# Policies & Governance

How internal policies, supplier codes, and governance mandates should be framed so they help evidence diligence instead of creating unsupported promises.

## Supplier Codes, Public Commitments, and the Risk of Overpromising

Canadian cases do not make every policy legally binding, but they show why companies should align their public commitments with what they can actually supervise and evidence.

Hudbay and Nevsun are often discussed together because both decisions keep attention on what a Canadian company itself is alleged to have done, directed, assumed, or represented. Neither case stands for the proposition that every code of conduct automatically creates liability. But together they illustrate why policies, public statements, and oversight claims can become relevant evidence in negligence or human-rights litigation when plaintiffs allege the company exercised meaningful control or responsibility.

That is why supplier codes and human-rights policies should be drafted with operational discipline. If a policy says the company audits suppliers, investigates red flags, requires remediation, or enforces escalation steps, there should be a working system behind those statements. A code that promises full oversight without the evidence, personnel, escalation routes, or remediation tools to support it can make the company's litigation posture worse rather than better.

The 2023 OECD Guidelines reinforce a more disciplined approach. They expect risk-based due diligence and emphasize prevention, mitigation, tracking, communication, and remediation. In policy design terms, that supports clear commitments, realistic scope, and explicit ownership. Strong policies are not the ones with the broadest language; they are the ones that match how the organization actually manages supplier risk.

### Citations

- 2013 ONSC 1414: Choc v. Hudbay Minerals Inc., 2013 ONSC 1414 (https://www.canlii.org/en/on/onsc/doc/2013/2013onsc1414/2013onsc1414.html)
- 2020 SCC 5: Nevsun Resources Ltd. v. Araya, 2020 SCC 5, [2020] 1 SCR 166 (https://scc-csc.lexum.com/scc-csc/scc-csc/en/item/18169/index.do)
- OECD Guidelines 2023: OECD Guidelines for Multinational Enterprises on Responsible Business Conduct (2023) (https://www.oecd.org/en/publications/2023/06/oecd-guidelines-for-multinational-enterprises-on-responsible-business-conduct_a0b49990.html)

## Board Mandates, Risk Ownership, and Governance Architecture

Governance policies should make it clear who owns supply-chain human-rights risk, how management reports upward, and what the board reviews before attestation.

National Policy 58-201 recommends that boards adopt written mandates acknowledging responsibility for stewardship of the issuer, including identifying principal risks and ensuring systems are in place to manage them. It also recommends codes of business conduct and ethics, ongoing director education, and a governance architecture that is explicit about risk oversight rather than informal or implied.

BCE and Peoples supply the jurisprudential context. They underscore that Canadian directors are expected to act in the corporation's best interests on an informed basis. In the S-211 context, those cases support treating forced-labour and child-labour exposure as a board-level risk topic that deserves defined reporting lines, regular management reporting, and documented review before sign-off on public reporting.

A strong governance policy set should therefore answer practical questions: which committee receives updates, who owns the risk register, what internal assurance is performed, what happens when a supplier incident is escalated, and what materials are provided to the governing body before it approves the annual report. Policies that answer those questions are not merely formal. They are part of the evidence that the entity actually governs the risk it reports on.

### Citations

- NP 58-201: National Policy 58-201, Effective Corporate Governance (https://www.osc.ca/en/securities-law/instruments-rules-policies/5/58-201/national-policy-np-58-201-effective-corporate-governance)
- 2008 SCC 69: BCE Inc. v. 1976 Debentureholders, 2008 SCC 69, [2008] 3 SCR 560 (https://scc-csc.lexum.com/scc-csc/scc-csc/en/item/6238/index.do)
- 2004 SCC 68: Peoples Department Stores Inc. (Trustee of) v. Wise, 2004 SCC 68, [2004] 3 SCR 461 (https://scc-csc.lexum.com/scc-csc/scc-csc/en/item/2184/index.do)