Values do not protect people on their own. People, roles, and process do.
I just received my Stanford record of completion for Ethics, Technology, and Public Policy for Practitioners, and the timing feels fitting. Not only did the certificate help to sharpen what I am taking forward, but it gave me a clear takeaway: civic values fail when nobody owns the process.
That sounds simple, but it is one of the easiest problems for organizations to miss. Any company or organization can say it cares about privacy. They could even say they care about values like transparency, accountability, accessibility, trust, and the list goes on. Then, to make those things “tangible,” they can even put those words on a website, in a policy, or into onboarding materials. However, if nobody is responsible for turning those values into actual process, beyond the documentation, they do not hold for long. Instead, they drift.
They can get watered down in handoffs, disappear in transitions, and get skipped when people are busy. There is also a misconception that things like values are supposed to be treated as “ideals” (rather than as operating expectations). And eventually, people start acting as if the values are still there, even when the process underlying them never truly existed in the first place or quietly broke down.
That is only one reason why governance matters much more than many people realize, because civic values fail when nobody owns the process. That is also what today’s post is about.
Civic values usually break down in the gap between intention and routine.
I think this is where many nonprofits, coalitions, civic groups, and volunteer-run organizations get stuck. The problem is not that they don’t care. It is that values often live at the “level of intention,” while work happens at the “level of process.” What happens if we do not know who has access to something, who approves that access, or where that information gets documented, handed off, or followed up on? What happens when leadership changes abruptly, and people are no longer sure who owns what?
That is where values either become real or fall apart.
Privacy is a good example, because a group may care deeply about privacy in theory. But if nobody owns the process for access, storage, sharing, handoff, review, or deletion, then privacy is not actually being protected. It is being assumed.
The same is true for transparency. It is not enough to want people informed. Someone has to decide what gets communicated, when, how clearly, and who is responsible for making sure that actually happens.
Accessibility, trust, and accountability all work the same way, too, and never stand on good intentions alone.
Never.
Policy is not the same thing as process.
Organizations often think they are covered because they have a policy, a statement, or a page on their website. But we must remember that a document is not the same thing as a process. For example, a privacy policy does not tell you whether roles are clear internally, whether people have been trained, whether someone knows what to do during a leadership transition, or whether safeguards still matter in practice.
That is where governance starts to matter. It is not just about “having rules,” but ensuring that values inform decision-making. Like, which workflows to use, how responsibility gets designated, and how things move forward as things change and shift. In other words, governance processes are what keep values from collapsing.
Governance does not mean extra work. It is the work, processes, and all.
When nobody owns the process, responsibility gets blurry fast.
Now, this is where the stakes become more obvious. If nobody owns the process, people start making assumptions, and assumptions aren’t necessarily decisions that move things forward, right? That is why, if people start making assumptions, then responsibility gets blurry. And once responsibility gets blurry, harm becomes much easier to normalize when we no longer make the decisions that move things forward.
In other words, this happens when one person assumes someone else has already handled something or a new leader assumes there is already a standard. Things can also be assumption-adjacent, like when a volunteer inherits a task without any context, or when a decision is made informally and never written down. In those scenarios, a handoff happens halfway or a question comes up, but nobody knows who is supposed to answer it.
That is how drift happens. Sometimes people call it mission drift or scope creep. Either way, when enough “drift” builds up, values stop functioning as guardrails, and they start looking more like branding.
I do not mean that cynically. I mean it structurally. Once nobody is clearly responsible for turning values into repeatable practice, those same values stop guiding the work in a durable way.
That might be manageable for a little while, but it usually does not hold.
It is the gap between public messaging and internal reality.
This is especially true in volunteer-run spaces.
Volunteer-run organizations often care deeply about their communities. But they are also more likely to face turnover, uneven capacity, limited time, and informal handoffs.
That does not mean they are less serious. They just need more practical governance than people often realize. For example, if a group is volunteer-run, governance cannot rely on everyone already knowing what to do. Nor can those same volunteers rely on one person carrying “institutional” memory forever. We aren’t immortal, and volunteer-run spaces cannot rely on people having the same assumptions about privacy, transparency, accessibility, or trust as they do in their paid day jobs. Otherwise, any organization becomes more fragile than it looks.
If a value matters, somebody should be able to point to how it shows up in the work. Not just in the mission or the language, but in the actual process. If they cannot, then it is not real.
Governance is how civic values survive contact with reality.
That may be the clearest way I know how to put it.
Governance is not there to make a group feel more official. It is there to make values usable.
It helps answer questions like, ‘who owns this process?’ or ‘who needs access?’
Those are not distractions from the mission. Instead, they’re part of what makes the mission sustainable and real. This all becomes much more useful when it helps people build clearer, more durable, and more aligned processes. That is where the work gets real.
And make no mistake, that IS the hard work.
At the end of the day
Civic values do not fail because people use the wrong words. They fail when nobody owns the process required to make those words real. That gap shows up between intention and practice, between policy and routine, and between what a group says it values and what its systems actually make possible.
Ultimately, governance is not extra, and it does not have to be confusing. It is the work that keeps values from disappearing the moment things get busy, messy, and unclear.
And right now, that feels like exactly the kind of work worth taking more seriously.
I will share more next week.