Public Inspection

The Form 990 is a public document — that much is widely understood. What fewer people grasp is that the public-inspection obligation is a distinct legal requirement that sits alongside the IRS's own disclosure practice, and the mechanics of each differ in ways that matter.

Under Internal Revenue Code section 6104, a tax-exempt organisation must make three categories of documents available for public inspection: its application for exemption (the Form 1023, 1023-EZ, 1024 or equivalent), any supporting materials submitted with that application, and its Form 990 annual returns for the three most recent years. Private foundations must also make their Form 990-PF available under the same framework. The obligation falls on the organisation itself, not only on the IRS.

Two tracks: the IRS and the organisation

The IRS publishes the returns it receives through its own disclosure process, and aggregators such as Candid (formed by the merger of GuideStar and Foundation Center) and the Urban Institute's National Center for Charitable Statistics have built searchable databases on top of that release. But the organisation's own obligation under 26 U.S.C. § 6104 ↗ is independent: even where a return is already findable online, the organisation must still respond correctly to in-person and written requests.

An individual who appears in person at an organisation's principal office during regular business hours is entitled to inspect the documents immediately — without an appointment, without explaining why. If a written request arrives, the organisation has 30 days to provide copies. The copies must be provided without charge beyond a reasonable fee for reproduction and mailing. The organisation cannot demand that the requester identify themselves, and it cannot route them exclusively to a paid aggregator service as a substitute for the disclosure it is itself required to make.

There is, however, a significant exception. If an organisation makes its returns "widely available" — specifically, by posting them on its own website or through a third-party database in a format the IRS considers adequate — it is relieved of the obligation to provide paper copies in response to individual requests. Wide availability does not eliminate the in-person inspection right at the principal office. The IRS defines the technical requirements for what counts as widely available in Treasury Regulation 301.6104(d)-3-3), and the posting must permit downloading and printing a complete, legible document.

What can be redacted — and what cannot

Organisations have a narrow right of redaction. Schedule B, which lists substantial contributors by name and address, is withheld from public copies. The IRS itself does not release Schedule B for public charities. Everything else — officer compensation, grant recipients listed on Schedule I, governance answers in Part VI, the narrative explanations in Schedule O ↗ — must be provided intact. Redacting anything beyond Schedule B is a compliance failure, not a discretionary choice.

The application for exemption is subject to its own carve-out: information the IRS has determined to be trade secrets or commercially confidential may be withheld, but the standard is narrow and requires affirmative IRS action, not unilateral organisational judgment.

The cost of getting it wrong

Wilful failure to comply with the public-inspection requirement carries a penalty of $20 per day, capped at $10,000 per return, under IRC section 6685. "Wilful" does not mean malicious; it means the organisation was aware of the request and chose not to comply. Because automatic revocation removes exempt status after three consecutive years without filing, organisations that have fallen off the disclosure cycle face compounded exposure — their returns may be missing from public databases precisely because they were never filed.

The National Association of State Charity Officials notes that state charity registration requirements in many jurisdictions incorporate or parallel the federal inspection rules, meaning a failure at the federal level can trigger a separate state compliance problem. Staff at organisations that handle records requests should know the 30-day clock, the paper-copy rule, and the narrow list of permissible redactions — because the requester who walks in the door has the law clearly on their side.