Top Compliance Risks in Education Acquisitions

When buying an education business, compliance risks can derail deals if not handled properly. Key challenges include Title IV funding rules, accreditation delays, data privacy laws, and tax or labor compliance issues. A single misstep — like failing to meet financial benchmarks or mishandling student data — can halt operations or lead to legal penalties. Buyers must perform a detailed due diligence checklist to avoid costly surprises.

Key Risks to Watch

• Title IV Compliance: Ownership changes trigger reviews; new rules since July 2024 require controlling owners to cosign agreements, making them personally liable for federal aid obligations.
• Accreditation: Not automatically transferable; approvals can take up to 24 months, risking enrollment freezes.
• Financial Red Flags: Issues like improper revenue recognition, misclassified expenses, or unpaid taxes can inflate liabilities.
• Data Security: Non-compliance with FERPA, COPPA, or GDPR can lead to lawsuits or funding losses.
• Labor Issues: Misclassifying staff or lacking proper IP agreements can create long-term liabilities.

Takeaway: Address compliance early — verify accreditation, audit financials, and secure legal guidance to navigate regulations and ensure smooth transitions.

5 Critical Compliance Risks in Education Acquisitions

1. Financial and Accounting Compliance Risks

Thorough financial due diligence is crucial to protect buyers from hidden liabilities that could jeopardize an education acquisition. Financial irregularities in education businesses can be subtle but costly. Many owner-operated schools use cash-basis accounting, which can obscure key liabilities like unpaid vendor bills or skew profitability due to the timing of large annual expenses, such as insurance or software license payments. Often, these undisclosed liabilities only surface after the deal closes, creating unexpected challenges for buyers.

Accounting Irregularities

One common issue is improper revenue recognition. For example, some schools record tuition revenue as soon as a student enrolls, rather than spreading it over the instructional period. Prepayments and tuition deposits should be treated as deferred revenue — a liability distributed over the service period — but are frequently misclassified as immediate income.

Another frequent problem is the mixing of personal and business expenses. Owner-operated schools may include personal expenses — like vehicle costs, travel, or salaries for family members — in the business''s financial records.

"Owner-operated trade schools frequently commingle personal expenses — vehicles, travel, family salaries — into school financials. Buyers applying a 4–5x multiple to inflated EBITDA overpay by hundreds of thousands of dollars."

To address this, it''s critical to recast at least three years of financial records to adjust for owner compensation before applying any valuation multiple.

Additionally, accounts receivable deserve close attention, particularly balances over 90 days past due. Student receivables older than 90 days are often uncollectible, yet they are sometimes still recorded as assets. Another concern is enrollment data manipulation, where withdrawn or non-completing students are included in headcounts. This practice can obscure declining completion rates and increase regulatory risks.

Tax Compliance Issues

Tax practices also demand careful scrutiny. Discrepancies between tuition billing records and tax returns can indicate misreported income or hidden liabilities. While asset purchases typically protect buyers from historical tax debts, certain deal structures — especially roll-ups with significant management continuity — can lead to "de facto merger" scrutiny, potentially making the buyer liable for the seller''s unpaid taxes.

Unpaid payroll taxes, sales taxes, and unemployment insurance can quickly drain cash after closing. To mitigate these risks, buyers should secure formal tax clearances and set up escrow accounts for known tax exposures before finalizing the deal. Holding back part of the purchase price until tax issues are fully resolved can also provide an added layer of protection.

"Even extensive lawyering cannot relieve the incoming board of responsibility for accrued salary or unpaid benefits."

Financial Reporting Standards

Education businesses must adhere to GAAP or other relevant reporting standards, especially regarding revenue recognition.

"The accounting basis can change how you view profitability, working capital, seasonality, and even valuation. Get it wrong and you risk overpaying or inheriting avoidable cash flow headaches."

For institutions receiving federal aid, compliance with the 90/10 rule is critical. This rule requires that no more than 90% of revenue comes from federal student aid. If federal aid accounts for more than 80% of total revenue, the business could be nearing the regulatory threshold and face potential sanctions. Accurate financial reporting is essential to maintain Title IV eligibility. Buyers should cross-check at least 24 months of bank statements against profit and loss statements and digital payment records to identify any unrecorded refunds, chargebacks, or revenue adjustments. Transitioning from cash-basis to accrual accounting can also uncover unrecorded payables and accrued liabilities.

2. Data Security and Privacy Compliance

Education businesses handle sensitive student information like names, addresses, and unique identifiers. Federal and state privacy laws strictly regulate how this data is collected, stored, and shared. Failing to comply can lead to penalties, lawsuits, loss of funding, and serious reputational harm.

Student Data Protection

To safeguard student records, compliance with FERPA is essential, along with COPPA for platforms catering to children under 13. Additionally, laws like the CCPA in California and international regulations such as the GDPR set further requirements for data handling. Many states also mandate that out-of-state online education providers register or obtain authorization before enrolling residents, especially for programs tied to degrees or professional licenses.

Before any sale or acquisition, it''s critical to map out how data is collected, where it flows, and who has access. Contracts with content creators should clearly include "work-for-hire" or full intellectual property assignment clauses to avoid disputes over ownership of data and content after the deal closes.

Cybersecurity Vulnerabilities

Weak security systems can leave businesses exposed to data breaches, costly fixes, and liability for past incidents. Technical evaluations often reveal outdated infrastructure, such as legacy learning management systems (LMS) built on obsolete tools, which can create serious vulnerabilities. Risks also arise when student data is stored in unsecured third-party tools or in accounts tied to personal email addresses rather than business entities.

Hiring a technical due diligence firm can help evaluate hosting costs, API dependencies, downtime history, and scalability. For example, requesting 24 months of uptime logs and incident reports from hosting providers can help uncover patterns of downtime or security issues. If infrastructure costs exceed 15% of revenue, it may signal inefficiencies or undersized systems that need immediate attention. In some cases, outdated systems may require a costly overhaul — potentially in the six-figure range — to ensure they meet modern scalability and security standards.

The Department of Justice''s M&A Safe Harbor offers acquirers the opportunity to self-disclose any discovered misconduct within six months of closing. Doing so can provide a presumption of declination, protecting buyers from regulatory penalties. Using this six-month window to identify and address cybersecurity weaknesses can also help prevent operational disruptions and ensure smoother transitions post-acquisition.

3. Federal Funding and Title IV Compliance

Federal student aid programs are a critical revenue source for many educational institutions. Schools receiving Title IV funding must adhere to strict financial responsibility standards, demonstrate administrative capability, and follow program integrity rules. A single compliance failure can result in losing funding eligibility, potentially jeopardizing the institution''s entire operation.

Maintaining Title IV Eligibility

To maintain Title IV eligibility, institutions must meet specific financial benchmarks, including a composite score, positive net worth, and liquidity requirements. Additionally, if a school''s Cohort Default Rate (CDR) exceeds 30% for three consecutive years, it automatically loses Title IV funding. For-profit schools must also adhere to the 90/10 rule, which limits federal student aid revenue to no more than 90% of total revenue.

Ownership changes add another layer of complexity. Such transitions trigger a mandatory review and renegotiation of the institution''s Program Participation Agreement (PPA). Starting July 1, 2024, controlling owners — those holding at least 50% control through voting rights or board appointments — must cosign the PPA. This requirement imposes joint and several liability for federal student aid liabilities, making new owners personally accountable for borrower defense claims or closed school loan discharges.

New owners must also provide two years of audited financial statements that meet Department of Education standards. If the institution fails these financial tests after acquisition, the Department of Education may require one or more letters of credit, calculated as a percentage of the Title IV funds received in the previous fiscal year. Furthermore, the Department may classify an institution as financially irresponsible if acquisition-related debt creates cash flow challenges that exceed available resources.

Impact of Department of Education Investigations

Investigations by the U.S. Department of Education can have a devastating impact. Active or unresolved inquiries can freeze Title IV disbursements, leading to severe liquidity issues during transitions. Without access to Pell Grants and federal loans, enrollment often plummets — sometimes within a single semester. The approval process for ownership changes, involving accrediting bodies and the Department of Education, can take 12 to 24 months. During this period, institutions may operate under provisional certification, which often includes stricter oversight and restrictions on launching new programs.

Given these risks, proactive preparation is essential. Buyers should conduct thorough pre-acquisition audits, focusing on the target institution''s compliance with the 90/10 rule and reviewing its CDR for the past three reporting periods. A CDR above 15% is considered a red flag, signaling potential regulatory and financial issues. Engaging specialized education law counsel early in the process ensures compliance with all Title IV change-of-ownership notification requirements. It also helps align the transaction structure — whether stock or asset purchase — with regulatory timelines and liability considerations.

4. Employment and Labor Compliance Risks

Labor-related compliance can present serious challenges for education businesses. These organizations often depend on instructors, tutors, and support staff, but informal hiring practices and misclassification of workers can lead to legal trouble. For instance, smaller or founder-led education companies might classify instructors as independent contractors when they should legally be employees. This misclassification can result in liabilities for unpaid wages, benefits, and taxes, along with penalties from federal and state labor agencies.

Employee Classification Issues

Misclassifying instructors as 1099 contractors instead of W2 employees is a common issue that carries significant risks. Buyers who acquire such businesses may inherit liabilities for unpaid payroll taxes, overtime, and benefits. Many of these arrangements are based on verbal agreements, which further complicates matters.

Another concern is intellectual property. Without proper work-for-hire or IP assignment agreements, the business may lack full ownership of its curriculum and course materials. This gap can lead to disputes after the acquisition is finalized.

Additionally, using instructors without proper credentials or with expired certifications poses regulatory risks. These risks can threaten the institution''s accreditation. Buyers should carefully audit personnel files to confirm that all background checks and state-required certifications are current and meet compliance standards.

Labor Law Compliance

Even after an acquisition, buyers can face successor liability for accrued wages and unpaid benefits if they retain the workforce. Courts may also apply "de facto merger" rules if the buyer continues operations without significant changes, exposing them to the seller''s past labor violations and contractual obligations. This mirrors risks seen in other compliance areas, where a lack of due diligence can lead to unexpected costs after the deal closes.

To mitigate these risks, buyers should:

• Review all active employment contracts, union agreements, and non-compete clauses for potential liabilities and ongoing obligations.
• Audit employment contracts and conduct thorough I-9 reviews to identify informal arrangements or misreported payroll expenses.

Regulatory scrutiny is increasing, particularly as ICE and the Department of Labor (DOL) tighten enforcement of Form I-9 and prevailing wage rules in 2026. Staying ahead of these changes is critical.

Key-person dependency is another operational risk. If a founder personally manages instructor relationships and onboarding without documented systems, staff turnover after the acquisition could disrupt operations. Buyers should request an operations manual that outlines instructor onboarding and regulatory reporting processes. This ensures the business can function independently of the founder''s institutional knowledge.

5. Institutional Governance and Accreditation

When it comes to maintaining operational continuity, governance and accreditation play a vital role alongside financial and data security due diligence. These factors directly impact an institution''s ability to function effectively and issue recognized credentials. Any missteps in these areas can disrupt operations and lead to significant financial risks for prospective buyers.

Accreditation Compliance

Accreditation is the cornerstone of a school''s ability to credential students and maintain enrollment. Without it, the institution essentially ceases to exist as a viable business. One critical point to understand is that accreditation does not automatically transfer during an acquisition. Accrediting bodies require a formal Change of Ownership (COO) notification and approval process, which can take anywhere from 12 to 24 months. During this time, the institution might be placed on probation, potentially halting enrollment and cutting off cash flow.

"Loss of accreditation eliminates Title IV eligibility and the school''s legal authority to grant credentials." — DealFlow OS

Before committing to any acquisition, it''s essential to confirm the institution''s current accreditation status in writing. Review all communications with accrediting bodies from the past five years, paying close attention to any show-cause orders, probation notices, or warning letters. These are red flags that could signal a risk of closure. Never proceed with finalizing an acquisition without securing written pre-approval from the accrediting body.

Governance Structure Risks

The governance structure of an institution carries significant regulatory and operational implications. For example, controlling owners must cosign the institution''s Title IV Program Participation Agreement (PPA), which makes them jointly and severally liable for federal student aid obligations. The Department of Education defines "control" as holding at least 50% of voting rights, having the authority to appoint board members, or possessing the power to block major decisions. Failing to identify all controlling entities can lead to PPA violations.

Effective governance also depends on how well leadership transitions are managed. Many trade schools and niche eLearning platforms rely heavily on the personal brand of their founders, as well as their relationships with employers and accrediting bodies. If a founder exits after an acquisition without a well-structured transition plan, it could destabilize operations and disrupt enrollment pipelines. To address this, include a 12- to 24-month seller transition agreement to facilitate the transfer of institutional knowledge and regulatory relationships. Additionally, conduct a thorough audit of governance documents to ensure intellectual property (IP) assignments and operational procedures are clearly documented.

Key Takeaways for Buyers

Buying an education or training business comes with its fair share of challenges, especially when it comes to compliance. Skipping steps in due diligence — whether related to accreditation, Title IV eligibility, or data privacy — can lead to halted cash flow or even federal investigations. Below, we''ve broken down the key compliance risks into four main areas: accreditation, Title IV funding, intellectual property, and employment compliance. Rushing this process could leave buyers exposed to expensive liabilities.

First, accreditation must be verified with documented evidence covering the past five years. Pay attention to any show-cause orders, probation notices, or warning letters. Keep in mind that accreditation doesn''t automatically transfer to new owners. A formal Change of Ownership approval is required, which can take anywhere from 12 to 24 months. During this period, the institution might face enrollment freezes, cutting off revenue streams.

For Title IV–eligible schools, two metrics are particularly important: the 90/10 rule and Cohort Default Rates (CDR). If federal aid revenue exceeds 80%, it''s a red flag for heightened risk. Additionally, a CDR above 30% for three consecutive years leads to an automatic loss of federal aid eligibility. Starting July 1, 2024, new regulations will require controlling owners to cosign the Program Participation Agreement, making them jointly liable for federal student aid obligations, including borrower defense claims.

On the intellectual property front, it''s critical to review all instructor contracts. These contracts should clearly state that the business owns course content, either through work-for-hire agreements or explicit IP assignment clauses. Vague licensing terms could allow content creators to reclaim their materials after the sale, creating potential headaches. Additionally, employment compliance is another area to review carefully. Asset purchases often transfer accrued employee wages and benefits, so these liabilities need to be accounted for.

To navigate these risks effectively, buyers should build a structured deal approach. This might include price adjustments, escrow holdbacks, or earn-outs tied to regulatory approvals. Engaging legal counsel with expertise in education law during the Letter of Intent stage is also crucial. They can help map out notification requirements and provisional certification timelines. By addressing compliance issues upfront, buyers can avoid unpleasant surprises after closing the deal.

FAQs

What due diligence should I do before buying a Title IV school?

Before purchasing a Title IV-eligible school, it''s crucial to perform detailed due diligence to ensure everything aligns with federal and state requirements. Start by confirming the school''s accreditation status and its compliance with state licensure rules. Look into its history for any regulatory actions that might raise red flags.

Next, evaluate the school''s financial health — this includes reviewing enrollment trends, how Title IV funds have been managed, and other key financial indicators. Operational metrics like retention and graduation rates can also provide valuable insight into the institution''s performance and student outcomes.

Finally, don''t overlook potential legal risks. Check for any pending lawsuits or unresolved compliance issues that could result in liabilities down the line. A comprehensive review of these areas will help you make an informed decision and minimize risks.

How long does accreditation change-of-ownership approval take?

Accreditation change-of-ownership approval usually takes between 12 and 24 months. This timeline includes formal notifications and detailed approval processes carried out by accrediting organizations. The exact duration can differ based on the specific accrediting body and the unique circumstances of the ownership change.

What deal terms can reduce compliance risk after closing?

To minimize compliance risks after the deal closes, focus on two key areas:

• Earnout arrangements: Make sure these are clearly defined and linked to post-close performance metrics that the buyer can directly influence. This clarity can prevent disputes down the road.
• Regulatory and licensing requirements: Confirm that all necessary accreditations and licenses are verified and properly transferred before the closing date. Taking care of this in advance helps prevent compliance headaches and ensures a smoother transition process.