Back to all posts
Venture CapitalRegulationComplianceCalifornia

California's VC Diversity Reporting Requirements Are Here: What SB 54 Means for Your Firm

March 3, 202610 min read

As of March 1, 2026, California's mandatory diversity reporting regime for venture capital firms is live. If your fund has any nexus to California — even a single LP in the state — you may already be behind on registration. Here's what you need to know, what you need to do, and how the industry is responding.


The Law: SB 54 and the Fair Investment Practices Act

Originally passed as SB 54 and subsequently amended by SB 164, the Fair Investment Practices by Venture Capital Companies Act (FIPVCC) creates a first-of-its-kind mandatory diversity reporting framework for the venture capital industry. The California Department of Financial Protection and Innovation (DFPI) is the enforcing body, and the program went live with a dedicated reporting portal in January 2026.

The law's stated goal is transparency: by requiring VC firms to report the demographic composition of the founding teams they fund, California aims to quantify where venture capital is actually flowing and whether underrepresented founders are receiving their share. It does not impose quotas or allocation mandates — this is a reporting and disclosure regime, not an affirmative action program. But the data will be public, and the implications of that transparency are significant.


Who's Covered: The Net Is Wider Than You Think

The FIPVCC defines a “covered entity” as any venture capital firm that meets any one of the following criteria:

  • Headquartered in California — the most obvious category, covering hundreds of firms in the Bay Area, LA, and San Diego
  • Invests in California-based portfolio companies — if your fund has backed companies based in or primarily operating in California, you're covered regardless of where your firm is located
  • Solicits or receives capital from California residents or entities — this is the provision catching the most firms off guard

That third criterion is the one that dramatically expands the law's reach. If your fund has a single limited partner based in California — whether an individual, a family office, a pension fund, or a university endowment — you may qualify as a covered entity even if your firm has no California office and no California portfolio companies. Given that California is home to CalPERS, CalSTRS, and dozens of the nation's largest institutional allocators, the practical effect is that a significant portion of the U.S. venture industry is swept in.

Are You a Covered Entity?

Many out-of-state firms are discovering they fall under the FIPVCC only now. If you have raised capital from any California LP — even indirectly through a fund-of-funds structure — the safest assumption is that you are covered. Orrick, Ropes & Gray, Cooley, Goodwin, Gibson Dunn, and Morrison Foerster have all published detailed guidance to help firms assess their status.


What Must Be Reported

Covered entities must file annual reports on a fund-by-fund basis, including SPVs. Each report must detail:

  • Demographic information about the founding team members of portfolio companies in which the fund invested during the prior calendar year
  • Total capital invested in those companies
  • A breakdown between diverse and non-diverse founding teams, as defined by the DFPI's standardized categories

The demographic data is collected through a standardized DFPI survey that must be sent to portfolio company founders after the investment closes. This is an important procedural requirement: the survey cannot be part of pre-investment diligence. The law explicitly separates the diversity data collection from the investment decision to prevent any suggestion that demographic information influenced deal selection.

Founder participation in the survey is voluntary, and the data submitted to the DFPI must be anonymized before filing. Firms never see individual founder responses — the recommended approach is to use a third-party aggregation platform that collects raw responses and returns only anonymized, aggregated statistics to the firm for reporting purposes.


The 2026 Deadlines

The timeline is compressed, and the first deadlines are already upon us:

March 1, 2026

Registration with DFPI. All covered entities must register with the Department of Financial Protection and Innovation. This deadline has already passed.

April 1, 2026

First annual report due. The initial filing covers all investments made during calendar year 2025. After this date, reports will be made publicly available on the DFPI's website.

There is a minimum $175 filing fee per report submission. Given the fund-by-fund reporting requirement, firms with multiple active vehicles should budget for multiple filings.


Penalties for Non-Compliance

The FIPVCC includes a graduated enforcement mechanism. If a covered entity fails to file, the DFPI issues a notice providing a 60-day cure window. If the entity still fails to comply after that period, the penalties escalate quickly:

  • Cease and desist orders — the DFPI can order non-compliant firms to halt certain activities
  • Attorney's fees — enforcement costs can be assessed against the non-compliant entity
  • Fines up to $5,000 per day — for standard violations, with higher penalties available for reckless or knowing non-compliance

The Real Risk Isn't Just Fines

While the daily fine amount is manageable for most VC firms, the reputational risk may be more consequential. Reports filed after April 1 will be publicly available on the DFPI's website. Firms that are visibly late, non-compliant, or absent from the registry will face questions from LPs, portfolio companies, and prospective founders — especially as institutional allocators increasingly incorporate ESG and diversity metrics into their own reporting requirements.


Where Things Stand: The NVCA Push for Postponement

The National Venture Capital Association (NVCA) submitted a formal request on February 9, 2026 to Governor Newsom and the DFPI asking for a postponement of both the registration and reporting deadlines. The industry group cited the compressed implementation timeline, the fact that the DFPI's registration portal was still pending as of late February, and the operational burden on smaller firms as justifications for delay.

As of this writing, no extension has been granted. The March 1 and April 1 deadlines remain in effect. The DFPI has stated that any changes will be announced on the VCC Reporting Program homepage, which launched on January 23, 2026.

The DFPI has published the survey template and reporting forms on its program page, and these are now available for download. Firms should not wait for a potential postponement that may never materialize — the prudent course is to begin compliance immediately.


What Firms Are Doing Right Now

Given the tight timeline, the compliance response has taken several parallel tracks:

1. Updating Post-Closing Workflows

The most immediate operational change is integrating the DFPI standardized founder survey into existing post-closing processes. Every investment that closed in 2025 requires a corresponding survey to be sent to the founding team. Firms are also building internal tracking systems to capture the required data points — investment amounts, portfolio company locations, and survey response status — across all 2025 deals.

2. Third-Party Survey and Aggregation Platforms

Because the law requires anonymized reporting and prohibits firms from seeing individual founder responses, the recommended architecture is a third-party platform that sits between founders and the deal team. The platform collects raw demographic responses, aggregates them, and passes only anonymized statistics to the firm for filing. Novata is one platform specifically designed for this use case, and several leading law firms are recommending clients explore these tools to ensure proper data separation and audit trails.

3. Legal Counsel and Compliance Guidance

The major VC-focused law firms have mobilized quickly. Orrick, Ropes & Gray, Cooley, Goodwin, Gibson Dunn, Morrison Foerster, Cleary Gottlieb, and STB Law have all published detailed compliance guides covering threshold questions (am I covered?), operational playbooks (how do I set up the survey workflow?), and filing mechanics (what goes in the report?). For firms without in-house regulatory counsel, engaging one of these firms is the fastest path to understanding obligations.

4. Record-Keeping Infrastructure

The FIPVCC requires firms to preserve backup data for at least five years after each report is filed. This means firms need a durable data management system, not just a one-time spreadsheet solution. The combination of fund-by-fund reporting, annual filing cycles, and multi-year retention requirements points toward purpose-built compliance tooling rather than ad hoc processes.


The Bigger Picture: What This Means for the Industry

California is the first state to impose mandatory diversity reporting on the venture capital industry, but it is unlikely to be the last. The FIPVCC establishes a template that other states with significant VC ecosystems — New York, Massachusetts, Texas — could adopt or adapt. The data that begins flowing to the DFPI in April 2026 will, for the first time, create a public, standardized dataset showing where venture capital is flowing across demographic lines.

For LPs, this data will become another input in manager evaluation. Institutional allocators already tracking diversity metrics internally will now have a state-verified external source to benchmark against. For fund managers, the reports will create both accountability and competitive differentiation — firms with strong diversity track records will have public data to point to, while those lagging will face harder questions in fundraising conversations.

For founders, the implications are more nuanced. The law does not change the investment decision itself — it only measures outcomes after the fact. But the existence of a public reporting regime creates soft incentive structures: firms that know their numbers will be published have a reason to at least examine whether their deal pipeline and outreach are reaching a representative set of founders.

The Bottom Line

For any firm with a California nexus — even a tenuous one — the window to register and prepare the first report is extremely compressed. If you haven't already registered with the DFPI, that should be the immediate priority. If you haven't begun collecting demographic data from 2025 portfolio companies, that process needs to start now. The April 1 deadline is less than 30 days away, and the data will be public.


Sources: VCC Reporting Program — DFPI; Venture Capital Diversity Reporting Requirements in California — Orrick; California's VC Diversity Registration and Reporting Deadlines Approach — Ropes & Gray; Goodwin, Morrison Foerster, Gibson Dunn, Cleary Gottlieb, STB Law. This article is for informational purposes only and does not constitute legal advice. Consult qualified counsel for compliance guidance specific to your firm.

Need Help Navigating VC Diversity Reporting?

AltSight Analytics helps venture capital firms build the data infrastructure and compliance workflows needed to meet California's new reporting requirements — from survey distribution and anonymized aggregation to filing-ready reports.

Reach out to scott@altsight.ai for more help getting your firm compliant.