Third Party Compliance Standards

A&L Goodbody (ALG) seeks excellence in every aspect of our business and is committed to the highest standards of professionalism, ethics and integrity. These Third Party Compliance Standards (the Standards) set out the minimum compliance and sustainability requirements for third parties that provide goods or services to ALG or to our clients with ALG involvement. Where incorporated into a contract, these Standards survive expiry or termination.

1. Commitment and codes

All suppliers are expected to comply with the Managing Suppliers Responsibly Policy and the ALG Slavery and Human Trafficking Statement.

2. Confidentiality and information security

As a law firm, ALG operates with stringent confidentiality and information security requirements in place to protect our own, our client’s and our employees’ information. 

All third-party service providers are expected to provide a copy of their own internal information security policies, certifications and attestations on request. If on review, this does not align with ALG’s standard, the service provider will be expected to adhere to this standard within an agreed timeline. 

3. Artificial intelligence and automated tools

ALG does not permit the use of public generative AI tools or the use of any AI training model or equivalent by any service provider in the performance of its duties. 

Any AI used in the performance of services should be approved in writing by ALG and comply with our information security requirements. 

4. Sanctions and tax compliance

ALG complies with all tax and sanctions laws and regulations. All suppliers are expected to do the same. If any supplier or relevant affiliate become the subject of sanctions they must notify ALG as soon as possible.

If the supplier becomes subject to a breach of tax legislation or financial crime, we may have to report to the relevant authorities.

5. Workplace health & safety

All suppliers are expected to comply with their obligations under applicable health and safety legislation and provide a safe and healthy workplace. If requested, suppliers are required to confirm that they have no major health and safety violations or fines in the last three years and reveal an appropriate remediation plan.

6. Labour laws & human rights

All suppliers are expected to pay their employees fair wages in accordance with applicable laws and conventions (minimum wage, overtime, mandated benefit, working conditions). Appropriate measures are expected to be in place to make sure that workers do not suffer any kind of discrimination, intimidation, bullying, harassment or retaliation. All workers should have effective legal and contractual rights, freedom of association, right to collective bargaining, and disciplinary, grievance and appeal procedures

No forced, compulsory, bonded, trafficked or involuntary labour should be employed by any service providers and workers are expected to be free to leave their employment on reasonable notice and are not required to lodge identity papers or pay deposits as a condition of work.

All suppliers must confirm that child labour is not employed in the provision of services and that all workers are of at least the minimum legal working age under international conventions. 

7. Environment and climate

Suppliers must maintain an environmental policy and disclose any environmental breaches or fines within the last three years together with any remediation undertaken.

On request suppliers must provide a measurement of environmental impacts and a corresponding plan on how to reduce them (including energy, waste and water). This can include working towards recognised certification where appropriate (e.g. Science based targets, ISO 14001, FSC/PEFC, Fairtrade, Rainforest Alliance, B Corp, IS0 26000 or any other certification relevant to your industry).

8. Sub-contracting

Suppliers must not sub-contract any part of the agreed service without prior written consent from ALG. Any approved sub-contractors must be made aware of these Standards and the Suppler Management Policy.

9. Incident notification & co-operation

All suppliers are expected to:

• Notify ALG within 24 hours of becoming aware of any security or data protection incident affecting ALG or client information. 
• Notify ALG within five business days of other material breaches of these Standards. 
• Notifications must include known details of what happened, data/systems affected, likely impacts, steps taken or planned, and a point of contact and should be sent by email to privacy@algoodbody.com.
• Fully cooperate with ALG investigations, mitigation and remediation activities, including forensics where reasonably required.

10. Competition

ALG must comply with relevant competition law. No supplier should share competitively sensitive information with ALG that could have an anti-competitive effect or object. If in doubt about sharing information, please consult with ALG in advance.

We will work collaboratively with our suppliers in order to ensure that the expectations in this code of conduct are achieved both by us and our suppliers. We expect our suppliers to do the same.

We expect suppliers to carry out appropriate due diligence to show that they are meeting these obligations, both in regard to their own business operations and their supply chains, and to take appropriate steps to remedy any failures. We reserve the right to monitor supplier’s compliance with these Standards and we expect suppliers to be open with us about their compliance

We will work collaboratively with suppliers to assist with compliance.

11. Data protection

ALG is committed to full compliance with applicable data protection laws, including Regulation (EU) 2016/679 (GDPR), the Data Protection Act 2018 (Ireland) and the ePrivacy Regulations (S.I. No. 336/2011, as amended). Where services involve UK personal data, suppliers must also comply with the UK GDPR and the UK Data Protection Act 2018. If personal data is processed or accessed outside the EEA/UK, suppliers must implement a lawful international transfer mechanism and appropriate safeguards.

12. Anti bribery and corruption

ALG is committed to preventing bribery and corruption in all forms and operates a zero-tolerance policy. All Suppliers must comply with all applicable anti bribery and corruption laws, including the Criminal Justice (Corruption Offences) Act 2018 (Ireland) and, where relevant to the engagement, the UK Bribery Act 2010 and other local laws.

Do not offer gifts, hospitality, sponsorships or other benefits to ALG personnel or clients that could improperly influence (or be perceived to influence) decisions. Any low value, proportionate hospitality must comply with ALG’s Anti-Bribery and Corruption Policy and be recorded in the appropriate register. All suppliers are expected to act in the best interests of us and or our clients and take appropriate measures to avoid or disclose conflicts in the provision of services to us and our clients. 

Material or repeated breaches may result in corrective action plans, suspension, or termination under the governing contract, and may be reported to relevant authorities.

Review cycle

The Standards shall be reviewed annually by Risk & Compliance, Responsible Business and Information Security teams to assess any areas for improvement. The Standards forms part of a broader framework and should be reviewed together with the ALG Managing Suppliers Responsibly Policy.

Last updated: 23 July 2026