What are standard operating procedures, and why do they matter?
Vicarious Liability: Why Your Business is Exposed
Under UK law, employers are generally liable for the wrongful acts of their employees through the principle of vicarious liability. A written SOP defines the boundary between your corporate duty and an individual employee’s personal decision. Without documented procedures defining exact responsibilities, courts often assume that an employee’s actions were authorised by you, or facilitated by a lack of oversight.
The Morrisons Precedent (2014—2020)
Following a criminal data breach by a rogue staff member in 2014, 9,000 employees sued Morrisons for vicarious liability. While the Supreme Court ultimately ruled in Morrisons’ favor in April 2020, the six-year legal battle cost the firm £2.26 million in immediate breach management and millions more in unrecoverable litigation costs and business disruption. Documented operational boundaries are the primary tool for mitigating these risks and potentially ending litigation before it escalates.
Defining the "Close Connection"
The law holds you responsible for acts "closely connected" to an employee's role. The only objective way to challenge this connection is with a written record defining exactly what that role entails. Whether the issue is data theft, unauthorized financial decisions, or workplace misconduct, the defense begins with a single question: "What was the documented procedure?"
Shifting the Burden of Risk
"They knew the rules" is an assertion; a signed, dated SOP is evidence. As an employer, you currently carry the risk of every employee decision alone. KRC SOP manuals mitigate this by establishing clear boundaries, ensuring that personal misconduct remains a personal liability. Documented processes are the most cost-effective protection a business can own; a proactive investment now prevents thousands in legal fees, fines, and lost business later.