Every organization that aspires to operate with integrity must eventually answer a fundamental question: what do we stand for, and how do we expect people to behave? The answer to this question finds expression in two interconnected governance instruments that together form the ethical architecture of any well-governed organization. Organizational values articulate the principles and commitments that define institutional identity, while codes of conduct translate those values into expectations for behaviour. Together, they create a framework that guides decision-making, shapes culture, and provides a foundation for accountability. For Canadian boards and executives, understanding what these instruments must say and do is not merely a matter of best practice but increasingly a matter of legal expectation and stakeholder demand.
The governance imperative around values and codes of conduct emerges from multiple sources. At the most basic level, every organization exists within a web of relationships characterized by trust. Members, donors, clients, employees, regulators, and the public all extend some measure of confidence to organizations, trusting that they will pursue their stated purposes honestly and treat people fairly. Values and codes of conduct are the primary instruments through which organizations make their trustworthiness visible and accountable. They transform implicit expectations into explicit commitments, creating a basis for holding individuals and institutions responsible when conduct falls short.
Canadian corporate and not-for-profit legislation establishes the legal context within which these governance instruments operate. The Canada Not-for-profit Corporations Act, as of the date of authorship, imposes duties on directors that include acting honestly and in good faith with a view to the best interests of the corporation. While the statute does not mandate specific codes of conduct, these fiduciary obligations create an environment where articulating organizational values and behavioural expectations becomes essential to demonstrating compliance with directorial duties. Similar provisions appear in provincial corporations statutes across Canada. The Business Corporations Act in British Columbia, the Business Corporations Act in Alberta, the Business Corporations Act in Saskatchewan, and the Business Corporations Act in Ontario all impose comparable duties on directors of for-profit corporations, requiring honest and good faith conduct in the corporation's best interests. These duties extend by implication to ensuring that the organization itself operates in accordance with ethical standards that directors can defend as appropriate to the corporation's purposes and circumstances.
Provincial societies and not-for-profit legislation adds additional layers to this framework. The Societies Act in British Columbia, the Societies Act in Alberta, the Non-profit Corporations Act in Saskatchewan, and the Not-for-Profit Corporations Act in Ontario each establish governance requirements that, while varying in their specifics, consistently expect directors to exercise appropriate oversight of organizational conduct. In Quebec, the Civil Code provides the foundational legal framework for organizations, including requirements around the administration of the property of others that impose obligations analogous to those found in common law fiduciary duties. The Civil Code of Quebec establishes that administrators must act with prudence, diligence, honesty, and loyalty in the interest of the beneficiary or the purpose for which the property is entrusted to them. This civil law framework, while doctrinally distinct from common law fiduciary principles, leads to functionally similar expectations around the importance of values and conduct standards in organizational governance.
Beyond these general statutory frameworks, certain regulated sectors impose explicit requirements for codes of conduct or ethics policies. Financial institutions supervised by the Office of the Superintendent of Financial Institutions must maintain codes of conduct as part of their governance frameworks. Credit unions regulated under provincial legislation face similar expectations. Professional regulatory bodies established under provincial legislation typically must adopt codes of ethics or conduct that govern both the regulated profession and the regulatory body itself. Charities registered with the Canada Revenue Agency, while not strictly required by statute to maintain codes of conduct, face expectations around governance practices that increasingly include documented ethical standards. The interconnection between organizational values and regulatory compliance thus varies significantly across the Canadian organizational landscape, with some entities facing explicit mandates and others operating under more general expectations that nonetheless make values and conduct standards practically essential.
Understanding what organizational values must accomplish requires distinguishing between values as aspirational statements and values as operational commitments. Many organizations adopt values that read well in annual reports but provide little practical guidance for decision-making. Statements like "excellence" or "innovation" or "community" may capture something genuine about organizational identity but remain too abstract to shape conduct. Effective organizational values must be specific enough to distinguish permissible from impermissible conduct, clear enough that reasonable people can apply them consistently, and important enough that the organization is genuinely willing to sacrifice competing interests to uphold them. This last criterion is perhaps the most demanding. An organization that claims to value transparency but routinely conceals uncomfortable information from stakeholders does not truly hold transparency as a value. An organization that proclaims commitment to equity but tolerates discriminatory practices has merely adopted rhetorical positioning rather than genuine values.
The function of organizational values in governance extends well beyond public relations. Values properly understood provide a decision-making framework that guides conduct in situations not specifically addressed by policies or procedures. When a novel situation arises that the board or management has not anticipated, organizational values offer criteria for determining the appropriate response. They create a common language for discussing ethical dimensions of organizational decisions, enabling board members and executives to articulate concerns that might otherwise remain unspoken. They establish expectations that new board members, employees, and volunteers can internalize as part of their orientation to the organization. Perhaps most importantly, they create accountability mechanisms that allow stakeholders to evaluate whether organizational conduct aligns with stated commitments.
Codes of conduct translate values into behavioural expectations. Where values answer the question of what the organization stands for, codes of conduct answer the question of how people associated with the organization must behave. This translation function requires careful attention to the specific contexts in which organizational actors operate. A code of conduct for board members will address different situations than a code of conduct for employees or volunteers, though significant overlap often exists. The specificity required in a code of conduct exceeds what is appropriate for a values statement. Codes must address particular categories of conduct such as conflicts of interest, confidentiality, use of organizational resources, relationships with stakeholders, and compliance with legal requirements. They must establish clear standards that individuals can apply to their own conduct and that the organization can apply in assessing whether violations have occurred.
The legal significance of codes of conduct in Canada operates at multiple levels. At the most basic level, a code of conduct may form part of the contractual relationship between an organization and its employees. Courts have consistently held that workplace policies communicated to employees can become terms of employment, and a code of conduct explicitly adopted and communicated typically achieves this status. Violations of the code may therefore provide grounds for discipline up to and including termination, depending on the severity of the breach and the circumstances. For board members and executives, codes of conduct typically operate less as contractual terms than as governance instruments that inform the exercise of discretion in evaluating conduct and making appointment or removal decisions. A board member who violates a code of conduct may face removal proceedings, may be asked to resign, or may simply lose the confidence of colleagues necessary for effective board service.
Beyond individual accountability, codes of conduct create institutional exposure when organizations fail to follow their own standards. An organization that adopts a code prohibiting harassment but fails to investigate complaints or address identified misconduct may face liability for the gap between its stated standards and its actual practices. This principle operates across multiple legal domains. Employment law recognizes that an employer's failure to follow its own policies may constitute evidence of bad faith or may undermine the reasonableness of termination decisions. Human rights law may consider policy compliance in assessing whether organizations have met their obligations to provide discrimination-free environments. Corporate law more generally recognizes that directors who ignore their own governance instruments may fail to meet the standard of care expected of reasonable directors in comparable circumstances.
Effective codes of conduct share certain characteristics regardless of the type of organization or sector. They must be comprehensive enough to address the range of situations organizational actors actually encounter while remaining accessible enough that people will actually read and apply them. They must be specific enough to provide meaningful guidance while preserving sufficient flexibility to accommodate the complexity of real situations. They must establish clear expectations for common ethical challenges such as conflicts of interest while acknowledging that judgment will always be required in applying general principles to specific circumstances. Most importantly, they must be accompanied by implementation mechanisms that make the code operationally meaningful rather than merely aspirational.
The implementation dimension of codes of conduct often distinguishes organizations with genuine ethical infrastructure from those engaged in governance theatre. A code of conduct that sits in a policy manual but is never referenced in orientation, never invoked in decision-making, and never enforced when violations occur serves little practical purpose except perhaps to create liability by establishing standards the organization demonstrably fails to meet. Effective implementation requires that codes be regularly communicated to those they govern, that training or orientation address their content and application, that mechanisms exist for reporting potential violations, that investigation processes be established for addressing complaints, that consequences follow demonstrated violations, and that the board or appropriate committee exercise oversight to ensure the code actually functions as intended.
Consider the experience of a mid-sized charitable organization headquartered in Calgary that operates youth development programs across three provinces. The organization, which employed approximately forty-five staff members and engaged over two hundred volunteers annually, had adopted a values statement and code of conduct several years earlier as part of a governance renewal initiative. The values statement articulated commitments to youth safety, integrity, respect, and community partnership. The code of conduct addressed conflicts of interest, confidentiality, appropriate relationships with program participants, use of organizational resources, and professional conduct generally. On paper, the governance framework appeared sound. In practice, significant gaps had developed.
The organization's executive director had served for over a decade and had been instrumental in its growth from a local initiative to a regional presence. Over time, the executive director had developed close relationships with several major donors and had come to treat certain organizational decisions as matters of personal discretion rather than board oversight. When a volunteer coordinator in Edmonton raised concerns about a relationship between a long-serving volunteer and a program participant that appeared to violate the code of conduct's provisions on appropriate boundaries, the executive director dismissed the concerns as overreaction and instructed the volunteer coordinator not to pursue the matter. The volunteer coordinator, uncertain about how to proceed and aware of the executive director's authority within the organization, did not escalate the issue to the board.
Several months later, a complaint from a parent brought the situation to broader attention. The board learned not only of the boundary concerns but also of the executive director's instruction to suppress the initial report. A hasty investigation revealed that the organization's code of conduct had not been reviewed or communicated to volunteers in over three years, that no training had been provided on recognizing and reporting conduct concerns, and that no clear reporting channel existed for concerns about executive conduct. The board found itself facing multiple problems simultaneously: a potential safeguarding failure affecting a vulnerable young person, an executive who had undermined the organization's governance instruments, and systemic gaps in how the code of conduct was supposed to function.
The implications of this scenario illuminate several governance obligations that boards must take seriously. First, adopting values and codes of conduct creates ongoing responsibilities that do not end with the approval of documents. The board that approved a code of conduct addressing appropriate relationships with program participants had a continuing obligation to ensure the code was actually implemented, communicated, and enforced. When years passed without training, communication, or attention to compliance, the code's existence arguably made matters worse by creating a false sense of security while actual protection mechanisms atrophied.
Second, codes of conduct must include provisions for their own enforcement, including mechanisms for addressing concerns about executive conduct. The absence of a clear channel for reporting concerns about the executive director left the volunteer coordinator without an obvious path forward when instructed to suppress a legitimate concern. Governance best practice increasingly recognizes that codes of conduct should establish multiple reporting channels, including at least one path that bypasses line management and reaches board-level oversight directly. This structural safeguard would have enabled the volunteer coordinator to bring the matter to board attention despite the executive director's improper instruction.
Third, executive conduct in relation to governance instruments itself constitutes a governance matter requiring board attention. When an executive director instructs staff to disregard code of conduct provisions or to suppress reports of potential violations, that executive is fundamentally undermining the board's governance authority. The board's policy instruments represent its formal decisions about how the organization should operate. An executive who treats those instruments as optional or who interferes with their implementation is, in effect, substituting personal judgment for board governance. This represents not merely a policy violation but a breach of the foundational relationship between board and management that makes effective governance possible.
Fourth, the interaction between values statements and codes of conduct matters for organizational accountability. The organization's stated commitment to youth safety provided a standard against which its actual practices could be measured. When the investigation revealed years of neglect in implementing safeguarding provisions, the gap between stated values and actual conduct became stark. This gap creates not only reputational risk but also potential legal exposure if the failure to implement stated commitments contributed to harm.
Organizations seeking to ensure their values and codes of conduct actually function as intended should undertake several concrete steps. Board members should periodically review the organization's values statement to assess whether it accurately reflects organizational commitments and whether it provides sufficient specificity to guide decision-making. This review should ask difficult questions: does the organization actually sacrifice other interests to uphold these values, or are they merely aspirational? Have situations arisen where values were tested, and if so, did the organization respond in ways consistent with its stated commitments? Values that consistently yield to competing considerations in actual decision-making are not values at all, merely rhetoric.
Boards should also review codes of conduct for comprehensiveness, clarity, and implementation. The review should consider whether the code addresses the range of situations that organizational actors actually face, whether standards are stated clearly enough that compliance can be assessed, whether implementation mechanisms including communication, training, reporting, investigation, and enforcement are actually functioning, and whether adequate documentation exists to demonstrate that the code operates as intended. This review should involve not only examination of the code itself but also interviews or surveys to assess whether those governed by the code understand and apply its provisions.
Reporting mechanisms deserve particular attention. Boards should ask whether clear channels exist for reporting concerns about potential code violations, whether those channels include at least one option that bypasses line management and reaches board-level oversight, whether reporters receive appropriate protection against retaliation, and whether reports actually result in appropriate investigation and response. Organizations should also consider whether anonymous reporting options are appropriate for their circumstances and, if so, whether mechanisms exist to receive and act on anonymous reports effectively.
Documentation practices also warrant examination. Organizations should maintain records demonstrating that codes of conduct were communicated to those they govern, that training or orientation was provided, that reported concerns were appropriately investigated, and that violations resulted in appropriate consequences. This documentation serves multiple purposes: it enables the board to exercise meaningful oversight, it provides evidence of compliance with governance obligations, and it creates institutional memory that allows the organization to learn from past situations and improve its practices over time.
Finally, boards should ensure that organizational values and codes of conduct receive regular attention at the governance level, not merely as items to review and approve once every several years but as living instruments that shape organizational culture. Board and committee discussions should reference values and code provisions when relevant. New directors and executives should receive orientation on values and conduct expectations. The board's evaluation of executive performance should consider conduct in relation to stated values. These practices embed values and conduct standards into the organization's actual decision-making processes rather than leaving them as standalone documents that may be approved and forgotten.
The governance function of organizational values and codes of conduct thus extends far beyond documentation or compliance. These instruments, when properly developed and implemented, constitute the ethical infrastructure of the organization. They shape how people think about their obligations, how they make decisions in difficult situations, and how they understand their relationship to the organization and its stakeholders. They create the foundation for accountability by establishing clear expectations against which conduct can be assessed. They signal to external stakeholders the standards to which the organization holds itself. And they provide boards with essential tools for fulfilling their fiduciary obligations to ensure that the organization operates with integrity in pursuit of its purposes. For Canadian boards and executives across all sectors, giving serious attention to what values and codes of conduct must say and do represents a fundamental governance responsibility that deserves sustained engagement rather than occasional attention.