Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
- What Is A Workplace Code Of Conduct?
What Should You Include In A Workplace Code Of Conduct?
- 1. Standards Of Behaviour (The “Day-To-Day” Expectations)
- 2. Discrimination, Harassment And Bullying (Clear Prohibitions)
- 3. Conflicts Of Interest
- 4. Confidentiality And Intellectual Property
- 5. Use Of Technology, Email, Messaging And Social Media
- 6. Privacy And Handling Personal Information
- 7. Reporting Issues And Speaking Up
- 8. Consequences For Breaches
- Key Takeaways
If you’re running a small business or startup, you’re probably making dozens of judgement calls every day - from customer complaints to team dynamics to performance issues. The tricky part is that when things go wrong, it’s not always obvious what the “right” decision is (or how to show you handled it fairly).
That’s where a workplace code of conduct comes in. Done properly, it gives your team a clear set of behavioural expectations, helps you build the culture you actually want, and gives you a practical framework for managing conduct issues before they turn into bigger legal or commercial problems.
In this guide, we’ll walk you through what a workplace code of conduct is, what to include, how to roll it out, and how to respond if someone breaches it - all from a small business perspective.
What Is A Workplace Code Of Conduct?
A workplace code of conduct is a written set of rules (or standards) that explains how you expect people to behave at work.
If you’ve ever asked yourself:
- “What is a code of conduct policy - and do we actually need one?”
- “What is code of conduct in the workplace, in practical terms?”
- “How do we set expectations without becoming overly corporate?”
…you’re not alone. For small teams, culture is often “understood” rather than written down - until it isn’t. A code of conduct helps you turn the unwritten rules into clear expectations.
Importantly, a code of conduct isn’t just about being strict or punitive. It’s also how you:
- protect a respectful, safe workplace
- support your managers and team leads to handle issues consistently
- reduce the risk of disputes escalating (including bullying, harassment, discrimination or misconduct claims)
- support performance management and termination decisions when needed (with a fair process)
In many businesses, the code of conduct sits alongside other workplace policy documents (like social media policies, bullying and harassment policies, WHS policies, and IT policies).
Why Small Businesses And Startups Need A Code Of Conduct (Even With A Small Team)
When you’re early-stage, it can feel like policies are something you “do later” - once you’ve got more staff, more time, and more structure.
But practically, the earlier you set behavioural expectations, the easier it is to scale your culture and manage risk. In small teams, one person’s behaviour can have an outsized impact on the rest of the business.
It Helps You Build The Culture You’re Trying To Create
Culture isn’t just perks and team lunches. It’s also the standard you set for respectful communication, collaboration, and accountability.
Your workplace code of conduct can reflect what matters to your business - for example:
- how you want people to communicate (internally and with customers)
- what “professional behaviour” looks like in your industry
- how you handle conflict
- how your team represents your brand
It Creates Consistency (So You Don’t Have To “Wing It”)
When conduct issues arise, inconsistency is what often causes disputes. A code of conduct helps you demonstrate that expectations were clear, communicated, and applied consistently.
This becomes especially important when you have different managers, hybrid teams, remote workers, or contractors working closely with employees.
It Supports Your Employment Contracts And Policies
In many workplaces, the code of conduct links to obligations in an Employment Contract, and forms part of the broader “rules of the workplace”. If you ever need to issue a warning, start an investigation, or consider termination for serious misconduct, having written standards in place makes the process much clearer.
It Helps With Legal Risk (And Commercial Risk)
Conduct issues can quickly become legal issues - but they can also become customer issues, reputation issues, or investor issues.
A solid organisational code of conduct can help reduce the risk of:
- bullying and harassment complaints
- discrimination claims
- breaches of confidentiality
- misuse of company systems and data
- conflicts of interest undermining decision-making
What Should You Include In A Workplace Code Of Conduct?
There’s no single perfect template for every business, but the strongest codes of conduct are specific enough to guide behaviour, without being so long that nobody reads them.
As a practical guide, your workplace code of conduct should usually cover the following areas.
1. Standards Of Behaviour (The “Day-To-Day” Expectations)
This is the core of codes of conduct in the workplace. It usually includes expectations like:
- treating colleagues, customers and suppliers with respect
- professional communication (including tone, language and appropriate channels)
- no bullying, harassment, victimisation, or aggressive conduct
- following reasonable management directions
- cooperating in investigations and complying with policies
If your team works in customer-facing roles, you may also want standards about customer interactions (especially if your business is in hospitality, retail, health, education, or professional services).
2. Discrimination, Harassment And Bullying (Clear Prohibitions)
Even if you cover this in separate workplace policies, it’s still common to summarise the expectations in the code of conduct, then refer to the more detailed policy for definitions, reporting, and processes.
Keep the language clear and practical. The purpose is to ensure your team understands:
- what behaviour is not acceptable
- what to do if they experience or witness it
- that you take complaints seriously
3. Conflicts Of Interest
A conflict of interest is where someone’s personal interests could improperly influence their work decisions.
For startups and small businesses, this is common - for example:
- a team member is hiring a friend or family member
- someone has a side business that overlaps with yours
- an employee has a relationship with a supplier you’re selecting
Your code should set a simple rule: disclose conflicts early, and follow the process you set (for example, notifying a manager or director).
4. Confidentiality And Intellectual Property
Small businesses often rely heavily on confidential information - pricing, supplier details, customer lists, product roadmaps, and internal processes.
Your code of conduct should explain that workers must:
- keep confidential information secure and not share it without permission
- only access information they need for their role
- return company property and information when leaving
Confidentiality terms also typically appear in your employment agreements, but it helps to reinforce the “how” of confidentiality in the day-to-day workplace rules.
5. Use Of Technology, Email, Messaging And Social Media
Many conduct issues happen through chat channels, email, CRM notes, or social media - especially in fast-moving startups.
Your code should link to (or include) rules about acceptable system use. In practice, businesses often pair a code of conduct with an Acceptable Use Policy covering things like:
- using work systems appropriately
- not accessing illegal or offensive content on company devices
- not sharing passwords or insecurely storing access credentials
- appropriate use of Slack/Teams/email and customer messaging
6. Privacy And Handling Personal Information
If your team handles customer data (or even employee records), you’ll want expectations around privacy and data handling - including not disclosing personal information without authorisation.
This should align with your external-facing Privacy Policy and your internal data security practices.
7. Reporting Issues And Speaking Up
A code of conduct should clearly explain how staff can raise concerns - whether it’s a complaint about inappropriate behaviour, a safety issue, or suspected wrongdoing.
If you’re a company (or plan to scale), you may also need a Whistleblower Policy to support protected disclosures and set an internal process for handling reports appropriately. Note that some organisations are legally required to have a whistleblower policy under the Corporations Act (for example, many public companies and large proprietary companies), while others may choose to adopt one as a best-practice risk and governance measure.
8. Consequences For Breaches
This doesn’t need to read like a threat, but it should be clear that breaches may result in action.
Often, a code of conduct includes a statement that:
- minor breaches may result in feedback, training or a warning
- serious breaches may result in disciplinary action up to and including termination (depending on the circumstances and a fair process)
Clarity here helps avoid surprises and creates a fair, transparent process for everyone.
How Do You Implement A Code Of Conduct Without It Becoming “Just Another Document”?
Having a workplace code of conduct is one thing. Making it part of how your workplace actually runs is another.
Here are practical ways to implement it properly (without overcomplicating things).
Build It Into Onboarding
When you hire someone, you’re not just hiring for skills - you’re also bringing them into your culture and your risk profile. Make the code of conduct part of onboarding, not an afterthought.
In practice, you can:
- include it in your onboarding pack
- ask new starters to confirm they have read and understood it
- talk through key scenarios relevant to their role
Many small businesses bundle policies into a single handbook so it’s easier for the team to use and easier for you to maintain - a Staff Handbook can be a practical way to do that.
Train Your Managers (Even If That’s Just You For Now)
In small businesses, managers often include founders, team leads, or senior staff who were promoted quickly. They may not have formal HR training.
A code of conduct is most effective when the people leading the team feel confident applying it. That might mean:
- knowing how to document issues early
- understanding what needs escalation
- handling complaints respectfully and confidentially
- responding consistently across team members
Use Real Examples (So It’s Not Abstract)
People learn best through real situations. Consider including examples in training, like:
- “What should you do if a customer is abusive?”
- “Is it okay to DM a customer from your personal account?”
- “What happens if you overhear a colleague making discriminatory comments?”
This helps your team understand what the policy means in practice - and reduces the “grey areas” that lead to misunderstandings.
Review It As You Scale
A startup of 4 people doesn’t operate like a business of 25 people - and a business of 25 people doesn’t operate like a business of 80.
As you grow, your organisational code of conduct should keep pace with:
- new work locations (including interstate or overseas expansion)
- hybrid/remote work arrangements
- new customer segments (including regulated industries)
- new management layers
What Happens If Someone Breaches The Workplace Code Of Conduct?
This is where a well-written code really earns its keep: it gives you a fair process for responding to conduct issues - and a paper trail that shows your actions weren’t arbitrary.
The right response will depend on what happened, how serious it is, and whether it has happened before. It should also be handled consistently with the Fair Work Act 2009 (Cth), any applicable modern award or enterprise agreement, the employee’s contract, and your internal policies.
But in most small businesses, a practical approach looks like this.
Step 1: Act Promptly (But Calmly)
If you wait too long, issues can escalate and become harder to address. On the other hand, reacting in the heat of the moment can create unnecessary risk.
Where possible, acknowledge the concern, secure any relevant information, and then follow a consistent process.
Step 2: Clarify The Allegation And Gather Evidence
You’ll usually want to clarify:
- what happened (dates, times, locations, communications)
- who was involved and who witnessed it
- what policy or standard may have been breached
- whether there is evidence (messages, emails, CCTV, system logs)
For more serious matters, it may be appropriate to conduct a formal workplace investigation process, including witness interviews and giving the employee an opportunity to respond.
Step 3: Give The Employee A Chance To Respond
Procedural fairness matters - especially when the conduct issue may lead to disciplinary action.
Even in a small business, giving someone a fair chance to explain their side can help you:
- make a better decision
- avoid misunderstandings
- reduce the risk of an unfair dismissal or general protections dispute
Step 4: Decide On The Outcome (And Document It)
Outcomes might include:
- coaching or training
- a written warning
- a performance improvement plan
- changes to duties or reporting lines (where appropriate)
- termination (in more serious circumstances and where lawful and procedurally fair)
How you manage the issue should align with your contracts and your overall performance management framework. Many businesses use structured performance management steps so expectations and consequences are clear and consistent.
Step 5: Consider Whether The Issue Points To A Bigger Risk
Sometimes a breach is an individual issue. Sometimes it’s a system issue.
For example:
- If multiple people are behaving inappropriately in a chat channel, you may need clearer communication standards and manager training.
- If confidentiality breaches keep happening, you may need better access controls or clearer IT policies.
- If there are complaints about one manager, you may need leadership coaching or changes to supervision structures.
A workplace code of conduct shouldn’t just be a tool for discipline - it can also be a useful “early warning system” to help you improve how the business operates.
Key Takeaways
- A workplace code of conduct sets clear behavioural expectations and helps protect your culture, your people, and your business.
- Even small teams benefit from a code of conduct in the workplace, because it creates consistency and reduces the risk of disputes escalating.
- A practical code usually covers everyday behaviour, harassment and bullying, conflicts of interest, confidentiality, IT and social media use, privacy, reporting concerns, and consequences for breaches.
- Your code of conduct is most effective when it’s built into onboarding, manager training, and regularly reviewed as you scale.
- If someone breaches the code, responding promptly, fairly, and with good documentation will help you manage risk and reach a defensible outcome.
This article provides general information only and does not constitute legal advice. If you’d like help putting a workplace code of conduct in place (or updating your workplace policies as you grow), you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.








