Non Profit Volunteer Confidentiality Agreement Template for England and Wales

A Non Profit Volunteer Confidentiality Agreement is a legally binding contract that establishes your volunteer's duty to protect sensitive information they may encounter during their service. Unlike employees who have implied confidentiality obligations, volunteers require explicit agreements to ensure they understand and commit to protecting your organisation's confidential information, including donor details, beneficiary data, and strategic plans.

When do you need this document?

You need this agreement whenever you engage volunteers who will have access to sensitive information. This includes volunteers working with donor databases, handling beneficiary case files, participating in strategic planning meetings, or accessing financial records. It's essential for charity shops where volunteers handle customer data, fundraising events involving donor information, and administrative roles where volunteers access operational documents. The agreement is particularly important when volunteers work remotely or take materials off-site, as this increases the risk of unauthorised disclosure.

Key legal considerations

The agreement must clearly define what constitutes confidential information, including personal data, donor lists, financial information, and proprietary methods. You should specify prohibited uses such as sharing information with third parties, using data for personal benefit, or discussing confidential matters outside the organisation. Include provisions for the return of all confidential materials upon termination of the volunteer relationship. Consider whether you need non-solicitation clauses to prevent volunteers from approaching donors directly after their service ends. The agreement should outline consequences for breach, which may include legal action and liability for damages, while ensuring these provisions don't inadvertently create an employment relationship that could trigger minimum wage obligations.

Legal requirements in England and Wales

Under UK GDPR and the Data Protection Act 2018, you must ensure volunteers handling personal data understand their legal obligations as data processors. The agreement should reference your organisation's data protection policies and require volunteers to report any data breaches immediately. You must provide appropriate training and supervision to ensure volunteers can comply with data protection requirements. The Privacy and Electronic Communications Regulations may apply if volunteers handle electronic communications or marketing data. Ensure the agreement doesn't create an employment relationship by avoiding language that suggests control over working methods, regular hours, or payment obligations beyond reasonable expenses. The contract should comply with charity law requirements and your organisation's governing documents, particularly regarding conflicts of interest and fiduciary duties.