fails to disclose or manage a conflict, such as removal from a board, termination, or other disciplinary measures.

Some organizations add extra clauses, such as:

• Procedures for reporting suspected violations
• Guidance on gifts, entertainment, and outside employment
• Special rules for transactions with major donors or related parties

Sample Clause (Disclosure Duty): "Each director, officer, and key employee shall promptly disclose any actual or potential conflict of interest to the board and shall not participate in any discussion or vote on the project."

Checklist: Does Your Policy Cover the Essentials?

• Broad definition of conflicts (financial, family, business, etc.)
• Clear disclosure and recusal procedures
• Recordkeeping and documentation steps
• Annual review and affirmation process
• Specific consequences for violations
• Any state-required language (check your state's nonprofit or corporate statutes)

Federal and State Requirements for Conflict of Interest Policies

At the federal level, the IRS expects all tax-exempt organizations (including 501(c)(3) nonprofits) to have a written conflict of interest policy. The IRS Form 1023 application for exemption asks for a copy of your policy and reviews how you handle conflicts. The IRS also provides sample policy language in its instructions.

For for-profit businesses, there is no federal law requiring a conflict of interest policy, but having one is considered a best practice. It can help defend against claims of self-dealing, breach of fiduciary duty, or unfair business practices.

State Requirements Vary:

• Nonprofits: Many states require a conflict of interest policy for charitable registration or annual reporting. For example, New York's Not-for-Profit Corporation Law requires a written policy and specific procedures for related party transactions. California expects registered charities to have a policy and may review it during audits.
• Corporations: Most states, like Delaware and Texas, have statutes addressing director conflicts and require disclosure in certain transactions. However, they may not mandate a written policy. Having one helps demonstrate good faith if a conflict is challenged.
• LLCs and Partnerships: State laws often address fiduciary duties and self-dealing, but may not require a formal policy. Still, a written policy can help clarify expectations among members or partners and reduce disputes.

Industry-Specific Rules: Some industries, such as healthcare, education, and government contracting, have additional conflict disclosure and management requirements under federal or state regulations. For example, healthcare nonprofits may need to comply with the federal Stark Law or state-specific ethics codes.

Contractual Requirements: Funders, grantors, or government agencies may require a specific policy format or procedures as a condition of funding or contracts.

Checklist: State and Industry Requirements

• Check your state's nonprofit or corporate statutes for required policy language or procedures
• Review industry codes of conduct or ethics rules
• Check grant agreements, investor documents, or government contracts for policy requirements
• Tailor your policy to meet all applicable rules, do not rely solely on a federal template

State Law Example: In New York, nonprofits must have a written conflict of interest policy that includes procedures for disclosing, reviewing, and documenting related party transactions. In Texas, while a written policy is not required for nonprofits, the Texas Business Organizations Code imposes fiduciary duties and requires disclosure of conflicts in certain situations. California expects charities to have a policy and may require it during registration or audits.

Common Risks and Mistakes in Conflict of Interest Policies

Even with a written policy, organizations can face legal and reputational risks if the policy is not properly implemented or enforced. Here are some of the most common mistakes US businesses and nonprofits make:

• Using a generic template: Many organizations download a free template that does not match their structure, state law, or industry needs. This can leave gaps or create confusion. For example, a nonprofit in New York using a generic template may miss required procedures for related party transactions.
• Failing to train staff and board members: A policy is only effective if everyone understands what counts as a conflict and how to report it. Regular training and annual affirmations are crucial. Without this, conflicts may go unreported.
• Ignoring potential or perceived conflicts: Some founders or directors assume that only actual financial conflicts project, but perceived or potential conflicts can also create problems. For nonprofits, even the appearance of a conflict can trigger IRS or state scrutiny.
• Poor documentation: If disclosures and board actions are not properly recorded, it can be difficult to prove that conflicts were handled appropriately if challenged by regulators or in court. Incomplete meeting minutes are a common problem.
• Inconsistent enforcement: Applying the policy unevenly, such as excusing founders, major donors, or key employees, can undermine trust and increase legal risk. Regulators may view this as evidence of bad faith.
• Not updating the policy: As your organization grows or laws change, your policy may become outdated. Failing to review and update it regularly can leave you exposed.

Real-World Example: A nonprofit board member's spouse is hired as a paid consultant. The board member discloses the relationship but participates in the vote to approve the contract. Later, a disgruntled employee alleges self-dealing, and the charity faces an IRS audit. If the conflict of interest policy is vague or the board minutes are incomplete, the organization could lose its tax-exempt status or face penalties.

Another Example: A startup founder invests in a competing business but does not disclose this to co-founders or investors. When the startup loses a key contract to the competitor, the undisclosed conflict leads to a lawsuit and investor complaints. A clear policy and disclosure process could have prevented this outcome.

Checklist: Reducing Risk

• Customize your policy for your organization, state, and industry
• Train all covered individuals and require annual affirmations
• Document all disclosures and board actions in writing
• Apply the policy consistently to everyone, including founders and major donors
• Review and update the policy at least every two years, or after major changes

When and How to Review or Update Your Conflict of Interest Policy

Conflict of interest policies are not one-and-done documents. As your business or nonprofit grows, adds new investors, or changes its structure, your policy may need to be updated. Here are some practical triggers and steps for review:

• Major changes in leadership or board composition: New directors or officers may bring new relationships or outside interests. Review the policy when onboarding new board members or executives.
• Entering new markets or industries: Regulatory requirements may change if you expand into healthcare, government contracting, or other regulated sectors. For example, government contractors may need to follow federal ethics rules.
• Receiving new funding: Investors, grantmakers, or government agencies may require specific conflict of interest procedures or reporting formats.
• After a conflict incident: If a conflict is discovered or mishandled, review the policy to address any gaps or weaknesses. Document lessons learned and update procedures as needed.
• Periodic review: Best practice is to formally review the policy every one to two years, or as required by your bylaws, board policies, or state law.

Steps for Reviewing and Updating Your Policy:

1. Compare your current policy to IRS, state, and industry requirements. Make a checklist of any missing clauses or outdated language.
2. Gather input from board members, officers, and legal counsel. Ask for examples of recent conflicts or confusion about the policy.
3. Update definitions, disclosure procedures, and recordkeeping as needed. Add new examples or clarify ambiguous terms.
4. Present changes to the board or owners for approval. Document the review and approval process in meeting minutes.
5. Communicate updates to all covered individuals and provide training. Require everyone to sign the updated policy.
6. Set a reminder for the next review date. Periodic review helps ensure ongoing compliance and best practice.

Founder Tip: If your business is growing quickly, taking on outside funding, or entering new markets, consider a legal review of your conflict of interest policy. For nonprofits, specialized advice can help you comply with IRS and state rules. For businesses, a tailored policy can help prevent disputes and protect your reputation.

Common Mistake: Some organizations update their bylaws or other governance documents but forget to update the conflict of interest policy. Always review related documents together to ensure consistency.

FAQs

Is a conflict of interest policy legally required for all US businesses?

No, not all US businesses are legally required to have a written conflict of interest policy. However, nonprofits seeking or maintaining IRS tax-exempt status are expected to have one, and many states require it for charitable registration. For for-profit businesses, a policy is generally considered a best practice for managing risk and demonstrating good governance, especially if you have a board or outside investors.

What is the difference between an actual and a potential conflict of interest?

An actual conflict of interest exists when a person's personal interests directly affect their business decisions. A potential conflict means there is a risk that personal interests could influence decisions in the future, even if it has not happened yet. Both actual and potential conflicts should be disclosed and managed under most policies, especially for nonprofits and organizations with fiduciary duties.

How often should we review our conflict of interest policy?

Most organizations should review their conflict of interest policy at least every one to two years, or whenever there are major changes in leadership, funding, or regulatory requirements. Regular reviews help ensure the policy stays current and effective. Some states or funders may require annual review or affirmation.

What happens if a conflict of interest is not disclosed?

If a conflict of interest is not disclosed and managed properly, it can lead to legal penalties, loss of tax-exempt status (for nonprofits), reputational damage, or even lawsuits. Regulators may view nondisclosure as evidence of bad faith or self-dealing. Proper disclosure and documentation are key to reducing these risks.

Can a conflict of interest policy protect my business from lawsuits?

Having a well-drafted and consistently enforced conflict of interest policy can help demonstrate good faith and proper governance if your business is challenged in court or by regulators. However, a policy alone does not guarantee protection, you must also follow the procedures, document actions, and apply the policy consistently to all covered individuals.

Key Takeaways

• A conflict of interest policy helps US businesses and nonprofits identify, disclose, and manage situations where personal interests could affect business decisions.
• Key clauses include definitions, disclosure duties, procedures, recordkeeping, annual affirmations, and consequences for violations. State law may require specific language or procedures.
• Federal IRS rules and many state laws require written policies for nonprofits, while for-profit businesses benefit from a policy as a risk management tool.
• Common mistakes include using generic templates, poor documentation, inconsistent enforcement, and failing to update the policy as the organization grows or laws change.
• Review and update your policy regularly, especially after leadership changes, new funding, or regulatory updates. Tailor your policy to your organization and state.

If you are unsure whether your conflict of interest policy meets IRS, state, or industry requirements, or if you need help drafting or updating one for your business or nonprofit, reach out to our team at (888) 449-8437 or team@sprintlaw.com. Where legal services are required, they are delivered by licensed lawyers at trusted US law firms through the Sprintlaw platform.