Bribery and corruption remain pervasive issues in businesses worldwide, leading organisations to adopt measures to prevent unethical practices. Two critical frameworks for combating bribery are ISO 37001, the international anti-bribery management system standard, and the UK Bribery Act, a piece of legislation passed by the United Kingdom to address bribery. While both aim to eradicate bribery and ensure ethical conduct within organisations, they differ in scope, approach, and enforcement. This article explores the key differences and similarities between ISO 37001 and the UK Bribery Act.
Key Similarities Between ISO 37001 and the UK Bribery Act
- Focus on Prevention: Both ISO 37001 and the UK Bribery Act focus on preventing bribery. ISO 37001 provides a systematic approach to managing bribery risks by requiring organisations to implement preventive measures. Similarly, the UK Bribery Act encourages businesses to put adequate procedures in place to prevent bribery from occurring.
- Zero Tolerance for Bribery: Both frameworks advocate for a zero-tolerance policy towards bribery. Organisations are required to demonstrate that they have effective measures in place to eliminate bribery in all aspects of their operations, from dealings with public officials to relationships with suppliers and customers.
- Due Diligence and Risk Assessment: Both ISO 37001 and the UK Bribery Act emphasise the need for due diligence. Under ISO 37001, organisations must conduct risk assessments to identify bribery risks in their operations and supply chains. The UK Bribery Act also requires organisations to conduct due diligence to prevent bribery and corruption, especially when entering new markets or working with new partners.
Key Differences Between ISO 37001 and the UK Bribery Act
-
Scope and Applicability:
- ISO 37001 is a voluntary standard that applies to any organisation, regardless of its location or industry. It is meant to be implemented and followed globally.
- The UK Bribery Act, on the other hand, is a piece of legislation with legal authority that applies primarily to organisations operating in the UK or to foreign organisations with connections to the UK. It has extraterritorial reach, meaning that businesses based outside of the UK can still be prosecuted under the Act if they have a UK-based operation.
-
Certification vs. Compliance:
- ISO 37001 offers certification, allowing organisations to voluntarily pursue certification to demonstrate that they comply with international anti-bribery standards. Certification is an external validation of the company’s efforts to prevent bribery.
- The UK Bribery Act does not offer certification. Organisations cannot be “certified” under the Act; instead, they are required to have adequate procedures in place to prevent bribery, but there is no formal process to confirm compliance.
-
Penalties and Enforcement:
- ISO 37001 is not legally binding. It is a voluntary standard, and non-compliance does not result in legal penalties. However, failing to comply with ISO 37001 could harm a company’s reputation and business relationships, especially with partners who require certification as part of a due diligence process.
- The UK Bribery Act carries severe legal consequences. If an organisation is found guilty of bribery offences, it may face heavy fines, criminal prosecution, and reputational damage. The organisation’s senior management could also face personal liability.
Conclusion
Both ISO 37001 and the UK Bribery Act are powerful tools in the fight against bribery and corruption, but they serve different functions. ISO 37001 offers a structured, international approach to managing anti-bribery efforts, with an emphasis on prevention and continuous improvement, while the UK Bribery Act provides a legal framework with specific requirements for organisations to avoid criminal liability.
For businesses operating internationally or those seeking to enhance their anti-bribery practices, ISO 37001 offers a globally recognised certification, helping them demonstrate their commitment to ethical conduct. However, businesses in the UK or with connections to the UK must ensure compliance with the UK Bribery Act, as failure to do so can result in significant legal consequences.
