California’s Fair Investment Practices by Venture Capital Companies Law (FIPVCC), established by SB 54 and refined by SB 164, is now a mandatory compliance reality. Beginning in 2026, venture firms meeting specific criteria must register with the Department of Financial Protection and Innovation (DFPI) and file annual reports regarding the demographic composition of their portfolio founders.
For purposes of the FIPVCC reporting framework, a “founder” generally refers to any individual who is identified by the venture capital fund or the portfolio company as part of the company’s founding team at the time of the fund’s investment. This typically includes individuals who founded the company, were named as founders in formation or financing documents, or otherwise held a founder‑level role when the initial capitalization or early institutional funding occurred. The focus is not on current job title or equity ownership at a later date, but on the individual’s status as a member of the founding team at the time the covered investment was made. Because neither the statute nor implementing guidance provides an exhaustive or universally applicable definition of “founder,” and because founding status may vary based on company history, documentation, and timing of investment, application of these requirements is subject to interpretation and may require fact-specific analysis by legal counsel to assess compliance risk.
The law applies to venture capital companies, including venture capital funds, venture capital operating companies, and any entity meeting California’s regulatory definition of a VC company that has a California nexus, and it requires these funds to collect, survey, and annually report standardized demographic data for all founding teams they invest in. This demographic data includes gender identity, race and ethnicity, LGBTQ+ status, disability status, veteran status, and California residency for each founding team member. For example, a fund might report that a portfolio company’s founding team includes two women, one Latino founder, and one founder who identifies as LGBTQ+.
Importantly, the reporting obligation is investment-specific rather than entity level: once a fund meets the California nexus and qualifies as a covered venture capital company, it must report founder demographic data for all portfolio companies in which it invested, regardless of whether those companies or founders have any connection to California.
California has positioned the FIPVCC as a transparency measure designed to illuminate the demographics of founders receiving venture capital financing, rather than to direct investment outcomes. However, for fund managers, the real challenge lies not in the policy objective but in the operational demands: broad statutory definitions, evolving administrative guidance, and a mandated founder survey process that must be integrated into existing deal workflows.
Core Obligations and Timelines
The statute imposes two primary recurring requirements:
- Registration: Firms must register with the DFPI by March 1 each year.
- Reporting: Firms must submit demographic and investment data by April 1 for the preceding calendar year.
The inaugural report, due April 1, 2026, will cover all investment activity from 2025. The DFPI has launched a dedicated reporting portal and provided standardized templates for founder surveys. Notably, these reports will be publicly accessible on the DFPI’s website. While the state emphasizes that penalties attach to registration or reporting failures, rather than the information being reported, the public nature of the data introduces a new layer of reputational consideration.
Defining a “Covered Entity” and the Indeterminate Scope
A critical challenge for firms is determining if they qualify as a “covered entity.” The law applies to “venture capital companies” that primarily engage in financing startups or emerging-growth companies and possess a California nexus.
However, the statute leaves the “primarily engaged” threshold largely undefined. Without a quantitative percentage or dollar-amount floor, hybrid investment vehicles or firms with diverse strategies may find themselves in a zone of ambiguity. The law utilizes an entity-by-entity approach, which likely sweeps in:
- Special Purpose Vehicles (SPVs)
- Co-investment vehicles
- Incubators and accelerators
- Family offices
Even organizations with no physical footprint in California are captured if they meet the nexus criteria.
The “Nexus” and Extraterritorial Reach
The nexus triggers are strikingly expansive. A firm is within the scope of the law if it:
- Headquartered or has a physical presence in California.
- Invests in companies based in or primarily operating in California.
- Solicits or receives investments from California residents.
The “solicitation” prong is particularly open-ended. Practitioners remain uncertain whether a single California Limited Partner (LP) or a solitary marketing meeting is enough to trigger statewide compliance. Furthermore, the rise of remote work complicates the “primarily operating” test; a firm could be pulled into the regime simply because a portfolio company’s distributed workforce has a functional presence in the state.
Operational Hurdles and Methodological Gaps
Reporting relies on standardized, DFPI-published founder surveys. While founder participation is voluntary, managers must demonstrate a good-faith effort to collect the data and build an auditable trail for when founders decline to respond. This raises several practical questions that current administrative materials do not fully answer:
- Team Fluctuations: How should firms classify teams when founders join or depart between funding rounds?
- Identity Complexity: How should multiracial or evolving self-identifications be handled in aggregating data to ensure accuracy without compromising privacy?
- Metric Weighting: To what extent should follow-on investments be weighted by ownership or control when calculating diversity-related investment metrics?
Because the DFPI has not yet prescribed comprehensive methodologies for these scenarios, firms must develop repeatable processes that can withstand regulatory examination.
Privacy, Reputational Risks, and Re-identification
The law’s public-posting requirement introduces risks that extend beyond the mechanics of filing. Even when data is stripped of direct identifiers, there remains a meaningful risk of re‑identification, particularly in niche sectors or in funds backing very small founding teams, where the limited pool of founders may allow external observers to infer who the data refers to.
Because the DFPI will host a centralized repository, media outlets, LPs, and advocacy groups will likely conduct comparative analyses between firms. Managers must harmonize their founder communications and privacy notices to account for this public-facing regulatory use case, ensuring that their narrative readiness matches their technical compliance.
Constitutional and Legal Outlook
The combination of nationwide reach and compelled data collection may invite constitutional scrutiny. In particular, the law’s assertion of jurisdiction over non-California venture capital entities based solely on limited instate nexus could be challenged under the Dormant Commerce Clause if it is viewed as regulating conduct occurring largely outside California or imposing burdens on interstate commerce that are clearly excessive in relation to the state’s local interests.
Additionally, while California courts generally sustain disclosure regimes for factual commercial information, the sensitive nature of demographic data may raise First Amendment concerns regarding compelled speech. Until these issues are adjudicated, out‑of‑state managers will need to balance conservative compliance planning against the potential for future constitutional challenges.
Strategic Recommendations
To navigate this maturing environment, general partners and sponsors should:
- Map the Fund Complex: Analyze all filing firms (including SPVs) against California nexus criteria to identify which specific entities must register.
- Operationalize the Workflow: Establish documented outreach protocols for founder surveys, including logic for data aggregation, cell-suppression safeguards, and recordkeeping.
Conclusion
The FIPVCC is fundamentally a disclosure regime, and its real impact is operational: fund managers must develop reliable, repeatable processes to collect survey responses and report demographic data for every in-scope investment. The statute’s broad definitions and the DFPI’s evolving implementation guidance mean that managers cannot rely on ad hoc outreach or manual tracking to meet their obligations. Instead, firms should expect annual, time compressed reporting cycles that require coordination across investment teams, operations, and compliance. Building systems that capture survey distribution, track founder responses, and assemble the required data efficiently will be essential as DFPI continues to refine its reporting expectations and expands its administrative infrastructure.
With the first reporting cycle approaching, managers should treat 2026 as the catalyst to build durable internal workflows, founder survey protocols, data tracking systems, and clear compliance ownership that can scale over time. Firms that invest early in structured processes, defined roles, and internal controls will be better positioned to meet the law’s ongoing disclosure demands and avoid lastminute reporting risk. This foundational work will not only reduce operational strain during peak filing periods but also help position firms for a regulatory environment that is clearly trending toward more intensive transparency requirements year over year.
