Political contribution compliance has spent most of its life in a quiet corner of the governance landscape—a policy on file, a report reviewed once a year, rarely a board agenda item. That era just ended. With the 2026 midterms now decided, boards are facing a collision of regulatory complexity, a shifting federal landscape and investor scrutiny that is turning political contribution oversight into one of the sharpest governance tests on the calendar. For firms subject to pay-to-play restrictions, campaign contributions can have consequences for government business well beyond Election Day. At the same time, the SEC is considering rescinding a key federal rule governing investment advisers, with a public comment deadline of November 9.

The immediate question for boards: Did existing controls capture the contributions and the potential exposure that matter?

One potential blind spot lies in the boardroom itself. Compliance reviews typically focus on executives and employees, but directors should also understand whether restrictions apply to them. Depending on the jurisdiction and the applicable rules, pay-to-play restrictions can reach directors, too. A director’s personal political contribution, even one made independently of company business, could create compliance exposure if that director falls within the relevant restrictions. The consequences can be significant, including restrictions on government business and potential financial penalties. Boards should verify whether their compliance programs capture contributions by directors who are subject to these rules, rather than assume existing controls are sufficient.

Why Election Years Raise the Stakes

Election cycles drive a surge in political donations, increasing the volume and velocity of transactions that must be monitored and disclosed. The numbers make the point on their own: Congressional candidates raised roughly $2.8 billion and political action committees raised $8.3 billion in the first 18 months of the 2026 election cycle, according to Federal Election Commission data released in October. OpenSecrets found that spending on congressional elections—including candidates, political parties and outside groups—totaled roughly $8.8 billion to $9.5 billion in each of the three previous election cycles, up from $5.7 billion in 2018.

Political giving by employees, executives and directors can accelerate during election years, while PAC activity intensifies. Jurisdiction-specific reporting requirements add to an already demanding compliance workload. What looks manageable in a nonelection year can strain an organization’s monitoring capacity as contribution volumes spike, increasing the risk that problematic contributions go undetected.

A Federal Rule in Flux Doesn’t Lower the Bar

The federal picture is shifting, too. In September, the SEC proposed rescinding its investment adviser pay-to-play rule, citing its strict liability design. Boards shouldn’t read that as a signal to stand down. The rule remains in force until the SEC adopts a final rule. State and municipal pay-to-play laws, MSRB and FINRA rules, and CFTC restrictions are untouched. Many large public pension plans also write pay-to-play restrictions directly into their contracts with advisers, and those obligations would survive a rescission.

If anything, removing a single federal standard could shift the burden to a patchwork of jurisdiction-specific rules and contract terms. That is exactly the kind of complexity that fragmented data and informal review processes are least equipped to handle.

Where Oversight Breaks Down

The most common failure points are structural, and they surface at the board level as much as the management level.

Contribution data often lives across HR systems, legal databases, external vendors and spreadsheets maintained by different teams with no single source of truth. When that’s the case, no one—including the board—can get a reliable answer to a simple question: What is our full exposure right now?

Many organizations also lack a formal process for employees, executives or directors to seek review before making a contribution that could implicate pay-to-play rules. Contributions made outside those channels, through personal accounts or third-party intermediaries, leave no opportunity to catch a problem before it becomes one.

The SEC’s 2022 enforcement sweep is a useful illustration of how little it takes to trigger a violation. The agency brought pay-to-play charges against four investment advisers, units of Bank of Hawaii, Canaan Management, Highland Capital Partners and StarVest Management, for continuing to collect advisory fees from government entities after associates had made campaign contributions to officials with influence over those same contracts. Each firm was censured and fined. None of the violations involved a large or complex scheme, which is exactly why boards can’t assume their own exposure is too small to matter. The SEC’s September proposal would rescind the rule behind those cases, citing the same problem of small donations triggering outsized penalties. That changes the federal picture, but it doesn’t change the lesson: State and local pay-to-play regimes can also turn a modest contribution into a lost contract.

The Governance Layer Most Boards Skip

Political contribution oversight rarely has a clear institutional home. In practice, it should sit somewhere specific. Many boards assign it to the audit committee as a compliance and disclosure matter, while others fold it into the nominating and governance committee as a reputational and director-conduct issue. Either can work, provided the assignment is explicit. An implicit assignment is how the topic falls through the gap between committees.

That clarity matters beyond the boardroom. Proxy disclosures increasingly reflect how companies govern political activity, and institutional investors have built political spending oversight into their engagement and voting criteria. A board that can point to a named committee, a defined process and a track record of review is answering a question investors are already asking.

That answer is only as good as the number behind it. Political contribution risk has historically sat with legal or compliance, with finance on the periphery. But when a disclosure failure results in fines, reputational damage or a lost contract, the cost lands on the balance sheet. The real test is whether legal and finance stand behind the same figure, or whether the board is choosing between two competing versions of it.

What the Board Should Require

Durable oversight rests on four things a board can ask to see directly:

• A written political contribution policy that defines permissible and prohibited activity, requires review before contributions are made, and assigns accountability by name, not by department.
• Continuous monitoring that tracks contributions in real time as they approach regulatory thresholds or touch pay-to-play rules.
• Records that would hold up under review by any regulator, at any level, at any point in the cycle — complete, timestamped and producible on demand.
• A stated connection to the company’s broader risk and disclosure framework, so political activity oversight is treated as part of the enterprise-wide governance the board already reviews.

Investors, boards and regulators increasingly take it as a given that enterprise risk management captures political and reputational exposure alongside financial and operational risk. Directors prepared for that question are the ones who can speak to the company’s controls and know how those controls connect to the risk reporting they already receive.

Questions Directors Should Ask

• Who owns political contribution oversight? The audit committee, the nominating and governance committee, or no one specifically?
• Do we have one reconciled figure for total political spending, or does that number change depending on who’s asked?
• Are director and executive contributions captured, including through family members and personal accounts?
• Is there a review step before a contribution is made, or only a report after the fact?
• How would our disclosures and documentation hold up if a regulator asked for them today?
• How does our political spending oversight show up in our proxy, and how would an investor read it?
• If the SEC’s adviser rule is rescinded, which state, local and other federal pay-to-play rules would still apply to us?

The Stakes Extend Beyond Fines

Being unprepared has a cost, and it usually surfaces as a disclosure failure. A regulatory fine has a number attached to it, but the reputational damage from a political contribution misstep rarely does. A high-profile case—particularly one involving a director or a prohibited contribution tied to a significant government contract—can damage investor trust, invite scrutiny of the board itself and generate coverage that outlasts any enforcement resolution.

What matters is whether the board’s oversight held up under this midterm cycle’s pressure, and will hold up in the next one, and the one after that.