Parish Council Policies: What Clerks Need to Know
Published 22 July 2026
By Brian Crocker
The clerk at a rural parish council in the East Midlands was preparing for the annual internal audit when the auditor asked a routine question: when was the financial regulations policy last reviewed? The clerk checked the resolution register. The policy had been adopted in 2019. There was no subsequent review resolution in the minutes. The council had been operating on four-year-old financial regulations through two complete annual audit cycles and nobody had noticed.
This is not unusual for parish and town councils. Policy governance is one of the areas where the gap between best practice and common practice is widest, and it is an area where the clerk carries the most practical responsibility.
The Governance Framework for Parish and Town Councils
Parish and town councils in England are the most local tier of statutory local government, established under the Local Government Act 1972 and operating with powers conferred by a range of subsequent legislation. They are accountable to the local electorate, subject to internal and external audit (through the regime established by the Accounts and Audit Regulations 2015), and expected to follow the governance standards set out by the National Association of Local Councils (NALC) and their county association.
The governance framework for smaller councils — those with turnover below £25,000 — is the Annual Return regime under the Smaller Authorities' Audit Appointments (SAAA) framework. For larger councils, the Local Audit and Accountability Act 2014 and the Accounts and Audit Regulations 2015 set the audit requirements. Internal auditors following the NALC/SLCC Practitioners' Guide will check policy governance as part of their review of the council's governance arrangements.
What this means in practice is that parish councils are not subject to a national inspectorate in the way that schools or care homes are. The accountability mechanism is the annual internal audit, the external audit of the Annual Return (for smaller authorities), the oversight of the principal authority (the district or borough council), and — most directly — the electorate. But the internal audit is where policy gaps most commonly surface.
Which Policies Parish Councils Must Have
There is no single statutory list of required policies for parish councils equivalent to what maintained schools must publish. Requirements come from multiple sources and vary with the council's functions and scale. The policies that the internal audit process and NALC governance guidance consistently expect are:
Financial governance policies
The council's standing orders and financial regulations are the foundational governance documents. Standing orders govern how the council meets and makes decisions; financial regulations govern how it handles money. Both must be formally adopted by resolution and should be reviewed at least every two years. Many councils adopt the NALC model standing orders and financial regulations, which are updated periodically — an adoption without subsequent review is fine initially, but councils should check whether the model documents have been updated since their adoption.
Beyond these: a complaints policy (required under NALC guidance), a transparency code compliance statement (required under the Smaller Authorities' Transparency Code for councils with annual turnover not exceeding £25,000), and a freedom of information publication scheme (if the council is subject to FOIA, which most are).
Employment policies (where the council employs staff)
Parish councils with a paid clerk — which is essentially all operating councils — are employers. The minimum employment documentation includes a contract of employment, a grievance procedure, a disciplinary procedure, an expenses and allowances policy, and a lone working policy. Councils with additional staff will typically also need a recruitment policy, an equal opportunities statement, and a capability procedure.
Data protection and information governance
UK GDPR applies to parish councils. A data protection policy (setting out how the council processes personal data), a privacy notice for website publication, a retention and disposal schedule, and a data breach reporting procedure are required. The clerk is typically the de facto data protection lead for a small council.
Health and safety
A health and safety policy is legally required under the Health and Safety at Work etc. Act 1974 for any employer, including parish councils. For a council with only a clerk working from home and occasional public events, this can be a proportionate one-page statement. But it must exist, be signed by the chairman, and reference risk assessments.
Social media and communications
Councils with an active web presence and social media channels should have a communications policy or social media policy, setting out what the council will and will not publish and who has authority to post. This is increasingly checked by internal auditors as reputational risk management.
The Clerk's Role in Policy Governance
In most parish and town councils, the clerk is both the policy author and the policy administrator. The council makes the decisions; the clerk drafts the policies, presents them for adoption, monitors review dates, and brings them back to full council or the relevant committee for review.
The governance failure mode is that policy management depends on the current clerk's institutional memory and working style. When a clerk retires or resigns, the incoming clerk often inherits a set of files with no clear record of what has been adopted, what version is current, or when any of it was last reviewed.
A policy register solves this handover problem. A register that records every policy's current version, adoption date, last review date, and the resolution number that approved it gives the incoming clerk a clear picture in minutes. It also gives the internal auditor the evidence they need to confirm that policy governance is working.
Building a Review Cycle
Parish councils do not need complex policy management infrastructure. The review approach that works for most councils:
-
List every adopted policy and document. Include standing orders, financial regulations, the employment documents, data protection policies, and any committee terms of reference. A council with a dozen adopted documents is not unusual; a more active council with planning, burial grounds, or sports facilities may have thirty.
-
Assign a review frequency. Financial regulations and standing orders: every two to three years, or when the NALC model documents are updated. Employment policies: when employment legislation changes or on a two-year cycle. Data protection policies: annually. The Policy Review Schedule Generator helps you map these against a rolling calendar.
-
Tie reviews to the council's annual cycle. The annual meeting (the meeting following the annual elections or the annual meeting of the council) is the natural point to review standing orders, confirm the review schedule, and note any policies coming due. The pre-audit preparation period is a natural trigger for the financial governance review.
-
Resolution discipline. Every policy review that results in changes — or a conscious decision that no changes are needed — should be recorded in the council minutes as a resolution. "Standing orders reviewed, NALC 2024 edition adopted, proposed by Cllr Jones, seconded by Cllr Smith" is sufficient. This is the audit trail the internal auditor is looking for.
-
Keep the register. A Policy Register Template covering all adopted policies, with version number, adoption resolution reference, and next review date, is the record the next clerk will thank you for.
Common Areas Where Policy Governance Fails at Internal Audit
Internal auditors following the NALC/SLCC Practitioners' Guide assess governance under Assertion 6 (governance): "During the year ended [date] the authority has only done what it has the legal power to do and has complied with proper practices in doing so." Policy governance directly feeds this assertion.
The gaps internal auditors most commonly find:
Policies adopted but never reviewed. A set of standing orders adopted in 2017. Financial regulations adopted when the council was constituted. No review in the minutes. The internal auditor notes this as a finding; it appears in the Annual Governance and Accountability Return comment from the RFO.
No record of what has been adopted. The council has documents in its files. It is not clear which have been formally adopted by resolution and which are drafts. The clerk cannot point to the specific resolution that adopted each document.
Employment documentation gaps. The clerk has a contract, but it has never been formally reviewed since initial appointment. The grievance and disciplinary procedures were drafted by the previous clerk and have not been presented to the council for adoption.
GDPR documentation absent or outdated. The privacy notice was last updated in 2019. There is no data breach reporting procedure. The retention schedule is a single-sheet document with no author or review date.
PolicyBoard is designed for exactly this situation: small councils where the clerk carries all the policy governance responsibility and needs a simple, auditable register that documents adoption, ownership, and review history. Join the waitlist to be notified when it launches.
Sources
- Local Government Act 1972
- National Association of Local Councils (NALC)
This guide is written for parish and town council clerks, council chairmen, and councillors managing governance and policy obligations at parish-level councils in England. It covers general principles of good governance based on NALC guidance and the local council governance framework. Requirements vary with the council's functions, scale, and county association expectations. This is not legal advice — verify specific obligations with your county association or NALC.
Stop tracking policy reviews in spreadsheets
PolicyBoard automates review reminders, approval workflows, and compliance dashboards for UK regulated organisations.
Related articles
Housing Association Policy Management: RSH Standards
How registered social landlords manage their policy obligations under the RSH Consumer Standards — what the governance framework requires, which policies drive regulatory compliance, and how to build a review system that holds up to IDA scrutiny.
Charity Policy Management: What Trustees Need to Know
How registered charities manage their policy obligations — what the Charity Governance Code expects, which policies trustees must own, and how to build a review system that holds up to scrutiny.
School Policy Management: Guide for Business Managers
How schools and multi-academy trusts manage their statutory and operational policy obligations — what must be reviewed, what must be published, and how to keep track without it consuming a working week.