Every organisation communicates in public whether it plans to or not. An executive answers a journalist at a conference; a support agent replies to a reporter who happens to be a customer; one office issues a statement while another is telling the press the opposite — and all of it is the organisation speaking. A public relations policy is the document that turns that noise into one accountable voice: a short, written set of standing rules covering who may speak for the organisation and on what, how public statements are approved, what evidence a claim needs before it may be published, how paid material is labelled, and what happens in the first hour when something goes wrong. It is not glamorous, and it is not marketing. It is governance — and like most governance, nobody misses it until the day its absence becomes the story.

Two confusions are worth clearing away at the start. A public relations policy has nothing to do with public policy, which is the business of governments; this document governs one organisation’s voice and nobody else’s. Nor is it a PR strategy: a strategy says what the organisation wants to achieve through communication, while the policy sits underneath it as the rules that neither strategy nor deadline may break — the written constitution of the corporate PR function, the discipline that speaks for the whole institution. What follows is general guidance about communication practice. It is not legal advice: organisations with disclosure obligations, or in regulated sectors, should have their own advisers review any policy before adopting it.

Written for the Bad Day

A policy earns its keep on the worst day, not the best one. In a crisis, the questions that matter most — who is allowed to speak, who can approve a statement in twenty minutes, what standard of proof a claim needs before it goes out — cannot be negotiated in a corridor while journalists wait. A policy settles them in advance, in writing, in peacetime, when nobody is frightened or tired. That is why a policy written after an incident so often reads as what it is: an apology with headings, drafted to prove that lessons were learned rather than to govern the next occasion. The peacetime benefits are quieter but real. Consistency: the same facts and the same position from every part of the organisation, because contradiction reads as incompetence or concealment. Accuracy under pressure: approval and evidence rules exist precisely for the moments — a deadline, an exciting announcement, a furious news cycle — when unchecked claims slip out. And speed: rules agreed in advance are fast. A company that knows who decides can answer within the hour; a company still deciding who decides takes a day.

The Sections: What Each Must Settle

Policies differ by sector and size, but the skeleton below appears in almost every sound one. The substance matters more than the headings: each section exists to settle a question before the question becomes urgent.

Authority: Who May Speak

The heart of the policy is the authorised-spokesperson rule. It names the roles permitted to speak publicly — typically the chief executive, designated executives and the communications lead, with named subject experts cleared for their own topics — and it names deputies, because authority that depends on one person’s availability is not authority. Just as important is the default for everyone else: staff do not comment on company matters to media, on or off the record, however senior their opinion or however well they mean; they route the enquiry to the communications function without delay. The rule should be framed as protection, not as a gag: it shields individual employees from being quoted beyond their knowledge, and it protects the organisation from well-meant improvisation. The section also states the limits on those who may speak: no speculation about results, competitors or litigation, and no public comment from anyone who has not had basic media preparation.

Enquiry Handling

Journalists’ enquiries arrive anywhere — a reception desk, a social inbox, a shop floor — and the policy should give them one door. It specifies a single intake route, a log in which every enquiry is recorded with its outlet, subject and deadline, and the response standards the organisation commits to: acknowledge promptly even when the full answer will take longer; never let a deadline pass in silence; if the organisation cannot comment, say so as a decision rather than by disappearance. The relationship side of this work — knowing the journalists on the beat and being useful between stories — belongs to the media relations discipline. The policy’s narrower job is routing and reliability: no enquiry lost, no deadline silently missed, no answer contradicted by another office. It should also cover the mechanics around interviews — who approves participation, who attends, how corrections to published errors are requested — and the standing warning that nothing said to a journalist is ever safely off the record.

Approval Workflows

Every public statement should pass a defined chain before it leaves: drafted by the communications function, checked for factual accuracy by the owner of the facts, reviewed for legal or regulatory sensitivity where relevant, and signed off by a named approver at a level proportionate to the statement’s significance. The policy forbids publication outside the workflow — releases, quotes, company social posts — however senior the author, because the workflow is what catches the wrong date, the unchecked figure and the promise the company cannot keep while they are still free to fix. The section’s most important sentence, though, is its exception. Emergencies cannot wait for the full chain, so the exception must be defined before it is needed: which categories of urgent statement are pre-authorised, who may approve them at two in the morning, and what happens afterwards to regularise the record. An exception invented during the emergency is not an exception. It is improvisation with a retrospective label.

Accuracy and Evidence Standards

If the policy has a heart, this is it: the organisation does not publish a factual claim it cannot show a source for. Figures come from named, checkable origins and carry their dates; comparisons are fair and current; customer outcomes are described only with evidence and permission; forward-looking statements are identified as such and kept within what the organisation genuinely believes. Superlatives — first, largest, leading — are treated as claims requiring the strongest proof, not as decoration. The standard compresses into one sentence staff can apply without advice: publish nothing the organisation could not defend, calmly and with documents, to the person the claim describes. And when a published claim turns out to be wrong — some will, in any honest operation — the policy requires prompt, visible correction in the same place the error appeared. This section does more for credibility over time than any other, because it makes accuracy a rule people follow rather than a virtue they are expected to remember.

Disclosure

The policy must draw the bright line between earned communication and paid communication. Sponsored content, paid placements and material produced with commercial partners are labelled as paid — always, in every channel, in line with the advertising standards that apply to the organisation. Nobody presents paid coverage as editorial, to the public or to the board. Conflicts of interest are declared: an executive praising a company they hold a stake in says so. Gifts and hospitality involving journalists follow a stated, modest standard. Staff and advocates who speak about the organisation in public, including in apparently personal spaces, identify their connection. This is the policy’s working version of the profession’s wider ethics discipline, and it exists because undisclosed interest, once discovered, retrospectively poisons everything true the organisation has ever said. For listed or regulated organisations, the section also states that market-sensitive information moves only through authorised channels, to everyone at once — and refers the specifics to the company’s legal advisers, where they belong.

Staff Social-Media Conduct

Social media is where the policy meets daily life, and the section works only if it distinguishes three things that are often muddled. Company accounts are official statements: they run under the approval workflow, with named operators. Personal accounts are the employee’s own: the organisation does not police opinions, and a policy that reaches for them will be resented, evaded, and quietly destructive of the rules that matter. But where a person is identifiable as an employee, narrow duties reasonably apply — no confidential information, no comment on live company controversies as if informed, no presenting personal views as company positions, and media approaches received there routed to the intake like any other. Executives’ accounts sit between the two and deserve explicit treatment, because journalists and markets read a chief executive’s post as a company statement whatever the biography line says. Written as guidance that protects staff from career-limiting mistakes, this section is followed. Written as surveillance, it is neither followed nor followable.

Embargoes and Confidential Information

Embargoes run on trust in both directions, and the policy governs the organisation’s conduct in each. It does not break other parties’ embargoes. Its own embargoed material is shared deliberately, with the terms stated in writing, and access to it inside the organisation is limited to those who need it — the embargo discipline covers the handling craft; the policy’s job is to make that handling a rule rather than a favour. Confidential information more broadly — unreleased results, product plans, personal data, negotiation details — is classified simply, handled on a need-to-know basis and never confirmed piecemeal: the standing answer to questions about confidential matters is a uniform position delivered by authorised spokespeople, because selective denials reveal by elimination exactly what they withhold. The mundane leak routes deserve plain words too: documents forwarded without thought, group chats, conference small talk. Most confidentiality failures are not espionage. They are ordinary carelessness that a short rule, known in advance, would have caught.

Crisis Escalation

The crisis section is the shortest in the policy and the most decisive. It states what counts as a crisis for communication purposes, who must be notified first and by whom, who has authority to activate the crisis arrangements, who approves holding statements at speed, and where the pre-drafted materials live. The detailed doctrine of handling the crisis itself — verification before speech, the holding statement’s structure, updates kept like appointments — is the crisis-communication craft, set out in its own guidance. The policy does not repeat it. Its job is narrower and more valuable: to guarantee that when the bad day comes, nobody spends the first hour asking who is in charge. It should point to the organisation’s wider crisis plan rather than duplicating it, and it sets the communication commitments that apply from the first hour — acknowledge promptly, one accountable voice, updates at the promised times — as standing obligations, not aspirations chosen under pressure.

Record-Keeping

Finally, the policy requires an archive: every public statement, release and significant quotation kept as published, with its approval trail; enquiries and their outcomes logged; corrections recorded. This is the permanence discipline — the rule that nothing published is ever truly unpublished — applied inside the house. Records serve three purposes. Consistency: what did we say last time, and does today agree with it? Accountability: who approved this claim, and on what evidence? Learning: the post-incident review works from documents, not from recollections polished by hindsight. Retention periods and access follow the organisation’s general records rules, with legal guidance where disputes or regulated matters are involved. An organisation that keeps its own record carefully is also, not coincidentally, one whose public record tends to deserve keeping.

Adoption: A Policy Is a Practice

A policy nobody has read is furniture. The documents that work share the opposite traits to the usual forty pages launched by email: they are short — everything above fits in a few pages — written in plain language a new hire can apply at six on a Friday evening, which is when policies earn their keep, and findable in one search from the tools staff already use. They are taught, not just published: walked through at induction, rehearsed against the scenarios most likely to occur — a journalist calls the office, a colleague is tagged in a breaking story, an executive wants to post about results — and visibly used by leadership, because the chief executive who routes their own quote through the workflow teaches the policy better than any training session. Every policy needs a named owner, usually the head of communications, and a review rhythm: annually as routine, and without exception after a serious incident or a significant change in the business, when the review asks practical questions — did the escalation route work, are the named people still the right people, has a new channel created conduct the policy does not reach?

Small organisations need the same decisions at smaller scale — not fewer duties. One page can carry them: who speaks for the business, usually the owner plus one named deputy; the rule that staff route press enquiries to them kindly and immediately; the commitment to check facts before confirming anything and to correct errors visibly; the disclosure rule for any paid promotion; basic social guidance — nothing confidential, no arguing with critics, personal views are personal; and the crisis basics — a phone number, a holding-statement skeleton, and the promise to update when you said you would. Written down, shared with the whole team and kept where people can find it, that page prevents most small-organisation communication accidents, which are almost never about malice and almost always about a well-meaning person improvising alone.

Failure Modes

The failures are regular enough to list. The first is the policy that contradicts practice: the document requiring labels on paid content while the marketing team runs unlabelled placements; the approval rule the chief executive visibly ignores. That is worse than no policy at all, because it documents the hypocrisy — it proves the organisation knew the rule and chose otherwise. The second is the approval workflow so slow and so layered that it teaches staff to route around it: every bypass rational, every bypass invisible, until the policy governs only the conscientious and a crisis finds the real system, which is no system. The third is the policy written by lawyers alone: legally immaculate, comprehensive on liability, and operationally silent at two in the morning, when the question is not what the company may say but who may say anything at all. A working policy needs legal review; it cannot be only legal review. Beneath all three sits the same root failure: a policy treated as a document to possess rather than a practice to run.

The Modest Document

A public relations policy is a modest document with an outsized job: to make an organisation’s public voice accurate, consistent and accountable on its worst day as well as its best. It will not make a bad decision defensible or a hard truth painless, and it is no substitute for the strategy, the relationships or the judgement that sit around it. What it does is smaller and more durable: it removes, in advance, the unforced errors — the contradictory quote, the leaked embargo, the unlabelled paid post, the silent crisis weekend — that no amount of brilliant campaigning can undo. If your organisation has no policy, the sections above are a workable place to start. If it has one nobody can find, the work is not rewriting it but reviving it: shorten it, teach it, own it, review it. Either way, the goal is the same — that the question ‘who is allowed to say that?’ is never answered for the first time in public.