Which policies do you need as a small business owner?
You do not need every HR policy you can find online.
You need the policies the law requires, the ones that help your managers make consistent decisions, and the ones that reflect how your business actually works. For a growing company, that usually means getting the legal and practical basics in place first, then adding policies when a recurring people issue, working practice or business risk makes one useful.
We have seen handbooks with dozens of pages that nobody opens until something has gone wrong. We have also seen smaller businesses operating with almost everything sitting in the founder's head.
When those decisions stay informal, managers spend time answering the same questions repeatedly, employees receive inconsistent answers and relatively small people issues can become expensive employee relations problems.
Neither is particularly helpful.
The better position is somewhere in between.
Small Business UK's article "How to decide on HR policy for your small business", updated 21 July 2026, makes a useful distinction: policies should help explain how the business operates, while HR procedures sit underneath them and show people what actually happens. It also makes the point that smaller businesses are usually better off getting the basics right first and building from there.
That is the right place to start.
Most employment-law references in this article reflect the rules in England, Scotland and Wales. Northern Ireland has separate employment legislation in a number of areas, and differences are flagged where they affect the advice.
Which HR policies does a small business actually need?
There is a difference between something being legally required, something you need to communicate in writing, and something that is simply very good practice.
Those categories are often blurred together.
For example, in the UK, if you employ five or more people, you must have a written health and safety policy. It should explain how you manage health and safety risks, who is responsible for what, and the practical arrangements you have in place.
You also need clear written disciplinary and dismissal procedures, together with a written grievance process. These should explain how concerns and complaints will be handled and reflect the Acas Code of Practice. If an employer unreasonably fails to follow the Code, an employment tribunal can adjust any award by up to 25%.
Other requirements depend on the business. Commercial organisations carrying on business in the UK with annual turnover of £36 million or more must publish a modern slavery and human trafficking statement. Data protection and privacy policies are also essential in practice for organisations handling employee or customer data under the Data Protection Act 2018 and UK GDPR. And while every employer is not required to have a standalone equal opportunities policy, having a clear approach to equality and anti-discrimination helps businesses meet their duties under the Equality Act 2010 and show how those standards are applied.
What changes when your headcount grows?
Some duties only apply once a business reaches a particular size. In England, Scotland and Wales, employers with 250 or more employees on the relevant annual snapshot date must report and publish their gender pay gap information for each separate legal entity. Headcount means individuals rather than full-time equivalents, so part-time employees count too.
There is not currently a standalone legal requirement for employers of a particular size to have a menopause policy. However, employers with 250 or more employees can now publish a voluntary equality action plan explaining how they will address their gender pay gap and support employees experiencing menopause. Subject to the detailed legislation, these action plans are expected to become mandatory from spring 2027. A separate menopause policy may still be helpful, but the legal focus is on meaningful action rather than simply producing another document.
The government has also committed to introducing mandatory ethnicity and disability pay gap reporting for employers with 250 or more employees. At the time of writing, this is a future measure rather than a current reporting duty, so larger employers should prepare their data and keep the timetable under review rather than describe it as already in force.
There are also requirements that depend on what the business does rather than how many people it employs. Employers that regularly receive and control qualifying tips must have a written tipping policy and distribute tips fairly and transparently. Since April 2026, all employers must also keep adequate annual leave and holiday pay records for six years. That is a record-keeping duty rather than a requirement for a separate holiday policy, but the policy and payroll process should match what the records show.
The key is not to assume that every legal duty needs its own standalone policy. Some requirements call for a written policy or published statement; others require information, reporting, consultation, records or a reliable process. Thresholds and commencement dates can also change, so growing employers should review their obligations when they approach five employees, 250 employees or the £36 million turnover threshold, and whenever they enter a regulated or tipping-based sector.
That does not mean the law requires a 70-page employee handbook. Policies are often long because they need to be comprehensive and robust enough to stand up to legal scrutiny. Employees may not read the handbook cover to cover, but it remains an important resource for consistency and clarity around ways of working. As you add policies, the handbook will naturally become longer.
It means you need to understand the obligations first, then decide how best to document them for your business.
For most small businesses, we would look first at:
Health and safety
Disciplinary procedure
Grievance procedure
Holiday and leave arrangements
Sickness absence and sick pay
Family-friendly leave
Probation, performance management and dismissal
Flexible working
Zero-hours, low-hours and predictable working arrangements, where relevant
Equality, diversity and inclusion
Harassment and sexual harassment, including third-party harassment
Whistleblowing
Data protection and employee privacy
Home, hybrid or remote working, where relevant
Redundancy and collective consultation, where relevant
Sexual harassment deserves particular attention. Employers already have a legal duty to take all reasonable steps to prevent sexual harassment at work, and this duty is expected to strengthen under the Employment Rights Act. A clear policy is an important starting point, but it needs to be backed by practical action: assessing where risks may arise, setting clear expectations, providing safe reporting routes, training managers and employees, and responding promptly when concerns are raised. The policy should also cover work-related events, online communications and harassment involving clients, customers, contractors or other third parties.
Some are driven directly by legal requirements, such as the Employment Rights Act, which is bringing in significant changes throughout 2026 and 2027. Others make statutory rights much easier to administer consistently.
The written statement rules are a good example. In England, Scotland and Wales, employers must provide information on sick pay and procedures, other paid leave and notice periods from day one, and the wider written statement must cover disciplinary and grievance procedures within two months. Northern Ireland has separate rules, including a two-month written-statement timetable, so UK-wide employers should check the requirements that apply in each jurisdiction.
You can put some of that information into a handbook rather than repeating everything inside every employment contract.
That tends to make future updates easier too.
How do you decide which workplace policies to add next?
This is where headcount only tells part of the story. A business with all its employees based in the UK may have very different policy needs from one with teams working across several jurisdictions.
For example, a 25-person business operating across four jurisdictions may need more policy structure than a 60-person organisation where everyone works from one site and follows the same hours. Even where local laws differ, it can still be helpful to weave the business’s core culture and values through its people practices, so employees have a consistent experience wherever they are based.
So, instead of asking, ‘How many policies should a business of our size have?’, it is more useful to start with five different questions.
1. What decisions are managers making repeatedly?
If the same question keeps landing on different managers' desks, that is often a sign that a policy would help.
What happens when someone is underperforming? What happens if someone is off sick all the time? Can an employee take compassionate leave?
If the answer depends entirely on which manager the employee asks, you do not really have a company position yet.
A useful HR policy creates enough consistency that two employees in similar circumstances are treated in a similar way. They don’t need to be overly engineered documents, but they should be legally robust.
2. How does business change affect things?
A common problem in growing companies is that a policy was perfectly sensible when it was written, but the business it describes no longer exists.
For example, everybody used to work from one office. Now half the team works hybrid.
Or, the founder once approved every holiday request, but that becomes fairly impractical when there are 80 people.
Your employee policies should change when the way work happens changes. The more employees you hire, the more likely it is that at some point down the line you will need a maternity policy, or a sickness or grievance policy.
Acas makes this point explicitly in "Having a policy - Implementing flexible working", last updated 10 June 2026. It recommends reviewing policies regularly and checking connected policies, including hybrid working, reasonable adjustments, family leave, data protection and health and safety, so they remain up to date and consistent with one another.
Case study: Coffee Break Languages tested the practice before fixing the policy
Coffee Break Languages is a useful small-business example.
The Scottish company had 19 employees when CIPD published "A flexible four-day week model: Coffee Break Languages" on 14 July 2025. It wanted to work out whether a four-day working model could improve employee experience without damaging productivity.
It did not simply write a four-day week policy.
It tested three different approaches.
The first reduced the working week from 35 to 28 hours. Employees liked it, but productivity suffered because the business had lost 3,542 working hours across a year.
The company then tried a traditional five-day week. That did not produce the improvement management wanted either.
The third model compressed the existing 35 hours into four days. Once the business knew the arrangement could work, it built clear guidelines and expectations into its flexible working policy and continued reviewing them as the model developed. CIPD reported that the business maintained customer response times, increased production in some areas, and 95% of employees said it was a great place to work.
The useful part of this example is the order.
The company worked out what could operate successfully, then wrote the policy around it.
Too often it happens the other way round.
3. Where is inconsistency starting to cost you?
A policy earns its place when inconsistency creates a real business problem.
Perhaps one manager approves three days' homeworking and another refuses exactly the same arrangement. One manager deals with repeated lateness immediately and another ignores it for six months. One team allows carry-over of unused holiday and another does not.
At that point, the issue is bigger than administration.
People compare experiences. Managers start questioning one another's decisions. Employees become unsure what the company actually expects. A straightforward conversation can become an employee relations problem because nobody can point to an agreed position.
That is exactly what good workplace policies are supposed to prevent.
Acas's research report "Organisational case studies on flexible working: variations in practice", published 29 November 2024, found that gaps in managers' knowledge of policy could create inconsistencies in employees' access to flexibility. It also found that organisations differed in how far their policies simply reflected legislation versus building a more tailored approach around the workforce and the work itself.
The document is important.
Whether managers can use it is more important.
Why HR procedures matter just as much as HR policies
A policy explains where your company stands.
A procedure makes it practical by showing people what happens next.
You need both when a decision could have a significant impact on someone’s employment. The policy provides clarity and reassurance, while the procedure helps everyone understand how the situation will be handled fairly and consistently.
Grievances are a good example.
Your policy might reassure employees that they can raise a concern without fear of being treated unfairly.
The grievance procedure then brings that promise to life. It should explain who employees can contact, what happens if that person is involved in the complaint, when a meeting will take place, how the outcome will be communicated and how they can appeal.
GOV.UK says the written grievance process must identify who an employee should contact and how. It should also cover the formal meeting, timescales, appeal route and right to be accompanied.
That detail matters when things become difficult.
In "Acas consultation: draft Code of Practice on disciplinary and grievance procedures", issued 30 July 2026, Acas estimated that formal disciplinary and grievance procedures cost UK employers around £2.36 billion each year, compared with around £250 million for informal resolution. The consultation runs until 23 September 2026 and the draft places greater emphasis on handling concerns early and avoiding unnecessary escalation.
A good procedure should help people resolve things properly.
It should not create process for the sake of process.
Case study: Ramphal v Department for Transport
Ramphal v Department for Transport, UKEAT/0352/14/DA, decided on 4 September 2015, is a useful reminder that following a procedure is not the same as making a fair decision.
Mr Ramphal faced disciplinary proceedings concerning expenses and hire-car use. The manager investigating the matter initially reached findings that were relatively favourable to him and proposed a final warning. Following extensive involvement from HR, later drafts became substantially more critical and the eventual recommendation became dismissal for gross misconduct.
The Employment Appeal Tribunal allowed Mr Ramphal's appeal. It was particularly concerned about HR moving beyond advice on law and procedure into questions of credibility and culpability.
The business lesson is fairly simple.
Your HR procedures should create the framework for a fair decision.
They should not make the decision for the manager.
A beautifully written disciplinary procedure cannot rescue a process if the person responsible for deciding the case has not exercised their own judgement.
How should you build an employee handbook without overdoing it?
We would start by writing down how the company already wants to behave, then check that position against the law.
Not the other way round.
Small Business UK's article "How to decide on HR policy for your small business", updated 21 July 2026, makes a useful point about treating HR policy as part of how you run the business rather than as a collection of rules.
That changes the questions you ask.
Instead of asking, 'What should our absence policy say?', ask: 'How do we want to handle absence in a way that is fair to the person, workable for their manager and clear enough that everybody understands the process?'
Then document it.
For most growing businesses, an employee handbook should contain three main types of information. First, it should include required or legally important information, such as health and safety policies, disciplinary and grievance procedures, statutory leave, and essential employment information. Second, it should cover operational policies, including absence, holidays, hybrid and flexible working arrangements, expenses, IT use, performance management, and probation. Finally, the handbook should include information specific to the company’s culture or business, such as enhanced family leave, additional wellbeing support, volunteering days, office expectations, learning arrangements, and other company benefits.
You do not have to copy that list.
Your business should decide the third category for itself.
That is the part where the handbook starts sounding like your company rather than somebody else's template.
When should you review your HR policies?
We would review the whole policy set at least annually, and sooner when something material changes.
That could be:
new employment legislation
a new office or working model
rapid headcount growth
an acquisition or restructure
repeated employee relations issues
a new HR system
a recurring question managers cannot answer consistently
a tribunal decision or new Acas guidance that affects your procedures
There is a live example right now.
Acas opened "Acas consultation: draft Code of Practice on disciplinary and grievance procedures" on 30 July 2026, with responses due by 23 September 2026. The current Code remains in place while that process continues, but it is exactly the kind of development somebody in the business needs to be watching.
The point is not to rewrite your handbook every month.
It is to know who owns it.
A policy with no owner eventually becomes an archive.
How JourneyHR can help
We work with growing businesses to decide which policies they actually need, review what is already there and turn the final set into something managers and employees can genuinely use.
That can mean building an employee handbook from scratch, reviewing existing HR policies, updating individual policies after legal or organisational change, or putting the HR procedures underneath them so managers know what to do when a real situation arises.
Our Employee Handbook + Policies work covers areas including family-friendly policies, health and safety, disciplinary and grievance processes, workplace culture and legal obligations. We also review existing documents for outdated or unclear language and build policies around the size, culture and operating model of the business rather than relying on a standard handbook.
For businesses that need more than a handbook, our broader HR Policy + Process work includes contracts, onboarding, probation, appraisals, employee exits, HR templates and reporting.
The point is to leave you with something you can actually run the business from.
Get in touch: Talk to JourneyHR or Explore HR Policy + Process Consultancy
Final thought
More HR policy is not automatically better.
A policy should exist because somebody needs clarity, the business needs consistency, or the law requires you to set something out. If it does none of those things, adding another document to the handbook probably does not help anybody.
Start with what you need, make it fit the business you actually run, then make sure your managers know how to use it.
FAQs
What HR policies does a small business legally need in the UK?
Legal requirements vary across the UK. In the UK, a business with five or more employees must have a written health and safety policy, employers must set out and share written grievance procedures, and written disciplinary rules and procedures should be available to employees. The written statement of employment particulars must also cover matters such as sick pay, paid leave and disciplinary and grievance procedures. Northern Ireland has separate employment legislation in some areas, so employers with staff there should check the relevant Northern Ireland requirements as well.
Other policies will depend on your workforce and how the business operates.
Does a small business need an employee handbook?
There is no general legal requirement to put every employment policy into one employee handbook. A handbook is useful because it gives employees and managers one place to find policies, procedures, benefits and workplace expectations. It can also hold information that your written statement refers to. The important part is that legally required information is provided and that any handbook you create is current, accessible and consistent with your contracts.
What is the difference between an HR policy and an HR procedure?
An HR policy explains the organisation's position or rules on a subject. An HR procedure explains the steps people follow when something happens. For example, a disciplinary policy can explain expected standards of conduct, while the disciplinary procedure explains investigation, notification, meetings, decisions and appeals. In practice, the two need to work together so managers can apply the company's position consistently and fairly.
How often should a small business update its HR policies?
Review your HR policies at least once a year and whenever employment law, working arrangements or your business materially changes. You should also review a policy if managers repeatedly struggle to apply it or employee cases expose gaps in the wording. Acas's "Having a policy - Implementing flexible working", last updated 10 June 2026, recommends regularly reviewing policies and checking that connected policies remain consistent with one another.
Can I use free HR policy templates for my small business?
A template can be a sensible starting point, and Acas publishes free examples for policies including flexible working, disciplinary procedures, grievances and equality, diversity and inclusion. But you still need to adapt the wording to your business, contracts, benefits, decision-making structure and working practices. A template that promises something you do not actually do can create more confusion than having no policy on that subject at all.
