Contractor Code of Business Ethics and Conduct

The Contractor Code of Business Ethics and Conduct is a mandatory written ethics program that large federal contractors must establish and publicize, covering the company's commitment to lawful and ethical behavior on government contracts.

What is a Contractor Code of Business Ethics and Conduct?

FAR 52.203-13 (Contractor Code of Business Ethics and Conduct) requires contractors with contracts exceeding $6 million and a performance period of 120 days or more to establish a written code of business ethics and conduct, an ongoing ethics awareness and compliance program (internal controls system), and an internal reporting mechanism such as a hotline.

The three required components are:

• Written code - a document published and distributed to all employees that commits the company to compliance with federal contracting laws and states specific prohibited conduct. The code must be posted in the workplace.
• Ethics awareness and compliance program - periodic training for all employees on the code, ethics requirements, and the obligation to report violations. Large contractors (contracts over $10 million) must also have an internal control system that includes periodic reviews of company practices and a mechanism for self-policing.
• Internal reporting mechanism - typically an anonymous ethics hotline or reporting portal that allows employees to report suspected violations without fear of retaliation. The hotline must be communicated to all employees and subcontractors.

Beyond the written code itself, FAR 52.203-13 contains the Mandatory Disclosure Rule, which requires contractors to disclose credible evidence of criminal violations, False Claims Act violations, and significant overpayments to the agency IG within a reasonable period (interpreted as within 14 days of when the contractor first knows of the violation). Failure to disclose is an independent ground for suspension and debarment, separate from the underlying violation.

Why a Contractor Code of Ethics matters for government contractors

Beyond legal compliance, an effective ethics program provides a practical defense against corporate liability. Courts and the FAR suspension and debarment system give credit to contractors that have robust compliance programs, detect and self-report problems, and cooperate with investigations. A mere paper code that is not trained on or enforced provides no protection.

Example

A mid-size professional services contractor wins a $12 million consulting contract with a civilian agency. FAR 52.203-13 is included in the contract. Within 60 days of award, the contractor publishes and distributes its updated code of conduct, runs mandatory ethics training for all employees assigned to the contract, and activates a third-party ethics hotline. Eighteen months later, a subcontractor employee uses the hotline to report suspected false invoicing. The contractor investigates, confirms the issue, terminates the subcontract, and self-reports to the IG - all consistent with its code and FAR 52.203-13 obligations.

Frequently Asked Questions

Does the code requirement apply to small businesses?

The code and training requirements apply to contractors with contracts exceeding $6 million lasting 120 days. Small businesses meeting this threshold are not exempt from the code requirement, though the internal control system requirement applies only to contracts exceeding $10 million.

What must the mandatory hotline poster display?

FAR 52.203-14 requires contractors performing DoD, NASA, or Coast Guard contracts exceeding $6 million to display a poster notifying employees of the agency fraud hotline and the requirement to report fraud, waste, and abuse. The poster must be displayed in locations where it is seen by all employees. Contractors may supplement with their own internal hotline information.

What counts as a "reasonable period" for mandatory disclosure?

The FAR does not define a specific number of days for the mandatory disclosure period, but agency guidance and debarment official decisions consistently treat 14 days from when the contractor first has credible evidence as the practical outer limit. Delays beyond that require explanation and risk being treated as a failure to disclose.

Do subcontractors need their own code of ethics?

Prime contractors must flow down FAR 52.203-13 to subcontractors with subcontracts exceeding $6 million lasting 120 days. Those subcontractors must then meet the same code, training, and disclosure requirements independently.