Definition
Compliance evaluation is an assessment focused on determining whether a programme adheres to applicable legal, regulatory, donor, and organizational requirements. Unlike other evaluation types that examine effectiveness or impact, compliance evaluation asks a narrower question: did the programme follow the rules?
This evaluation type systematically reviews programme activities, documentation, and expenditures against a defined set of requirements. These requirements may come from multiple sources: donor agreements (e.g., USAID Awards and Cooperative Agreements), national laws and regulations, organizational policies, or sector-specific standards. The output is typically a compliance determination, compliant, non-compliant, or non-compliant with findings, often accompanied by a list of deficiencies that require remediation.
Why It Matters
Compliance evaluation serves critical governance and risk management functions. For donors and funding agencies, it provides assurance that resources are being used according to agreed terms and that legal obligations are being met. For implementing organisations, it identifies gaps in systems and processes before they escalate into audit findings, sanctions, or loss of future funding opportunities.
The distinction between compliance evaluation and audit-evaluation is important: audits focus primarily on financial compliance and internal controls, while compliance evaluation can encompass programmatic, regulatory, and operational requirements beyond finances. Understanding this distinction helps organisations deploy the right assessment type for their needs.
In practice, compliance evaluations are often mandated by donors at specific intervals (mid-term, end-of-project) or triggered by risk indicators such as budget variances, implementation delays, or changes in key personnel. They are also valuable as pre-audit readiness exercises, allowing organisations to identify and address compliance gaps proactively.
In Practice
Compliance evaluations appear in several forms across the M&E landscape:
Donor compliance reviews are perhaps the most common. USAID, for example, requires recipients to maintain compliance with the Uniform Guidance (2 CFR 200) and specific award terms. These reviews examine procurement processes, subaward monitoring, financial management systems, and reporting requirements. The evaluation produces a compliance finding that becomes part of the official award record.
Regulatory compliance assessments focus on sector-specific requirements. Health programmes must comply with HIPAA and local health regulations; education programmes must meet accreditation standards; environmental programmes must adhere to safeguard policies. These evaluations often require subject-matter experts who understand the regulatory framework.
Organizational compliance audits examine adherence to internal policies and procedures. These may cover conflict of interest disclosures, safeguarding protocols, data protection measures, or procurement thresholds. While less visible than donor reviews, they are critical for institutional risk management.
Compliance evaluation differs from compliance-monitoring, which is an ongoing activity integrated into routine programme management. Compliance evaluation is typically a discrete, time-bound assessment with a specific scope and deliverable. It also differs from accountability-evaluation, which examines whether the programme is responsive to beneficiary and stakeholder needs, a broader question than rule adherence.
Effective compliance evaluations require clear scoping (which requirements apply?), evidence collection protocols (what documentation proves compliance?), and a structured reporting format that distinguishes between material and minor findings. The evaluation matrix for a compliance evaluation should map each requirement to specific evidence sources and verification methods.
Related Topics
- Audit vs Evaluation, Understanding the distinction between financial audits and broader evaluation approaches
- Compliance Monitoring, Ongoing compliance tracking versus discrete evaluation
- Donor Reporting, Regular reporting requirements that complement compliance evaluation
- Data Quality Assurance, Ensuring compliance evidence is reliable and verifiable