A charity may have a board of capable volunteers, a programme people depend on and years of goodwill in its community. None of those strengths is a substitute for keeping its regulatory registration in order. The Canada Revenue Agency's report on the 2025 to 2026 charities programme provides an unusually useful picture of what goes wrong, although the figures require careful reading. They show why directors need to distinguish routine administrative breakdowns from the more serious conduct uncovered when a regulator begins a targeted audit.
The CRA recorded 2,076 revocations of registration during the fiscal year. Of these, 1,219 arose from failure to file an annual information return, 790 were voluntary, 52 were for cause and 15 followed loss of corporate status. A voluntary surrender of registration doesn't establish wrongdoing, and the same figure shouldn't be used as a proxy for the number of bad actors in the charitable sector. Yet a missed return can still have substantial consequences. Registered status is connected to the ability to issue official donation receipts and the fiscal framework governing charitable assets. An organization with an important mission can endanger its future by letting a filing responsibility fall between the board, staff and an outside accountant.
The audit figures tell a different story. The CRA completed 227 audits, finding noncompliance in 98 per cent of them and describing 64 per cent as revealing serious issues. That is a striking result, but it doesn't mean almost every Canadian charity is noncompliant. These are selected audits within a regulatory programme that uses risk based targeting. The relevant finding is that warning signs can be meaningful when the regulator chooses to investigate. Among the reported audit outcomes were 81 education letters, 66 compliance agreements and 48 notices of intention to revoke. Not every problem produced a final loss of registration, and some proceedings or objections can outlast the fiscal year in which an audit was completed.
There is another distinction boards should understand. The CRA carried out 5,091 interventions outside the audit process, compared with 227 completed audits. Those interactions include letters, calls and requests for information intended to promote voluntary compliance. It would be a mistake to treat a routine request as a conclusion that a charity has committed serious misconduct. It would be equally risky to allow the response to disappear in a shared inbox because no formal audit has begun. Early clarification can spare an organization unnecessary expense and may reveal a records problem before it becomes habitual.
For directors, useful controls are often fairly ordinary. Someone needs responsibility for the T3010 and for tracking the information required to complete it. The board should know when that return is due, what financial figures will support it and who has confirmed submission. The same discipline applies to donation receipts, the use of restricted funds and the description of activities actually undertaken. An accountant or executive director can perform the work, but delegation doesn't remove the board's responsibility to understand whether the work has been completed.
A further challenge arises when an organization grows beyond the systems that served it at the beginning. New services, partnerships, unfamiliar sources of income and activities delivered through another body can change the information that must be recorded and the questions a regulator may ask. Directors of charities serving vulnerable adults have an additional reason to insist on reliable reporting, because financial continuity and dependable programme delivery matter to people whose lives may be disrupted when an organization fails.
The report also documents modernized online services and an effort to make compliance outreach more accessible. The sensible response isn't to become defensive whenever the CRA contacts a charity. It is to make the organization capable of explaining what it does, how it records its decisions and whether its public promises match its actual work. The regulator's statistics describe different kinds of institutional failure. Good governance starts by refusing to confuse them.