Corporate Social Responsibility: Legal Implications for Businesses

Corporate Social Responsibility: Legal Obligations for UK Businesses

Published by Legal Foundations. Last reviewed: March 2026.

Corporate social responsibility is frequently discussed as though it were optional — a matter of brand positioning rather than law. That framing is increasingly incorrect. A range of statutory provisions impose mandatory reporting, disclosure, and due diligence obligations on UK companies, with significant sanctions for non-compliance. Directors who treat CSR as purely a marketing exercise risk personal liability, regulatory enforcement, and reputational damage if legal obligations are missed.

This guide sets out the hard legal obligations — not the aspirational — and explains what they require in practice.


The Companies Act 2006: Directors’ Duties and Strategic Reporting

Section 172: Duty to Promote the Success of the Company

Section 172 of the Companies Act 2006 requires a director to act in the way they consider, in good faith, would be most likely to promote the success of the company for the benefit of its members as a whole. Critically, s.172(1) requires directors to have regard to:

  • The long-term consequences of decisions
  • The interests of employees
  • The company’s relationships with suppliers, customers, and others
  • The impact of operations on the community and the environment
  • The desirability of maintaining a reputation for high standards of business conduct
  • The need to act fairly between members

This is not a duty to act in the interests of stakeholders, employees, or communities — the primary duty remains to the members (shareholders). But directors cannot simply ignore these factors. A decision made without any consideration of environmental or social impact may constitute a breach of s.172 if those factors were material to the outcome. Boards should document their consideration of s.172 factors in board minutes, particularly for significant decisions.

Section 414CB: Non-Financial Information Statement

Large companies (defined as those meeting two of: turnover over £36m, balance sheet over £18m, more than 250 employees) must include a non-financial information statement in their strategic report under s.414CB Companies Act 2006 (as inserted by the Non-Financial Reporting Directive).

The statement must include, to the extent necessary to understand the company’s development, performance, position, and impact, information relating to:

  • Environmental matters (including the company’s impact on the environment)
  • Employees
  • Social matters
  • Respect for human rights
  • Anti-corruption and anti-bribery matters

For each matter, the company must describe the policies pursued, the due diligence procedures applied, the outcome of those policies, and the principal risks and how they are managed. If the company has no policy in a particular area, it must explain why not.

This is not a tick-box disclosure. Boilerplate statements about “commitment to diversity” without any substance risk regulatory scrutiny and investor criticism. The Financial Reporting Council (FRC) monitors strategic reports for compliance and issues public guidance.


Modern Slavery Act 2015: Mandatory Supply Chain Reporting

Section 54 of the Modern Slavery Act 2015 requires commercial organisations that:

  • Supply goods or services in the UK; and
  • Have a total annual turnover of £36 million or more

to publish an annual slavery and human trafficking statement on their website. The statement must set out the steps the organisation has taken during the financial year to ensure that slavery and human trafficking are not taking place in its supply chain or any part of its own business.

The statement must be approved by the board (or equivalent) and signed by a director (or equivalent). It must be published on the company’s website with a prominent link from the homepage.

There is no prescribed format, but the Home Office encourages statements to cover six areas: organisational structure and supply chains; policies in relation to slavery and trafficking; due diligence processes; risk assessment and management; key performance indicators; and training provision.

Enforcement: There is currently no financial penalty for failing to publish a statement — enforcement is via naming and shaming and, ultimately, injunctions sought by the Secretary of State. However, the Government has consulted on introducing penalties, and reputational and procurement consequences of non-compliance are significant. Large public sector contracts increasingly require Modern Slavery Act compliance as a condition.

Organisations below the £36m threshold are not legally required to publish a statement but may choose to do so for procurement purposes.


Climate-Related Financial Disclosures (TCFD)

The Taskforce on Climate-related Financial Disclosures (TCFD) framework has been mandated for certain large UK companies and financial institutions by law.

The Companies (Strategic Report) (Climate-related Financial Disclosure) Regulations 2022 (SI 2022/31) require:

  • UK-listed companies (premium and standard listed)
  • Large UK companies (over 500 employees and either listed or over £500m turnover)
  • Large LLPs with similar thresholds

to include TCFD-aligned disclosures in their annual reports from financial years beginning on or after 6 April 2022. Smaller companies meeting only the Companies Act “large company” definition but not the TCFD threshold have a “comply or explain” obligation under s.414CB.

TCFD disclosures cover four pillars: governance (board oversight of climate risk), strategy (climate-related risks and opportunities, including scenario analysis), risk management (how climate risk is identified, assessed, and managed), and metrics and targets (emissions data, reduction targets).

For companies in the £36m–£500m revenue range, TCFD is not yet mandatory but is increasingly expected by institutional investors, lenders, and sophisticated customers. Including TCFD-style disclosures voluntarily is good practice and materially reduces the risk of a future “greenwashing” allegation.


Equality Act 2010: Gender Pay Gap Reporting

Under the Equality Act 2010 (Gender Pay Gap Information) Regulations 2017, employers with 250 or more employees must publish gender pay gap data annually, by 4 April each year (for private and voluntary sector employers). The required metrics are:

  • Mean and median gender pay gap in hourly pay
  • Mean and median gender bonus gap
  • Proportion of men and women receiving a bonus
  • Proportion of men and women in each pay quartile

The data must be published on the employer’s website and reported to the Government Equalities Office via the official reporting website. Failure to report is enforceable by the Equality and Human Rights Commission (EHRC) and constitutes an “unlawful act” under the Equality Act 2010.

Critically, having a pay gap is not itself unlawful — it is a reporting obligation, not a liability gateway. However, a large and unexplained gap can attract EHRC scrutiny, employee relations issues, and reputational damage. Employers should accompany their data with a narrative explaining the gap and the steps being taken to address it.

Separate ethnicity pay gap reporting is not yet mandatory, but is the subject of Government consultation and is expected to follow a similar framework.


UK Corporate Governance Code

The UK Corporate Governance Code, published by the FRC, applies on a “comply or explain” basis to UK premium-listed companies. Compliance is not legally mandatory in the sense of creating statutory liability — but deviation without explanation breaches listing rules and invites investor pushback.

The 2024 Code places significant emphasis on sustainability and social responsibility. Provisions include:

  • The board must ensure effective engagement with shareholders and, more broadly, stakeholders including the workforce
  • Boards of companies with more than 250 employees must have a mechanism for engaging with the workforce — a designated non-executive director, a workforce advisory panel, or a formal director elected from the workforce
  • Audit and risk committees must consider ESG-related risks

While the Code applies directly only to premium-listed companies, its principles represent good governance practice and are increasingly reflected in the expectations of institutional investors in all significant UK companies.


ESG Obligations in Commercial Contracts

The legal landscape is increasingly moving towards contractual CSR obligations imposed by counterparties rather than just regulation. This is particularly prevalent in:

Public sector procurement: The Procurement Act 2023 (replacing the Public Contracts Regulations 2015) requires contracting authorities to evaluate supplier social value. The Government’s Social Value Model requires large central government contracts to allocate at least 10% of evaluation weighting to social value — including carbon reduction plans, supplier diversity, and workforce wellbeing.

Suppliers bidding for contracts above £5m with central government must submit a Carbon Reduction Plan demonstrating a pathway to net zero by 2050 and current emissions reporting.

Large corporate supply chains: Major corporations are increasingly inserting CSR clauses into their supplier contracts, requiring compliance with ethical codes, modern slavery policies, environmental standards, and audit rights. Breach of these clauses can trigger termination rights. Suppliers to large multinationals should read the CSR provisions in their supply agreements carefully — they may impose obligations that go beyond UK legal minimums.

Lender requirements: ESG-linked lending is growing. Some loan facilities now include margin ratchets tied to ESG performance indicators. Breach of ESG covenants can trigger a step-up in interest rates or, in some structures, an event of default.


Directors’ Personal Liability for CSR Failures

Directors who ignore material ESG risks can face personal consequences:

Environmental liability: The Environment Act 2021 and the Environmental Protection Act 1990 create criminal liability for environmental offences. Senior managers who consent or connive in corporate environmental offences, or whose neglect contributes to them, can be personally convicted. Directors of waste management, manufacturing, or construction companies face particular risk.

Modern Slavery Act: While the Act does not currently create criminal liability for supply chain failures (as distinct from active participation in trafficking), failure to disclose can be cited in civil proceedings against directors for breach of s.172 CA 2006 where supply chain risk was a material matter the board should have managed.

Health and safety: Under the Health and Safety at Work etc. Act 1974 and the Corporate Manslaughter and Corporate Homicide Act 2007, directors and senior managers can face personal prosecution for failures leading to serious workplace harm. The Health and Safety Executive actively pursues individual directors in fatal injury cases.

Greenwashing: The FCA, ASA, and CMA are all actively pursuing misleading environmental claims. A director who approves a net zero claim without a credible underlying plan could personally face regulatory action or civil liability for misrepresentation under the Consumer Protection from Unfair Trading Regulations 2008.


B Corp Certification: Legal Implications

B Corp certification is awarded by B Lab to companies meeting standards of social and environmental performance, accountability, and transparency. Certification is not a legal status — it is a private scheme — but it has contractual and governance implications.

To maintain B Corp status, a company must amend its articles of association to enshrine a commitment to considering stakeholder interests alongside shareholder interests. For a company limited by shares, this typically involves inserting an explicit statement that directors should have regard to the interests of employees, communities, and the environment. While this does not override s.172 CA 2006, it evidences the company’s governance intentions and is increasingly used by institutional investors as a signal.

B Corp status can also affect commercial contract negotiations — some procurement processes give preference to B Corps — and is increasingly used in investor materials.


UK Sustainability Disclosure Requirements (SDR)

The FCA introduced Sustainability Disclosure Requirements (SDR) for UK-domiciled investment products from May 2024, prohibiting the use of sustainability labels unless specific criteria are met. While SDR applies primarily to fund managers and financial products, it signals the direction of travel: regulators will increasingly require that sustainability claims are substantiated, auditable, and not misleading.

For companies in any sector, the greenwashing risk is growing. The CMA’s Green Claims Code sets out six principles for environmental claims: claims must be truthful and accurate; clear and unambiguous; not omit material information; compare on a fair basis; consider the full life cycle of the product; and be substantiated. The CMA launched a review of green claims in the fashion and fast moving consumer goods sectors in 2023, resulting in voluntary undertakings from a number of major retailers.

A business that makes net zero commitments in its marketing or procurement bids but has no credible underlying plan risks not only CMA enforcement but also claims under the CPR 2008 from customers or procurement authorities who relied on those claims.



Further Reading

Free Templates & Documents

Scroll to Top