Anti-Bribery and Corruption Training: What UK and Ireland Employers Need to Know

Bribery law in the UK and Ireland shares a similar shape — both countries make it a criminal offence to bribe or be bribed, and both give companies a route to defend themselves if something goes wrong despite their best efforts. But the detail of that defence, and what "best efforts" actually means for staff training, differs enough between the two jurisdictions that a single compliance policy rarely covers both properly. Here's what UK and Ireland employers are actually required to do, and where the training obligation sits. It sits alongside other regulatory training duties employers are juggling right now — including GDPR staff training requirements, which follow a broadly similar "policy plus evidence of training" logic.

The UK: the Bribery Act 2010 and the six principles

The UK's Bribery Act 2010 created a specific corporate offence under Section 7: a commercial organisation can be held criminally liable if a person associated with it — an employee, agent, subsidiary or contractor — bribes someone to obtain or retain business for it, even if senior management knew nothing about it. This is a strict liability offence, which makes the statutory defence unusually important: a company can avoid conviction by showing it had "adequate procedures designed to prevent persons associated with it from undertaking such conduct."

The Ministry of Justice's guidance on what counts as adequate procedures sets out six principles: proportionate procedures, top-level commitment, risk assessment, due diligence on business partners, communication (including training), and monitoring and review. The training principle is explicit that "training should be proportionate to risk but some training is likely to be effective in firmly establishing an anti-bribery culture whatever the level of risk" — in practice, that means mandatory induction training for new starters plus more detailed, role-specific training for staff in higher-risk positions such as sales, procurement or anyone dealing with overseas public officials.

The penalties for getting this wrong are significant. An individual convicted on indictment faces up to 10 years' imprisonment and an unlimited fine; a company found to have failed to prevent bribery faces an unlimited fine, on top of potential director disqualification and confiscation of the proceeds of crime under separate legislation.

Ireland: the Criminal Justice (Corruption Offences) Act 2018

Ireland's equivalent legislation, the Criminal Justice (Corruption Offences) Act 2018, takes a related but not identical approach. Under Section 18, a body corporate can be held liable where a director, manager, employee or agent commits a corruption offence with the intention of obtaining or retaining business, or an advantage in the conduct of business, for that company. Unlike the UK's Section 7 offence, this isn't pure strict liability — prosecutors need to show the offence was connected to an intention to benefit the company's business — but the practical effect for employers is similar: a company can be prosecuted for corruption carried out by its own people.

The Act gives companies a defence where they can show they took "all reasonable steps and exercised all due diligence" to avoid the offence being committed. Notably, the Department of Justice chose not to publish detailed guidance defining what "all reasonable steps" looks like in practice, unlike the UK's fairly prescriptive six-principles framework — which leaves Irish companies working from professional and legal advice rather than a single official checklist. In practice, that advice consistently points to the same building blocks as the UK model: a documented anti-corruption policy, risk assessment of higher-exposure roles and markets, and regular training and notification to directors, employees and contractors, even though training isn't written into the statute as a named element of the defence.

Penalties under the 2018 Act scale with the route of prosecution. On summary conviction, fines are capped at €5,000 with up to 12 months' imprisonment. On indictment, most corruption offences carry an unlimited fine and up to 10 years in prison (five years for the specific offence of trading in influence). Convicted public officials face additional consequences, including removal from office and a ban on holding public appointments for up to 10 years, and companies convicted of corruption offences risk debarment from EU public procurement contracts — a consequence that can matter more commercially than the fine itself.

What this means for training in practice

Both frameworks ultimately reward the same behaviour: a documented policy, a risk assessment that identifies which roles and markets carry the most exposure, and evidence that staff have actually been trained rather than just handed a policy document to sign. The UK's six-principles guidance makes training an explicit, named part of the legal defence, which gives UK compliance teams a clearer template to work from. Ireland's "all reasonable steps" standard is less prescriptive on paper, but Irish legal commentary treats regular staff training as a practical necessity for the defence to hold up, even without a statutory checklist spelling it out. For a business operating across both markets, the safest approach is to build training to the more detailed UK standard and apply it consistently on both sides of the border, rather than running two different bars for what "adequate" looks like. Learnsignal's workplace and HR compliance training resources cover how this fits alongside an organisation's wider regulatory training calendar.

FAQ

Does every employee need anti-bribery training, or just staff in high-risk roles?
Both UK and Irish guidance point toward tiered training: general awareness training for all staff, with more detailed, scenario-based training for people in higher-risk roles such as sales, procurement, or anyone dealing directly with public officials or overseas business partners.

Is anti-bribery training a strict legal requirement, or just best practice?
Neither the UK Bribery Act 2010 nor Ireland's Criminal Justice (Corruption Offences) Act 2018 names training as a mandatory standalone requirement in the way health and safety law does. Instead, training is one of the key ways a company demonstrates it had adequate procedures (UK) or took all reasonable steps (Ireland) if it ever needs to rely on the statutory defence.

How often should anti-bribery training be refreshed?
Neither jurisdiction sets a fixed legal interval. Most compliance guidance recommends annual refresher training as a baseline, with additional training triggered by a change in role, a new market, or a significant change in risk exposure.

What's the practical difference between the UK and Irish corporate offences?
The UK's Section 7 offence is strict liability — the company doesn't need to have intended any benefit for prosecutors to bring a case, only the associated person's act of bribery. Ireland's Section 18 offence requires prosecutors to show the offence was connected to an intention to obtain or retain business or a business advantage for the company, which is a narrower test in principle, though it still leaves companies exposed to liability for the actions of their own staff.

For most compliance teams, the practical takeaway is the same regardless of jurisdiction: written policy alone won't satisfy either defence. It has to be backed by evidence that staff were actually trained, and that the training was proportionate to the risk each role actually carries. Explore Learnsignal's full range of CPD courses for more on building out a defensible compliance training programme.