Provision 29: The End of Compliance Theatre for UK Boards
Financial years starting 1 January 2026 fall under Provision 29. Boards must declare the effectiveness of all material controls.
John Hotham here.
The UK Corporate Governance Code 2024 has introduced a new era of accountability.
Provision 29 applies to financial years beginning on or after 1 January 2026. This year, 2026, is your "evidence year".
Boards are now required to provide a formal declaration on the effectiveness of all material internal controls, covering financial, operational, reporting, and compliance risks.
This is the end of compliance theatre. You can no longer hide behind generic risk registers. You must demonstrate that your controls actually work.
The ROI of robust GRC is the avoidance of catastrophic failure. Provision 29 is not a tick-box exercise; it is a mandate for structural integrity.
Prepare your evidence now. The market will not forgive a qualified declaration in 2027.



✨ Recommended For You
Best GRC Software in the UK (2026): What to Choose and Why
Compare the best GRC software in the UK and understand which tools actually work under audit. Learn what to look for and how to choose a platform that gives real visibility, not just compliance reporting.
ISO 27001 for UK SMEs: The Practical Guide to Certification Without the Chaos
ISO 27001 certification costs UK SMEs £18,000-£35,000 in year one. Learn how to get audit-ready without spreadsheets or productivity loss using a unified platform approach.
How to align governance, risk, and compliance effectively
Discover what governance risk compliance is and learn how to align these critical disciplines for better efficiency and accountability.
Bring your compliance work together
Organise requirements, supporting evidence and follow-up work in Simplif-i.