What HR policies does a small business legally need in the UK?

This is one of the most common questions small business owners ask, and the answer has two layers. There are policies you are legally required to have. And there are policies that are not technically mandatory but leave your business significantly exposed if they are missing.

Getting this wrong is expensive. Employment tribunal claims cost UK businesses thousands of pounds in legal fees and management time, before any award is made, and many arise directly from situations where a business had no clear policy in place or applied one inconsistently. This guide sets out exactly what you need, what is strongly recommended, and how to get it in place quickly and affordably.

The legally required HR policies for small businesses in the UK

Under UK employment law, there are five core requirements every business with employees must meet.

1. Disciplinary and dismissal policy

You must have written rules and procedures covering how your business handles misconduct and poor performance. This is a requirement under the Employment Rights Act 1996, and any disciplinary process must follow the ACAS Code of Practice on Disciplinary and Grievance Procedures. Failure to follow the ACAS Code does not automatically make a dismissal unfair, but an employment tribunal can increase any award by up to 25% if you have unreasonably failed to comply with it.

Your disciplinary policy should cover: the range of sanctions available (from informal discussion to dismissal), how investigations are conducted, the right to be accompanied at formal hearings, and the appeals process.

2. Grievance policy

Every employer must have a clear, documented process for employees to raise formal complaints about their work or treatment. Again, this must align with the ACAS Code of Practice. Without a grievance procedure, employees who raise concerns informally and feel ignored have a much stronger basis for an employment tribunal claim, particularly for constructive dismissal.

Your grievance policy should explain: how an employee raises a formal grievance, who handles it, what the investigation process looks like, how outcomes are communicated, and how appeals work.

3. Health and safety policy

Under the Health and Safety at Work Act 1974, any business with five or more employees is legally required to have a written health and safety policy. For businesses with fewer than five employees, a written policy is not legally required, but you still have legal duties under the Act and it is good practice to document your approach.

The policy must state your commitment to health and safety, name who is responsible for it, and describe how you manage health and safety risks in your workplace. It must be reviewed regularly and communicated to all staff.

4. Written statement of employment particulars

This is the foundation of every employment relationship. Under the Employment Rights Act 1996, you must provide every employee with a written statement of their key employment terms on or before their first day of work. This is a day-one right, not something you can delay until a probationary period is complete.

The statement must include: the employer and employee’s name, the start date, job title and description, pay and pay frequency, working hours, holiday entitlement, notice periods, place of work, and details of any collective agreements that apply. Employment contracts should also be reviewed in light of changes introduced by the Employment Rights Act 2025, which affects several areas including flexible working and zero-hours arrangements.

5. Data protection policy / privacy notice

Under UK GDPR and the Data Protection Act 2018, you are legally required to tell employees how you collect, store, process, and share their personal data. This is typically delivered as an employee privacy notice, issued at or before the start of employment. It does not need to be lengthy, but it must cover the categories of data you process, the legal basis for doing so, how long you retain data, and employees’ rights under data protection law.

If you use HR software, collect health data, or share employee information with third parties such as payroll providers, those data flows must be covered in your notice.

The complete HR policy picture: required and strongly recommended

The five requirements above are the legal floor. The following table shows the full picture, including the additional policies that UK employment law and good practice strongly recommend for any business with staff.

Why the ‘strongly recommended’ policies matter as much as the required ones

Many small business owners assume that if something is not legally required, it is optional. In practice, the absence of a recommended policy can be just as costly as the absence of a required one.

Equality, diversity and inclusion policy

While the Equality Act 2010 does not require you to have a written EDI policy, it does require you not to discriminate, harass, or victimise employees on the basis of any protected characteristic. Without a clear policy, you have no documented framework for handling complaints, and tribunals will look at how your business approached equality issues when assessing claims. A written EDI policy also reduces the likelihood of disputes arising in the first place.

Sickness absence policy

The April 2026 changes to statutory sick pay make this more important than ever. Without a sickness absence policy, employees do not know what is expected of them when they are unwell, managers apply different standards inconsistently, and it becomes much harder to take formal action when absence patterns become problematic. A sickness absence policy should cover reporting procedures, self-certification, fit note requirements, return-to-work interviews, trigger points for formal review, and how SSP is calculated and paid.

See our related article: How can a small business handle managing short-term sickness legally?

Anti-bullying and harassment policy

The Worker Protection (Amendment of Equality Act 2010) Act 2023 introduced a new duty on employers to take reasonable steps to prevent sexual harassment in the workplace. This duty has been in force since October 2024. Without a clear anti-harassment policy and evidence of proactive steps, you are exposed both to tribunal claims and to the reputational damage that comes with harassment allegations being handled poorly.

Flexible working policy

Since April 2024, flexible working is a day-one right for all employees. They can make up to two requests per year from their first day of employment. You must respond within two months and can only refuse on one of eight statutory grounds. Without a clear policy setting out the process, managers will handle requests inconsistently, which creates both legal risk and employee relations problems.

HR policy compliance checklist for small businesses

Use this checklist to assess where your business currently stands. If you are ticking most of these off as missing or uncertain, a conversation with an HR consultant is a worthwhile investment.

If you would like a professionally drafted, legally compliant version of any of the above, Centric HR’s HR document packs include an employment contract with three main policies from £19.99, available to download immediately. For a full staff handbook and bespoke policy suite, speak to us about our pay-as-you-go HR service or HR retainer packages.

What happens if a small business does not have the right HR policies?

The consequences range from inconvenient to very expensive.

• Employment tribunal claims: the most common and most costly outcome. A claimant’s case is significantly strengthened if you cannot demonstrate a fair, documented process was followed.
• Increased tribunal awards: tribunals can uplift compensation by up to 25% where an employer has unreasonably failed to follow the ACAS Code of Practice on disciplinary and grievance procedures.
• Discrimination claims: without written equality policies and documented training, it is much harder to demonstrate you took reasonable steps to prevent discrimination or harassment.
• Regulatory penalties: failure to comply with UK GDPR obligations, including issuing a privacy notice, can result in fines from the Information Commissioner’s Office.
• Loss of management control: without consistent policies, different managers apply different standards, which creates unfairness, resentment, and a much higher likelihood of disputes escalating.

How Centric HR can help

Centric HR is a CIPD-qualified HR consultancy supporting small businesses and SMEs across the UK. Led by Sandra Berns, a Chartered Fellow of the CIPD with 25 years of experience, we help businesses get the right policies in place and keep them current as employment law changes.

HR document packs

Our HR document packs give you professionally drafted, legally compliant documents available to download immediately. The Customisable Employment Contract and 3 Main Policies pack starts from £19.99 and covers the most common documents a small business needs to have in place. We also offer a Menopause Pack for businesses wanting to address this area specifically.

Free HR health check

Not sure what you have and what you are missing? Our free HR health check gives you a clear picture of your current HR compliance position and what needs addressing. There is no obligation and no cost.

Pay-as-you-go HR support

If you need a bespoke policy drafted, an existing policy reviewed, or advice on a specific situation, our pay-as-you-go HR service gives you access to an experienced HR consultant at £140 per hour plus VAT, with no contract or ongoing commitment. Same-day response is available.

HR retainer packages

If you want ongoing support to keep your policies current as employment law evolves and to have an HR expert on call when situations arise, our HR retainer packages offer fixed monthly costs, employment law updates, and a named consultant who gets to know your business. The Premium bundle suits businesses with 1 to 30 employees; the Professional package covers 30 or more.

You can also read our related guide: What is the difference between ad-hoc HR support and an HR retainer?

HR for small businesses

For a full overview of how Centric HR supports UK SMEs, visit our HR for small businesses page.

Contact Centric HR

Tel: 03333 660 567

Email: enquiries@centrichr.co.uk

HR document packs: centrichr.co.uk/products

Free HR health check: centrichr.co.uk/free-hr-health-check

Pay-as-you-go HR: centrichr.co.uk/pay-as-you-go-hr

Centric HR | Hawkesyard Estate, Hawkesyard Hall, Armitage Lane, Armitage, Staffordshire WS15 1PU