The UK Corporate Governance Code: A Plain-English Guide
The UK Corporate Governance Code is the document that decides what good boardroom behaviour looks like for Britain's listed companies, and it manages to be both enormously influential and widely misunderstood. It is not a law. Nobody goes to prison for breaching it. Yet it shapes how boards are built, how executives are paid and what companies must tell their shareholders. This guide explains what it is, who it binds, how the comply or explain model works, and the change landing right now that boards have spent two years preparing for.
It sits alongside our guides to corporate governance and how to write a code of conduct.
What it is and who maintains it
The Code is maintained by the Financial Reporting Council, the UK's regulator for corporate reporting and audit. It descends from the Cadbury Report of 1992, produced after a run of corporate collapses raised the question of who was actually watching the board. That lineage explains its character: it is less a rulebook than an accumulated answer to the question of how boards fail.
Its structure is five sections:
- Board leadership and company purpose: the board's role in setting purpose, values and strategy, and in engaging with the workforce and shareholders.
- Division of responsibilities: separating the chair from the chief executive so that no one person holds unchallenged power, and ensuring genuinely independent non-executive directors.
- Composition, succession and evaluation: appointing on merit through a formal process, planning succession, and evaluating the board's own performance.
- Audit, risk and internal control: the audit committee, external auditor independence, and the systems that manage principal risks.
- Remuneration: designing executive pay that supports strategy and long-term success, with no director setting their own pay.
Who it applies to
The FRC is precise about scope: the Code applies to companies listed in the commercial companies category or the closed-ended investment funds category, regardless of where they are incorporated. That last clause matters, since a company incorporated elsewhere but listed in those categories is still in scope.
Private companies, AIM-quoted companies and SMEs are outside it. That does not make it irrelevant to them. Large private companies often use the Wates Principles, a lighter framework built for that context, and plenty of growing businesses borrow the Code's structure voluntarily, either because investors expect it or because they are preparing for a listing. If you are an SME, the value is in the questions it forces, not in adopting the whole apparatus.
Comply or explain: the bit that gets misread
This is the Code's defining feature and the source of most confusion about it. In-scope companies do not have to follow every provision. They must apply the principles, and then either comply with the provisions or explain, in the annual report, why they have departed and how their alternative still achieves good governance.
The logic is that a rigid rulebook would suit nobody. A founder-led company, an investment trust and a mature industrial group have genuinely different needs, and a rule that fits all three would be too loose to matter. Comply or explain trades uniformity for judgement.
Its weakness is equally clear. The model only works if explanations are specific and honest, and if investors actually read them and push back. An explanation that says the board considers its approach appropriate is not an explanation, it is a shrug in formal clothing. The FRC has criticised boilerplate explanations for years. If you are writing one, the test is whether a reader learns why your alternative is better for your company, not merely that you decided on it.
What changed in the 2024 Code
The 2024 revision was, by design, a lighter touch than expected. Several proposals from the FRC's earlier consultation, particularly a much broader set of internal control and audit requirements, were dropped or trimmed after companies pushed back on cost. What survived was a more focused set of changes plus one substantial new obligation.
The 2024 Code has applied to financial years beginning on or after 1 January 2025, with one deliberate exception, covered next.
Provision 29: the change happening now
Provision 29 is the headline. It asks the board to make a declaration in the annual report on the effectiveness of the company's material internal controls. Two things make it significant.
First, it is a declaration, not a description. Boards have long described their risk management systems; being asked to state that material controls are effective is a different order of commitment, and it requires evidence behind it.
Second, the scope reaches past finance. The provision extends to controls over reporting, including narrative and ESG reporting, so a board's assurance obligations now cover the sustainability claims in its annual report, not only the numbers in its accounts. For many companies, non-financial reporting controls were never built to the standard financial controls were, which is exactly where the work has been.
The timing is the reason boards were given a year's grace: Provision 29 applies to financial years beginning on or after 1 January 2026. For a company with a calendar financial year, that means the current year, reported on in early 2027. The delay was intentional, to let boards develop their approach to internal controls rather than declare on systems they had not yet mapped.
What this means in practice
If you sit on or advise an in-scope board, the useful questions right now are: which of our controls are material, and who decided that? Do we have evidence, not assertion, that they operate effectively? Do our narrative and ESG reporting controls stand up to the same scrutiny as our financial ones? And if we are going to explain rather than comply anywhere, is the explanation one a serious investor would accept?
For everyone else, the Code remains the best available description of what a functioning board looks like, whether or not it applies to you. Read it as a checklist of the ways boards go wrong, because that is how it was written.
For more on governance and ethics, start from the E-Business Ethics homepage.
Frequently Asked Questions
What is the UK Corporate Governance Code?
It is the set of principles and provisions, maintained by the Financial Reporting Council, that defines good boardroom practice for listed companies in the UK. It covers board leadership and purpose, the division of responsibilities, composition and succession, audit, risk and internal control, and remuneration. It is not legislation: companies either follow its provisions or explain publicly why they have not.
Which companies does the UK Corporate Governance Code apply to?
The FRC states the Code applies to companies listed in the commercial companies category or the closed-ended investment funds category, regardless of where they are incorporated. Private companies, AIM companies and smaller businesses are outside its scope, though many adopt parts of it voluntarily or follow a lighter framework such as the Wates Principles.
What does comply or explain mean?
It means a company may depart from a Code provision provided it explains in its annual report why, and how the alternative approach still delivers good governance. The principles themselves must be applied. It is a flexible model that recognises one structure cannot suit every company, but it depends on explanations being specific and honest rather than boilerplate.
When did the 2024 UK Corporate Governance Code take effect?
The 2024 Code has applied to financial years beginning on or after 1 January 2025. Provision 29 was deliberately delayed by a year and applies to financial years beginning on or after 1 January 2026, giving boards time to prepare their approach to internal controls.
What is Provision 29 of the Corporate Governance Code?
Provision 29 asks the board to make a declaration in the annual report on the effectiveness of the company's material internal controls. It is broader than financial controls alone, extending to controls over reporting, including narrative and ESG reporting. It applies to financial years beginning on or after 1 January 2026, making it the most significant change in the 2024 Code.
Is the UK Corporate Governance Code legally binding?
Not directly. The Code itself is not statute, but the UK Listing Rules require in-scope companies to report on how they have applied it and to explain any departures. So while no one is prosecuted for breaching a provision, failing to comply or explain properly is a listing rules matter and carries real reputational and investor consequences.