1---2name: code-of-conduct3description: Drafts a Code of Business Conduct and Ethics satisfying SEC, SOX §406, and exchange listing requirements. Incorporates company-specific values and regulatory context into an enforceable ethical framework. Use when drafting corporate governance documents, ethics codes, compliance policies, or business ethics frameworks for public companies or regulated industries.4---5
6# Code of Business Conduct and Ethics
7
8Drafts a governance-grade Code of Business Conduct and Ethics that satisfies SEC, SOX §406, NYSE §303A.10, and NASDAQ Rule 5610 requirements while providing actionable ethical guidance organization-wide.
9
10## Prerequisites
11
121. **Company identification** — legal name, jurisdiction, public/private status, exchange listing
132. **Existing governance documents** — current codes, ethics policies, board resolutions, mission/values
143. **Operational scope** — geographic footprint, industry sectors, subsidiaries, regulated activities
154. **Regulatory profile** — industry-specific requirements (healthcare, financial services, government contracting, defense)
16
17## Quick Start
18
191. Gather company identification, existing governance documents, and regulatory profile
202. Search uploaded documents for existing codes, mission statements, compliance commitments, and org structure
213. Draft the Code following the required sections below, tailoring to the company's industry and listing requirements
224. Validate against the SOX §406 and exchange listing checklists
235. Include reporting channels, acknowledgment form, and waiver procedures
24
25## Required Sections
26
27| # | Section | Key Content |
28|---|---------|-------------|
29| 1 | Leadership Statement | CEO/Board Chair message; tone from the top; shared responsibility |
30| 2 | Scope & Applicability | Covered persons (employees, officers, directors, contractors); enhanced SOX §406 provisions for senior financial officers |
31| 3 | Relationship to Other Policies | Policy hierarchy; most-stringent-standard conflict resolution |
32| 4 | Legal Compliance | Baseline obligation; multi-jurisdiction compliance; conflicts of law |
33| 5 | Conflicts of Interest | Definition, examples, disclosure obligations, approval process; actual AND apparent conflicts |
34| 6 | Corporate Opportunities | Delaware law framework; no personal exploitation without board approval |
35| 7 | Confidentiality | Protected information scope; third-party obligations; post-employment survival; whistleblower carve-outs |
36| 8 | Protection of Company Assets | Physical, IP, informational, financial assets; personal use policy |
37| 9 | Fair Dealing | No unfair advantage via manipulation, concealment, or misrepresentation |
38| 10 | Reporting Procedures | Multiple channels: supervisor, HR, Legal, Compliance Officer, Ethics Hotline (anonymous if applicable), Audit Committee |
39| 11 | Non-Retaliation | Broad retaliation definition; good-faith standard; consequences for retaliators |
40| 12 | Enforcement & Discipline | Proportionate sanctions (counseling → termination → criminal referral); secondary liability for failure to report |
41| 13 | Waivers | Extraordinary circumstances only; Board/committee approval for officers and directors; SEC/exchange public disclosure |
42| 14 | Acknowledgment | Receipt, understanding, compliance commitment; annual re-certification option |
43
44## SOX §406 Checklist (Public Companies — Senior Financial Officers)
45
46- [ ] Honest and ethical conduct, including handling actual/apparent conflicts
47- [ ] Full, fair, accurate, timely, understandable disclosure in SEC filings
48- [ ] Compliance with applicable governmental laws, rules, and regulations
49- [ ] Prompt internal reporting of Code violations
50- [ ] Accountability for adherence
51
52## Exchange Listing Requirements
53
54| Requirement | NYSE §303A.10 | NASDAQ Rule 5610 |
55|-------------|---------------|-------------------|
56| Covered persons | Directors, officers, employees | All employees |
57| Conflicts of interest | Required | Required |
58| Corporate opportunities | Required | Required |
59| Confidentiality | Required | Required |
60| Fair dealing | Required | Not explicitly required |
61| Asset protection | Required | Not explicitly required |
62| Compliance with law | Required | Required |
63| Reporting mechanism | Required | Required |
64| Waiver disclosure | Required (Form 8-K or website) | Required (Form 8-K or website) |
65| Public availability | Website posting required | Website posting required |
66
67## Industry-Specific Additions
68
69| Industry | Additional Provisions |
70|----------|----------------------|
71| Healthcare | Anti-Kickback Statute; Stark Law; HIPAA; research integrity |
72| Financial Services | Insider trading; fiduciary duties; customer privacy; BSA/AML |
73| Government Contracting | Procurement integrity; cost accounting standards; security clearances |
74| Defense | ITAR/EAR export controls; classified information; DFARS compliance |
75| Technology | Data ethics; AI governance; open source compliance |
76
77## Common Pitfalls
78
79- **Missing SOX §406 enhanced provisions** — public company codes must include specific provisions for senior financial officers; omitting these creates a disclosure gap
80- **Single reporting channel** — regulators expect multiple independent channels including anonymous options; provide at minimum supervisor, Legal, Compliance Officer, and Ethics Hotline
81- **No waiver disclosure process** — SEC and exchange rules require public disclosure of officer/director waivers via Form 8-K or website posting
82- **Overly legalistic tone** — the Code must be comprehensible from entry-level employees to board members; avoid unnecessary jargon while maintaining precision
83- **Ignoring cross-border issues** — for international operations, address conflicts of law, translation requirements, and local works council consultation
84- **Missing employment disclaimer** — include jurisdiction-appropriate language that the Code does not create an employment contract
85- **No version control** — include effective date, version number, and annual review cadence
86
87## Drafting Guidelines
88
89- Professional but accessible tone; aspirational yet practical
90- Include concrete scenarios illustrating real business application
91- Address ESG/emerging issues (AI ethics, data governance, sustainability) where relevant
92- Establish Board reporting expectations to Audit Committee or Ethics & Compliance Committee
93
94---
CaseMark