Which UK rules reach corporate communications, mapped by purpose and recipient

Cedar Vale Engineering Ltd, a fictional company in England, is considering consolidation of an England customer-support site. Its communications lead pauses before drafting an announcement and opens a decision record: identify the speaking legal entity, each message's purpose and its intended recipient. The record does not determine Cedar Vale's duties or provide legal advice.

The proposed change is not yet one message

At the outset, the finding is that a proposed site consolidation does not give every communication the same purpose or audience. Cedar Vale records each message against the legal entity speaking, its intended recipient and purpose, then notes the precise source that may govern it.

There is no single corporate communications regulation to apply across the proposal. Separating the facts helps the team identify the exact legislation, rule or guidance that could apply, rather than assuming that one announcement or one channel settles every legal question.

Each audience points to a different route

The recipient check shows that employee consultation, formal company notices, market disclosure, consumer promotion, personal data, accessibility and incident reporting cannot be treated as one release route.

Cedar Vale places a source and decision owner beside each audience, without assuming that a rule applies simply because a message mentions the site change.

Because the proposal could alter employment terms or involve redundancies, Cedar Vale treats consultation as an employment decision, not a drafting task. Acas says there could be legal implications if an employer changes a contract without genuine and meaningful consultation with employees and their representatives. The Acas page is titled Consulting on changes to your employment contract.

If the consolidation proposes redundancies, section 188 of the Trade Union and Labour Relations (Consolidation) Act 1992 requires collective consultation where an employer proposes to dismiss 20 or more employees at one establishment within 90 days. Consultation must begin at least 30 days before the first dismissal for 20 to 99 dismissals, and 45 days for 100 or more. The employer also notifies the Secretary of State on form HR1. The specialist checks current thresholds before relying on these figures.

An employment specialist, not the copywriter, records who is affected, what remains open, representative arrangements and the legal basis for timing. Public wording that presents the proposal as settled stays out of circulation until the authorised process allows it, keeping the proposed change distinct from a decision that has been made.

Formal company and market checks are separate

The company check finds that a newsroom post and a formal company communication are not interchangeable. Cedar Vale checks whether a document or notice has a named recipient and prescribed route, while the separate market test asks whether issuer disclosure obligations apply.

The Companies Act 2006 is UK legislation with provision-specific application. Section 1144, for example, requires documents or information sent or supplied to a company to follow Schedule 4. A newsroom post is not automatically a substitute for a required communication to members, the registrar or creditors.

Schedule 5 to the Act covers the opposite direction, how a company may communicate with its members, including by electronic means and by website, subject to the conditions it sets. The company secretary or corporate lawyer identifies the relevant provision, recipient, prescribed method and evidence. Before routing a notice to a website or social feed, Cedar Vale compares that method with its channel strategy, rather than treating a preferred channel as proof that the route is valid.

The market check is narrower. Article 17 of the UK Market Abuse Regulation requires an issuer to disclose inside information to the public as soon as possible, and DTR 2 of the FCA Handbook concerns how issuers control and disclose it. A named market-disclosure owner decides whether Cedar Vale and the information qualify; a media briefing cannot silently replace a regulatory route.

The announcement remains held until the company secretary confirms whether the consolidation is inside information. Cedar Vale records that decision beside its owner and source, rather than treating a corporate statement as clearance to publish to the market or as a substitute for the required regulatory route.

Customer and information messages trigger different tests

Cedar Vale's next finding is that a message can serve a promotional purpose, involve personal data or reach people who need accessible formats. These checks remain separate because the governing sources and decision owners differ across the audiences.

A corporate statement can also be marketing. The advertising rules check asks Cedar Vale to classify the content, substantiate objective claims and consider material omissions; a corporate heading does not remove a promotional purpose under consumer rules.

Chapter 1 of Part 4 of the Digital Markets, Competition and Consumers Act 2024 confers protections on consumers from unfair commercial practices, and section 225 prohibits them. The advertising and consumer owners decide whether a particular Cedar Vale message falls within that regime.

The privacy owner maps purpose, role, lawful basis, transparency, minimisation, rights, security, retention and direct-contact rules in the data protection review. The UK GDPR applies only to information relating to an identifiable living individual, so Cedar Vale checks that point as part of its review.

Electronic contact has its own test: regulation 22 of PECR applies to unsolicited electronic mail sent for direct marketing to individual subscribers. Section 29 of the Equality Act 2010 stops a person providing a service to the public from discriminating against someone requiring the service by not providing it. Accessible formats therefore need a named owner, not the design team alone.

Incident duties have their own triggers and recipients. Under regulation 11 of the Network and Information Systems Regulations 2018, an operator of essential services must notify its competent authority about an incident with a significant impact on continuity of the service. A notifiable personal data breach must reach the ICO without undue delay and within 72 hours of awareness. Cedar Vale rehearses these checks with its risk scenarios.

The release remains conditional on the findings

At the end of the checks, Cedar Vale has a route map but no blanket permission to publish. The consolidation announcement stays on hold until the company secretary confirms whether it is inside information for its intended route; any other unresolved applicable gate also prevents release.

The communications lead maintains the route map, while named specialists decide whether each source applies. Cedar Vale records those decisions in its disclosure policy, then uses release control to tie each hand-off to its responsible owner and evidence.

Before publication, Cedar Vale checks territorial scope, commencement and current regulator guidance. The route map does not replace that publication-day check or a specialist's decision on applicability; if a relevant gate remains unresolved, the communication stays on hold rather than moving forward by default.

What Cedar Vale carries into the next decision

The scenario shows that each communication needs its own legal, recipient and purpose checks. Naming a source does not prove that it applies: specialists determine scope, the communications lead records the result, and publication waits whenever an applicable gate remains unresolved.