Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
When you’re building a team in Australia, you’ll hear a lot about “standards,” “values,” and “policies.” Two phrases that come up often are code of conduct and code of ethics.
They sound similar, but they do different jobs in your business. One sets clear rules. The other sets the tone and principles that guide day‑to‑day decisions.
Getting them right isn’t just good housekeeping. Clear, well-implemented standards help you meet legal obligations, manage risk, and create a workplace people want to be part of. In this guide, we’ll unpack what each document does, where they overlap, how Australian laws fit in, and practical steps to put robust, tailored standards in place.
What Is A Code Of Conduct?
A code of conduct is your rulebook. It sets out specific, enforceable expectations for behaviour at work (and sometimes outside work if it affects the business). It explains what’s acceptable, what isn’t, and what happens if the rules are breached.
Typical topics include respectful behaviour, anti-bullying and anti-discrimination, conflicts of interest, use of company resources, confidentiality, social media use, gifts and benefits, and reporting processes. It also sets out how concerns will be handled and potential consequences, which might link to your disciplinary and employee termination documents.
In practice, a code of conduct is closely tied to compliance. It should reflect your obligations under workplace laws, safety duties, privacy rules (if they apply to your business), and the Australian Consumer Law (ACL) when dealing with customers. Many businesses go further and include practical guidance-such as examples of acceptable behaviour-to make the standards easy to understand and follow.
What Is A Code Of Ethics?
A code of ethics is your business’ moral compass. It sets the values and principles that guide how you and your team make decisions-especially in situations that aren’t covered by a black‑and‑white rule.
Where a code of conduct might say “don’t accept gifts over $100,” a code of ethics asks, “would accepting this benefit compromise our integrity or the trust of our customers?” It’s about doing the right thing, not only the minimum required.
Common values include integrity, honesty, accountability, fairness, respect, inclusion, transparency, and responsibility to customers and the community. Those values then inform your detailed policies and conduct expectations.
Code Of Conduct Vs Code Of Ethics: What’s The Difference?
Most businesses need both, and many combine them in one document. Even so, it helps to understand their distinct roles.
- Purpose: A code of ethics articulates core values and principles. A code of conduct sets enforceable rules and procedures.
- Language: Codes of ethics are principle‑based (“we value…”, “we act with…”). Codes of conduct use clear directives (“you must not…”, “employees are required to…”).
- Enforcement: A code of conduct is enforceable and links to investigation and disciplinary processes. A code of ethics is aspirational but still expected to inform decisions.
- Scope: Codes of conduct focus on compliance and specific behaviours. Codes of ethics focus on culture and decision‑making in grey areas.
- Examples: Wearing safety gear at a warehouse is a conduct rule. Declining a questionable “facilitation fee” because it conflicts with integrity is an ethics decision (and should also be reflected in anti‑bribery conduct rules).
The two work best together. Values create buy‑in and context for the rules, and the rules translate values into everyday actions people can follow.
Do Australian Laws Require These Documents?
There isn’t one Australian law that universally forces every business to have a formal code of conduct or code of ethics. However, several legal frameworks and regulators make them essential in practice.
Work Health And Safety (WHS)
Under WHS laws, employers must provide a safe workplace, which includes preventing bullying, harassment and other psychosocial hazards. Clear conduct standards-paired with training and reporting processes-help demonstrate you’re meeting those duties.
Anti‑Discrimination And Workplace Protections
Federal and state laws prohibit unlawful discrimination, sexual harassment and victimisation. A well‑designed code of conduct (and supporting workplace policies) sets expectations and procedures to manage issues early and fairly, reducing the risk of claims or regulator action. If you do face a complaint, having clear processes-supported by practical guidance for employers on harassment and discrimination claims-is critical.
Australian Consumer Law
If you sell goods or services, the ACL applies to things like marketing, sales practices, refunds, and product safety. Your standards should reinforce truthful advertising and fair dealings with customers. Many businesses capture these expectations in conduct rules and training, and keep an eye on key obligations like the ACL’s general ban on misleading or deceptive conduct (see section 18).
Corporate Governance And Sector Rules
- Companies: Company directors and officers must act with care and diligence, in good faith, and for a proper purpose under the Corporations Act. While the Act doesn’t mandate a code of ethics, company policies often reference these duties and embed them in practical standards.
- Listed companies: The ASX Corporate Governance Principles recommend having a code of conduct (and often an ethics statement), but that recommendation does not apply to all private companies.
- Industry regulators: Certain sectors (for example, financial services, education, health and community services) may have regulator expectations or industry codes that make documented conduct standards a practical requirement.
Privacy And Data
Not every small business is caught by the Privacy Act 1988 (Cth). Generally, the Australian Privacy Principles apply to “APP entities,” which include businesses with an annual turnover of more than $3 million and some smaller businesses in specific categories (such as health service providers, those trading in personal information, or contractors to APP entities). If the Act applies to you, you’ll need a compliant Privacy Policy and privacy processes that are reflected in your conduct standards.
The bottom line: even if a code isn’t strictly required by law, having one is often the most practical way to meet your obligations, demonstrate due diligence, and set a consistent standard across your team.
How Do You Develop And Implement Effective Codes?
You don’t need a 50‑page manual. You do need clear, tailored standards that your team can understand and apply. Here’s a simple, practical approach.
1) Map Your Risks, Laws And Stakeholders
List your key activities and risks (customer interactions, data handling, warehouse safety, field work, client entertainment, etc.). Identify the laws that touch those areas-WHS, discrimination, consumer law, privacy and any sector‑specific rules. If in doubt, get early legal input so your documents match your risk profile and structure. Where relevant, align your policies with core governance documents such as your Company Constitution.
2) Define Your Values And Principles
Agree on 4–6 core values that genuinely reflect how you want to operate (for example: integrity, respect, inclusion, accountability, customer focus, environmental responsibility). Write a short statement for each. Keep it plain English. These become the backbone of your code of ethics.
3) Translate Values Into Clear Rules
Turn principles into practical standards by drafting your code of conduct. Cover, at minimum:
- Respectful behaviour, anti‑bullying and anti‑harassment
- Conflicts of interest, gifts and hospitality
- Use of company property, IT and social media
- Confidentiality and information handling (including privacy if applicable)
- Health, safety and wellbeing (including psychosocial hazards)
- Dealing fairly and honestly with customers, suppliers and regulators
- How to raise a concern (speak up), investigation process and potential outcomes
Where you need more detail, create a short supporting policy (for example, a conflicts policy, social media policy, or whistleblower policy for eligible companies) and reference it in your code. If you’re building a suite of policies, a simple Staff Handbook can help keep everything in one place.
4) Make It Real: Communication, Training And Accountability
Launch your code with a short briefing. Include it in onboarding and refresh it regularly. Use real-world examples relevant to your team-call centre scenarios, site safety moments, customer complaints, data handling, and so on.
Explain how to report concerns, what confidentiality looks like, and how investigations work. Link your code to your Employment Contract and performance management processes so expectations are consistent and enforceable.
5) Review And Improve
Schedule periodic reviews (for example, annually or after incidents). Update for law changes, business growth, or new risks. Invite feedback-frontline staff often spot gaps early.
What Supporting Policies And Legal Documents Should You Have?
Your code sets the standard. Supporting contracts and policies put those standards into action and help you manage risk. Depending on your size and industry, consider the following.
- Employment Contract: Sets role duties, conduct expectations, confidentiality and termination processes, and should reference your policies and code of conduct.
- Staff Handbook Or Workplace Policies: A central, plain‑English pack covering conduct, grievance handling, social media, leave, performance and more-often managed as a Staff Handbook.
- Whistleblower Policy: Required for certain companies (for example, public and large proprietary) and good practice for others, this policy protects people who speak up about misconduct. See Sprintlaw’s Whistleblower Policy service.
- Privacy Policy: If the Privacy Act applies to your business (or you choose to adopt best‑practice standards), a clear Privacy Policy explains how you collect, use and protect personal information.
- Customer Terms Or Service Agreements: For service businesses, your client agreement or online terms should align with the ACL’s rules on fairness and consumer guarantees. If you’re publishing online terms, consider pairing them with appropriate Website Terms & Conditions.
- Confidentiality And IP: Non‑disclosure agreements and clear IP clauses (in staff and contractor agreements) protect your know‑how and brand. If brand protection is a priority, plan to register your marks and consider a simple IP health check to map risks.
- Governance Documents (for companies): If you have co‑founders or investors, align your standards with a Shareholders Agreement and board protocols so decision‑making and accountability are consistent with your values.
You won’t need every document on day one, but most growing teams will need several. The key is consistency: your contracts, policies and codes should all pull in the same direction.
Key Takeaways
- A code of ethics sets your values and principles; a code of conduct turns those values into clear, enforceable rules and processes.
- While not universally mandated by law, robust codes help you meet WHS, anti‑discrimination and ACL obligations-and demonstrate due diligence if issues arise.
- Privacy obligations don’t apply to every small business, but where the Privacy Act does apply, you’ll need a compliant Privacy Policy and aligned practices.
- Effective implementation matters as much as drafting: communicate, train, link to contracts, and refresh your codes as your business and the law evolve.
- Support your codes with the right documents-Employment Contracts, a Staff Handbook, whistleblower and privacy policies, and customer terms-so expectations are consistent and enforceable.
- Tailor everything to your industry and risk profile. Early legal input helps you build practical, plain‑English standards that actually work.
If you’d like a free, no‑obligations chat about drafting or reviewing your code of conduct, code of ethics and supporting workplace policies for your Australian business, reach us on 1800 730 617 or team@sprintlaw.com.au.








