Anti-Bribery and Corruption

UK Bribery Act 2010

UK Bribery Act 2010 framework badge
Summarize with
ClaudeChatGPTPerplexityGoogle AI Mode
In this article
At a Glance
Bribery Act 2010 (c. 23) with the Ministry of Justice guidance on adequate procedures (section 9)
  • Classification
    Category
    Anti-Bribery and Corruption
    Domain
    Risk Management
    Framework Family
    Other
  • Regulatory Context
    Type
    Regulation
    Legal Instrument
    Act
    Sector
    Cross-Sector
    Industry
    Cross-Industry
  • Region / Publisher
    Region
    United Kingdom
    Region Detail
    United Kingdom
    Publisher
    UK Parliament; section 9 guidance by the Ministry of Justice
  • Versioning
    Version
    Bribery Act 2010 (c. 23), as amended; Ministry of Justice section 9 guidance (March 2011)
    Effective Date
    July 1, 2011 (S.I. 2011/1418)
    Issue Date
    April 8, 2010 (Royal Assent)
  • Adoption
    Adoption Model
    Regulatory Compliance
    Implementation Complexity
    High
  • Official Reference
License Information

License included / downloadable: Yes

The Act is published free on legislation.gov.uk and the Ministry of Justice guidance on GOV.UK, both free for reuse under UK open government terms; the platform links to the official texts.

Framework text is licensed by its publisher and is included only where stated above.

Official Resources
Bribery Act 2010 on legislation.gov.uk
The official text of the Act, including the general offences, section 6, the section 7 corporate offence, and the section 9 guidance duty.
Section 7: Failure of commercial organisations to prevent bribery
The corporate offence and the adequate procedures defence as enacted.
Ministry of Justice: Bribery Act 2010 guidance
The GOV.UK publication page for the section 9 guidance to help commercial organisations prevent bribery, with the six principles.
Bribery Act 2010: Guidance to help commercial organisations prevent bribery (PDF)
The 45-page Ministry of Justice guidance explaining the six principles with commentary and case studies.
Key takeaways
  • The UK Bribery Act 2010 creates the offenses of bribing, being bribed, bribing a foreign public official, and failing to prevent bribery.
  • It received Royal Assent April 8, 2010 and has applied since July 1, 2011 across the whole United Kingdom.
  • Section 7 makes a commercial organization liable for bribery by anyone performing services on its behalf, anywhere in the world.
  • The only defense to the corporate offense is proof of adequate procedures, built on the Ministry of Justice's six principles.
  • A section 7 conviction carries an unlimited fine; individuals face up to ten years in prison.

Overview

The Bribery Act 2010 (c. 23) is the UK statute that makes bribing another person, being bribed and bribing a foreign public official criminal offenses, and that makes a commercial organization guilty of an offense when a person associated with it bribes to win business for it, unless it proves it had adequate procedures to prevent that. It received Royal Assent on April 8, 2010 and has applied since July 1, 2011 under the Bribery Act 2010 (Commencement) Order 2011 (S.I. 2011/1418), across England and Wales, Scotland and Northern Ireland.

No proceedings may start in England and Wales or Northern Ireland without the consent of the Director of Public Prosecutions (in Northern Ireland, the Director of Public Prosecutions for Northern Ireland) or the Director of the Serious Fraud Office (section 10), so in England and Wales the Crown Prosecution Service and the Serious Fraud Office prosecute. Section 12 reaches conduct abroad by people with a close connection to the UK and, for the corporate offense, any organization that carries on a business or part of a business in the UK. Under section 9 the Secretary of State published guidance on adequate procedures; the Ministry of Justice guidance is dated March 2011 and sets out six principles.

An organization builds adequate procedures around those principles: proportionate procedures, top-level commitment, risk assessment, due diligence, communication including training, and monitoring and review. The organization carries the burden of proving the section 7(2) defense, and the guidance states that the standard is the balance of probabilities.

Why does it matter?

Section 7 makes a commercial organization liable for bribery by anyone who performs services for or on its behalf, anywhere in the world, and the only defense is proof of adequate procedures. A conviction under section 7 carries an unlimited fine (section 11(3)); an individual convicted under sections 1, 2 or 6 faces up to ten years in prison, and senior officers who consent to or connive in an offense by a company are personally guilty (section 14). The Act also covers private-sector bribery, with no exemption for facilitation payments.

Key benefits include:

  • A defense that must be evidenced

Section 7(2) places the burden on the organization to prove adequate procedures, so policies, risk assessments and due diligence files must exist before an incident.

  • Reach beyond the UK

Under section 12(5) the corporate offense applies whether or not the acts take place in the UK, if the organization carries on a business or part of one there.

  • Private and public bribery

Sections 1 and 2 cover bribes to any person performing a function connected with a business, employment or a public function (section 3).

  • Foreign officials

Section 6 criminalizes bribing a foreign public official to obtain or retain business, unless the official's written law permits the influence.

  • Personal liability

Section 14 makes a director, manager or secretary guilty where a company's offense is proved to have been committed with their consent or connivance.

How does it work?

Sections 1 and 2 define six cases. Cases 1 and 2 cover offering, promising or giving a financial or other advantage intending to induce or reward improper performance of a relevant function or activity; cases 3 to 6 cover requesting, agreeing to receive or accepting one. A function is relevant if it is public, connected with a business, performed in employment or performed for a body of persons and meets condition A (good faith), B (impartiality) or C (position of trust) (section 3). Performance is improper if it breaches the relevant expectation (section 4), judged by what a reasonable person in the UK would expect, with local custom disregarded unless the written law of the country permits it (section 5).

Section 6 applies to a person who intends to influence a foreign public official in that capacity and to obtain or retain business. Section 7 applies to a relevant commercial organization, a UK-incorporated body or partnership that carries on a business anywhere, or any body or partnership that carries on a business or part of one in the UK (section 7(5)). Section 8 defines an associated person as anyone who performs services for or on behalf of the organization, in any capacity, judged on all the relevant circumstances; an employee is presumed to be one.

The Ministry of Justice guidance says bona fide, reasonable and proportionate hospitality and promotional expenditure is not criminalized (paragraphs 26 and 27) but can be used as a bribe, and that the Act has no exemption for facilitation payments (paragraphs 44 and 45). Its commentary on each principle explains what proportionate procedures look like for small and large organizations and includes case studies.

Key Elements

  • General offenses (sections 1 and 2)

Offering, promising or giving an advantage, or requesting, agreeing to receive or accepting one, tied to improper performance of a relevant function or activity.

  • Foreign public officials (section 6)

Bribing a foreign official to influence the official, to obtain or retain business or an advantage in the conduct of business.

  • Failure to prevent bribery (section 7)

An associated person bribes intending to benefit the organization; the defense is adequate procedures proved by the organization.

  • Associated persons (section 8)

Anyone who performs services for or on behalf of the organization, including an employee, agent or subsidiary.

  • Six principles (section 9 guidance)

Proportionate procedures, top-level commitment, risk assessment, due diligence, communication including training, monitoring and review.

  • Penalties (section 11)

Individuals: up to ten years on indictment, or up to 12 months summary (6 months in Northern Ireland) or the statutory maximum fine; an organization convicted under section 7: an unlimited fine on indictment.

  • Territorial reach (section 12)

Offenses abroad by people with a close connection to the UK; section 7 applies wherever the acts take place.

What does it cover?

The Act applies to individuals, and to bodies corporate and partnerships that are formed in the UK or that carry on a business or part of a business there, wherever the bribery takes place. It covers bribery in the public and private sectors. Section 12(4) defines a close connection to include British citizens and other listed British nationalities, individuals ordinarily resident in the UK, UK-incorporated bodies and Scottish partnerships. Section 13 gives a defense for conduct necessary to the proper exercise of an intelligence service function or of the armed forces on active service. The guidance stresses proportionality for smaller organizations.

What are its objectives?

The long title describes the Act as making provision about offenses relating to bribery. Its provisions do the following.

Create the general offenses of bribing and being bribed, and abolish the common law offenses of bribery and embracery (section 17).

Create a separate offense of bribing a foreign public official (section 6).

Make commercial organizations liable for failing to prevent bribery by associated persons (section 7).

Make adequate procedures the defense to the corporate offense (section 7(2)).

Require the Secretary of State to publish guidance on those procedures (section 9).

Framework in Context

The Act differs from the U.S. Foreign Corrupt Practices Act in reach and in what it allows: it covers private-sector bribery and, as the Ministry of Justice guidance notes, provides no exemption for facilitation payments. Deferred prosecution agreements are available in England and Wales for offenses under sections 1, 2, 6 and 7 (Crime and Courts Act 2013, Schedule 17, paragraph 26). A separate offense of failure to prevent fraud, created by the Economic Crime and Corporate Transparency Act 2023, has applied to large organizations since September 1, 2025. Organizations often use ISO 37001 to structure anti-bribery procedures, but the defense turns on whether the procedures are adequate.

Common Framework Mappings

Organizations map the section 7 defense and the six principles to the anti-corruption laws, management system standards and compliance program benchmarks they must also satisfy, so that one set of procedures and evidence serves all of them.

Mapped frameworks include:

FCPA

DOJ ECCP

USSG §8B2.1

ISO 37001:2016

ISO 37301:2021

ISO 31000:2018

COSO IC 2013

UK GDPR

SOX

OCEG Red Book 3.5

IIA Three Lines Model

SMARTSUITE

How SmartSuite Supports the UK Bribery Act

SmartSuite provides the system for managing controls, evidence, mappings, assessments, and reporting.

Use Compliance Management to hold the section 7(2) defense and the six principles as requirements linked to the risk assessment, policies, gifts and hospitality approvals, training records and monitoring reviews, and Third Party Risk Management to track due diligence on associated persons.

Offenses and Six Principles Library

Hold the section 1, 2, 6 and 7 offenses, the section 7(2) defense and the six Ministry of Justice principles as requirements linked to policies and controls.

Bribery Risk Assessment

Record the periodic, documented assessment that Principle 3 expects, with risks by country, sector, transaction and business partner, and the mitigating controls.

Associated Person Due Diligence

Link agents, intermediaries and joint venture partners to risk-based due diligence and anti-bribery contract terms in Third Party Risk Management, as Principle 4 describes.

Gifts, Hospitality and Facilitation Payments Register

Log offers, approvals and refusals of gifts and hospitality, and any request for a facilitation payment, with the approver and the decision.

Training and Communication Evidence

Attach policy approvals by top-level management and training completions for employees and associated persons, with dates and owners (Principles 2 and 5).

Monitoring and Review Reporting

Plan the Principle 6 reviews, record findings and remediation to closure, and report status by principle and business unit.

Related frameworks

UK GDPR

The UK GDPR is Regulation (EU) 2016/679 as it forms part of UK law, applying since December 31, 2020 and amended by the Data (Use and Access) Act 2025.

SOX

The Sarbanes-Oxley Act of 2002 (Public Law 107-204) requires SEC-reporting companies to certify reports, assess internal control over financial reporting and use PCAOB-registered auditors.

COSO IC 2013

COSO Internal Control (2013) defines five components and 17 principles of internal control. Public companies commonly use it as the ICFR framework for SOX section 404.

ISO 31000:2018

ISO 31000:2018 gives guidelines on managing risk through eight principles, a framework and a process for any organization. It is not certifiable. ISO published it on February 14, 2018.

PRA SS1/21

PRA SS1/21 sets the Prudential Regulation Authority's expectations for how UK banks and insurers identify important business services, set impact tolerances, and stay within them.

FCA SYSC 15A (PS21/3)

FCA PS21/3 and SYSC 15A require UK-regulated firms to identify important business services, set impact tolerances, map and test their resilience, and self-assess against them.

FCPA

The FCPA (15 U.S.C. §§ 78dd-1 to 78dd-3, 78m(b)) prohibits corrupt payments to foreign officials to obtain or retain business and requires issuers to keep accurate books and controls.

DOJ ECCP

The DOJ Criminal Division's Evaluation of Corporate Compliance Programs (Updated September 2024) sets out the questions prosecutors ask about a program's design, resources and effectiveness.

FAQ

Frequently Asked Questions For UK Bribery Act

Section 1 makes it an offense to offer, promise or give an advantage to induce or reward improper performance of a function, and section 2 makes it an offense to request, agree to receive or accept one. Section 6 covers bribing a foreign public official to obtain or retain business, and section 7 makes a commercial organization guilty when an associated person bribes to benefit it.

A relevant commercial organization is guilty if a person associated with it bribes another person intending to obtain or retain business or an advantage for the organization (section 7(1)). Section 7(2) gives a defense if the organization proves it had adequate procedures designed to prevent such conduct; the guidance says the burden is the balance of probabilities.

Under section 9 the Ministry of Justice published guidance in March 2011 built on six principles: proportionate procedures, top-level commitment, risk assessment, due diligence, communication including training, and monitoring and review. The guidance is not a checklist; it says procedures should be proportionate to the bribery risks and to the nature, scale and complexity of the organization's activities.

Yes. Section 12(2) to (4) extends the offenses in sections 1, 2 and 6 to acts abroad by people with a close connection to the UK, such as British citizens, UK residents and UK-incorporated bodies. Under section 12(5) the section 7 offense is committed whether or not the acts take place in the UK, if the organization carries on a business or part of one in the UK.

An individual convicted on indictment under section 1, 2 or 6 faces up to 10 years in prison, a fine, or both (section 11(1)). An organization convicted under section 7 faces an unlimited fine (section 11(3)). A director, manager or secretary who consented to or connived in a company's offense is also guilty (section 14).

Put this framework to work in SmartSuite

Manage controls, risks, evidence, and audits in one platform designed for modern governance, risk, and compliance.