Conflict of Interest Policy: Identifying Workplace Risks

A conflict of interest policy tells employees which personal interests could sway their work decisions, how to declare them, and what the company will do once they do. The goal isn’t to ban every outside relationship. It’s to bring them into the open early, so a manager can decide calmly whether the person should step back, hand over a decision, or carry on with a safeguard in place.

Most conflicts don’t start with bad intent. They start with silence: a buyer who doesn’t mention that a supplier is run by a cousin, or a recruiter who quietly interviews a friend. Hidden, these overlaps damage trust and can expose the business to legal and financial risk. Declared, they are usually easy to manage. This guide covers the common types of conflict, a disclosure process that works, how to keep a conflicts register, who approves what, consequences, sample clauses you can adapt, and the mistakes that make policies fail.

What counts as a conflict of interest at work

A conflict of interest exists when an employee’s personal interest interferes, or could reasonably appear to interfere, with their duty to act in the company’s best interest. The “appear to” part matters. Even if a decision was fair, a hidden relationship makes colleagues, clients and auditors doubt it.

Three kinds are worth naming in your policy:

• Actual conflict: the personal interest and the work decision overlap right now (a manager approving a contract with a company they part-own).
• Potential conflict: the overlap could arise later (an employee whose spouse has just joined a competitor).
• Perceived conflict: no real influence, but a reasonable observer would suspect one (a team lead socializing heavily with one vendor’s sales staff during a tender).

Having a conflict is not, by itself, misconduct. Failing to disclose it, or acting on it after disclosure, is where the problem lies.

Common types of conflicts and how to handle them

Use real categories with examples so employees can recognise their own situation. The table below works as a starting point for most organizations.

Type	Example	Typical safeguard
Family and close relationships	Hiring, supervising, appraising or setting pay for a relative or partner	Remove the person from the decision; change the reporting line
Financial interests	Owning shares in, or lending to, a supplier, client or competitor	Disclose; exclude from vendor selection; consider divestment for senior roles
Outside employment and moonlighting	A second job, freelance work, or a side business in the same field	Prior written approval; no use of company time, data or clients
Gifts, hospitality and favors	Expensive gifts, travel or event tickets from a vendor during a deal	Value limit set by the company; register all gifts; refuse cash or equivalents
Board seats and advisory roles	Sitting on the board of another company or advising a startup	Prior approval; check for competition and confidentiality overlap
Use of company information	Using confidential pricing or customer data for personal benefit	Treated as a confidentiality breach, not just a conflict
Corporate opportunities	Taking a business deal personally that the company could have pursued	Offer the opportunity to the company first
Workplace relationships	A romantic relationship between a manager and a direct report	Disclose to HR; move one person out of the reporting line

Set the gift value limit and any shareholding threshold yourself, in your own currency, and review them each year. A single number for every country rarely works for a global team.

India note: directors have a separate statutory duty

For companies in India, directors have their own legal disclosure duty on top of any HR policy. Under section 184 of the Companies Act, 2013, every director must disclose their interest in other companies, firms and bodies at the first board meeting they attend, at the first meeting of every financial year, and whenever those interests change. A director interested in a contract under discussion must disclose that interest and not take part in that board meeting. Section 188 of the same Act sets approval rules for related party transactions. Your employee policy should sit alongside these duties, not replace them; ask your company secretary how they apply to you.

The disclosure process, step by step

Disclosure is not an admission of guilt. It is an act of responsibility. The process should be simple enough that people actually use it.

1. Declare at joining. New hires complete a declaration form as part of onboarding, listing relatives in the company, outside roles, and relevant financial interests.
2. Declare as soon as something changes. A new side business, a relative joining a vendor, or a gift offered during a negotiation should be reported within a set number of working days.
3. Confirm every year. Ask everyone, including leadership, to re-confirm or update their declaration annually. “Nothing to declare” is a valid and useful answer.
4. Use one channel. A standard form sent to HR or the compliance owner, not a casual chat with a manager.
5. Review and decide. The reviewer assesses the risk and records a decision: no action needed, manage with safeguards, or not permitted.
6. Communicate the outcome in writing. The employee receives the decision and any conditions, such as stepping out of a vendor evaluation.
7. Monitor the safeguard. Someone checks that the agreed step actually happened.

A good declaration form asks for: the nature of the interest, the people or companies involved, the employee’s role in related decisions, the start date, and the employee’s own suggested safeguard. Keep it to one page.

Keeping a conflicts of interest register

A register is the company’s record of every declaration and decision. It lets you spot patterns, prove that conflicts were handled during an audit or dispute, and stop the same issue being decided differently in two departments.

Typical columns:

• Reference number and date declared
• Employee name, role and department
• Type of conflict (from your category list)
• Short description of the interest
• Decision and the safeguard agreed
• Approver and date of decision
• Review date, and status (open, managed, closed)

Treat the register as confidential. It holds personal details about employees and their families, so limit access to HR, compliance and the approvers who need it, and apply your data protection rules to it.

Who approves what

Approval should sit with someone who has no stake in the outcome. A simple matrix avoids arguments later:

Who declares	Who reviews	Who approves
Employee	HR or compliance	Line manager’s manager, or department head
People manager	HR or compliance	Department head or business unit head
Senior leader	Compliance or legal	CEO, or an audit or ethics committee
CEO or director	Company secretary or legal	Board, following any statutory process

Never let someone approve their own conflict, and never route a declaration through the person whose decision is affected.

Consequences: what happens if someone doesn’t disclose

The policy should separate an honest, disclosed conflict (which is managed, not punished) from concealment (which is misconduct). Spell out that:

• Declaring a conflict will not, on its own, lead to disciplinary action.
• Failing to disclose, giving a false declaration, or ignoring an agreed safeguard may lead to disciplinary action up to and including termination, following the company’s disciplinary procedure.
• Decisions affected by an undisclosed conflict may be reviewed or reversed, such as a contract re-tendered.
• Where a conflict involves fraud, bribery or other illegal conduct, the company may report it to the authorities.

Link these consequences to your misconduct policy so the same process applies, and document each step. If a written caution is needed, follow your usual approach to issuing warning letters for misconduct. Employees should also know how to report a colleague’s undeclared conflict safely, which is where a whistle-blower policy comes in.

Sample policy outline and clauses

A complete conflict of interest policy usually follows this outline:

1. Purpose and scope (who it covers: employees, directors, interns, and where relevant consultants)
2. Definitions (conflict, relative, close personal relationship, gift)
3. Types of conflict, with examples
4. Disclosure duty and timelines
5. Review, approval and safeguards
6. Gifts and hospitality rules
7. Outside employment and board roles
8. Conflicts register and confidentiality
9. Consequences of breach
10. Reporting concerns and protection from retaliation
11. Policy owner and review date

Example clauses you can adapt (illustrative only, review them against local law before use):

Example: Disclosure duty. “Every employee must disclose, in writing to HR, any actual, potential or perceived conflict of interest within five working days of becoming aware of it, and must confirm their declaration each year. If in doubt, disclose.”

Example: Stepping back. “An employee with a declared conflict must not take part in, influence or approve any decision connected with it unless HR confirms in writing that a safeguard is in place.”

Example: Outside work. “Employees may take up outside employment, a directorship or a business interest only with prior written approval. Approval will not be given where the activity competes with the company, uses company time, equipment or confidential information, or affects the employee’s performance.”

Example: Gifts. “Employees must not accept cash, vouchers or any gift or hospitality that could influence, or appear to influence, a business decision. Gifts above the value set in the gifts schedule must be declared and may have to be returned.”

Example: Non-retaliation. “No employee will face adverse treatment for making a good-faith disclosure about their own situation or about a suspected undeclared conflict.”

If you’d rather not start from a blank page, the HRTailor.AI HR policy generator can draft a first version that you then tailor to your company, country and industry.

Common mistakes that make conflict policies fail

• Too legal to read. Employees skim a dense policy and move on. Use plain language and real examples.
• Leadership left out. If executives and directors don’t declare, nobody else will take it seriously.
• Disclosure once, never again. Without an annual confirmation, declarations go stale within a year.
• No decision recorded. A declaration with no written outcome protects nobody.
• Punishing honesty. If the first person who declares is sidelined, others will stay quiet.
• Vague gift rules. “Reasonable gifts are fine” invites argument. Set a value and a register.
• No link to other policies. Conflicts touch your code of conduct, confidentiality, procurement and disciplinary rules. Cross-reference them.

Making it part of the culture

Rules alone can’t prevent ethical risk; culture does. When leaders talk openly about their own declarations and disclosures are handled calmly, honesty becomes normal instead of risky. Train managers to welcome a declaration with “thanks for telling us, let’s work out the safeguard” rather than suspicion. Cover the policy in onboarding, include it in annual compliance training, and review the policy itself every year or when your structure changes, such as a new business line, an acquisition or a new country.

Last reviewed: 26 October 2026. General information, not legal or tax advice.

Official sources

• Companies Act, 2013 (India Code): sections 184 and 188

Related reading

• Personal Communication Policy: Workplace Messaging Guidelines
• Misconduct Policy: Defining Unacceptable Workplace Behaviour