Ethics Policy UK: What to Include & Why It Matters

What this document is

An Ethics Policy is an internal document that sets out the standards of behaviour a business expects from its directors, employees, contractors, and often its suppliers too. It isn't a law, and it isn't a contract in the traditional sense, but it becomes part of the cultural and operational fabric of a company once adopted.

Think of it as the written answer to the question: 'how do we do things around here?' The policy typically covers areas like honesty in dealings with customers, respect in the workplace, how to handle conflicts of interest, gifts and hospitality, the company's stance on bribery and corruption, and the steps to take when someone spots behaviour that doesn't match the standards set. It sits alongside other governance documents such as an anti-bribery policy, a whistleblowing policy, and an equality and diversity policy, and in many cases references them directly.

A well-drafted Ethics Policy should be short enough that staff actually read it, but detailed enough that it gives real guidance when a judgement call is needed.

How to use this document

1. Decide the scope and audience. Before drafting anything, work out who the policy will apply to. Just employees? Or also directors, agency staff, contractors, and suppliers? The answer shapes the language you use and the expectations you can reasonably set. A policy aimed only at staff will read differently from one intended to govern third-party relationships as well.
2. Map the ethical risks specific to your business. A consultancy, a manufacturer, and an online retailer face very different ethical pressure points. Think about where things could go wrong: supplier kickbacks, data handling, honesty in marketing claims, treatment of junior staff, environmental impact. Building the policy around real risks makes it far more useful than a generic template that tries to cover everything in vague terms.
3. Draft the core principles in plain English. Write the policy in language the people reading it will actually understand. Avoid legalistic phrasing where possible. State the standards clearly, give practical examples of what they mean in day-to-day work, and make it obvious what to do when something feels wrong. If staff can't explain the policy in their own words after reading it, it needs rewriting.
4. Build in a reporting and escalation route. A policy that sets standards but gives no way to raise concerns is half a policy. Set out how someone raises an issue, who they raise it with, what protection they have if they do, and what will happen next. This section should align with UK whistleblowing protections under the Public Interest Disclosure Act 1998, which protects workers who report certain types of wrongdoing.
5. Launch, train, and review regularly. Once approved by the board or senior management, roll the policy out with proper communication, not just an email with an attachment. Train staff on what it means in practice. Then review it at least annually, or sooner if the business changes significantly, laws change, or an incident highlights a gap. A policy that hasn't been looked at for five years tends to stop being taken seriously.

Common questions