Acceptable Use Policy Template for UK Businesses
An acceptable use policy sets the rules for how employees use company IT systems, devices, and internet access. It protects your business from misuse, data breaches, and legal liability — and is required for Cyber Essentials certification.
Instant PDF & Word download · 14-day money-back guarantee
What is an acceptable use policy?
An acceptable use policy (AUP) is a document that defines how employees are permitted to use company IT systems, devices, networks, email, and internet access. It sets clear boundaries between acceptable and unacceptable use, and sets out the consequences of policy violations.
Without an AUP, employees have no clear guidance on what is and isn't allowed — which creates legal and security risk. If an employee uses company equipment to access inappropriate content, leak confidential data, or install unauthorised software, your business could face significant legal and reputational consequences.
What your acceptable use policy should cover
- Permitted and prohibited uses of company devices, systems, and networks
- Internet and email use — acceptable purposes and prohibited activities
- Password requirements and access control
- Rules around personal use of company equipment
- BYOD (bring your own device) rules if applicable
- Social media use on company time or devices
- Data handling and confidentiality obligations
- Monitoring of device and system use
- Consequences of policy violations and disciplinary procedures