Between Candour and Caution: A Small-Business Guide to Employment References in 2026

Employment references are often treated as a courtesy at the end of a working relationship. Yet a reference is a recorded statement about a person, sent to a third party who may rely on it. For a small business, the practical question is not whether to be generous or guarded, but whether the wording can be defended if it is later challenged.

No right to a reference, but no licence to discriminate

UK law does not generally oblige an employer to provide a reference unless a contract, workplace policy or regulatory regime requires one. A business may adopt a policy of factual references only, or of no references at all, provided it applies that policy consistently. A refusal must not be a pretext for discrimination, victimisation or retaliation under the Equality Act 2010. In regulated sectors, separate rules may require particular disclosures; those rules should be identified before any template is used.

Publication, meaning and serious harm

A reference is published to the recipient. If its words carry a defamatory meaning and meet the serious harm threshold in the Defamation Act 2013, the former employee may have a claim. The starting point is therefore precision. A statement that an employee was 'dismissed for gross misconduct' means something different from 'employment ended during a probationary period'. A vague phrase such as 'not recommended' may be less obviously damaging, but ambiguity is not a defence; context and implication matter.

Qualified privilege is the usual shield for an employment reference. It applies where the maker has a duty or interest in giving the information and the recipient has a corresponding interest in receiving it. A prospective employer assessing a candidate will normally satisfy that test. But the privilege is qualified. It can be defeated by malice, and it depends on an honest belief in what is stated. It is not a licence to repeat rumour or to dress up an unresolved suspicion as fact.

Privilege does not answer every claim

Even where qualified privilege defeats a defamation claim, it does not dispose of a claim in negligence. In Spring v Guardian Assurance plc [1994], the House of Lords held that an employer may owe a duty of care when providing a reference and may be liable for economic loss caused by a careless misstatement. The practical lesson is that accuracy is not merely a reputational concern. A reference that is sloppy, unverified or internally inconsistent can expose the company to a claim by the former employee, and sometimes to a complaint from the recipient.

The line between a fair assessment and a defamatory one is not drawn by politeness. It is drawn by meaning, truth and belief. An honest opinion can be defended if it is recognisable as opinion and is based on facts that are indicated or known. A factual assertion must be capable of support. 'Her files were frequently incomplete' is a factual claim; 'she was unreliable' is an opinion. Both may be defensible, but only if the underlying records and the writer's belief can withstand scrutiny.

Write from records, not memory

Before any reference is drafted, the authorised signatory should review the personnel file, performance records, disciplinary outcomes and any settlement agreement. If an allegation was made but not upheld, the reference should say so accurately rather than leaving the reader to infer guilt. If a disciplinary sanction was imposed, state the finding and the outcome, not the loudest allegation in the correspondence. Avoid unverified hearsay, jokes, speculation about health or family plans, and references to protected characteristics. Sickness absence should be handled with particular care: it may be relevant in narrow circumstances, but it can also reveal disability or generate a discrimination risk.

Consistency matters. If the company routinely gives factual references, a sudden detailed critique of one departing employee will look like a departure from policy. If a settlement agreement contains agreed reference wording, follow it exactly. A departing employee who has negotiated such wording will usually have a remedy if the company departs from it.

Consent, confidentiality and data protection

A reference contains personal data, so the UK GDPR and the Data Protection Act 2018 apply. The information should be accurate, relevant, limited to what is needed and kept securely. There is a conditional exemption from subject access for confidential employment references, but it is not a reason to write something the company would not be prepared to defend. Confidentiality is not the same as immunity.

Consent is not always the lawful basis for providing a reference, but good practice is to confirm in writing that the candidate has asked for the reference and to verify the identity and legitimate interest of the recipient. A request from a generic webmail address should be checked. Telephone references should be avoided or reduced to a written record and confirmed to the recipient. If the company uses a standard template, the signatory should still read it; templates do not remove responsibility for the words actually sent.

A 2026 reference checklist for small businesses

• Decide and document whether the business gives references, and identify any contractual or regulatory exceptions.
• Nominate authorised signatories and route all requests through a single mailbox or process.
• Obtain the request in writing, verify the recipient and confirm the candidate's involvement.
• Check the personnel file, disciplinary records, performance reviews and any settlement agreement.
• Separate fact from opinion, and ensure opinions are based on identifiable facts.
• Do not repeat unverified allegations; state the process and outcome if they must be mentioned.
• Avoid irrelevant health, family or protected-characteristic information.
• Have a second person review the draft for accuracy, tone and consistency.
• Keep a copy of the final reference, the request and the checks for at least six years, subject to the retention policy.
• Train managers not to give informal references or verbal assurances outside the process.

When something goes wrong

If a former employee complains about a reference, preserve the records and avoid informal corrections that create a second inconsistent version. Consider whether the recipient should be contacted, but take legal advice before doing so. Notify the company's insurer if a defamation or negligence claim is threatened. The worst response is to argue from memory; the best is to produce a contemporaneous record showing what was checked, what was said and why.

A reference is short, but its consequences can be long. The disciplined approach — factual, consistent, authorised and recorded — protects the former employee from unfair damage and the business from the cost of careless words.