Frequently asked questions
Are workplace policies legally required?
Some policies are legally required — anti-harassment, health and safety, and equal opportunity policies are mandated in many jurisdictions. Others are not legally required but significantly reduce liability when enforced consistently. The specific obligations depend on your country, state or province, and the size of your organization. A labor attorney can identify which policies are mandatory for your situation.
How often should workplace policies be reviewed?
Most HR professionals recommend a full policy audit at least once a year and an immediate review whenever legislation changes, an incident exposes a gap, or the organization undergoes significant structural change such as a merger or rapid headcount growth. Outdated policies can be worse than no policy at all if they reference roles, laws, or systems that no longer exist.
Do employees need to sign workplace policies?
Yes, in most cases. A signed acknowledgment — dated and stored in the employee file — creates a record that the employee received, read, and understood the policy. Without it, an employer's ability to enforce the policy or defend a related claim is significantly weakened. Electronic acknowledgments through an HRIS system are widely accepted.
Can a company change a workplace policy without employee consent?
Generally yes, but employees must be given reasonable written notice of material changes before they take effect. If a policy change affects terms of employment that are contractually guaranteed — such as a compensation or leave policy — you may need formal agreement. Consult an employment lawyer before making changes that could be read as a unilateral variation of employment terms.
What is the difference between a policy and a procedure?
A policy states a rule and the rationale behind it. A procedure describes the specific steps to follow when implementing or responding to that rule. For example, an attendance policy sets the expectation; the attendance management procedure tells a manager how to log, escalate, and document an absence. Both documents are useful, and many organizations combine them in a single policy-and-procedure document.
How do I write a policy employees will actually read?
Keep it short — ideally under two pages for any single policy. Lead with the rule and the reason, not with definitions and disclaimers. Use bullet points for obligations and numbered steps for procedures. Avoid legal boilerplate that belongs in a contract, not an operational guide. Plain-language policies have lower dispute rates and higher compliance than dense legal documents.
Should small businesses bother with written policies?
Yes. The moment you have a second employee, written policies protect both of you. They ensure consistent treatment, reduce personal liability for managers making judgment calls, and demonstrate reasonable conduct to labor boards or courts. Small businesses that rely on verbal expectations are disproportionately vulnerable in employment disputes.
What topics do most businesses need to cover first?
The highest-priority policies for most organizations are: attendance and leave, anti-harassment and anti-bullying, acceptable use of technology, health and safety, and equal opportunity. These five areas generate the most complaints, claims, and regulatory scrutiny, and should be documented before any other operational policies.
Glossary
- Workplace policy
- A written document that defines rules, expectations, and procedures employees and managers must follow in a specific area of business operations.
- Employee handbook
- A single reference document that compiles multiple workplace policies and distributes them to employees, typically at onboarding.
- Policy acknowledgment
- A dated signature or electronic confirmation from an employee confirming they received, read, and understood a policy.
- At-will employment
- An employment relationship in which either party can end the relationship at any time; relevant because policies must not inadvertently create implied contracts in at-will jurisdictions.
- Progressive discipline
- A step-by-step approach to enforcing policy violations — typically verbal warning, written warning, suspension, then termination — applied consistently.
- Scope
- The explicit statement of which employees, locations, devices, or situations a policy applies to.
- BYOD (Bring Your Own Device)
- A workplace arrangement where employees use personal smartphones, tablets, or laptops to perform work tasks, governed by a dedicated policy.
- Zero-tolerance clause
- A policy provision that imposes immediate disciplinary action for a specified behavior without the usual progressive discipline steps.
- Duty of care
- An employer's legal obligation to take reasonable steps to protect employees from harm — a foundational concept behind most safety and health policies.
- Policy review cycle
- The scheduled interval at which a policy is formally re-examined and updated to reflect legal changes, organizational changes, or operational experience.
- Whistleblower protection
- Legal and policy provisions that protect employees from retaliation when they report violations in good faith.
What is a workplace policy?
A workplace policy is a written document that defines the rules, expectations,
and standards governing how a business operates and how employees conduct themselves.
It tells employees what is expected of them, tells managers how to apply those
expectations consistently, and gives the organization a documented basis for
disciplinary action, regulatory compliance, and dispute resolution.
Workplace policies cover a wide spectrum: conduct (anti-harassment, anti-bullying,
attendance), technology (acceptable use, BYOD, email), safety (violence prevention,
drug testing, ergonomics), compliance (anti-corruption, equal opportunity,
background checks), and operations (leave, probationary periods, accounting
procedures). What they share is a common function — reducing ambiguity and
protecting the business and its employees from the consequences of undefined
expectations.
A policy differs from a contract: it applies to all employees collectively,
can generally be updated with reasonable notice, and does not need to be
renegotiated individually. A well-maintained set of workplace policies is one
of the most cost-effective risk-management tools any employer can maintain.
When you need a workplace policy
The clearest signal that you need a written policy is the moment you find
yourself making a judgment call that you'll have to make again — attendance,
technology use, leave requests, workplace behavior. Common triggers:
- Hiring a first or second employee and needing documented expectations
- An incident — harassment complaint, data breach, missed shift pattern — that exposes a gap in your rules
- Expanding into a new jurisdiction with different labor law requirements
- Introducing new technology such as company-issued devices or a remote work arrangement
- A regulatory audit or due diligence process that requires policy documentation
- Rapid headcount growth that makes informal, verbal expectations unscalable
- A conflict between employees or between an employee and a manager with no written reference to resolve it
The cost of operating without written policies is rarely the absence of the document itself — it is what happens when something goes wrong and you have no consistent, documented basis for action. Employment tribunals, labor boards, and civil courts routinely find against employers who cannot show they communicated a rule before enforcing it. A set of clear, signed, regularly reviewed workplace policies is the most direct way to close that gap.