Essential HR Policies Every Business Needs

Every organisation needs a solid foundation of HR policies - but creating them from scratch is time-consuming and risky. Use the wrong language, miss key legal requirements, or fail to cover essential scenarios, and you're exposed to legal liability and employee relations issues.

This guide covers the essential HR policies every business needs, what should be included in each, and how to customize them for your organisation. For the full library organised by theme, see our HR policy hub.

Why Essential HR Policies Matter

Quick answer. Written HR policies do four jobs: they protect against employment claims by evidencing fair process, they make treatment consistent across employees, they bake statutory requirements into daily practice, and they set expectations clearly enough to act on. Tribunals ask for the documents first.

Essential HR policies provide:

• Legal protection: Properly drafted policies protect against employment claims
• Consistency: Bespoke policies ensure all employees are treated fairly and consistently
• Time savings: Start with professional bespoke policies instead of writing from scratch
• Compliance: Include legal requirements and best practices
• Clarity: Set clear expectations for employee behavior and rights

Essential HR Policies

Quick answer. The list below covers the core employer set — code of conduct, disciplinary and grievance, equal opportunities, sickness absence, flexible working and the rest — with what each must include. UK employers should anchor disciplinary and grievance procedures to the ACAS Code of Practice.

1. Code of Conduct Policy

Purpose: Sets behavioral expectations and professional standards

Must include:

• Expected behaviors and professional standards
• Prohibited conduct (harassment, discrimination, bullying)
• Dress code and appearance standards
• Use of company property and resources
• Conflicts of interest
• Social media guidelines
• Reporting procedures for violations
• Consequences for policy breaches

2. Remote Work & Flexible Working Policy

Purpose: Defines terms for remote and hybrid working arrangements

Must include:

• Eligibility criteria for remote work
• Application and approval process
• Work hours and availability expectations
• Communication requirements (video calls, response times)
• Equipment provision and IT support
• Data security and confidentiality requirements
• Health and safety obligations
• Performance monitoring and evaluation
• Right to request return to office

UK legal requirement: Since April 2024, all employees have a day-one right to request flexible working. Your policy must explain how requests are processed.

3. Leave & Absence Policy

Purpose: Covers all types of leave and absence procedures

Must include:

• Annual leave entitlement and booking procedures
• Sickness absence reporting and return-to-work procedures
• Maternity, paternity, and adoption leave
• Parental leave and shared parental leave
• Compassionate/bereavement leave
• Time off for dependents
• Jury service
• Unpaid leave requests
• Medical appointments

UK minimums:

• 28 days (5.6 weeks) statutory annual leave including bank holidays
• Statutory sick pay (SSP) after 4 days of sickness
• 52 weeks maternity leave (39 weeks paid)
• 2 weeks paternity leave

4. Disciplinary & Grievance Policy

Purpose: Sets fair and consistent procedures for handling misconduct and complaints

Must include:

• What constitutes misconduct vs gross misconduct
• Investigation procedures
• Disciplinary hearing process
• Right to be accompanied
• Possible sanctions (warnings, final warnings, dismissal)
• Appeal procedures
• Grievance raising procedures
• Timescales for each stage

5. Data Protection & Privacy Policy (Employee-Facing)

Purpose: Explains how employee personal data is handled

Must include:

• What personal data is collected and why
• Legal basis for processing (usually contract or legitimate interest)
• How long data is retained
• Who has access to employee data
• Third parties data is shared with (payroll, pensions, HMRC)
• Employee rights (access, correction, deletion)
• How to make a subject access request
• Data security measures

UK GDPR requirement: You must provide this information to employees within one month of collecting their data.

6. Equal Opportunities & Anti-Discrimination Policy

Purpose: Commitment to equal treatment and preventing discrimination

Must include:

• Protected characteristics under Equality Act 2010
• Types of discrimination (direct, indirect, harassment, victimization)
• Commitment to equality in recruitment, promotion, training, and benefits
• Reasonable adjustments for disabilities
• Reporting procedures for discrimination
• Investigation and consequences

7. Health & Safety Policy

Purpose: Legal requirement under Health and Safety at Work Act 1974

Must include:

• Statement of intent on health and safety
• Responsibilities (employer, managers, employees)
• Risk assessment procedures
• Accident reporting and investigation
• First aid arrangements
• Fire safety and emergency procedures
• DSE (display screen equipment) assessments
• Mental health and wellbeing

Legal requirement: If you employ 5 or more people, you must have a written health and safety policy.

8. Social Media & Communications Policy

Purpose: Guidelines for employee use of social media and communications

Must include:

• Personal vs professional social media use
• Representing the company on social media
• Confidentiality and data protection
• Prohibition on defamatory or discriminatory posts
• Consequences of policy breaches
• Monitoring of company systems

How to Customize Your HR Policies

Quick answer. Customisation runs in steps: read the full policy, add organisation-specific details (legal entity, roles, contacts, real timescales), enhance any benefits beyond statutory minimums, and check the result matches your employment contracts — contradictions between policy and contract create legal risk.

Step 1: Review the policy

Read the entire policy to understand what's included and identify sections that need customization.

Step 2: Add organisation-specific details

• Company name and legal entity
• Specific job roles and departments
• Contact details for HR or policy owners
• Your actual procedures and timescales

Step 3: Enhance benefits beyond minimums

If you offer more than statutory minimums (e.g., 30 days annual leave instead of 28), specify this clearly.

Step 4: Add industry-specific requirements

Include any sector-specific regulations or standards (e.g., FCA requirements for financial services, CQC standards for healthcare).

Step 5: Legal review

Have employment law solicitor review policies before distribution, especially disciplinary, grievance, and data protection policies.

Step 6: Employee consultation

Consult with employees or trade union representatives before implementing new policies (legal requirement in unionized workplaces).

Common Mistakes with HR Policies

Quick answer. The recurring failures: copy-pasting without customisation, ignoring legal updates (employment law moves every year), policies that contradict employment contracts, and no distribution or acknowledgement records. A policy nobody can prove was received offers little protection in a tribunal.

1. Copy-Paste Without Customization

Don't just change the company name. Policies must reflect your actual procedures, or they're worthless.

2. Ignoring Legal Updates

Employment law changes frequently. Review and update policies annually.

3. Policies Don't Match Contracts

Ensure policies align with employment contracts. Contradictions create legal risks.

4. No Distribution or Acknowledgement

Creating policies isn't enough - you must distribute them and prove employees have received and acknowledged them.

5. Overly Complex Language

Use plain English. Employees must understand their rights and obligations.

Distribution & Acknowledgement

Quick answer. Distribution is the step that makes policies enforceable: send them to every employee, require written acknowledgement, track who has and has not confirmed, and keep the records securely. An unacknowledged policy is hard to rely on in a disciplinary or tribunal context.

Once you've customized your HR policies:

1. Distribute to all employees - Email copies and make them available on your intranet
2. Require acknowledgement - Get written confirmation that employees have read and understood each policy
3. Track completion - Monitor who has acknowledged policies and send reminders to non-completers
4. Keep records - Store acknowledgements securely for at least 6 years
5. Review annually - Update policies to reflect legal changes and business needs

Further Reading

Quick answer. The links below include ACAS guidance on HR policies — the primary source for UK disciplinary and grievance standards — plus related PolicySuite articles on raising acknowledgement rates and the 2025 UK GDPR changes that touch HR data handling.

• ACAS: HR Policies Guidance
• 5 Ways to Increase Policy Acknowledgement Rates
• UK GDPR Updates 2025
• More best practice articles