Employer Reference Letters: What UK Businesses Can and Can’t Say

When you’re running a small business, it’s easy to treat a reference request as a quick admin task.

But an employer reference letter can create real legal and commercial risk if it’s rushed, overly detailed, inconsistent, or (worse) driven by frustration after a tricky exit.

The good news is that giving references doesn’t have to be stressful. With a clear process, a consistent policy, and the right level of detail, you can help former staff move on while protecting your business from disputes.

In this guide, we’ll walk through what you can say, what you shouldn’t say, and practical steps to keep your references accurate, fair, and compliant.

What Is A Reference Letter From Employer (And Why It Matters)?

A reference letter from an employer is a written statement (often emailed, sometimes on letterhead) provided to a prospective employer, landlord, lender, or other third party to confirm information about someone who worked for you.

In practice, employer references usually fall into two broad categories:

• Factual references (most common): confirming objective facts like job title, dates of employment and (sometimes) salary.
• Character or performance references: offering opinions about attitude, conduct, performance, reason for leaving, and suitability for future roles.

From a business perspective, the key point is this: if you choose to provide a reference, you should take reasonable care to ensure it’s true, accurate, and fair. A sloppy or misleading reference can become a legal headache, even if your intention was simply to “be helpful”.

Many small businesses aim to keep references consistent and low-risk by giving a factual reference as a default.

Do You Have To Provide A Reference In The UK?

For most private sector employers, there’s no general legal duty to provide a reference.

That said, you may be required (or strongly expected) to provide one in certain situations, including:

• Contractual commitments: the employment contract, settlement agreement, or internal policy may promise a reference (or set out what will be provided).
• Regulated roles: some sectors and regulated roles have additional rules, guidance, or market expectations around references and disclosures. The details vary significantly depending on the industry and the role, so it’s worth checking the specific regulatory position before you respond.
• Consistency and discrimination risk: if you provide references for some employees but refuse for others, you’ll want to ensure the decision is not discriminatory and is based on a consistent policy.

It’s also worth remembering that refusing a reference can create practical issues (for example, a former employee can’t progress with a new role). Sometimes it’s commercially sensible to provide a basic, factual reference just to close the loop cleanly.

If you’re weighing up whether you can decline, it’s worth checking the specifics around when this is allowed (and what to watch out for) in Reference Requests.

Tip: if you have a standard approach to references, make sure it’s aligned with your Employment Contract wording and your staff handbook/policies, so you’re not accidentally promising more than you intend to give.

What You Can Say In A Reference (Safe, Sensible Content)

As a small business, your safest option is usually a short, factual reference letter that confirms objective information you can prove from your records.

Common “safe” inclusions are:

• Employee’s full name (and any previous name if relevant and appropriate)
• Employment dates (start and end date)
• Job title (and whether they were promoted)
• Employment type (full-time/part-time/fixed-term)
• Basic duties in neutral terms (optional)

Some businesses also confirm:

• Salary (only if you’re comfortable, and preferably with the former employee’s consent)
• Sickness absence (this is sensitive and often best avoided unless there’s a clear lawful basis and it’s genuinely necessary for the recipient’s stated purpose)
• Reason for leaving (again, only if it’s clear, documented, and you can express it neutrally)

Should You Include A “To Whom It May Concern” Disclaimer?

It’s common to include a short disclaimer that the reference is given in good faith and based on your records.

Disclaimers can help set expectations, but they’re not a magic shield. If you make a statement that is inaccurate or unfair, you can still be challenged. The real protection is: keep it factual, consistent, and evidence-based.

Keep Your Tone Neutral (Even If The Exit Was Messy)

If the employee left under difficult circumstances, a neutral factual reference often gives you the cleanest path forward. You’re not required to provide a glowing endorsement, and you’re not required to rehash grievances.

A practical rule: if you wouldn’t feel comfortable reading the reference out loud in a tribunal setting, it’s probably too opinionated.

What You Can’t Say (And The Legal Risks If You Get It Wrong)

There isn’t a single list of “banned phrases” for an employer reference. The risk depends on whether what you say is:

• false or misleading (even if unintentionally)
• unfairly damaging without proper basis
• discriminatory or influenced by a protected characteristic
• a breach of confidentiality or data protection

Here are the main danger areas to watch out for.

1) Defamation And “I Was Just Being Honest” References

Defamation risk is a common worry for employers. In simple terms, if you publish something about someone that harms their reputation and it’s not defensible, you can face a claim.

In references, this often pops up when an employer includes:

• unproven allegations
• exaggerated criticism
• inflammatory language (“dishonest”, “untrustworthy”, “dangerous”) without solid evidence

Even where you believe something to be true, you should still ask: can we prove it, and is it fair to present it this way?

For small businesses especially, the cost and distraction of a dispute can be disproportionate, so it’s usually better to avoid opinion-heavy references unless you have a strong reason.

2) Negligent Misstatement (References That Mislead The New Employer)

The flip side is also important: a reference can create risk if it’s so positive that it becomes misleading.

For example, if you describe someone as reliable and suitable for a role involving safeguarding, cash handling, or safety-critical tasks, while you’re aware of serious documented issues that make that specific reassurance inaccurate, the new employer might argue they relied on your statements and suffered loss as a result.

This doesn’t mean you must “tell all”, and in most cases you’re not under a general duty to volunteer every concern. However, whatever you do choose to say should be careful, supportable, and not presented in a way that is likely to mislead the recipient.

3) Discrimination (Direct And Indirect)

References can create discrimination risk if they include (or are influenced by) protected characteristics under the Equality Act 2010, such as age, disability, pregnancy/maternity, religion, sex, race, and more.

Examples of risky content include:

• commenting on health or disability where it’s not necessary
• suggesting someone was “difficult” after raising discrimination concerns
• penalising someone in their reference for taking lawful leave (like maternity leave)

A helpful approach is to use a standard factual reference for everyone unless there’s a documented and defensible reason to depart from that approach.

4) Confidentiality And “Internal” Information

Even if a reference is about a former employee, it can still accidentally disclose sensitive internal business details (for example, client names, commercial disputes, or internal investigation notes).

This can be particularly risky if:

• your reference discusses allegations raised by other employees
• it refers to customer complaints with identifying details
• it reveals internal performance management discussions

If you’re ever tempted to attach documents or “explain the whole situation”, pause and get advice first. A reference is rarely the right place to share internal correspondence.

It’s also worth having clear expectations around confidentiality more broadly, including the Confidentiality Policy you apply during employment and after someone leaves.

5) Data Protection And UK GDPR

An employer reference can involve personal data (and sometimes special category data, like health information). That means UK GDPR and the Data Protection Act 2018 may apply.

Key practical points for small businesses:

• Only share what’s necessary for the purpose of the reference.
• Be accurate and up to date (this is a core GDPR principle).
• Think about lawful basis: you may rely on legitimate interests, legal obligation, or consent depending on the information you’re sharing.
• Store and send securely (especially if sending by email).

Also remember: your former employee may have rights to access personal data you hold about them. If a reference is stored in your systems, it may be caught by a subject access request in some circumstances.

For the operational side of this, it helps to have a clear approach to Subject Access Requests.

A Practical Process For Handling Reference Requests (Without Losing Hours)

If you’re getting reference requests regularly, the best way to protect your business (and save time) is to set up a simple internal process.

Step 1: Decide Who Is Authorised To Give References

References should not be ad hoc, especially in a small team where managers wear multiple hats.

Common options include:

• only the director/owner provides references
• only HR (or a nominated admin) provides references
• line managers can provide references, but only using an approved template

This reduces the risk of inconsistent references and “off the cuff” comments.

Step 2: Verify The Request

Before sending a reference letter, confirm:

• who is requesting it (company name, email domain, contact details)
• who the reference is about (full name, role, employment dates)
• what format they want (email, letterhead PDF, online portal)
• whether the former employee has consented (especially if the request seems informal)

Step 3: Stick To Your Standard Content

Have a baseline factual reference and treat that as your default. It can include:

• dates of employment
• job title
• a short neutral duties description
• a short disclaimer

If you decide to provide more detail (for example, performance comments), make sure it is:

• based on documented evidence
• written in measured language
• checked by someone senior
• consistent with what you’ve told the employee previously

Step 4: Keep A Copy And Keep It Consistent

Keep a record of:

• the request you received
• the reference you provided
• who approved it and when

This is helpful if:

• the recipient follows up with questions
• there’s a later dispute about what was said
• you need to show you treated people consistently

As part of this, it’s useful to set retention periods for HR records so you’re not keeping personal data indefinitely. A good starting point is your approach to Record Retention.

Step 5: Avoid Informal “Off The Record” Calls

It’s common for prospective employers to ask for a quick chat “off the record”. This is risky territory because:

• there’s no clear record of what you said
• it’s easier to say something exaggerated or imprecise
• you can accidentally disclose confidential information

If you do take a call, consider taking notes and sticking to the same factual content you would put in writing.

What Should A Reference Letter From Employer Include? (A Simple Outline)

If you want a straightforward structure, here’s a practical outline you can adapt to your business. Keeping your reference letter short is usually a good thing.

Basic Reference Letter Structure

• Date
• Recipient details (name/company if known, otherwise “To Whom It May Concern”)
• Confirmation of employment: “This is to confirm that was employed by from to .”
• Role: “Their job title was .”
• Optional neutral duties: one sentence on general responsibilities
• Optional reason for leaving: only if factual and agreed
• Disclaimer: e.g. “This reference is given in good faith and based on our records.”
• Signature: name, position, company, contact email/phone

One practical tip: be cautious about adding “character” language (like “hardworking”, “honest”, “excellent”). If you do include it, make sure you can support it and you would say the same thing for other employees in similar circumstances.

And if you’re thinking “we don’t even have consistent job titles or duties written down”, that’s a sign it may be time to review your onboarding documents and role documentation (including contracts) so your records match reality.

Key Takeaways

• An employer reference letter is not just admin - it’s a business communication that can carry legal risk if it’s inaccurate, unfair, or overly opinionated.
• In most cases, you don’t have a general legal duty to provide a reference, but you should check contracts, policies, and the need for consistent treatment.
• The safest approach for many small businesses is a factual reference confirming objective information like dates and job title.
• Avoid including unproven allegations, emotionally-worded criticism, or sensitive personal data unless there’s a clear lawful basis and strong justification.
• References can raise issues around defamation, negligent misstatement, discrimination, confidentiality, and UK GDPR - so it pays to use a consistent process and template.
• Keep records of references you provide and set sensible retention periods for ex-employee records so you stay organised and GDPR-compliant.

If you’d like help putting a reference policy in place, reviewing what you can safely say, or tightening up your employment documents, you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.