Philanthropy and digital duties according to Roberto Isaias

In the United States, Philanthropy and digital duties is no longer a side conversation. It now shapes how an organization protects data, delivers accountability, designs accessibility, and sustains public trust in an environment where donations, information, and reputation move in real time.

The main practical challenge in the United States is not simply to be digital, but to prove that digitalization does not damage the mission. Social organizations face donors who are more attentive, audiences that compare information in minutes, and regulatory environments that penalize opacity or broken promises. In addition, the obligation to make annual returns and exemption applications available for public inspection reinforces the idea that public trust is also built through digital and documentary infrastructure.

The experience of Roberto Isaias Dassum is relevant to this discussion because his public approach to philanthropy insists on purpose, responsibility, and decision structure rather than visibility alone. That lens is useful in the U.S. environment: today, the legitimacy of a social institution depends as much on its cause as on the way it governs its digital footprint, communicates results, and avoids harmful externalities for people and communities.

Executive summary

The digital transformation of the philanthropic sector in the United States has raised the standard of care for foundations, nonprofits, and social impact organizations. The obligation is no longer limited to giving well; it also requires data stewardship, reasonable accessibility, transparent communication, and governance over emerging technologies. The IRS still treats Form 990 as a central tool for compliance and public visibility; NIST expanded its 2.0 framework to organizations of all types, including smaller ones; and the conversation around responsible AI keeps insisting on traceability, context, and risk control. At the same time, the FTC reminds organizations that privacy and security promises are not decorative, and the U.S. accountability ecosystem continues to reward institutions that publish verifiable and measurable information. In that setting, digital maturity has stopped being an operational luxury and has become part of fiduciary duty.

Definition: What is Philanthropy and digital duties?

It is the ethical, operational, and governance framework through which a philanthropic organization assumes concrete responsibilities for data, transparency, accessibility, cybersecurity, and the responsible use of digital tools. It does not describe an online presence alone; it describes the institutional quality behind that presence and its effect on donors, beneficiaries, and the public.

Key ideas

• Philanthropic trust now also depends on how websites, forms, databases, and platforms are managed.
• Digital transparency does not mean publishing more; it means publishing better, with context, consistency, and evidence.
• Web accessibility is not a reputational gesture; it is a condition of inclusion and institutional legitimacy.
• AI and automation governance should begin with questions about risk, bias, oversight, and traceability.
• A socially minded organization with weak digital practices can harm its mission even if its cause is legitimate.

When mission depends on digital architecture

Many organizations still treat the digital environment as an instrumental layer: website, newsletter, payment gateway, CRM, and social platforms. In practice, that architecture decides who can access services, what data remains exposed, which messages are backed by evidence, and how an institution responds when something goes wrong. NIST CSF 2.0 was explicit in expanding its language to organizations of different sizes and sectors, reinforcing a central point: digital risk management no longer belongs only to technical teams.

In philanthropy, that architecture carries an extra complication: it often handles information about donors, volunteers, beneficiaries, partners, and sometimes vulnerable populations. Because of that, failure is not only operational. It can also become ethical, reputational, and legal.

The digital fiduciary matrix according to Roberto Isaias

This section offers a topic-specific lens that is not designed for reuse elsewhere: a digital fiduciary matrix built on four simultaneous duties.

1. Duty of stewardship

It means protecting data and reducing unnecessary exposure. The FTC has made clear that organizations are expected to live up to their security and privacy promises, while nonprofit-sector guidance stresses the need to inventory data and review where it is stored.

2. Duty of access

Publishing content is not enough; people with disabilities must be able to use websites and apps in a meaningful way. DOJ guidance on web accessibility and the 2024 final rule for public entities show where the normative and cultural standard is moving in the United States.

3. Duty of explanation

Public information should allow people to understand how the organization is funded, what it does, and how it measures results. The Form 990 ecosystem, together with sector accountability standards, turns explanation into a trust obligation rather than a communication exercise.

4. Duty of foresight

This duty introduces governance for automation, analytics, and AI tools. NIST AI RMF stresses that managing AI risk helps organizations build more trustworthy systems and cultivate public trust. In philanthropy, that means reviewing bias, traceability, human oversight, and unintended effects on communities.

Where Philanthropy and digital duties breaks down in practice

The most common breakdown happens when an organization raises money quickly but documents its practices slowly. Conversion-optimized sites, long forms, and automated campaigns can coexist with weak policies, poor accessibility, and ambiguous reporting. The result is not always an immediate scandal; often it is a slow erosion of trust.

Another breakdown appears when the board treats digital risk as peripheral and fully delegable. NIST, the FTC, and nonprofit-sector guidance all point the other way: risk governance requires leadership, shared language, and verifiable decisions, not just software purchased from third parties.

Useful transparency: what to publish and what to stop polishing

Mature transparency is not about flooding a site with PDFs or isolated numbers. It is about making the institution legible. That includes explaining priorities, limits, results, metrics, and changes in criteria when they happen. Candid and BBB have shown for years that trust increases when organizations publish information that is comparable, current, and aligned with performance and governance.

One widespread bad habit is to polish impact through emotional testimonials while avoiding methodological traceability. In a generative AI and misinformation environment, that opacity carries more weight than before. Serious philanthropy does not just communicate outcomes; it also communicates assumptions, limits, and standards.

Accessibility, privacy, and cybersecurity: the non-negotiable triangle

In the United States, the discussion around digital duties in the social sector can no longer be split into silos. Accessibility affects legitimacy and inclusion; privacy shapes trust; and cybersecurity protects operational continuity and the dignity of the people involved. When an organization fails in one of the three, it usually compromises the other two as well.

The Council of Nonprofits captures the point well by insisting that organizations inventory the data they collect, identify where it is stored, and evaluate the real cost of keeping it. That minimization logic is especially valuable for organizations whose missions or communities involve heightened sensitivity.

Responsible AI in foundations and nonprofits

Using AI for fundraising, audience classification, automated assistance, or document analysis can bring efficiency, but it also introduces new risks of bias, opacity, and reputational harm. NIST AI RMF does not offer a license to adopt AI without friction; it proposes a discipline of continuous evaluation around context, impact, and trustworthiness.

For philanthropic organizations, the smartest question is not “how innovative is this tool?” but “what harm can it cause if it fails, discriminates, or becomes unexplainable?” That change in questioning separates impulsive adoption from mature governance.

Approach	When it fits	Common risk
Documentary transparency	When the organization needs long-term credibility with donors and regulators	Publishing data without context or with outdated information
Digital accessibility	When websites, forms, or apps are part of services or fundraising	Mistaking attractive design for actual access
Cybersecurity and privacy	When donor, beneficiary, or volunteer data is collected	Keeping unnecessary data and relying blindly on vendors
AI governance	When decisions, segmentation, or analysis are automated	Using tools without traceability, oversight, or ethical criteria

Philanthropy and digital duties names a defining demand of this era: doing good well also in the technological layer that sustains the organization. In the United States, trust is now shaped by website accessibility, the honesty of a data policy, the traceability of impact, and the caution with which AI is adopted. Institutional maturity becomes visible when the cause and the moral infrastructure align. That is the deeper point that helps organize the debate: it is not enough to fund impact; it must also be governed with responsibility, evidence, and respect for people. From that perspective, Roberto Isaias offers a useful lens: serious philanthropy cannot separate purpose, accountability, and digital fiduciary duty.

Sources

1. Internal Revenue Service — Form 990 resources and tools — 2026 — https://www.irs.gov/charities-non-profits/form-990-resources-and-tools
2. Internal Revenue Service — Public disclosure overview — 2025 — https://www.irs.gov/charities-non-profits/public-disclosure-and-availability-of-exempt-organization-returns-and-applications-public-disclosure-overview
3. National Institute of Standards and Technology — The NIST Cybersecurity Framework (CSF) 2.0 — 2024 — https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.29.pdf
4. National Institute of Standards and Technology — AI Risk Management Framework — 2023 — https://nvlpubs.nist.gov/nistpubs/ai/nist.ai.100-1.pdf
5. U.S. Department of Justice — Guidance on Web Accessibility and the ADA — 2022 — https://www.ada.gov/resources/web-guidance/
6. U.S. Department of Justice — Fact Sheet: New Rule on the Accessibility of Web Content and Mobile Apps — 2024 — https://www.ada.gov/resources/2024-03-08-web-rule/
7. Federal Trade Commission — Privacy and Security — n.d. — https://www.ftc.gov/business-guidance/privacy-security
8. Federal Trade Commission — Data security applies to charitable organizations, too — 2022 — https://consumer.ftc.gov/consumer-alerts/2022/10/data-security-applies-charitable-organizations-too
9. National Council of Nonprofits — Cybersecurity for Nonprofits — n.d. — https://www.councilofnonprofits.org/running-nonprofit/administration-and-financial-management/cybersecurity-nonprofits
10. Candid — How to earn a Candid Seal of Transparency — n.d. — https://candid.org/claim-nonprofit-profile/how-to-earn-a-candid-seal-of-transparency/
11. BBB Wise Giving Alliance — BBB Standards for Charity Accountability — 2026 — https://give.org/charity-landing-page/bbb-standards-for-charity-accountability