The Essentials of California Venture Capital Diversity Reporting

If your firm has ever taken a meeting with a California-based LP, invested in a startup with any operations in the state, or simply marketed your fund to California residents, there is a reasonable chance you are now subject to a new set of compliance obligations.

California's Fair Investment Practices by Venture Capital Companies Law—universally referred to as the FIPVCC—is live, its deadlines are within weeks, and the reporting architecture it demands is unlike anything most VC firms have had to build before.

This article walks through what the law actually requires, who it applies to, and where the real operational complexity lies.

---

Where the Law Came From

The FIPVCC began as California Senate Bill 54, passed in 2023. It was subsequently replaced by Senate Bill 164 in 2024, which made two consequential changes.

First, enforcement and administration moved from the California Civil Rights Department to the California Department of Financial Protection and Innovation (DFPI).

Second, covered-entity scope narrowed toward firms that actually conduct venture capital activity, rather than broadly sweeping in any entity managing third-party assets.

The law is codified under California Corporations Code § 27500 et seq. Its purpose is to increase public visibility into the demographic composition of founding teams receiving VC backing.

It does not impose quotas, hiring mandates, or investment targets. It is a disclosure and data collection regime with enforceable deadlines.

---

Who Is Actually Required to Comply

The FIPVCC applies to "covered entities," and determining whether your firm qualifies requires a three-part test. All three parts must be satisfied.

Coverage is tested at the individual fund or vehicle level, not only at adviser level.

A manager with multiple funds should evaluate each fund and each SPV independently.

Step one: Does the entity qualify as a "venture capital company"?

Under California Code of Regulations § 260.204.9(a)(4), a fund is a venture capital company if it meets any one of three conditions.

First, at least half of its assets during each annual period from initial capitalization must be venture capital investments or derivative investments, valued at cost and excluding certain short-term investments.

Second, the entity can qualify as a venture capital fund under SEC Rule 203(l)-1 and the Investment Advisers Act of 1940.

Third, the entity can qualify as a venture capital operating company under DOL Rule 2510.3-101(d).

The definition of "venture capital investment" is broad and often decisive.

It includes securities in an operating company where the adviser, fund, or an affiliate has management rights.

Management rights include substantial participation rights, influence over operations, or meaningful guidance over business objectives.

Board seats and board-observer seats typically satisfy this test in practice.

Derivative investments, including conversions and certain post-investment securities events, also matter for the threshold.

Step two: Does the entity primarily engage in investing in startup, early-stage, or emerging growth companies?

The statute does not define startup, early-stage, or emerging growth. That ambiguity is intentional, but it creates uncertainty for compliance teams.

Managers should review offering documents, investor materials, and strategy statements to support how the business is characterized.

Step three: Does the entity have a California nexus?

Only one of four possible criteria is needed to satisfy the nexus requirement.

First, the entity is headquartered in California.

Second, the entity has a significant presence or operational office in California. These phrases remain undefined in guidance.

Third, it makes venture investments in California-based businesses or companies with significant operations in California.

Fourth, it solicits or receives investments from California residents.

This last prong can be broad enough to include firms with minimal in-state footprint.

In practice, firms with a single California LP can be in scope.

---

The Two Deadlines You Cannot Miss

The timeline is tightly structured and operationally important.

March 1, 2026 — Registration

Every covered entity must register with the DFPI through the VCC Registration Portal.

Required information includes the entity name, designated point of contact's name, title, and email, plus entity contact details.

The contact information must be kept current and updated with annual filings.

As of now, the registration portal has been described as still under development, so firms should monitor DFPI communications closely.

April 1, 2026 — First Annual Report

The first annual report covers qualifying venture capital investments made during calendar year 2025.

After that, filings are due April 1 each year.

---

What the Annual Report Must Actually Contain

The annual report is not a single data point. It has several required sections.

Founding team demographics

For each portfolio company in scope during the prior year, firms must provide aggregated demographic information on founding team members.

Required categories include gender identity, race, ethnicity, disability status, LGBTQ+ identification, veteran status, California residency, and decline-to-respond status.

The coverage is limited to what founders voluntarily provide through the DFPI survey.

Diverse founder investment metrics

The report must disclose the number and dollar amount of investments in businesses considered primarily founded by diverse founding team members.

Those percentages must be shown as part of total investments and broken out by each demographic category.

"Diverse founding team member" includes self-identification as a woman, nonbinary, Black, African American, Hispanic, Latino/Latina, Asian, Pacific Islander, Native American, Native Hawaiian, Alaskan Native, disabled, veteran or disabled veteran, lesbian, gay, bisexual, transgender, or queer.

A company is considered primarily founded by diverse members only when more than half of the founders respond and at least half of respondents are within the qualifying categories.

Investment-level data

The report must include the total dollar amount invested in each portfolio company during the prior calendar year.

It also must include each company's principal place of business.

This portion of the filing is required regardless of whether any founders completed the survey.

Consolidated reporting

A controlling entity may file a consolidated report for multiple covered entities.

Although "control" is not yet precisely defined in regulation, many firms should be able to consolidate when appropriate.

---

The Survey Process and Why It Creates an Architecture Problem

The DFPI standardized survey form is the required source of founder data.

Firms cannot design and deploy arbitrary forms for this filing requirement.

Timing and anti-coercion rules

Surveys may be distributed only after two events occur: investment agreement execution and the first transfer of funds.

The rule is designed to avoid any perceived coercion during fundraising or diligence.

The process cannot incentivize or influence whether a founder chooses to participate.

Anonymization and disclosure requirements

The survey form must state that participation is voluntary, that there will be no adverse action if declined, and that only aggregated anonymized data will be submitted.

The FIPVCC requires collection and reporting in a way that does not associate any response with an individual founder.

This requirement is architectural, not simply contractual or policy-based.

If a system can link founders to individual responses at any stage in a persistent way, it likely fails the requirement.

Single-founder companies create additional re-identification risk and must be shielded from inference.

---

Recordkeeping, Fees, and Enforcement

Covered entities must retain all records related to reporting obligations for at least five years after each report is delivered.

The DFPI can examine records and request documents and written responses during examinations.

Each filing carries a minimum $175 fee, subject to administrative adjustment.

If a report is late, the DFPI is required to send notice and allow a 60-day cure period.

After the cure period, the commissioner may seek cease-and-desist remedies, attorney-fee recovery, injunctive relief, and civil penalties of up to $5,000 per day.

Reckless or knowing violations can support higher amounts.

---

A Note on Legal Uncertainty

Questions remain around what counts as "significant presence," what is an "operational office," and how narrowly "significant operations" in California should be interpreted.

The statute's broad nexus provisions can create practical overlap concerns, particularly for national funds.

Until there is stronger guidance or court rulings, most compliance teams proceed as if in scope where these criteria are arguably met.

---

What Firms Should Be Doing Right Now

Confirm vehicle-level coverage now. A single manager can have a mix of covered and non-covered vehicles.

Build a complete 2025 investment dataset now, since the first report is already tied to that year.

Identify all relevant founding team members, distribute standardized surveys when timing rules are satisfied, and validate your anonymization architecture.

Monitor DFPI portal readiness and public guidance closely before and after registration and filing milestones.

The deadlines are near, and missing 2026 preparation materially increases filing risk.

---

The Bottom Line

This compliance framework is technically demanding, and that complexity is intentional.

To succeed, firms need systems that separate invitation workflows from response processing, aggregate data in real time, and preserve required audit records without storing identity-linked responses.

Comply with VCC was built for this exact model: invite identity never sees survey responses, responses are aggregated immediately, solo-founder companies are shielded, and a five-year retention trail is preserved without identity linkage.

If California venture capital diversity reporting is required for your firm, this year is the time to implement an architecture-ready workflow.

If this reporting is required, start your 2025 filing at https://complywithvcc.com.