1
Identify all covered persons
Determine which categories of individuals the policy will cover — employees, board members, officers, contractors, and volunteers. List every category explicitly in the scope section.
💡 When in doubt about whether a category should be included, ask whether that person can influence a procurement, hiring, or financial decision. If yes, include them.
2
Define conflict types with concrete examples
Go beyond the abstract definition and list at least five specific scenarios — such as ownership in a vendor, a family member employed by a competitor, or receipt of gifts above a stated dollar threshold.
💡 Pull examples from situations your organization has actually encountered or that are common in your industry. Abstract definitions are ignored; relatable scenarios prompt disclosure.
3
Set the disclosure timeline and frequency
Specify three disclosure triggers: at onboarding, annually (tie to a specific date — e.g., January 31 each year), and within a short window of any new conflict arising (5 business days is common).
💡 Align the annual disclosure cycle with your fiscal year-end or board calendar so compliance reviews don't compete with other peak periods.
4
Name the review committee and its authority
Identify who reviews disclosures — a board audit committee, HR leadership, general counsel, or a named officer. State the committee's authority to approve, reject, or require recusal on conflicted transactions.
💡 For small organizations without a formal committee, designate at least two reviewers who must agree — single-person review creates its own conflict risk.
5
Write the recusal procedure in step-by-step terms
Describe exactly what a conflicted person must do: disclose before the meeting begins, leave the room, abstain from the vote, and not lobby other members. Describe how recusal is recorded in minutes.
💡 A one-paragraph recusal requirement is clearer than a general statement to 'step aside.' The more specific the procedure, the less room for ambiguous partial compliance.
6
Specify record retention periods and custodians
Name the person responsible for retaining disclosure forms and review records, and set a retention period of at least 7 years — matching most audit statute-of-limitations windows.
💡 Store signed disclosure forms in a location the review committee can access independently — not only in the HR file of the conflicted person.
7
Add enforcement language with named authority
State the range of disciplinary consequences and identify who has authority to impose each level — line manager for minor violations, the board for director violations.
💡 Cross-reference your employee handbook's disciplinary procedure to keep consequences consistent across policies.
8
Distribute, collect acknowledgments, and set a review date
Send the policy to all covered persons with an acknowledgment form. Record the review date on the policy document itself and schedule a calendar reminder for the next review cycle.
💡 Use a dated signature block — not just a checkbox — so acknowledgments hold up as evidence of receipt if a violation is later disputed.