TL;DR: The 7 HR basics aren't just a list of functions — they're a practical self-assessment framework for UK SMEs. This article shows what 'good' looks like at each stage and highlights the gaps that most commonly trip up growing businesses between 50 and 500 employees.
Introduction: Most HR Teams Know the List — Fewer Can Pass the Checklist
Only 42% of UK SMEs with 50 to 249 employees have dedicated HR staff, yet employment tribunal claims reached 29,000 in 2024/25 — up 7% year-on-year (Ministry of Justice, March 2025). That gap tells you something important: it's not that HR professionals don't know what good looks like. It's that growing businesses often have the 7 basics half-built, inconsistently applied, or quietly out of date.
The problem isn't ignorance. It's that a 150-person business moves fast, HR teams are stretched, and the basics get deprioritised in favour of whatever's urgent this week. Then a tribunal claim lands, or a payroll error surfaces, or a manager handles a disciplinary incorrectly — and suddenly the gap between "we have a policy somewhere" and "we have a policy that works" becomes very expensive.
This article isn't a generic list of HR functions. It's a self-assessment checklist. For each of the 7 basics — Contracts & Onboarding, Pay, Tax & Benefits, Performance & Progression, Health, Safety & Wellbeing, Compliance & Policies, Diversity, Inclusion & Employee Relations, and Data Protection & Offboarding — you'll find what 'good' looks like, the most common gap in growing UK businesses, and a prompt to score your own team. Use it honestly, and you'll leave knowing exactly where to focus first.
How to Use This Checklist
Each section below follows the same structure: what the basic covers, what 'good' looks like in practice, the gap that most commonly trips up businesses between 50 and 500 employees, and a self-assessment question to score yourself.
Use a simple traffic light system. Green means it's fully in place and has been reviewed in the last 12 months. Amber means it exists but is outdated, inconsistently applied, or relies on one person's knowledge. Red means it's missing, informal, or has never been properly formalised. Most SMEs start Amber across several areas — that's normal. The goal isn't to feel bad about gaps; it's to identify where to focus before those gaps become claims.
One important context note: the Employment Rights Bill, enacted in October 2024, has shifted several baselines. Contracts and flexible working policies in particular need reviewing ahead of April 2026, when day-one unfair dismissal rights come into force. If you haven't done that review yet, you're almost certainly Amber at minimum on the first two basics.
Want the checklist as a standalone tool? Download the 7 HR Basics self-assessment (PDF) to score your team offline and share with your leadership team.
1. Contracts & Onboarding
What it covers: Written statements of employment, right-to-work checks, the Starter Checklist (which replaced the P46 for new hires without a P45), and a structured induction process.
What 'good' looks like: Every employee receives a written contract on day one. The Starter Checklist is completed before the first payroll run. There's a structured 90-day induction with scheduled check-ins at 30, 60, and 90 days — not just a morning with IT and a stack of forms.
The common gap: Contract templates that haven't been updated since before the Employment Rights Bill. From 2026, employees will have day-one unfair dismissal rights, and flexible working requests are already a day-one right. A contract written in 2019 or even 2022 almost certainly doesn't reflect this. Neonatal care leave, which became effective in April 2025, is another clause that's missing from most templates we see.
The data backs up why this matters. Structured onboarding correlates with 80% retention at three months, while poor onboarding contributes to 25% of early exits (CIPD Resourcing & Talent Planning Report, 2025). With UK SME voluntary turnover averaging 32% — and 51% of leavers citing poor onboarding or pay issues as a factor (ONS ASHE 2024; CIPD 2025) — getting this right from day one has a measurable impact on your retention numbers.
Self-assessment prompt: When did you last audit your contract templates against current UK employment law? If the answer is "before 2024," you're Amber at best.
2. Pay, Tax & Benefits
What it covers: National Minimum and Living Wage compliance, PAYE tax codes, pension auto-enrolment, and benefits administration.
What 'good' looks like: Eligible employees are on the 1257L tax code applied cumulatively. The Starter Checklist is used correctly for all new hires. Payroll is reconciled monthly, pension contributions are confirmed, and any emergency tax codes are resolved within the first pay period — not left in place for months.
The common gap: Emergency tax codes (W1/M1) left running far longer than they should be. HMRC data shows that tax code errors affect 18% of SME payrolls, costing an average of £2,500 per year in corrections (HMRC PAYE data, 2025). For the 2026/27 tax year, the Personal Allowance remains at £12,570 and the standard code remains 1257L — but non-compliance with PAYE obligations carries penalties of £100 to £3,000 per error (HMRC Employer Guide, January 2026).
Here's what this looks like in practice. A 200-person retailer had 40 new hires left on emergency codes for more than three months. The result was a mix of overpayments and underpayments, a wave of employee complaints, and a corrective payroll run that took the HR and finance teams the better part of a week to untangle. The financial cost was significant; the trust cost was harder to quantify.
Self-assessment prompt: Can you confirm that every employee on your payroll is on the correct tax code today? If you'd need to check with payroll before answering, that's Amber.
3. Performance & Progression
What it covers: Appraisal cycles, objective-setting, pay progression frameworks, and promotion criteria.
What 'good' looks like: A documented performance review process that runs consistently across the business. Clear pay bands. Progression criteria that are communicated to employees — not held in a manager's head. The NHS Agenda for Change framework is a useful private-sector benchmark here: pay steps reset on promotion, ensuring a genuine earnings uplift rather than a nominal title change.
The common gap: 35% of UK SMEs with 250 to 500 employees lack formal performance reviews entirely (CIPD/ONS Labour Market Outlook, Spring 2025). In smaller businesses, progression becomes ad hoc — whoever shouts loudest, or whoever their manager likes most, gets the pay rise. The risk isn't just fairness; it's legal exposure. Inconsistent progression criteria are a direct route to grievances and constructive dismissal claims.
The data is clear on the business case too. Structured performance tools correlate with a 15% reduction in voluntary turnover, and with UK SME average voluntary turnover at 32% — with 51% citing poor progression as a contributing factor (CIPD 2025) — the cost of not having a framework is measurable in headcount churn.
Self-assessment prompt: If an employee asked today how they could earn a pay rise, could your managers give a consistent answer? If different managers would give different answers, you're Amber. If there's no framework at all, that's Red.
4. Health, Safety & Wellbeing
What it covers: Health and safety risk assessments, DSE (Display Screen Equipment) assessments for hybrid and remote workers, mental health support, and an Employee Assistance Programme or equivalent.
What 'good' looks like: Up-to-date risk assessments that explicitly include remote and hybrid working setups. Trained first aiders in every workplace. A documented wellbeing policy. Mental health support that employees can actually access — not just a phone number buried in the staff handbook.
The common gap: 24% of UK SMEs were fined for health and safety breaches in 2024, with total penalties reaching £14 million (HSE Statistics 2024/25). HSE SME audits rose 20% in 2025, with a specific focus on remote and hybrid risks — meaning the days of treating home-working as outside the scope of your H&S obligations are over. Meanwhile, 62% of SME HR leaders report unmanaged burnout risks, and mental health absence claims rose 15% following 2024 (CIPD Health & Wellbeing at Work Report, 2025).
Tools like Aura can give employees 24/7 access to wellbeing resources and policy signposting — reducing the burden on HR to field every individual query and ensuring support is available outside of office hours.
Self-assessment prompt: When did you last review your risk assessments to include home-working setups? If the answer is "before we went hybrid," that's Red.
5. Compliance & Policies
What it covers: Disciplinary and grievance procedures, absence management policy, whistleblowing policy, equality policy, and compliance with the Acas Code of Practice.
What 'good' looks like: A policy handbook that's reviewed annually and actually reflects current law. Managers who have been trained on disciplinary procedures — not just handed a document. Acas early conciliation used proactively, where it resolves 85% of disputes before they reach a tribunal.
The common gap: 48% of UK SMEs have not updated their contracts or policies since the Employment Rights Bill was enacted (GOV.UK, November 2024). Day-one unfair dismissal rights take effect from 2026, and businesses that haven't updated their disciplinary frameworks are already exposed. The cost of getting this wrong is significant: average tribunal defence costs run from £10,000 to £50,000 per claim for SMEs (Ministry of Justice 2024/25), and 45% of claims relate to unfair dismissal or discrimination.
It's also worth noting the growing risk of shadow AI risk in HR departments — where employees or managers use unapproved AI tools to draft disciplinary letters or grievance responses, creating compliance gaps that your policy handbook doesn't yet address.
On the question of what the 4 pillars of human resource management are: compliance and policy sits firmly within the 'Maintenance' pillar — alongside health, safety, and employee relations. It's the pillar most frequently underdeveloped in scaling businesses, and the one that carries the highest immediate legal risk.
Self-assessment prompt: Do your managers know the correct steps to follow before issuing a formal warning? If you're not confident they do, that's Amber — and worth fixing before the next disciplinary situation arises.
6. Diversity, Inclusion & Employee Relations
What it covers: Equality monitoring, a D&I policy, employee voice mechanisms, and a fair, documented process for handling grievances.
What 'good' looks like: A documented D&I policy that's more than a statement of intent. Regular gender pay gap reporting — mandatory for businesses with 250 or more employees. Structured employee listening through surveys, forums, or representative groups. A grievance log that demonstrates consistent treatment over time.
The common gap: 40% of UK SMEs lack a formal D&I policy, and turnover spikes 15% in firms without D&I frameworks (CIPD Health & Wellbeing at Work Report, 2025). The absence of a policy doesn't just affect culture — it creates legal exposure. A 180-person professional services firm that had no formal grievance log found this out the hard way: when a discrimination claim was filed, they couldn't demonstrate that similar complaints had been handled consistently, which significantly weakened their position.
This is also where the 5 C's of HR become most visible in practice. Communication, Cooperation, Commitment, Conflict resolution, and Culture — these principles underpin effective employee relations, and they're most tested when a grievance is raised or a difficult change is being managed. In growing businesses, Culture and Conflict resolution are typically the two C's under the most pressure.
Self-assessment prompt: Do you have a documented process for handling a discrimination complaint that your managers could follow independently? If the answer relies on one person's knowledge rather than a written process, that's Amber.
7. Data Protection & Offboarding
What it covers: GDPR-compliant employee data handling, subject access requests, secure offboarding, exit interviews, and system access revocation.
What 'good' looks like: A data retention policy for employee records. A documented offboarding checklist — IT access removed on day one of departure, final payroll confirmed, P45 issued promptly. An exit interview process that captures useful data rather than just going through the motions.
The common gap: 35% of SMEs still manage HR records on spreadsheets or manual systems. The average GDPR breach cost for SMEs exceeds £500,000 (ICO data), and offboarding is consistently the most neglected process in growing businesses — often because it only becomes urgent when someone has already left. There's also a compliance dimension for businesses sponsoring overseas workers: HR must retain right-to-work documentation for two years post-employment, and Skilled Worker Visa salary thresholds rose to £38,700 in 2025 (GOV.UK, April 2026).
For a full breakdown of your obligations, see our guide to GDPR compliance in HR: what UK employers need to know.
When employees leave, Aura's audit trail ensures HR has a documented record of every policy query and escalation — useful context for any post-employment disputes, subject access requests, or tribunal proceedings.
Self-assessment prompt: If an employee left today, could you confirm their system access was revoked, their P45 issued, and their data handled compliantly — all within 24 hours? If that would require a scramble, it's Amber. If there's no checklist at all, it's Red.
Your Score: What to Do Next
If you're mostly Green, you have a strong foundation. The focus now is continuous improvement — keeping pace with legislative changes and ensuring your processes don't drift as the business grows.
If you're mostly Amber, prioritise by legal risk. Contracts, pay, and compliance carry the highest immediate exposure — a gap in any of these three can translate directly into a tribunal claim or HMRC penalty. Get those to Green first, then turn to performance frameworks and D&I, which carry operational and cultural risk. Wellbeing and offboarding, while important, are lower urgency unless you're already seeing related issues.
If you're mostly Red, the honest question is whether your current tools and support are adequate for where the business is heading. That's not a criticism — it's a practical triage question. Many businesses at the 50 to 150 employee mark find themselves in this position simply because HR has been reactive rather than proactive.
We know HR teams in growing businesses are doing more with less. The goal isn't to have perfect scores across all 7 basics simultaneously — it's to know where your gaps are before they become claims, complaints, or costs. For HR teams stretched across all 7 areas, understanding how AI handles repetitive HR queries without replacing your team is worth exploring: Aura handles the routine policy questions — "What's our disciplinary process?" or "How do I request flexible working?" — freeing your HR team to focus on the complex, judgment-heavy work that actually needs a human.
Conclusion
The 7 HR basics aren't a one-time setup. They're a living framework that needs regular review — particularly right now, as the Employment Rights Bill continues to reshape the baseline for UK employers ahead of April 2026.
If you take one practical action from this article, make it this: spend 30 minutes auditing your contract templates and checking your payroll tax codes. Those two areas carry the highest immediate legal and financial risk, and they're also the easiest to fix once you know there's a gap.
HR teams in growing businesses are doing genuinely difficult work under real resource constraints. The goal isn't perfection — it's knowing where your gaps are before they become claims. Start there.
Ready to see how Aura helps UK HR teams stay on top of policy questions at scale? Book a demo at aura-hr.tech and find out how HR teams like yours are handling the repetitive basics — so they can focus on the work that matters.
