Business operations pack
Businesses with turnover above £36 million must publish a modern slavery statement, and any organisation using AI on personal data must be able to explain the processing under UK GDPR. Most smaller firms are asked for both by corporate customers long before the law requires them.
Core pack · 10 documents · 52 pages
The short answer
Businesses with turnover above £36 million must publish a modern slavery statement, and any organisation using AI on personal data must be able to explain the processing under UK GDPR. Most smaller firms are asked for both by corporate customers long before the law requires them.
Who this pack is for
- Businesses filling in a corporate client's supplier questionnaire
- Employers writing down remote and hybrid arrangements for the first time
- Firms letting staff use AI tools with no policy
- Anyone with company vehicles or driving for work
- Companies with no continuity plan and a single point of failure
Not for you if: You need a full ISO 22301 or ISO 27001 programme. This is the practical layer beneath that.
What it solves
A client's procurement pack asks for six policies you do not have.
Staff paste customer data into a chatbot and nobody has said what is allowed.
A flood or outage stops trading and nobody knows who calls whom.
What the law requires
AI use and personal data
Using AI tools on personal data is processing like any other. You need a lawful basis, transparency, and an assessment where the risk is high. An acceptable use policy is the practical control.
Source: ICO, guidance on AI and data protection
Bribery and modern slavery
The Bribery Act 2010 creates a corporate offence of failing to prevent bribery, with adequate procedures as the defence. Modern slavery statements are mandatory above £36 million turnover and commonly required in supply chains below it.
Source: GOV.UK, Bribery Act guidance; Modern Slavery Act 2015
Driving for work
Work related road risk sits under the same health and safety duties as any other activity. Licence checks, vehicle condition and journey planning are what an investigation looks for.
Source: HSE, driving and riding safely for work
What is in the pack
| ID | Document | Pages |
|---|---|---|
| OPS-01 | Business continuity planGOV.UK business continuity | 8 |
| OPS-02 | Insurance review checklistABI consumer guidance | 4 |
| OPS-03 | Supplier due diligence and onboarding formBribery Act 2010 | 5 |
| OPS-04 | AI usage policyICO AI guidance | 5 |
| OPS-05 | Remote and hybrid working policyACAS; HSE DSE | 6 |
| OPS-06 | Company vehicle policyHSE driving for work | 5 |
| OPS-08 | IT acceptable use policyICO; NCSC small business guide | 5 |
And three more: social media and communications policy, environmental policy statement, anti-bribery and modern slavery statement.
How updates work
Every document carries a version number and a reviewed date. On the first Tuesday of each month the pack is checked against its primary sources. If anything has changed you receive the updated file and one line explaining what moved and why. If nothing has changed you receive an email saying so.
April and the Budget are the months when most figures move.
Questions
Do I need a modern slavery statement?
Legally only above £36 million turnover, but corporate customers routinely ask smaller suppliers for one. The pack includes a proportionate version.
Is the AI policy specific to any tool?
No. It sets rules by activity and data type, so it holds whichever tools your team uses.
Does the continuity plan cover cyber incidents?
It covers the response structure and contacts. Technical incident response is a separate discipline.
Can I share these with a client's procurement team?
Yes. That is what most buyers use them for.
How is it delivered?
By email, as Word and PDF files, personalised with your company details.
Sources
Built from published UK primary sources only: GOV.UK, Bribery Act guidance; Modern Slavery Act 2015, HSE, driving and riding safely for work, ICO, guidance on AI and data protection. No secondary or aggregator sources are used.
Order the business operations pack, or ask about an association licence covering your whole membership.
Email support@kaeltripton.comThese documents are drafted from published UK primary sources and are a starting point you adapt to your own circumstances. They are not legal, tax or immigration advice, and documents you edit become your responsibility.