Essential Workplace Policies

Several policies are required by law. Health and Safety Policy: employers with five or more employees must have a written health and safety policy that sets out how they manage health and safety, including the responsibilities of managers and the arrangements for specific hazards. Written statement of particulars: from day one, employees must receive a written statement covering pay, hours, holiday entitlement, notice periods, and other key terms — this is effectively the contract of employment.

You are also required to have disciplinary and grievance procedures that follow the ACAS Code of Practice. While the Code is not law itself, employment tribunals must take it into account, and a failure to follow it can increase any award against you by up to 25%. The ACAS Code is available free at acas.org.uk.

In addition to legally required policies, you should consider implementing the following:

• Equal opportunities policy: sets out your commitment to prevent discrimination on the grounds of age, sex, race, disability, religion, sexual orientation, and other protected characteristics under the Equality Act 2010
• Anti-harassment and bullying policy: makes clear what behaviours are unacceptable and the process for raising complaints
• Data protection policy: explains how you process employee and customer data in line with UK GDPR
• Sickness absence policy: covers reporting procedures, sick pay entitlements, and return-to-work processes
• Social media and IT usage policy: sets boundaries for use of company systems and personal social media during working hours

Having a policy is only useful if employees know about it and it is up to date. Best practice is to include all workplace policies in an employee handbook and to ensure each employee receives it (and signs to confirm receipt) on or before their first day. Policies should be reviewed at least annually and updated to reflect changes in employment law — for example, the right to request flexible working changed in April 2024.

Poorly drafted or outdated policies can be counterproductive — if your policy contradicts your actual practice or current law, it may be used against you in an employment tribunal. Consider having a solicitor or HR consultant review your policies, particularly if you are experiencing staff growth or have had any employment disputes. ACAS also offers free templates and helpline support for small employers.

Employers sometimes confuse legally required policies with those that are strongly recommended but technically discretionary. Anti-harassment and bullying policies are not individually mandated by a single statute, but the Worker Protection (Amendment of Equality Act 2010) Act 2023 introduced a positive duty on employers to take reasonable steps to prevent sexual harassment in the workplace. Failing to have a clear anti-harassment policy and training programme is strong evidence of non-compliance with this duty.

Whistleblowing (protected disclosure) policies are not compulsory for private sector employers below a certain size, but every employer should have one. The Public Interest Disclosure Act 1998 protects workers who make qualifying disclosures from detriment or dismissal. A written policy makes clear the reporting routes available, encourages staff to raise concerns internally, and demonstrates organisational commitment to transparency. Financial Conduct Authority-regulated firms are required to have formal whistleblowing arrangements regardless of size.

Social media policies have no specific statutory basis but are increasingly important. Courts and tribunals have upheld dismissals for social media posts that damaged an employer's reputation — but only where a clear policy exists and was communicated to the employee. A social media policy should cover what employees can say about the company, how they identify themselves as employees, and the consequences of breaches. Flexible working policies must reflect the April 2024 changes: employees now have the right to request flexible working from day one of employment, may make two requests per year, and the employer must respond within two months. An up-to-date written policy prevents inadvertent breaches of the statutory procedure.