Florida Church & Nonprofit Insurance in 2026: Abuse Liability, D&O, and the New Failure-to-Report Law

By Ricardo Alonso, Founder, Atesa Risk Advisors · July 8, 2026

Key Takeaways

Florida's new failure-to-report law (SB 590, Chapter Law 2026-95) took effect July 1, 2026, adding subsection (23) to s. 775.15.
For a failure to report child abuse, the criminal clock now does not start until law enforcement or another government agency — not the institution — learns of it.
The 3-year limitations period itself is unchanged, and the law does not revive cases already time-barred on or before July 1, 2026.
Most Florida churches and nonprofits carry a general liability or BOP policy that excludes or sharply sublimits abuse and molestation claims.
D&O covers board decisions; it does not stand in for standalone abuse and molestation insurance, and the two get confused at renewal.
Abuse coverage is often written claims-made, so the policy's retroactive date — not just this year's limits — decides whether a future claim is covered.
Only a handful of specialty carriers write this coverage in Florida; NIA's form runs from $250,000 up to $3 million aggregate, and most standard markets exclude it.
Under s. 39.201, every person in Florida is a mandatory reporter — knowing, willful failure is a third-degree felony (s. 39.205).

Florida churches, ministries, camps, and nonprofits that work with minors need three distinct coverages in 2026: general liability (or a BOP), Directors & Officers/Employment Practices Liability for board and HR decisions, and standalone abuse and molestation liability for sexual abuse and misconduct claims. The third is the one most organizations lack or misunderstand, and a new state law changing how long prosecutors can act on failure-to-report violations has raised the cost of getting it wrong. This coverage needs to be placed with a specialty carrier, written with the right retroactive date, and reviewed yearly — not assumed to be baked into a standard package policy. It is the exposure at the center of our Florida church insurance practice.

A New Law Just Changed the Clock on Failure-to-Report

For years, if someone at a Florida school, church, or youth program had a legal duty to report suspected abuse and didn't, prosecutors had a limited window to charge them — one that started ticking on the date of the failure itself. If an investigation didn't surface until years later, the case against the person who stayed silent was often already time-barred before it began.

A new law closed that gap. SB 590, sponsored by Sen. Jennifer Bradley of Fleming Island, passed the Senate 37-0 and the House 111-0. The House companion, HB 373 from Rep. Wyman Duggan of Jacksonville, was laid on the table in favor of the Senate bill. The Governor signed it May 22, 2026, and it became Chapter Law 2026-95, adding subsection (23) to section 775.15, Florida Statutes, effective July 1, 2026. News4Jax and Jacksonville Today were among the outlets that first brought it to public attention, tracing it to the Douglas Anderson School of the Arts investigation in Duval County — where former choral director Jeffrey Clayton was convicted and sentenced to 10 years, and where a pattern of alleged failures to report had already aged out of prosecution before the abuse allegations came to light.

Here is what the statute does. For a violation of s. 39.201 (failure to report child abuse), the limitations clock does not begin to run until a law enforcement agency or another governmental agency — excluding the institution where the violation occurred — is made aware of the violation. The underlying period itself is unchanged: failure to report is a third-degree felony with a 3-year limitations period. The law does not revive old cases; it applies only to offenses that were not already time-barred on or before July 1, 2026.

Florida's mandatory reporting duty is broader than most boards assume. Under s. 39.201(1)(a), any person who knows or has reasonable cause to suspect child abuse must report it to the state abuse hotline — that means every staff member and every volunteer, not a special list of clergy and teachers. The professionals named in the statute simply lose the ability to report anonymously; they are not the only mandatory reporters. Knowing and willful failure to report is itself a third-degree felony under s. 39.205. Churches should note one nuance: Florida preserves the clergy-penitent privilege (ss. 39.204 and 90.505) for confidential spiritual communications, but the reporting duty still applies to anything learned outside those privileged communications. What changed isn't who has to report. It's how long the legal exposure for failing to do so can follow an organization and the people who ran it — reason enough for a church or nonprofit board to check whether its insurance would actually respond if an old allegation surfaced today.

Three Coverages, Three Different Jobs

Ask a small church or nonprofit board what happens if a volunteer or staff member is accused of abusing a minor, and the answer is often "we have insurance." Read the policy, and the picture is usually thinner than that.

General Liability / BOP: Where Coverage Starts

Most Florida nonprofits carry a Business Owners Policy or standalone general liability policy — the same foundational coverage any small business carries for slip-and-falls, property damage, and third-party bodily injury (see our general liability insurance cost guide for how carriers price it). But abuse and molestation claims are usually treated as a distinct, separately underwritten exposure. Many BOP forms exclude abuse claims outright; others carry a modest sublimit — a smaller cap inside the policy, separate from the headline liability limit — nowhere close to the policy's general liability limit. It's enough to look present on the declarations page, not enough to matter if a real claim is filed. Boards that never ask tend to assume the broad GL limit covers everything. It usually doesn't. This is exactly the church liability insurance question we start every ministry review with.

When I review a church or ministry package, the abuse question is the one boards least want to ask and most need to. The dec page usually shows a liability limit everyone assumes covers it. The form language usually says otherwise. — Ricardo Alonso

Directors & Officers: What It Actually Covers

D&O insurance — often bundled with Employment Practices Liability (EPLI) for nonprofits — covers board members, officers, and sometimes staff against claims that they mismanaged the organization: a wrongful termination suit, a discrimination claim tied to a hiring decision, or an allegation that the board failed in its oversight duties. It's essential coverage, priced by size, structure, and claims history.

What D&O generally does not do is cover the abuse claim itself. If a survivor sues both the individual who caused harm and the organization for negligent hiring, supervision, or retention — the far more common framing in these suits — that negligence claim falls under abuse and molestation liability, well outside a governance dispute. Some D&O policies carve out abuse claims entirely; others were never built to absorb them.

Abuse & Molestation Liability: The Coverage That Actually Fits

Abuse and molestation liability is a standalone line written for organizations that work with minors or vulnerable adults — churches, private schools, camps, daycare ministries, youth sports leagues. This is the core of abuse and molestation insurance: it responds to third-party claims of sexual abuse or misconduct by an employee, volunteer, or agent of the organization, including the negligent hiring and supervision claims that typically accompany them.

Very few standard commercial carriers write this coverage at all, and fewer still write it well. The organizations that do — Church Mutual, GuideOne, Brotherhood Mutual, Philadelphia Insurance Companies, and the Nonprofits Insurance Alliance (NIA) among them — built underwriting programs specifically around ministries and youth-serving nonprofits, and price the coverage very differently from a generic liability carrier. NIA, which has written 501(c)(3) nonprofit insurance in Florida since 2011, offers its Improper Sexual Conduct and Physical Abuse coverage on either a claims-made or an event-trigger (occurrence-style) form, with limits from $250,000 up to $3 million aggregate. GuideOne still writes religious organizations in all 50 states. Appetite in Florida varies by county and property exposure — not every specialty carrier quotes every organization. An independent broker's job here is knowing which of the two or three realistic markets for a given ministry profile will actually engage, rather than blasting the same submission everywhere and hoping one answers.

Why the Retroactive Date Matters More Than the Premium

The first question to settle is which form you actually have. Abuse and molestation coverage is often written on a claims-made basis, though several ministry-focused carriers — Brotherhood Mutual, Church Mutual, and NIA's event-trigger form — offer occurrence versions. The retroactive-date discussion below applies when your coverage is claims-made. An occurrence policy responds to an incident that happened during the policy period, no matter when the claim is filed. A claims-made policy responds only if the claim is filed while the policy (or an extension of it) is active — and only for incidents on or after the policy's retroactive date.

Abuse allegations are unusual in exactly the way that makes retroactive dates dangerous to get wrong: survivors frequently come forward years after the underlying conduct. If a church switches carriers, lets a policy lapse for a renewal cycle, or never asks what its retroactive date is, it can end up in a position where a claim surfaces, a policy is technically in force, and the carrier still denies coverage because the retroactive date doesn't reach back far enough.

The new failure-to-report law makes that history matter more. A longer runway for prosecutors to act on old failures signals that these situations are not going away quickly, and that an organization's insurance history over the last decade — not just its current policy — is what will end up mattering. Boards that have gone through a broker change, a carrier non-renewal, or a coverage gap should specifically ask their agent to confirm the retroactive date on the current abuse policy and whether prior-acts coverage — coverage for incidents that happened before the current policy period began — was preserved through the transition.

What Underwriters Actually Want to See

Carriers that write abuse and molestation coverage underwrite the organization's practices as much as its history. Expect a lengthy application covering: written child- and youth-protection policies (screening, training, a two-adult rule); background-check procedures and renewal frequency; reporting protocols tied to Florida's mandatory reporting law; claims history and any prior denied or non-renewed coverage; and facility use — outside groups, a school or daycare, overnight camps, transporting minors.

Organizations that document a real child-protection program — one that runs in practice, not one that only lives in a binder — get better terms and a broader field of carriers willing to quote. An independent broker's job here is knowing which of the two or three realistic markets for a given ministry profile will actually engage, rather than sending the same generic submission everywhere and hoping one answers.

Don't Forget the Rest of the Package

A church or nonprofit's insurance program doesn't stop at abuse liability. Any organization with paid staff needs workers' compensation under Florida law once it crosses the employee-count threshold (four or more employees for non-construction employers — one for construction — and true, uncompensated volunteers don't count toward the threshold); our Florida workers' comp guide covers how those requirements and rates work for employers generally. Nonprofits running online giving platforms or storing donor and member data also carry a data-breach exposure a standard package won't touch — see our small business cyber insurance guide. And every nonprofit benefits from an outside gut-check on its coverage before renewal, starting with our rundown of common Florida business insurance mistakes.

A Practical Checklist for This Year

Pull the current GL/BOP policy and find the abuse exclusion or sublimit language — don't assume it isn't there.
Confirm whether the organization carries standalone abuse and molestation coverage, and if so, get the retroactive date in writing.
Ask whether D&O/EPLI and abuse coverage are placed with the same carrier or different ones, and how a claim naming both the individual and the organization would be split.
Put child- and youth-protection policies in writing if they only exist informally — screening, training, reporting duties, a two-adult rule.
If the organization has changed brokers or carriers recently, verify prior-acts coverage was preserved with no retroactive-date gap.
Treat every staff member and volunteer as a mandatory reporter under s. 39.201 — because in Florida each of them is — and make sure they know it.

None of this replaces legal advice on a specific allegation or claim. It's a starting point for the conversation a board should be having with its broker before a claim is filed.

FAQ

Does a standard church or nonprofit general liability policy cover sexual abuse claims? Usually not in any meaningful way. Many GL and BOP forms exclude abuse and molestation claims entirely, and those that don't typically apply a sublimit well below the policy's core liability limit. Confirm the actual language rather than assuming the headline limit applies.

What's the difference between D&O insurance and abuse & molestation liability? D&O (often paired with Employment Practices Liability) covers claims about how the organization and its leaders made decisions — hiring, firing, oversight. Abuse and molestation liability covers claims arising from actual abuse or misconduct, including negligent hiring or supervision claims against the organization. They're different exposures, usually different policies.

Why does the retroactive date on an abuse liability policy matter so much? First confirm which form you have: abuse coverage is often claims-made, but several ministry-focused carriers (Brotherhood Mutual, Church Mutual, NIA's event-trigger form) offer occurrence versions. When it's claims-made, the policy responds only to incidents on or after a specific retroactive date, and only while the policy is active. Because allegations often surface years after the underlying conduct, a retroactive date that doesn't reach back far enough — or a gap from a carrier switch — can leave an old exposure uninsured even with a current policy in force.

What changed under Florida's new failure-to-report law? SB 590, signed May 22, 2026, became Chapter Law 2026-95 and took effect July 1, 2026, adding subsection (23) to s. 775.15, Florida Statutes. For a failure to report child abuse under s. 39.201, the criminal limitations clock does not start until a law enforcement agency or another governmental agency — not the institution where it occurred — learns of the violation. The 3-year period itself is unchanged, and the law does not revive cases already time-barred on or before July 1, 2026. It changes how long the legal exposure can follow someone, not who must report.

Who is a mandatory reporter under Florida law? In Florida, effectively everyone. Under s. 39.201(1)(a), any person who knows or has reasonable cause to suspect child abuse must report it to the state abuse hotline — every staff member and volunteer included. The professionals enumerated in the statute (teachers, physicians, clergy, and others) don't have a special duty; they simply can't report anonymously. Knowing, willful failure to report is a third-degree felony under s. 39.205.

Can our church get abuse liability coverage if we've never carried it before? Often, yes, though underwriting is more involved than a typical BOP renewal. Carriers want to see written child-protection policies, background-check procedures, and claims history. Coverage is available starting from scratch, but expect terms to reflect how mature those practices already are.

Does umbrella or excess liability coverage extend abuse liability limits? Often it doesn't. Many commercial umbrellas exclude abuse and molestation entirely, and even those that don't extend only if the underlying abuse policy is scheduled on the umbrella and that carrier follows form over it — meaning the umbrella adopts the terms of the policy beneath it. Never assume a general commercial umbrella extends over an abuse claim; ask the broker to confirm in writing which underlying policies it actually follows.

Is abuse and molestation coverage required by Florida law? No. Florida doesn't mandate this coverage the way it mandates workers' comp above certain employee thresholds — though landlords, denominations, and facility-use contracts increasingly require it privately. It's a risk-management decision, and for most youth-serving nonprofits, closer to essential than optional.

What happens if our nonprofit's abuse liability carrier drops the coverage at renewal? Non-renewal here is a real risk given how few carriers write this line. Get the broker working the specialty markets immediately, and if there's any gap between policies, ask specifically how prior-acts/retroactive-date coverage will be preserved — a gap is the scenario most likely to leave an old claim uninsured.

Do volunteers need to be covered too, or just paid staff? Abuse and molestation policies are typically written to respond to claims involving volunteers as well as employees, since volunteers often have the most direct, unsupervised contact with minors. Confirm the policy's definition of "insured" explicitly includes volunteers rather than assuming it.

How is this different from what a camp or private school needs? The core coverage types are the same, but underwriting differs by supervision ratios, overnight programming, and transportation exposure. A day-only ministry and an overnight camp won't get quoted the same way even with identical coverage.

Educational disclaimer: This article is general educational information about insurance and is not insurance advice, a quote, or an offer of coverage. Rates, discounts, deadlines, and requirements change and vary by property; confirm current figures with primary sources and a licensed agent before relying on them. Coverage is subject to the terms of your policy. For a personalized review, contact Atesa Risk Advisors, an independent, RamseyTrusted brokerage licensed in Florida (2-20 General Lines).

Sources

[1] CS/SB 590 (2026): Statute of Limitations for Required Reports Concerning Children - The Florida Senate [2] Florida Statutes s. 39.201 - Required reports of child abuse, abandonment, or neglect [3] New Florida law changes time limit for charging failure to report child abuse - News4Jax [4] Legal changes will ease prosecution of people who fail to report child abuse - Jacksonville Today [5] Nonprofits squeezed out of coverage as insurance carriers pull back - Nonprofits Insurance Alliance [6] Improper Sexual Conduct and Physical Abuse Liability Insurance for Nonprofits - Nonprofits Insurance Alliance