Rules and ethics
Part of Before you enter a business awards scheme, check the rules and ethics
What should a business awards disclosure policy include in England?
How to draft a business awards disclosure policy for England, covering ICO lawful basis, advertising codes, sensitive categories and disclosure routes.
What to take away
- The ICO's lawful basis guidance (ICO, current guidance) underpins compliant audience data collection, so your policy must name the lawful basis for every award mailing list you hold.
- The BSI's psychological well-being and safeguarding resources (BSI, current resources) matter because psychological well-being is a growing award category, and those entrants need clearer consent wording.
- Housing and local services information (GOV.UK, current service listing) can be relevant for property businesses running local award schemes, so venue and licensing checks belong in the same document.
- A written policy should separate factual claims, such as "winner, 2026", from promotional claims, which need evidence on file before publication.
Who the policy covers
A business awards disclosure policy sets out how your organisation describes awards it wins, sponsors, judges or runs. It applies to press releases, LinkedIn posts, pitch decks and tender submissions.
It also binds staff, agencies and freelancers posting on your behalf, so name roles rather than people. That way the policy survives staff changes.
Scope matters more than length. A three-page policy that names the award, the claim and the approver beats a twelve-page document nobody reads. Keep the master version centrally, and let regional teams add local notes rather than rewrite the whole thing.
Smaller entrants often borrow the organiser's wording without checking it. That is where undeclared sponsorship and paid-for categories cause problems later. For the wider rule set, see the business awards UK rules and compliance guide for 2027.
Data and consent rules
Award entries collect personal data: entrant names, judge notes, photographs and sometimes special category data. Under the UK GDPR you need a lawful basis before processing, and consent is only one option. The ICO's guidance on lawful basis explains how to choose and document it.
Your policy should state retention periods for losing entries, not just winners. It should also explain how a nominee can withdraw a photograph.
Where an organiser and a sponsor act as joint controllers, say who answers a subject access request. Put that in the sponsorship contract as well, because entrants will ask the organiser first whatever the paperwork says.
If you buy a mailing list to promote an awards programme, say so in the privacy notice. Silence there is a common disclosure failure.
Advertising and claim rules
The CAP Code, enforced by the Advertising Standards Authority, requires that marketing communications are obviously identifiable as such. A paid-for award category presented as editorial coverage breaches that principle.
Write down which claims require evidence. "Award-winning" needs a named award and year. "Best in the UK" needs a documented comparison.
Keep a dated copy of every claim you publish. When a category name changes the following year, the old wording still needs to be traceable to the evidence you held at the time.
For property and venue businesses, check local permissions before promoting an awards event. Housing and local services information on GOV.UK is a sensible starting point for licensing and venue questions.
Sensitive categories
Well-being, safeguarding and mental health categories attract entries containing personal stories. The BSI's psychological well-being and safeguarding resources are a useful reference when drafting consent lines for those categories.
State whether case studies are anonymised, who approves them, and how long consent lasts. Judges should see no more personal detail than the scoring criteria require.
Consent for a case study is not consent for a press release. Ask separately, and let the entrant read the final wording before it goes out.
Comparison of disclosure routes
| Route | What you publish | Evidence to hold | Typical risk |
|---|---|---|---|
| Winner announcement | Award name, category, year, organiser | Judging confirmation email | Low if accurate |
| Shortlist mention | "Shortlisted, 2026" | Shortlist notification | Low |
| Sponsored category | Sponsorship stated in the same post | Sponsorship agreement | Medium if omitted |
| Paid editorial | Labelled as advertising | Contract and invoice | High if unlabelled |
| Self-nominated award | Entry route stated | Entry receipt | Medium |
Drafting steps
- List every award your organisation runs, enters, sponsors or judges.
- Record the evidence held for each claim.
- Write one sentence per claim type, in plain English.
- Add a named approval route and a review date.
- Publish the policy where entrants can find it before they pay.
Give each claim type a short approved template, so press teams stop rewriting the wording from scratch under deadline.
England-specific points, including how organiser duties differ from entrant duties, are set out in business awards UK regulations in England.
This is general guidance, not legal advice. Individual cases need a qualified adviser, especially where special category data or regulated promotions are involved.
Common questions
Does a disclosure policy need legal review?
Not always, but any policy covering personal data, promotions or regulated sectors should be checked by a qualified adviser.
How often should the policy be updated?
At least annually, and whenever you add a new category, sponsor or data source.
Does the policy apply to social media posts?
Yes. Brief staff and agencies so paid partnerships and sponsored categories are labelled in the post itself.
What happens if a claim is wrong?
Correct it publicly and quickly, and record the correction. Repeat errors can attract regulator attention and damage future entries.
