Aid Donor Rules vs Local Law: An NGO Compliance Guide

A grant agreement can be detailed enough to feel like law. It may prescribe who can be hired, which suppliers can be used, what data must be reported, how the donor is acknowledged and which sanctions rules must be followed. But an NGO operating in another country still answers to the law of that country. A donor policy can create a contractual obligation; it does not, by itself, repeal employment, privacy, tax, NGO, procurement or criminal law. The difficult cases arise when both sets of rules point in different directions and programme staff are told simply to “follow the donor.”

The First Question Is Whether There Is a Real Conflict

Not every difference is a legal conflict. A donor may impose a stricter internal standard than local law, and the NGO may be able to follow both. A conflict exists where complying with one obligation would breach another, or where the donor requires an act that local law prohibits or conditions differently. Before escalating, the NGO should identify the exact instruction, the contract clause that supports it, the local legal rule, the people affected and the operational deadline. Vague statements that “local law does not allow this” are as unhelpful as vague statements that “the donor requires it.”

Grant Agreements Themselves Often Expect Compliance With Law

Modern donor terms usually recognise that their instructions operate within a legal environment. The UK Cabinet Office’s December 2025 Model Grant Funding Agreement, for example, requires the grant parties to comply with their respective data-protection obligations. In its processor clauses, it expressly requires the processor to notify the controller if an instruction appears to infringe data-protection legislation. That is a valuable wider principle: a grantee is not expected to silently carry out an unlawful instruction. The agreement should contain a route for raising the problem and documenting an alternative.

Example One: Beneficiary Data

Suppose a donor asks a Ugandan or Kenyan NGO to upload full beneficiary names and identity numbers to an overseas platform. The grant may contain broad audit or verification rights, but local data law still matters. Kenya’s Data Protection Act requires lawful, fair and transparent processing, purpose limitation and data minimisation, while Uganda’s Data Protection and Privacy Act requires a lawful basis, a specific purpose and information to data subjects about recipients and retention. The response is not automatically to refuse. It is to ask whether the donor can achieve verification through aggregate data, pseudonymised records, sampling or a narrower set of identifiers, and to address any cross-border-transfer requirements.

Example Two: Sanctions Screening

Sanctions clauses can create a different kind of tension. A foreign donor may require screening against its own national lists even where the local NGO is not directly subject to every part of that foreign sanctions regime. Contractually, the NGO may have accepted the screening obligation. Legally, however, the organisation still needs to consider local privacy, non-discrimination and sector rules when collecting identifiers and making exclusion decisions. FATF’s current Recommendation 8 approach is targeted and proportionate rather than a mandate to impose blanket controls on all NPO activity. The NGO should therefore determine which sanctions rules are legally applicable, which are contractual risk controls, what screening is proportionate, and how false positives or humanitarian exceptions are handled.

Example Three: Employment

Funding instructions often arrive faster than labour law allows. A donor may suspend a project and state that costs incurred after a particular date will not be reimbursed. That does not necessarily permit an NGO to dismiss staff the same day. Kenya’s Employment Act imposes procedural and financial requirements for redundancy, including notice to affected employees or unions and the labour officer, selection considerations and severance. Uganda’s Employment Act was amended in 2026 to expressly recognise redundancy and the circumstances in which fewer employees may be required. Donor eligibility rules determine who ultimately pays; they do not erase the employer’s statutory duties.

Example Four: Publicity and Branding

A donor may require logos, public acknowledgement, photography or beneficiary stories. Local law, security conditions or safeguarding duties may make some publicity unsafe or unlawful. The problem is especially acute for survivors, children, refugees, human-rights defenders or communities in politically sensitive programmes. The NGO should not assume that a contractual visibility clause authorises disclosure of personal information or overrides consent and protection rules. The better course is to raise the risk before publication, propose anonymised or non-identifying alternatives, and obtain written approval for any departure from the branding plan.

Example Five: Procurement

Donor procurement rules may also conflict with local legal requirements or market realities. A donor may insist on a competition method, supplier eligibility rule or approval threshold that does not align neatly with national tax, licensing, import or public-procurement obligations applicable to the NGO or a government partner. The correct response is to map both systems and comply with the stricter rule where both can be met. Where they cannot, the NGO should seek a written waiver, amendment or approved procurement method before committing funds. Quietly ignoring one set of rules creates an audit problem later and can also expose staff personally.

Example Six: Political Neutrality

A donor may want advocacy, campaigning or public messaging that is lawful in the donor’s country but restricted for the recipient organisation’s legal form. Uganda offers a concrete example. The Non-Governmental Organisations Act requires NGOs to be non-partisan and prohibits fundraising or campaigning to support or oppose a political party or candidate. It also requires organisations to operate consistently with Ugandan law and to have understandings with donors and partners addressing important terms. A donor’s programmatic preference therefore has to be translated into activity that the local NGO is legally permitted to undertake.

Identify the Hierarchy Before Signature

The easiest conflicts are the ones found before the grant is signed. The NGO should review the agreement against the laws governing its registration, employment, taxes, data, financial controls, programme sector and operating locations. Clauses that deserve particular attention are those allowing the donor to change policies by notice, requiring compliance with foreign laws, demanding unrestricted access to records, prescribing staff action, or imposing publicity and sanctions controls. If a clause could require something unlawful, the agreement should say that performance is subject to applicable mandatory law and should contain a process for resolving the inconsistency.

When the Conflict Appears Mid-Grant

If the issue arises later, programme staff should avoid two opposite mistakes: obeying the donor without legal review, or refusing immediately without proposing a route forward. The NGO should pause the affected step where feasible, obtain local legal or specialist advice proportionate to the risk, explain the conflict in writing, and suggest a lawful alternative that still protects the donor’s objective. The request for clarification should identify the clause, the legal obstacle and the practical consequence. If extra cost or delay will result, that should be stated at the same time.

Written Clarification Protects Both Sides

A telephone assurance from a donor officer can be useful operationally but weak in an audit or dispute. If the donor accepts an alternative, the NGO should obtain written confirmation, an approved deviation, waiver, grant amendment or other document recognised by the agreement. This is particularly important where the change affects eligibility of costs, data disclosure, procurement, staffing or visibility. The file should show not only that the NGO raised the problem, but that the person approving the solution had authority to do so.

Do Not Manufacture Compliance

Where the donor refuses to modify an instruction that would require unlawful conduct, the NGO should not create the appearance of compliance through inaccurate reporting, informal workarounds or off-book arrangements. The difficult choice may be to decline the activity, suspend a payment, renegotiate scope or, in serious cases, refuse or exit the funding. That can be financially painful. It is still safer than converting a contractual problem into regulatory, civil or criminal exposure.

The Practical Rule

Donor conditions matter because the NGO agreed to them and because non-compliance may lead to suspension, repayment or termination. Local law matters because the organisation, its board and its staff operate under it. Mature grant management does not pretend one automatically defeats the other. It identifies the conflict early, records the legal basis, seeks written resolution and changes the programme before people are placed in an impossible position. A donor policy may govern the grant. It does not become the law of the country merely because it appears in the annex.

Source note. This article draws on the UK Cabinet Office Model Grant Funding Agreement of 1 December 2025; Kenya’s Data Protection Act 2019 and Employment Act; Uganda’s Data Protection and Privacy Act 2019, Non-Governmental Organisations Act 2016 and Employment Act as amended in 2026; FATF’s present Recommendation 8 framework for non-profit organisations; and current humanitarian data-responsibility guidance. The donor materials are used as contractual or comparative examples. They do not become domestic law merely because a grant refers to them.

Suggested citation: 

Ronald Serwanga, “Aid Donor Rules vs Local Law: An NGO Compliance Guide” East Africa Legal Insight (4 September 2026).