Code of Conduct (UK)

A Code of Conduct in the United Kingdom sets out the standards, responsibilities, and procedures the organisation expects everyone to follow, under the framework of the Employment Rights Act 1996.

The primary employment law context is section 98 of the Employment Rights Act 1996, which governs the fairness of dismissal. An Employment Tribunal assessing whether a dismissal for misconduct was fair will consider whether the employer had a clear policy stating that the conduct in question was prohibited, whether that policy was communicated to the employee, and whether the disciplinary procedure followed the ACAS Code of Practice on Disciplinary and Grievance Procedures. A well-drafted Code of Conduct satisfies the first two requirements and supports fair, consistent disciplinary outcomes. The Advisory, Conciliation and Arbitration Service (ACAS) recommends that all employers have a written code of conduct as part of their suite of employment policies.

The Bribery Act 2010 imposes a corporate offence under section 7 on commercial organisations that fail to prevent associated persons from committing bribery. The Ministry of Justice guidance on adequate procedures under section 9 of the Act identifies a clear anti-bribery policy communicated to all staff as a core component of an adequate procedures defence. A Code of Conduct that addresses gifts and hospitality, conflicts of interest, and reporting obligations therefore serves a dual purpose: managing conduct risk and supporting the legal defence available under section 7. The Financial Conduct Authority (FCA) similarly requires FCA-authorised firms to maintain systems and controls addressing conduct risk under the Senior Managers and Certification Regime (SMCR), and a Code of Conduct is a central element of those controls.

The Health and Safety at Work etc. Act 1974 is a further statutory driver for codes of conduct in the United Kingdom. Section 2 of that Act requires every employer to confirm the health, safety, and welfare of all its employees, and section 7 imposes a reciprocal duty on employees to take reasonable care for the safety of themselves and others. A Code of Conduct that addresses safe working practices, reporting of hazards, and prohibitions on conduct that endangers others directly supports compliance with section 2. The Health and Safety Executive (HSE) has noted that a well-communicated code of conduct reduces the incidence of workplace accidents and near-misses. The Public Interest Disclosure Act 1998 protects employees who make qualifying disclosures about wrongdoing — including breaches of the Code of Conduct — from detriment and dismissal, and the code should reference the employer's whistleblowing policy. The Modern Slavery Act 2015 requires organisations with an annual turnover above £36 million to publish a slavery and human trafficking statement, and the Code of Conduct is the appropriate place to embed related obligations on all staff. Forms-legal.com provides this template as a starting point for United Kingdom-compliant documentation.

A Code of Conduct in the United Kingdom is needed by any organisation that employs staff, engages contractors, or has members whose conduct could expose the organisation to legal, regulatory, or reputational risk. The document becomes particularly critical in several contexts: when an organisation reaches a size where informal conduct expectations can no longer be reliably communicated by word of mouth; when an Employment Tribunal claim for unfair dismissal or discrimination highlights the absence of written policies; when the organisation wins a public sector contract that requires suppliers to demonstrate ethical conduct policies under the Public Contracts Regulations 2015; or when a regulator — such as the Financial Conduct Authority (FCA), the Care Quality Commission (CQC), or the Charity Commission — conducts an audit or inspection.

Organisations subject to the Bribery Act 2010 need a code of conduct as a component of their adequate procedures framework under section 7 of that Act. The Ministry of Justice guidance on adequate procedures specifically identifies communication and training as one of its six core principles — an organisation cannot credibly demonstrate adequate procedures without a written anti-bribery policy accessible to all staff. Similarly, organisations handling personal data under the UK GDPR and the Data Protection Act 2018 should include data protection obligations in their code of conduct to support compliance with the accountability principle under Article 5(2) UK GDPR, which requires organisations to be able to demonstrate compliance with data protection law.

The Equality Act 2010 makes employers vicariously liable for discrimination and harassment by their employees under section 109, but provides a statutory defence where the employer took all reasonable steps to prevent the act. Having and communicating a clear Code of Conduct that prohibits discrimination, harassment, and victimisation is among those reasonable steps. The Employment Appeal Tribunal has confirmed in multiple cases that the existence of a clear policy, properly communicated, is a significant factor in whether an employer has taken all reasonable steps. An annual review of the code to reflect developments in case law from the Employment Appeal Tribunal and guidance from ACAS and the Equality and Human Rights Commission (EHRC) is best practice in the United Kingdom.

A Code of Conduct in the United Kingdom must address a range of conduct areas to be legally effective and to withstand scrutiny from Employment Tribunals, the Equality and Human Rights Commission (EHRC), and regulators such as the Financial Conduct Authority (FCA).

Scope and applicability: The code should state clearly who it applies to — employees, workers, contractors, agency staff, volunteers — and in what contexts, including work-related social events and online conduct on social media platforms. The Employment Rights Act 1996 distinguishes between employees and workers, and the code should apply to both categories to maximise the employer's vicarious liability protection under section 109 of the Equality Act 2010.

Professional standards: Core obligations of honesty, integrity, competence, and respect should be set out in plain terms. The code should reference the organisation's duty under section 2 of the Health and Safety at Work etc. Act 1974 to provide a safe working environment and employees' reciprocal duty under section 7 of that Act to take reasonable care for their own and others' safety.

Equality and anti-discrimination: The code must address all nine protected characteristics under section 4 of the Equality Act 2010, define direct discrimination under section 13, indirect discrimination under section 19, harassment under section 26, and victimisation under section 27 in accessible terms, and specify the reporting procedure for complaints. A named equality contact or HR lead should be identified. The code should also reference the Public Interest Disclosure Act 1998 protections for employees who report discrimination.

Anti-bribery and corruption: The code must address the prohibition on offering, giving, requesting, or accepting bribes under sections 1, 2, and 6 of the Bribery Act 2010, including facilitation payments. A gifts and hospitality register and a requirement to declare conflicts of interest are standard provisions. The Serious Fraud Office (SFO) has prosecuted individuals for bribery under the 2010 Act, and the code should make clear that breaches may result in criminal prosecution as well as disciplinary action.

Data protection: The code should confirm employees' obligations under the UK GDPR and Data Protection Act 2018, including the duty to report personal data breaches to the Information Commissioner's Office (ICO) within 72 hours under Article 33 UK GDPR and to handle special category data only with specific authorisation.

Social media and communications: The code should address the use of social media in ways that could damage the organisation's reputation or constitute harassment of colleagues. The Employment Tribunal has upheld dismissals for social media misconduct where the policy clearly prohibited the conduct in question and the employee had been made aware of the code.

Conflicts of interest: Employees should be required to declare actual or potential conflicts of interest — including outside employment, financial interests in suppliers, and relationships with competitors — to their line manager or the HR function. The code should set out the process for managing disclosed conflicts.

Disciplinary consequences: The code must state that breaches may result in disciplinary action up to and including summary dismissal for gross misconduct, cross-referencing the organisation's disciplinary procedure and the ACAS Code of Practice on Disciplinary and Grievance Procedures. Under section 98 of the Employment Rights Act 1996, an Employment Tribunal will consider whether the code clearly prohibited the conduct and whether the employee was aware of it when assessing the fairness of a dismissal. A right of appeal against disciplinary decisions under section 10 of the Employment Relations Act 1999 should be stated. Forms-legal.com provides this template as a starting point for United Kingdom-compliant documentation.