Brad is on the roll of solicitors of England & Wales but does not hold a practising certificate and does not provide legal advice.
Updated June 2026 · England & Wales
When an allegation lands on a trustee's desk, the instinct can be to hope it goes away. It rarely does. Whether the concern relates to financial irregularity, safeguarding, bullying, data misuse, or conflicts of interest, how a charity responds in the first few days often matters more than the underlying issue itself.
Donors, beneficiaries, staff and volunteers all watch what happens next, and so does the Charity Commission. This guide walks through what a proportionate, fair response looks like for charities operating in England and Wales. It covers the steps of a sensible internal process, the reporting obligations trustees need to keep in mind, and the common pitfalls that turn a manageable problem into a regulatory one. The aim is to help trustees act with confidence rather than panic when something goes wrong.
Overview
Addressing allegations in a charity means running a structured, fair process to look into a concern that has been raised about the conduct of people connected with the organisation, or about the charity itself. The concern might come from a whistleblower, a beneficiary, a member of staff, a volunteer, a donor, or an external party.
It could relate to misuse of funds, safeguarding failures, discrimination, harassment, data breaches, trustee conflicts, or a breakdown in governance. Compliance sits alongside this. Charities registered in England and Wales operate within a framework set by the Charities Act 2011, Charity Commission guidance, employment law, safeguarding duties, data protection law, and any sector-specific regulation that applies.
Trustees carry personal responsibility for ensuring the charity meets these obligations and acts in the interests of its beneficiaries. Handling an allegation well means balancing fairness to the person accused, protection for the complainant, the interests of beneficiaries, and the charity's wider reputation.
It also means knowing when an internal matter becomes something that needs to be reported to the Commission as a serious incident, or to the police, or to another regulator.
Key steps
Take the concern seriously from the first contact. Acknowledge receipt in writing, thank the person for coming forward, and explain briefly what will happen next. Avoid making promises about outcomes. Record the date, the nature of the concern, and who raised it. Keep this record secure and limit access to those who genuinely need to see it.
Decide who should lead the response. The trustee body should appoint someone with no conflict of interest to oversee the matter, which might mean using a subcommittee, an independent trustee, or an external investigator for more serious issues. If the allegation involves a trustee or the chief executive, the chair or another senior figure may need to step aside from any decisions linked to that individual.
Scope the investigation and set clear terms of reference. Write down what is being looked into, what is not, the timeline, who will speak to whom, and how findings will be reported. A focused scope prevents the process from drifting and helps the people involved understand what to expect. Share the terms with those directly affected where appropriate.
Gather the evidence fairly and keep confidentiality tight. Collect documents, emails, financial records, policies and any other relevant material before memories fade or records get lost. Interview people separately, keep notes, and give those accused a genuine opportunity to respond to what has been said about them. Treat personal data in line with UK GDPR and keep disclosure on a need-to-know basis.
Reach a reasoned conclusion and act on it. Weigh the evidence, record the findings, and decide what needs to happen: disciplinary action, changes to policies or controls, training, reporting to a regulator, or closure of the matter. Communicate outcomes proportionately and keep a written record. Where a serious incident has occurred, trustees should report it to the Charity Commission promptly using its online form.
Q When does an allegation count as a serious incident that must be reported to the Charity Commission?
The Commission expects trustees to report anything that has caused, or risks causing, significant harm to beneficiaries, staff, volunteers, finances, property, or the charity's reputation. Common examples include suspected fraud, significant safeguarding concerns, terrorist links, large losses of funds, and serious data breaches. If trustees are uncertain, the safer course is usually to report rather than delay. Check gov.uk for the current guidance on serious incident reporting.
Q Who should carry out the investigation?
It depends on the seriousness and who is involved. For lower-level concerns, a trustee or senior manager with no connection to the people involved can often handle it internally. For serious financial, safeguarding, or governance allegations, an independent investigator is usually more appropriate. Using someone outside the charity protects the integrity of the process and gives findings more weight with regulators, staff, and the public.
Q What happens if the allegation is against a trustee?
The trustee concerned should step back from any decisions relating to the investigation and, depending on the seriousness, may need to step away from wider duties while it runs. The remaining trustees should take advice on governance and may need to consider suspension, recusal, or other protective measures. Trustees have a duty to act in the charity's interests, which includes being willing to scrutinise each other when concerns arise.
Q Do we have to tell the person who made the complaint what happened?
You should keep them informed that the matter is being looked into and let them know when it is concluded. How much detail you can share about the outcome is limited by confidentiality, data protection, and employment law. A short explanation that the concern was investigated, taken seriously, and acted on appropriately is often the most that can be shared, particularly where individuals' personal data is involved.
Q What protections do whistleblowers have?
Workers who make a qualifying disclosure about wrongdoing in good faith are protected under the Public Interest Disclosure Act 1998 from detriment and dismissal. Charities should have a whistleblowing policy that explains how concerns can be raised internally and externally, including to the Charity Commission where appropriate. Treating whistleblowers fairly is both a legal requirement and a strong signal about the culture trustees want to build.
Q Should we involve the police?
If the allegation involves a suspected crime, for example theft, fraud, sexual offences, or physical harm, the police should usually be informed. In safeguarding cases, statutory agencies may also need to be contacted. Internal investigations should not get in the way of a criminal inquiry, and trustees should take care not to interview witnesses or gather evidence in ways that could compromise a police investigation.
Q How long should we keep records of the investigation?
Retain the investigation file long enough to meet legal, regulatory, and insurance requirements, and to deal with any appeals, employment claims, or follow-up inquiries. Retention periods vary depending on the subject matter, particularly where safeguarding is involved. Store records securely, restrict access, and handle personal data in line with UK GDPR. A written retention schedule helps trustees apply consistent practice across different types of file.
Knowing how to respond in the first few days often shapes everything that follows, from regulator relations to staff morale. An experienced legal adviser can help you think through your next steps based on what you describe on the call, so you can act with more confidence.
✓Plain-English answers to your specific questions about handling the allegation
✓Practical perspective on reporting obligations based on what you describe
✓Guidance tailored to your circumstances on running a fair internal process
✓Clarity on what to watch out for when trustees or senior staff are involved
Personal call · For information only · Independent advisers
Written & reviewed by
Brad Askew Solicitor (non-practising)
Brad is on the roll of solicitors of England & Wales but does not hold a practising certificate and does not provide legal advice. LegalDocuments.co.uk is not a law firm and does not provide regulated legal advice.
This article is for general information only. It is a tool to help you find your way — not legal advice, and not a substitute for speaking to a qualified adviser about your situation.