Plain-English Guide to Procurement Compliance Basics

Procurement compliance means following the legal rules, organisational policies, and ethical standards that govern how public money is spent on goods, services, and works. For public sector buyers, it means running procurement processes that are legally sound, fair, and transparent. For suppliers, it means ensuring your bids and business practices meet the requirements set out in procurement documents and underlying legislation.

Non-compliance has real consequences. For buyers, a non-compliant procurement can be challenged by unsuccessful suppliers, result in a contract being set aside, lead to financial penalties, or trigger an audit finding. For suppliers, submitting inaccurate information or failing to meet mandatory requirements can result in exclusion from a current bid and potentially from future opportunities. In serious cases, procurement fraud — which includes collusion between suppliers, false declarations, and bribery — can result in criminal prosecution.

Most compliance failures, however, are not deliberate — they're the result of unfamiliarity with the rules, poor processes, or insufficient attention to detail. Understanding the basics goes a long way towards avoiding the most common problems.

The primary legislation governing public procurement in England, Wales, and Northern Ireland is now the Procurement Act 2023, which replaced the previous EU-derived regulations from February 2025. This consolidated the rules into a single framework covering most public procurement above threshold values.

Key legal principles embedded in the Act include: value for money — buyers must secure good value for public funds; maximising public benefit — procurement should deliver outcomes that benefit the public, not just meet minimum requirements; transparency — procurement decisions and contract information must be published; fair treatment — all suppliers must be treated consistently; and integrity — the procurement process must be free from conflicts of interest, corruption, and improper conduct.

In addition to the Procurement Act, other legislation intersects with procurement compliance: UK GDPR and the Data Protection Act 2018 (for handling supplier and contractor data); the Bribery Act 2010 (which applies to both buyers and suppliers); the Modern Slavery Act 2015 (requiring supply chain transparency for larger organisations); and sector-specific regulations in areas like healthcare, defence, and utilities.

One of the most significant changes under the Procurement Act 2023 is the expansion of transparency requirements. Public buyers are now required to publish a wider range of procurement information through the government's central digital platform, including: contract award notices, contract details, modifications to contracts, performance information, and payment data.

For buyers, this means procurement processes need to be documented and decision-making needs to be capable of being explained and published. Evaluation decisions that could not be defended in public should not be made. This is not a new principle — it's always been there — but the expanded publication requirements make compliance more visible and more important.

For suppliers, transparency obligations mean that information about contract awards — including values, durations, and winning suppliers — is increasingly visible. This is useful for market intelligence (understanding who your competitors are and what they're winning) but also means that performance under contracts is subject to greater public scrutiny. Poor contract performance that results in early termination or remediation action may appear in public records.

Procurement legislation sets out circumstances in which suppliers can or must be excluded from competing for public contracts. Mandatory exclusion grounds include: criminal convictions for specified offences (including fraud, bribery, and modern slavery); certain tax defaults; and being listed on the new Debarment Register introduced by the Procurement Act 2023.

Discretionary exclusion grounds include: serious misrepresentation in procurement processes; poor performance on previous public contracts; insolvency; conflict of interest that cannot be otherwise addressed; and anti-competitive behaviour. Buyers must exercise judgement about whether discretionary grounds are sufficient to exclude a supplier and must give the supplier an opportunity to respond before deciding.

The Debarment Register — a new feature of the Procurement Act 2023 — allows the Cabinet Office to list suppliers who have been found guilty of serious misconduct, making them ineligible for public contracts for a defined period. This centralises and strengthens the approach to excluding bad actors from the public procurement market. Suppliers should be aware that serious compliance failures can have long-term consequences beyond a single contract.

A conflict of interest exists where a person involved in a procurement process has a personal, financial, or professional interest that could — or could reasonably appear to — influence their decisions. Common examples include: a procurement officer whose family member works for one of the bidding companies; a commissioning manager who previously worked for a supplier they are now evaluating; or an evaluator who has a financial interest in one of the bidding organisations.

Conflicts of interest don't automatically disqualify a person from involvement, but they must be declared and managed. The typical management approach is to remove the conflicted person from decisions involving the supplier in question — or, where removal isn't possible, to put in place additional oversight. Undisclosed conflicts of interest are a serious compliance failure and can expose both the individual and the organisation to legal challenge.

Buyers should have a clear declaration process for all staff involved in procurement, including evaluators. Declarations should be documented and retained. The risk of apparent conflicts — situations that look like conflicts even if no actual bias exists — should be taken seriously, as they can undermine confidence in the process even if they don't technically breach the rules.