Human Resources
Written by Joanne Hughes, Policy & Compliance SpecialistLast reviewed

Which HR Policies Are Legally Required in the UK?

Two written documents are required by name in UK law for most employers. The first is a written health and safety policy, compulsory once you have five or more employees under section 2(3) of the Health and Safety at Work etc. Act 1974. The second is the written statement of employment particulars, which every new employee and worker must receive on or before their first day under section 1 of the Employment Rights Act 1996.

The written statement carries more weight than many employers realise. Under section 3 of the same Act it must include a note of your disciplinary rules and procedures, name a person the worker can approach with a grievance, and explain how to raise one. Written disciplinary and grievance information is therefore a day-one legal requirement.

Almost everything else on a typical list of HR policies for UK employers is strongly advised rather than named in statute. That distinction offers less comfort than it sounds. An employer without an Acas-aligned disciplinary procedure or an anti-harassment policy loses defences at tribunal and can face compensation uplifts of up to 25 per cent.

This guide separates the genuinely required set from the strongly advised set, with the legal source for each. It also covers the Employment Rights Act 2025 changes arriving in October 2026 and January 2027, which raise the cost of thin or outdated HR documentation considerably.

The Legal Requirements at a Glance

The table below shows where the statutory line sits. Each entry is sourced to the legislation itself or to official guidance from the Health and Safety Executive (HSE) and Acas.

Policy or documentStatusLegal sourceWho it applies to
Written health and safety policyLegally requiredHealth and Safety at Work etc. Act 1974, section 2(3)Employers with five or more employees
Written statement of employment particularsLegally requiredEmployment Rights Act 1996, section 1Every employee and worker, on or before day one
Note of disciplinary rules and proceduresLegally required, within the written statementEmployment Rights Act 1996, section 3Every employee and worker
Grievance contact and process informationLegally required, within the written statementEmployment Rights Act 1996, section 3Every employee and worker
Full disciplinary and grievance proceduresStrongly advisedAcas Code of Practice; TULRCA 1992, section 207AAll employers
Equal opportunities and anti-harassment policyStrongly advisedEquality Act 2010, including the section 40A preventative dutyAll employers
Data protection policyStrongly advised, required where proportionateUK GDPR accountability principleAll employers holding staff data

The Policies UK Law Requires in Writing

A written health and safety policy at five or more employees

Section 2(3) places a duty on every employer to prepare, and revise as often as appropriate, a written statement of their general policy on health and safety at work, together with the organisation and arrangements for carrying that policy out. The statement, and every revision of it, must be brought to the notice of all employees. A policy that sits unread in a filing system does not discharge the duty.

HSE guidance confirms that every business must have a policy for managing health and safety, and that employers with fewer than five employees do not have to write it down. The exemption covers only the writing, so the policy itself is still required. Our guide to health and safety policies explains what the statement of intent, organisation section and arrangements section each need to cover.

The written statement of employment particulars

Section 1 requires the main particulars of employment to be given not later than the beginning of the employment, and the duty extends to workers as well as employees. The particulars include pay and how it is calculated, pay intervals, hours and days of work and how they may vary, holiday entitlement and holiday pay, and notice periods.

The statement must also cover sick pay, other paid leave, pension arrangements, probationary terms, job title, place of work and any training entitlements or mandatory training. Several of these are policy subjects in their own right, which is why the written statement is the anchor for so much other HR documentation.

Most employers meet the duty through an employment contract supported by an employee handbook. That structure works well provided the documents are kept current, because several particulars, including sick pay and paternity leave, changed in April 2026.

Disciplinary rules and grievance information from day one

Section 3 requires the written statement to include a note specifying your disciplinary rules, the procedure for disciplinary and dismissal decisions, the person a worker should approach with a grievance, and the way an application should be made. The note may instead refer to a reasonably accessible document, such as a staff handbook, which is how most employers comply.

The reference route assumes a real document sits behind it. If the handbook named in your written statement contains no disciplinary procedure, the statement is inaccurate and the gap will surface at tribunal.

The Strongly Advised Set and Why Tribunals Expect It

There is no single definitive list of mandatory HR policies in UK law. Tribunal practice, statutory codes and regulator expectations fill that gap, and they do so with financial consequences attached.

Disciplinary and grievance procedures aligned to the Acas Code

The Acas Code of Practice on disciplinary and grievance procedures is not legally binding, but tribunals must take it into account in relevant cases. Under section 207A of the Trade Union and Labour Relations (Consolidation) Act 1992, an award can be increased by up to 25 per cent where an employer has unreasonably failed to follow the Code. It can equally be reduced by up to 25 per cent where the employee unreasonably failed to follow it.

A written disciplinary policy and procedure and a written grievance policy are how employers evidence compliance with the Code. Without them, every dismissal and every mishandled complaint starts from a weakened position.

Equal opportunities and anti-harassment policies

Employers are liable for discrimination and harassment committed by their staff in the course of employment unless they can show they took reasonable steps to prevent it. That defence rests on a communicated and enforced policy backed by training. A document that staff have never seen rarely satisfies it.

Sexual harassment now carries a separate positive duty. Since 26 October 2024, the Worker Protection (Amendment of Equality Act 2010) Act 2023 has required employers to take reasonable steps to prevent sexual harassment of their workers. A tribunal that finds the duty was breached can uplift discrimination compensation by up to a further 25 per cent.

From October 2026 the duty strengthens to taking all reasonable steps, and employers become liable for harassment of their staff by third parties such as customers unless they can show the same. A written anti-harassment policy, a risk assessment and a reporting route are the foundations of both defences.

Data protection, whistleblowing and family-friendly policies

The UK GDPR accountability principle requires appropriate technical and organisational measures, which include adopting data protection policies where proportionate to the processing. For any organisation holding staff records, the ICO expects documented policies proportionate to the organisation, so in practice an employer of any size needs one.

A whistleblowing policy is not compulsory for most private employers, but the Public Interest Disclosure Act 1998 protects workers who raise concerns whether or not a policy exists. A clear internal procedure channels those concerns to you before they reach a regulator.

Family-friendly entitlements such as maternity, paternity and parental leave apply regardless of what your documents say. Policies matter because they record eligibility, notice requirements and pay correctly, and paternity leave became a day-one right on 6 April 2026.

The 2026 and 2027 Changes That Raise the Stakes

The Employment Rights Act 2025 is being commenced in stages, and Acas tracks the confirmed timetable. Three phases matter most for HR policies.

In force since 6 April 2026: statutory sick pay is paid from the first day of illness rather than the fourth, paternity leave is a day-one right, and the maximum protective award for failing to consult on collective redundancy doubled from 90 to 180 days' pay. A sickness policy that still refers to waiting days has been wrong for months.

From October 2026: the sexual harassment preventative duty rises from reasonable steps to all reasonable steps, and liability for third-party harassment returns. Anti-harassment policies, training records and risk assessments are the evidence that duty demands.

From January 2027: unfair dismissal protection applies after six months of service instead of two years, the cap on the compensatory award for unfair dismissal is removed, and new restrictions on fire and rehire take effect. Dismissals in month seven will need the same procedural fairness as dismissals in year five, with no ceiling on the compensatory award.

Taken together, these changes mean the strongly advised set is converging on the required set. The documents were always the cheapest part of a tribunal defence, and from January 2027 the sums they protect against are larger.

Common Errors When Deciding Which Policies You Need

  • Treating "not named in statute" as "not needed". The written statement must still reference your disciplinary and grievance arrangements, and tribunals apply the Acas Code to whatever procedure you have, or draw conclusions from the absence of one.
  • Referring to a document that does not exist. Meeting section 3 by pointing to a handbook is lawful only if the handbook actually contains the rules and procedures described.
  • Treating the health and safety policy as a one-off. Section 2(3) requires revision as often as appropriate, and every revision must be brought to the notice of all employees.
  • Using template policies that misstate current law. A sickness policy quoting three waiting days for statutory sick pay, or a paternity policy demanding 26 weeks' service, has been wrong since 6 April 2026.
  • Relying on a paper harassment policy. The preventative duty requires steps, and from October 2026 all reasonable steps. A policy without training, a risk assessment and a working reporting route will not carry the defence alone.
  • Missing the worker and employee distinction. Written statements are due to workers as well as employees, so casual and bank staff need day-one particulars too.

What Enforcement Looks Like

Failures around the written statement usually surface inside other claims. Under section 38 of the Employment Act 2002, a tribunal that finds for a worker in a listed claim and finds the employer was in breach of the section 1 duty must award two weeks' pay and may award four weeks' pay on top of the main award.

For the health and safety policy, HSE inspectors can issue improvement notices and, in serious cases, prosecute. For discrimination and harassment, awards are uncapped, and the Acas Code uplift and the sexual harassment uplift each add up to 25 per cent to the sums at stake.

None of this enforcement targets missing paperwork for its own sake. It targets the unfair process, unsafe workplace or unlawful treatment that good documents exist to prevent, which is why tribunals read so much into their absence.

HR Policy and Procedure Writers

Policy Pros writes every document covered in this article for UK employers, from the statutory minimum through the full tribunal-expected set. Our HR policy writing service starts with a gap analysis against the requirements above, then delivers bespoke policies written for your organisation rather than adapted from generic templates.

We also write employee handbooks that satisfy the section 1 and section 3 duties in one coherent place, alongside standalone disciplinary policies and procedures, grievance policies and health and safety policies aligned to HSE guidance.

If you are not sure which of your documents are legally required, strongly advised or simply out of date, contact us for a free quote.

Frequently Asked Questions

Which HR policies are required by law in the UK?

Only two documents are required in writing by name: a written health and safety policy once you have five or more employees, under section 2(3) of the Health and Safety at Work etc. Act 1974, and a written statement of employment particulars for every employee and worker from day one, under section 1 of the Employment Rights Act 1996. The statement must include a note of your disciplinary rules and procedures and grievance contact information under section 3. Other policies, such as equal opportunities and data protection, are strongly advised because they underpin legal duties and tribunal defences.

Is there an official list of HR policies UK employers must have?

No. There is no single statutory list of mandatory HR policies in UK law. The practical list comes from the combined effect of several statutes, the Acas Code of Practice and regulator expectations, which is why most employers maintain disciplinary, grievance, equal opportunities, anti-harassment, data protection and health and safety policies as a core set.

Do HR policies and procedures have to be in writing in the UK?

Two must be written: the health and safety policy at five or more employees and the written statement of employment particulars, which includes disciplinary and grievance information. The rest can lawfully exist without a written document, but writing is the only realistic way to evidence fair procedure at tribunal or to show reasonable steps were taken to prevent harassment or discrimination.

How many employees can you have before a written health and safety policy is required?

The written requirement starts at five employees. HSE guidance confirms that every business must have a health and safety policy, but employers with fewer than five employees do not have to write it down. From five employees, section 2(3) of the Health and Safety at Work etc. Act 1974 requires a written statement of general policy, revised as appropriate and brought to the notice of all staff.

What happens if an employer does not follow the Acas Code of Practice?

The Code is not legally binding, but employment tribunals must take it into account in relevant cases. Under section 207A of the Trade Union and Labour Relations (Consolidation) Act 1992, a tribunal can increase an award by up to 25 per cent where the employer unreasonably failed to follow the Code, and reduce it by up to 25 per cent where the employee did.

Do small businesses need HR policies in the UK?

Yes. The written statement of employment particulars applies from your first hire, and the written health and safety policy applies from your fifth employee. Tribunal exposure does not scale down for size, and from January 2027 unfair dismissal protection applies after six months of service with the compensatory award cap removed, so small employers need sound procedures as much as large ones.

Share:
Trustpilot Reviews - 5 Stars