RW Finance provides evidence-based company and market analysis for independent research. Information is educational, not personalized investment advice.
Chapter 3 of 5

Set Boundaries Around Money, Data, and Vulnerability

Protect yourself and others when a role touches cash, payments, identity, health information, children, or adults who need support.

intermediate22 minFree

Volunteer roles carry different levels of power. A person who welcomes visitors may answer routine questions while someone with the same title may handle cash, access identity records, or help a vulnerable adult with correspondence. Boundaries must match the actual power and information in the role.

This chapter builds specific safeguards before a trial begins. It does not replace the organization's policies, training, or legal duties. It helps you recognize when those controls need to exist.

Use written authority

Know:

  • what decisions you may make
  • what information you may access
  • what money you may handle
  • which systems and accounts are allowed
  • who must approve an exception
  • what you must report and to whom

An informal promise from one staff member may not authorize access to financial or health information. Ask for the policy or written role description.

Use the organization's privacy process rather than inventing one. If the process is unclear, do not accept the higher-risk task.

Protect cash and payments

Avoid taking cash unless the organization has:

  • a lawful process
  • receipts
  • a secure transfer point
  • a second person or reconciliation control
  • a clear limit
  • instructions for errors and suspected theft

Never send a volunteer-role payment through a personal account. Never use a personal card to make a large purchase and assume reimbursement. Never accept a direct request from a participant to hold money or make an investment. Refer the request to the organization.

Keep financial and identity data separate

If records include bank details, government identifiers, tax information, or passwords:

  • use organization-owned systems
  • access only the records needed
  • avoid screenshots and personal email
  • do not upload private data to an unapproved AI tool
  • lock the device and screen
  • follow retention and deletion rules
  • report a suspected exposure immediately

No volunteer should have a personal copy of a participant's identity document merely for convenience.

Handle health and personal information carefully

A role may involve medication reminders, appointments, care notes, or conversations about an illness. Training and supervision matter. A friendly volunteer is not automatically authorized to assess health, advise on treatment, or decide whether someone is safe.

If an urgent health or safety concern appears:

  1. Use the organization's emergency procedure.
  2. Contact appropriate emergency or crisis support if there is immediate danger.
  3. Tell the supervisor or designated person as soon as it is safe.
  4. Record only what the procedure requires.
  5. Do not promise secrecy when there is an immediate risk.

A course cannot determine whether a local duty to report applies. Follow the organization's policy and current law.

Respect vulnerability and autonomy

A participant may trust a volunteer quickly. That trust does not create authority to:

  • make financial decisions
  • change an account
  • provide transport without policy
  • enter a home unexpectedly
  • provide intimate care
  • become a substitute for a qualified professional
  • keep the relationship secret from the organization

Supporting autonomy means asking what the person wants, explaining what you can and cannot do, and offering the approved route to another service. It does not mean making every choice for them.

Keep contact within the role

Ask whether contact by text, social media, telephone, or home visit is allowed. Personal friendship can develop, but role boundaries should remain clear while you are acting for the organization.

Be especially cautious if:

  • a participant asks for money
  • someone wants to move communication to a secret channel
  • a request requires personal account access
  • a relationship becomes intimate or financially entangled
  • someone pressures you to circumvent a waiting list or eligibility rule

Raise the issue with a supervisor. If no safe process exists, pause the role.

Protect yourself as well

Boundaries are not only for other people. You may need to:

  • limit a shift when pain or fatigue rises
  • decline personal care outside training
  • avoid being alone in an unapproved setting
  • leave an unsafe event
  • correct a duty that exceeds the written role
  • stop after a specified time

The organization should have an incident process. A volunteer should not be expected to absorb unlimited emotional labor because the role is unpaid.

AI boundaries

If you use AI for summaries, captions, or schedules:

  • confirm the organization permits it
  • remove participant identifiers
  • use only approved accounts and storage
  • review every fact and instruction
  • keep a human decision point
  • never send cash, passwords, health records, or identity documents

A model can draft a message. It cannot give consent, make a safeguarding decision, or take responsibility for a participant.

A fictional boundary failure

A fictional volunteer at a community centre helps with a weekly meal. A familiar participant asks them to hold 200 dollars and pay a supplier because the usual process is slow. The volunteer agrees to help.

The safer response is: "I cannot take your money personally. I can ask the supervisor how the centre handles payments or supplier forms." The request may be legitimate, but the process must remain with the organization. The volunteer preserves trust by explaining the boundary rather than becoming an informal financial intermediary.

This example is illustrative. Local policy and law may impose additional duties.

Exercise: Write a boundary card

Complete:

> My role is [specific role]. > I may access [approved information or systems]. > I will not handle [money, passwords, health decisions, private records]. > If a participant asks for [outside-scope request], I will [refer or pause]. > I will report an incident to [role or contact]. > My access ends on [review date], and I will return or delete materials under [policy].

Keep the card with the role description.

What to carry forward

Money, data, and vulnerability require written authority, training, supervision, and reporting. The next chapter measures what a role actually delivered without turning helping into an earnings or health claim.