UK Bribery Act 2010
The UK Bribery Act 2010 (in force 1 July 2011) with the Ministry of Justice section 9 guidance: offences of bribing, being bribed and bribing foreign public officials, with no exemption for facilitation payments, and the strict-liability corporate offence of failing to prevent bribery by associated persons, answered only by adequate procedures. Modelled as a programme: a proportionate anti-bribery policy, financial and decision controls, gifts, hospitality and donations rules, HR and enforcement, board commitment and involvement, documented risk assessment of country, sector, transaction, opportunity and partner risk, risk-based due diligence and contract terms for agents, suppliers and joint ventures, communication, a protected speak-up channel, risk-based training, and monitoring and periodic review. Unlimited fines for organisations and up to 10 years for individuals; worldwide reach for the section 7 offence. Related: failure to prevent fraud (ECCTA 2023, from 1 September 2025) and senior manager attribution for all offences (Crime and Policing Act 2026, from 29 June 2026).
UK Bribery Act 2010 is a compliance framework from United Kingdom with 6 domains and 21 controls that map to 102 other frameworks. The largest domains are Section 7 adequate procedures: policies and controls – UK Bribery Act 2010 (5 controls), Prohibited conduct – UK Bribery Act 2010 (4 controls), Risk assessment and due diligence – UK Bribery Act 2010 (4 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (6)
Communication, speak-up and training – UK Bribery Act 2010
| Code | Title |
|---|---|
| uk-bribery-act-2010::P5.1 | Internal and external communication |
| uk-bribery-act-2010::P5.2 | Speak-up channel with protection |
| uk-bribery-act-2010::P5.3 | Risk-based anti-bribery training |
Monitoring and review – UK Bribery Act 2010
| Code | Title |
|---|---|
| uk-bribery-act-2010::P6.1 | Monitoring and evaluating effectiveness |
| uk-bribery-act-2010::P6.2 | Formal periodic review and external assurance |
Prohibited conduct – UK Bribery Act 2010
| Code | Title |
|---|---|
| uk-bribery-act-2010::FAC | Facilitation payments |
| uk-bribery-act-2010::s1 | Not offering, promising or giving a bribe |
| uk-bribery-act-2010::s2 | Not requesting or accepting a bribe |
| uk-bribery-act-2010::s6 | No bribery of foreign public officials |
Risk assessment and due diligence – UK Bribery Act 2010
| Code | Title |
|---|---|
| uk-bribery-act-2010::P3.1 | Periodic, informed and documented bribery risk assessment |
| uk-bribery-act-2010::P3.2 | External and internal risk factors |
| uk-bribery-act-2010::P4.1 | Risk-based due diligence on associated persons |
| uk-bribery-act-2010::P4.2 | Anti-bribery terms in supply chains and joint ventures |
Section 7 adequate procedures: policies and controls – UK Bribery Act 2010
| Code | Title |
|---|---|
| uk-bribery-act-2010::GHD | Gifts, hospitality, promotional expenditure and donations |
| uk-bribery-act-2010::P1.1 | Proportionate anti-bribery policy |
| uk-bribery-act-2010::P1.2 | Financial, commercial and decision-making controls |
| uk-bribery-act-2010::P1.3 | Employment, enforcement and discipline |
| uk-bribery-act-2010::s7 | Adequate procedures to prevent bribery by associated persons |
Top-level commitment and accountability – UK Bribery Act 2010
| Code | Title |
|---|---|
| uk-bribery-act-2010::P2.1 | Top-level commitment and zero-tolerance statement |
| uk-bribery-act-2010::P2.2 | Top-level involvement in bribery prevention |
| uk-bribery-act-2010::s14 | Senior officers: no consent or connivance |
Your Compliance Coverage
If you comply with UK Bribery Act 2010, you already cover:
FedRAMP Rev 5
7%
3 controls mapped
Compare →ISO/IEC 27557:2022 - Organisational Privacy Risk Management
7%
3 controls mapped
Compare →IEC 62304:2015 Medical Device Software Lifecycle Processes
7%
3 controls mapped
Compare →+ 99 more: ISO/IEC 29100:2024 (7%), ISO/IEC 27011:2024 (7%)
See all 102 mapped frameworks ↓Maps to 102 other frameworks
Coverage is not the same as your position
This page shows what UK Bribery Act 2010 overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.
The Compliance Position Diagnostic, $5,000 fixed, ten business daysWhat is UK Bribery Act 2010 and who does it apply to?
UK Bribery Act 2010 is a compliance framework from United Kingdom with 6 domains and 21 controls. The UK Bribery Act 2010 (in force 1 July 2011) with the Ministry of Justice section 9 guidance: offences of bribing, being bribed and bribing foreign public officials, with no exemption for facilitation payments, and the strict-liability corporate offence of failing to prevent bribery by associated persons, answered only by adequate procedures. Modelled as a programme: a proportionate anti-bribery policy, financial and decision controls, gifts, hospitality and donations rules, HR and enforcement, board commitment and involvement, documented risk assessment of country, sector, transaction, opportunity and partner risk, risk-based due diligence and contract terms for agents, suppliers and joint ventures, communication, a protected speak-up channel, risk-based training, and monitoring and periodic review. Unlimited fines for organisations and up to 10 years for individuals; worldwide reach for the section 7 offence. Related: failure to prevent fraud (ECCTA 2023, from 1 September 2025) and senior manager attribution for all offences (Crime and Policing Act 2026, from 29 June 2026). It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does UK Bribery Act 2010 actually require?
UK Bribery Act 2010 has 21 controls organised across 6 domains. The largest domains are Section 7 adequate procedures: policies and controls – UK Bribery Act 2010 (5 controls), Prohibited conduct – UK Bribery Act 2010 (4 controls), Risk assessment and due diligence – UK Bribery Act 2010 (4 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of UK Bribery Act 2010 do I already cover?
UK Bribery Act 2010 maps to 102 other compliance frameworks. The top mapping partners are FedRAMP Rev 5 (7% coverage), ISO/IEC 27557:2022 - Organisational Privacy Risk Management (7% coverage), IEC 62304:2015 Medical Device Software Lifecycle Processes (7% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement UK Bribery Act 2010?
Start your UK Bribery Act 2010 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about UK Bribery Act 2010 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 21 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,120 frameworks.
Get Started Free →Free forever, no credit card required