HR policies are not documents that should be written once, saved in a folder and forgotten about. 
Employment law changes, working practices evolve and businesses grow. A policy that was appropriate three years ago may no longer reflect the law, your workplace or the way your employees actually work. 
 
Outdated policies can create confusion, lead to inconsistent decisions and leave your business exposed when an employee raises a complaint or dispute. Regularly reviewing your policies is therefore an important part of protecting both your people and your organisation. 
 
What is the purpose of an HR policy? 
HR policies explain how your business will manage workplace situations and what employees can expect from you. 
Good policies help everyone understand: 
• The standards of conduct expected at work 
• How decisions will be made 
• What processes managers should follow 
• Employees’ rights and responsibilities 
• Where employees can go if they need help 
• How concerns, complaints and sensitive situations will be managed 
 
Policies provide a framework for fair and consistent decision-making. They can also give managers the confidence to deal with difficult situations before they develop into larger problems. 
However, simply having a policy is not enough. It must be legally compliant, relevant to your organisation, communicated to employees and followed in  
practice. 
 
Why should HR policies be reviewed regularly? 
 
1. Employment law changes 
Employment law does not stand still. New rights are introduced, qualifying periods change and employers may be given additional responsibilities. 
Recent changes have included the introduction of day-one rights to request flexible working and take carers’ leave. Employers also have a legal duty to take reasonable steps to prevent sexual harassment in the workplace. Further employment law reforms mean businesses must continue monitoring their policies and procedures. 
If your policies still refer to old eligibility rules, timescales or processes, managers could unknowingly make decisions that breach an employee’s statutory rights. 
 
2. Your business may have changed 
Your policies should reflect the organisation you have today, not the business you were several years ago. 
You may have: 
• Recruited more employees 
• Introduced new management roles 
• Moved to hybrid or remote working 
• Started using new technology 
• Changed your organisational structure 
• Expanded into different locations 
• Introduced new benefits or working arrangements 
• Changed how employees communicate with customers 
 
Each of these changes may affect your policies. For example, a business that now allows homeworking may need policies covering data security, health and safety, equipment, expenses, working hours and communication. 
 
3. Policies help managers act consistently 
When policies are unclear or outdated, managers may start making decisions based on personal judgement rather than an agreed process. 
One manager might approve a request while another refuses an almost identical one. One employee might receive an informal conversation for a particular issue while another faces formal disciplinary action. 
 
This inconsistency can damage trust and create allegations of favouritism or discrimination. 
Up-to-date policies provide managers with a clear process to follow and help employees understand how and why decisions are made. 
 
4. Workplace expectations have evolved 
Employees’ expectations around flexibility, wellbeing, equality, communication and work-life balance have changed. 
Policies that use outdated terminology or fail to recognise modern working arrangements can make an organisation appear disconnected from its people. They may also discourage employees from raising concerns because they do not feel the process reflects their circumstances. 
Reviewing policies gives employers an opportunity to make them clearer, more inclusive and easier to use. 
 
 
What are the implications of not updating HR policies? 
Failing to maintain your HR policies can have serious consequences. 
 
Legal and financial risk 
If a policy does not reflect current employment law, your business could make an unlawful decision. This could contribute to grievances, discrimination claims, unfair dismissal allegations or employment tribunal proceedings. 
Employment tribunals can take relevant Acas Codes of Practice into account when considering cases. A policy will offer limited protection if the business does not follow a fair and appropriate procedure. 
There may also be legal requirements relating to particular policies. For example, every employer must manage health and safety, and businesses with five or more employees must have a written health and safety policy, according to the Health and Safety Executive. 
 
Inconsistent treatment 
Outdated or unclear policies make it more likely that similar situations will be handled differently. 
Inconsistent treatment can affect morale and employee relations. It can also make it more difficult for an employer to defend a decision if it is later challenged. 
 
Damaged trust 
Employees need to believe that workplace processes are fair, transparent and dependable. 
If the written policy says one thing but managers do another, confidence in the organisation can quickly deteriorate. Employees may become less willing to raise concerns informally, allowing problems to escalate. 
 
Poor management decisions 
Managers cannot be expected to follow the correct process if they have not been given suitable guidance and training. 
Without current policies, managers may mishandle sickness absence, flexible-working requests, grievances, performance concerns or family-related leave. Even a well-intentioned response can create problems if it conflicts with the law or the organisation’s stated procedure. 
 
Data protection and confidentiality concerns 
Employers hold a considerable amount of personal information about employees, including contact details, absence records, performance information and, in some cases, health data. 
The Information Commissioner’s Office explains that employers must comply with the UK GDPR and Data Protection Act 2018 when handling workers’ information. An outdated data protection policy may fail to address newer technology, employee monitoring, remote access or the way records are now stored and shared. 
 
Reputational damage 
Employment disputes do not always remain private. Poor treatment of employees can affect recruitment, retention, customer confidence and the organisation’s wider reputation. 
Clear, current and properly implemented policies show that your business takes its responsibilities seriously. 
 
Which HR policies should a business have? 
The exact policies required will depend on the size, sector, working arrangements and risks within the organisation. However, most employers should consider the following. 
 
Disciplinary policy 
This explains how concerns about conduct will be investigated and managed. It should cover informal action, formal meetings, possible outcomes, the right to be accompanied and the appeals process. 
A clear disciplinary procedure helps the employer respond fairly and gives the employee an opportunity to understand and answer the concerns raised. 
Grievance policy 
Employees need a clear route for raising concerns about their work, treatment or working relationships. 
The policy should explain who to contact, how a grievance will be investigated, what happens at a meeting and how an employee can appeal the outcome. 
Equality, diversity and inclusion policy 
This demonstrates the organisation’s commitment to providing equal opportunities and preventing unlawful discrimination. 
It should reflect the protected characteristics under the Equality Act 2010 and explain how the organisation will approach recruitment, progression, training, workplace adjustments and employee conduct. 
Anti-bullying, harassment and sexual harassment policy 
Employers should clearly define unacceptable behaviour and explain how employees can report concerns. 
Since October 2024, employers have had a legal duty to take reasonable steps to prevent sexual harassment—not simply respond after it happens. A policy is important, but it should be supported by risk assessments, appropriate training, reporting routes and action when concerns are raised. Government guidance explains the preventative duty. 
Sickness absence policy 
This should cover reporting requirements, fit notes, keeping in touch, return-to-work conversations, sick pay and how longer-term or repeated absence will be managed. 
It should also remind managers to consider disability, reasonable adjustments and the individual circumstances behind an employee’s absence. 
Family-friendly and other leave policies 
These may include: 
• Maternity leave 
• Paternity leave 
• Adoption leave 
• Shared parental leave 
• Parental leave 
• Parental bereavement leave 
• Neonatal care leave 
• Carers’ leave 
• Time off for dependants 
• Compassionate or bereavement leave 
The policies should clearly distinguish between statutory rights and any enhanced benefits offered by the organisation. 
 
Flexible-working policy 
Employees have a statutory right to request flexible working from their first day of employment. A suitable policy should explain how to submit a request, how it will be considered and the timescale for receiving a decision. 
A clear process helps managers assess requests consistently while considering the needs of both the employee and the business. Further guidance is available from Acas. 
Holiday policy 
This should explain annual leave entitlement, how employees request leave, notice requirements, restrictions during busy periods and what happens to unused holiday. 
It should also address holiday during sickness absence, family leave and the rules for carrying leave forward. 
Health and safety policy 
The policy should explain the organisation’s approach to managing workplace risks, who is responsible for health and safety and what employees must do to keep themselves and others safe. 
Remote working, stress, lone working, workstation assessments and accident reporting may also need to be addressed. 
Data protection, confidentiality and privacy policies 
These policies should explain how employee and business information is collected, used, stored, shared and deleted. 
They may also need to cover email, internet use, employee monitoring, artificial intelligence tools, personal devices, cybersecurity and working remotely. 
Social media, IT and acceptable-use policy 
Employees should understand what is considered acceptable when using company devices, systems, email, social media and online platforms. 
The policy should protect the business without placing unreasonable restrictions on employees or interfering unnecessarily with their privacy. 
Homeworking or hybrid-working policy 
If employees work remotely, this policy should set out expectations around availability, communication, equipment, expenses, data security, health and safety and attendance at the workplace. 
Acas recommends regularly reviewing home and hybrid-working policies and consulting employees when arrangements change. 
Performance and capability policy 
This provides a fair process for addressing situations where an employee is not meeting the required standard. 
The emphasis should be on clarifying expectations, providing support, setting reasonable objectives and allowing an appropriate opportunity to improve. 
Whistleblowing policy 
A whistleblowing policy explains how workers can raise concerns about suspected wrongdoing in the public interest. 
It should identify appropriate reporting routes and make clear that genuine concerns will be taken seriously and handled sensitively. 
Other policies may be needed depending on the business, including redundancy, expenses, driving for work, lone working, substance misuse, menopause support, domestic abuse support and the use of artificial intelligence. 
 
How often should policies be reviewed? 
As good practice, businesses should conduct a full policy review at least annually. Policies should also be reviewed when: 
• Employment law changes 
• New guidance is published 
• The business changes its structure or working practices 
• A policy has proved difficult to apply 
• An employee complaint identifies a gap 
• New technology or workplace risks are introduced 
• A tribunal decision affects the organisation’s procedures 
Each policy should include a version number, approval date, review date and the name or role of the person responsible for it. 
Employees should be told when a policy changes and managers should receive training where the new wording affects how they handle workplace situations. Employers should also check whether a proposed change affects employees’ contractual terms, as changing a policy is not always the same as changing an employment contract. 
 
A policy only works when it is put into practice 
Downloading a generic template and placing it in an employee handbook does not automatically make a business compliant. 
Policies must be tailored to the organisation, communicated clearly and applied consistently. Managers need to understand them, employees need to know where to find them and the business must be able to demonstrate that its procedures are followed. 
 
At Plain Talking HR, we help businesses review, update and implement practical HR policies that reflect current employment law and the realities of their workplace. 
 
If you are unsure when your policies were last reviewed or whether they still protect your business it may be time for an HR policy health check. 
Contact Plain Talking HR to discuss the support your business needs. 
 
Share this post:

Leave a comment: