How Churches and Nonprofits Can Protect Member and Donor Data

Churches, ministries and nonprofits often hold some of the most personal information people ever share: what they give, where their children are on Sunday morning, what they are praying about, who is struggling and why. That information is usually gathered with love and used for good. It can also be exposed through a lost laptop, a forwarded spreadsheet or a volunteer account nobody remembered to close.

Protecting it is part of good stewardship. You do not need an IT department, just a few clear principles applied consistently.

Know what you hold

Start by listing the kinds of personal information your organization keeps and where each lives:

• Member and attendee directories.
• Donor names, addresses and giving histories.
• Volunteer applications and background check results.
• Children's check-in information, allergies and authorized pickup lists.
• Prayer requests and pastoral care notes.
• Counseling or case management records.
• Event registrations and payment records.

You may find copies in more places than you expected: a church management system, several spreadsheets, email attachments, paper files and personal phones.

Principle 1: Collect less

The safest information is the information you never collected.

• Ask only for what you need for a clear purpose.
• Avoid collecting highly sensitive details, such as government ID numbers, unless they are truly required, and then handle them with extra care.
• Delete information when it is no longer needed, following a written retention schedule. Ask your accountant or attorney how long to keep financial and legal records.

Principle 2: Limit access

• Give each staff member and volunteer their own account, with access only to what their role requires. A greeter does not need giving records.
• Review access every quarter and remove people when their role ends. Our guide to team accounts and offboarding includes a checklist.
• Keep highly sensitive information, such as counseling notes and background checks, restricted to the smallest group possible.

Principle 3: Use secure tools

• Prefer purpose-built systems for membership and donor management over spreadsheets emailed back and forth.
• Turn on two-factor authentication for every system that holds personal information.
• Encrypt laptops and phones used for ministry work, and require screen locks.
• Organize shared files carefully, with sensitive folders restricted. Our guide to organizing shared cloud files can help.
• Let your payment processor handle card details. Never write down or store full card numbers.

Special care for children and pastoral information

• Keep children's medical and custody notes visible only to those who need them during check-in.
• Get parent permission before posting children's photos, and avoid publishing names with photos.
• Treat prayer requests as confidential unless the person explicitly agrees to share them, and never post them publicly by default.
• Keep counseling and care notes out of general systems, and never paste them into AI tools. Our guide to what not to paste into an AI chatbot explains why.

Paper still counts

Store paper records in locked cabinets, avoid leaving sign-in sheets with personal details in public areas, and shred documents rather than recycling them.

Train the people who handle data

Volunteers rotate often, and most problems come from good people who simply did not know. A short orientation covering what information is sensitive, how to share it safely and what to do when something goes wrong prevents many mistakes.

Be honest about what you do

Tell people how you use their information in a clear privacy policy, and follow it. Our guide to writing a privacy policy visitors can read shows how.

If something goes wrong

If a device is lost, an account is compromised or information is sent to the wrong person, act quickly: secure the account or device, find out what information was involved, and talk with an attorney about whether you must notify the people affected. Being honest and prompt with your community preserves trust far better than silence.

A quarterly stewardship check

Every three months, spend half an hour asking: Who has access to our member and donor systems, and should they? Are there spreadsheets or exports lying around that should be deleted? Have any volunteers or staff left? Are devices encrypted and updated? Small, regular checks keep good habits from slipping.

Frequently asked questions

Can we share our member directory with members?

Many churches do, with members' consent and with the directory kept behind a login rather than on a public page. Let people choose what details appear.

Should volunteers use personal email for ministry work?

It is better to provide organizational accounts for anyone who handles member or donor information, so the information stays with the organization and access can be removed when roles change.

How long should we keep donor records?

Retention depends on tax and legal requirements and your own needs. Ask your accountant or attorney to help you set a written schedule, then delete records when that period ends.