Not every HR policy is optional, and confusing the two categories, legally required and simply good practice, is one of the more common mistakes small business owners make when they first start putting policies in writing. This guide separates what UK law genuinely expects from what strengthens a business without being strictly mandatory, so a small business can prioritise correctly.
This is a spoke in our employee handbook cluster. For how to bring all of this together into a single document, see our pillar guide on how to write an employee handbook for a UK small business.
Legally Required Policies
Health and Safety Policy
UK employers have a legal duty to protect employee health, safety and welfare at work. Businesses with five or more employees are required to have a written health and safety policy, though even smaller businesses benefit from documenting basic procedures such as fire evacuation and first aid arrangements.
Disciplinary and Grievance Procedures
UK law requires these procedures to be available in writing, setting out how disciplinary matters are handled and how an employee can raise a formal grievance. Following a fair, documented process protects the business if a dispute later escalates to an employment tribunal.
Equal Opportunities Policy
While not always a strict standalone legal requirement depending on business size, a clear equal opportunities policy demonstrates a commitment to fair treatment and helps defend against discrimination claims by showing the business actively communicated its standards.
Data Protection Policy
UK GDPR requires businesses handling personal data, which includes virtually every employer through payroll and employee records, to have clear data protection practices. A written policy explaining how employee and customer data is collected, stored and used is a genuine compliance requirement, not an optional extra.
Strongly Recommended Policies
Sickness Absence Policy
While statutory sick pay rules are set by law, how absence is reported, recorded and managed day to day benefits significantly from clear internal documentation, reducing ambiguity and inconsistent handling across the team.
Flexible Working and Remote Work Policy
UK employees have a statutory right to request flexible working from day one of employment. A written policy explaining how requests are considered and the timeframe for a decision helps the business respond consistently and fairly.
Anti-Bribery and Anti-Slavery Policies
These carry genuine legal weight for businesses of a certain size or those operating in specific sectors, and increasingly matter even for smaller businesses working with larger clients or supply chains that expect these policies to be in place.
Social Media and Communications Policy
Not a legal requirement, but a clear policy on acceptable use of social media and internal communication tools prevents ambiguity and protects the business’s reputation without needing to rely on informal, inconsistently applied expectations.
Policy Priority Table
| Policy | Status | Priority |
|---|---|---|
| Health and safety | Legally required (5+ employees) | Highest |
| Disciplinary and grievance | Legally required | Highest |
| Data protection (UK GDPR) | Legally required | Highest |
| Equal opportunities | Strongly recommended, often expected | High |
| Flexible working | Statutory right to request | High |
| Sickness absence | Recommended, not mandatory | Medium |
| Social media and communications | Recommended, not mandatory | Medium |
How Policies Differ From the Written Statement of Particulars
The written statement of employment particulars, required for every UK employee, covers individual terms such as pay, hours and holiday entitlement. Policies, by contrast, apply consistently across the whole team and cover how the business operates and handles situations generally. Both are necessary, and neither replaces the other.
Keeping Policies Accurate Over Time
Employment law changes periodically, including statutory pay rates and specific procedural requirements. Policies written once and never revisited risk becoming inaccurate, which can undermine the protection they were meant to provide. See our guide on how often to update your employee handbook for a practical review schedule covering policies as well as the wider document.
Frequently Asked Questions
Does a small business with only two or three employees need written HR policies?
Yes, certain requirements such as data protection compliance and disciplinary and grievance procedures being available in writing apply regardless of how small the team is. Health and safety documentation requirements do scale with business size.
Can HR policy templates be used safely by a small business?
Templates can be a useful starting point, but they must be genuinely adapted to reflect the specific business, its size, and its actual practices. A template left unedited can create a mismatch between what is written and what actually happens, which weakens rather than strengthens legal protection.
What happens if a required policy is missing during a dispute?
Missing a legally required policy, particularly disciplinary and grievance procedures, can significantly weaken a business’s position if a dispute reaches an employment tribunal, since it removes evidence that a fair, documented process was followed.
Should policies be reviewed by a solicitor before use?
Having the legally required sections, in particular disciplinary, grievance, health and safety, and data protection, reviewed by an employment solicitor or qualified HR professional before rollout is a sensible precaution, even for a very small business.
About the author: The Business To World editorial team covers practical business, banking, investment and property guidance for UK small business owners and entrepreneurs.