Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
You’ve probably been there: an ex-employee (or their new employer) asks you for an employment reference, and you’re not sure how much you have to say, how much you should say, and what might come back to bite you later.
For small businesses, references can feel surprisingly high-stakes. A “helpful” reference can turn into a dispute if the new employer says they relied on it. A “brief” reference can trigger complaints about fairness. And a “too honest” reference can raise defamation, discrimination, or data protection issues.
The good news is that providing references doesn’t need to be stressful. With a clear process and consistent wording, you can provide a compliant, low-risk employment reference that’s still useful.
Below, we’ll walk through when you should provide a reference, what to include, what to avoid, and how to set your business up with a repeatable approach.
Do Employers Have To Provide An Employment Reference In The UK?
In most cases, there’s no general legal obligation on employers to provide an employment reference in the UK.
However, there are common situations where you might be expected (or required) to provide a reference:
- Your contract says you will. Sometimes an Employment Contract or settlement terms include obligations around references (for example, providing an agreed form of reference).
- Your policies say you will. If your internal processes say you provide references as standard, it’s wise to follow that consistently. This is often set out in a Staff Handbook or wider Workplace Policy.
- You’re in a regulated sector. Some roles (particularly in financial services) may have regulatory expectations around references, especially for certain controlled functions.
- You’ve created an expectation through past practice. If you usually provide references for leavers, refusing in a particular case can create conflict and allegations of unfairness. Past practice doesn’t automatically create a legal duty, but consistency helps reduce risk.
Even where you don’t have to provide a reference, many businesses choose to because it’s part of being a responsible employer and helps maintain good relationships (and reputation) in your industry.
Key point: if you do decide to provide an employment reference, it should be true, accurate, and fair.
What Are The Main Legal Risks When Providing A Reference?
References are one of those areas where the legal risk isn’t always obvious until it escalates. As a small business, you’ll usually want to keep your approach consistent and “boringly factual” to reduce the chance of a dispute.
1) Negligent Misstatement (Misleading References)
If you provide a reference that is inaccurate or misleading, the person relying on it (usually the new employer) may argue they suffered loss because they relied on what you said.
This risk can show up in two ways:
- Overly positive references that omit serious issues and paint an unrealistic picture; and
- Overly negative references that exaggerate problems or state opinions as facts.
The safest path is to stick to what you can evidence: job title, dates, duties, and objective performance or disciplinary outcomes (where appropriate and accurate).
2) Defamation
If you make statements that harm someone’s reputation and they’re not true (or can’t be justified), you may face a defamation allegation.
In practice, defamation claims are complex and not everyday disputes for most SMEs, but the risk is a good reminder to avoid “colourful commentary” and to make sure your reference is defensible if challenged.
3) Discrimination And Victimisation Claims
References are a common source of complaints linked to the Equality Act 2010.
For example, risk increases if:
- you refuse to provide a reference for one person but provide references for others in similar circumstances;
- your wording is harsher for an employee who raised a grievance, asked for flexible working, took maternity leave, or made a protected disclosure; or
- you include irrelevant personal comments that could be linked to a protected characteristic (age, disability, sex, race, religion, etc).
Even where you think you’re “just being honest”, inconsistency is where disputes often start. A standardised approach helps.
4) Data Protection (UK GDPR And The Data Protection Act 2018)
An employment reference will usually contain personal data about the individual, so you need to consider UK GDPR and the Data Protection Act 2018.
Practical implications include:
- only including information that is relevant and necessary (data minimisation);
- keeping information accurate and up to date;
- being careful about sharing special category data (for example, health information) unless there’s a clear lawful basis; and
- having a process if the employee makes a data request connected to the reference.
It’s also worth knowing that, in many cases, a confidential reference you give about an employee (or former employee) is exempt from being disclosed by you to that person under the Data Protection Act 2018. Even so, references should still be handled as a controlled HR process (and some references may be disclosable in other contexts), so avoid treating it as an informal email reply dashed off between meetings.
What Should You Include In An Employment Reference (And What Should You Avoid)?
Most small businesses are best protected by offering a standard factual reference. That usually satisfies most recruiters while keeping your risk low.
What A “Factual” Employment Reference Usually Includes
- Employee’s full name (and any known previous name if relevant for records).
- Job title (and a brief description of role, if helpful).
- Employment dates (start date and end date).
- Employment type (full-time/part-time; permanent/fixed-term).
- Final salary (optional, and often only if asked and your records support it).
- Reason for leaving (optional and sensitive; consider whether you have a consistent practice).
If you keep it to these points, your employment reference is less likely to become argumentative.
When You Might Include Performance Or Conduct Information
Sometimes you may be asked directly about performance or conduct, such as:
- attendance issues;
- disciplinary history;
- whether the person is eligible for rehire; or
- capability concerns.
You can answer these questions, but it’s safer when:
- you can support it with written records (for example, appraisals, warnings, investigation outcomes);
- you describe outcomes, not opinions (eg “a final written warning was issued on for ” rather than “they were untrustworthy”); and
- you ensure your internal process has been followed fairly (for example, if the issue arose during Performance Improvement Plans or a disciplinary process).
If you’re unsure, a cautious approach is to provide a factual reference and decline to comment on performance beyond confirmed facts.
What To Avoid Including
To reduce legal risk, it’s usually best to avoid:
- Medical details (even “they were off sick a lot” can be risky if it relates to disability).
- Speculation (anything you can’t prove from records).
- Personal opinions (“difficult personality”, “not a team player”) unless you can anchor it to documented, objective examples.
- Protected characteristic commentary (directly or indirectly).
- Off-the-record “phone chat” references without a plan (if you do provide a phone reference, keep notes and stick to facts).
As a rule: if you wouldn’t be comfortable reading your reference aloud in a formal meeting, it probably needs reworking.
A Simple Process For Providing References (So You Stay Consistent)
Consistency is your best friend here. A simple process helps you respond quickly, keep information accurate, and avoid “different managers, different answers” problems.
Step 1: Decide Your Business’s Reference Policy
Before the next request lands in your inbox, decide:
- Will you provide references at all?
- If yes, will you provide factual-only references as standard?
- Who is authorised to provide them (owner, HR, office manager)?
- Will you only respond in writing, or also by phone?
This is often easiest to manage if it’s written into your HR documentation (including your Staff Handbook), and communicated internally so managers aren’t freelancing reference responses.
Step 2: Verify The Request And The Recipient
Reference fraud does happen. Before providing a reference, make sure:
- the request is from a legitimate organisation (check domain names, contact details, and role);
- the individual actually worked for you; and
- you’re sending it to the correct person (especially where the reference includes personal data).
Step 3: Confirm What You Can Share (And Check Your Records)
Pull up your records (employment dates, title, payroll details if relevant) and stick to what you can verify.
If there were disciplinary or performance issues and you’re considering disclosing them, check you have a paper trail and that your process was fair and documented. If the underlying process is messy, the reference can become the next battleground.
Step 4: Use A Standard Template With Approved Wording
Templates reduce risk. Your reference template should include:
- a standard introduction and confirmation of identity;
- the factual employment details;
- any agreed standard statements (eg “This reference is given in good faith based on our records”); and
- a signature block with the authorised person’s name and role.
Also, decide whether you will provide references by email. In many businesses it’s normal and practical, but remember to keep wording careful and only include what you can support from your records.
Step 5: Keep A Copy And A Brief File Note
Keep a copy of every reference you provide (and any supporting notes if it was done by phone). If there’s a dispute later, you’ll want a clear record of exactly what you said and why.
How To Handle Tricky Reference Situations (Without Creating A Headache)
Some reference requests are straightforward. Others aren’t. Here are common tricky scenarios and how small businesses can approach them.
1) The Employee Left On Bad Terms
If someone left after conflict, poor performance, or misconduct, the safest option is often a factual-only employment reference.
If you do choose to mention disciplinary outcomes, keep it strictly accurate and proportionate. Also ask yourself whether the issue is closed and documented properly. If your disciplinary process wasn’t handled carefully, your reference could trigger fresh complaints.
2) You’re Asked “Would You Rehire Them?”
This question is common, but it can be loaded.
If you have a policy, apply it consistently. If you don’t, consider either:
- declining to answer and sticking to factual details; or
- answering in a neutral, evidence-based way (eg “We only provide factual references and do not comment on rehire eligibility”).
If you answer inconsistently across employees, it can create an argument that you treated someone unfairly or retaliated for something they did (like raising a concern).
3) The New Employer Wants A “Character Reference”
Character references carry more risk because they tend to be opinion-based.
If you do provide one, keep it professional and linked to observable work behaviours you can support. Avoid personal life commentary or anything that could touch on protected characteristics.
4) The Employee Disputes The Reference
Sometimes an ex-employee will complain that a reference is “unfair” or “ruined their chances”.
At that point, you’ll want to:
- review what you sent (and why);
- check accuracy against records;
- consider whether the language could be read as opinion presented as fact; and
- respond calmly and consistently (avoid back-and-forth arguments).
If the employee raises a data protection angle, or makes a formal request for information, make sure you handle it under your usual compliance process.
5) The Employee Is Still Employed And You’re Asked For A Reference
This can happen where someone is job-hunting quietly.
Be careful about confidentiality and internal comms. You may also want to confirm whether the individual consents to you responding and what contact details you should use (to avoid accidentally disclosing information internally or to the wrong party).
Key Takeaways
- In most cases, UK employers are not legally required to provide an employment reference, but obligations can arise through contracts, policies, or regulated sectors (and consistency with past practice can help reduce complaints).
- If you choose to provide a reference, it should be true, accurate, fair, and evidence-based to reduce the risk of negligent misstatement and disputes.
- A factual-only employment reference (job title, dates, role, employment type) is often the safest approach for small businesses.
- Avoid unnecessary commentary, speculation, medical details, or anything that could be linked to a protected characteristic under the Equality Act 2010.
- Treat references as a data protection issue too: only share what’s necessary, keep it accurate, and send it securely under UK GDPR and the Data Protection Act 2018. Confidential references are often exempt from disclosure by the referee to the employee, but you should still draft them carefully.
- Protect your business with a consistent internal process: decide who can provide references, use a template, verify recipients, and keep copies of what you sent.
If you’d like help setting up a clear reference policy, updating your employment documents, or managing a tricky reference request, you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.


