Safeguarding in UK Sport: Why Policy Without Implementation Isn't Compliance

In June 2022, Anne Whyte KC handed the government a 306-page report into British Gymnastics. It found systemic safeguarding failures going back decades. Athletes were harmed. Complaints were dismissed. The governing body had policies on paper the whole time.

That same pattern runs through every modern UK sport safeguarding review. The Sheldon Report into football (Clive Sheldon KC, 2021). The Independent Commission for Equity in Cricket's Holding Up a Mirror to Cricket (2023). The swimming investigations. The finding is structurally identical in each one: policies existed, training existed, codes of conduct existed, and yet the national governing body could not demonstrate that any of it had been implemented at club level.

Writing the policy is not compliance. Sending the policy is not compliance. Compliance is when you can show, on any given Tuesday, that every affiliated club is operating the policy, and you can do it without emailing anyone.

That is the governance gap UK sport is now being asked to close. This article is about what closes it.

The Whyte Review was a governance story, not a gymnastics story

It would be comforting to file the Whyte Review as a British Gymnastics problem. It is more honest to read it as a federated-governance problem.

The sequence is recognisable in every sport that operates through affiliated clubs:

1. The national governing body writes the framework
2. The framework is emailed to clubs
3. A workshop is organised and quietly under-attended
4. Club committees rotate at the AGM and the last iteration of the framework leaves with them
5. Nobody at national level can say, with evidence, which clubs are operating the current framework today

Sheldon made the same point about football. The ICEC made it about cricket. The through-line is not that each sport is uniquely negligent. The through-line is that federated sport, at scale, has lacked an information layer that tells the national body what is actually true at club level.

What the UK Code for Sports Governance asks of you

Most welfare leads we speak to in UK sport can name the UK Code for Sports Governance. Fewer can name the specific requirement that applies to their board.

The 2021 revision split governance requirements into three tiers based on public funding:

• Tier 1 applies to organisations receiving up to £250,000 of public funding. Welfare expectations are proportionate: a policy, a named lead, and a documented commitment.
• Tier 2 applies to organisations between £250,000 and £1,000,000. Welfare expectations add an explicit safeguarding framework, independent advice, and documented implementation.
• Tier 3 applies to NGBs receiving more than £1,000,000. Welfare sits at board level, with an independent welfare director, annual public reporting and external scrutiny.

Whichever tier you sit in, the welfare requirement is not a document. It is an operating expectation that the board can evidence implementation across every affiliated entity. We emailed it to the clubs does not meet it.

The three levels of evidence

Genuine safeguarding compliance runs on three parallel tracks. Most NGBs track the first, gesture at the second, and do not have the infrastructure for the third.

Policy. Every affiliated club holds a current safeguarding policy aligned with the NGB framework. Not a generic template downloaded from a governance portal. A policy that reflects that club's activities, its participant demographics and its risk profile, and that the club can produce on request.

People. Every club has a named Club Welfare Officer with a current Enhanced DBS check, registration with the DBS Update Service, and in-date safeguarding training that meets the NSPCC CPSU Standards for Safeguarding and Protecting Children in Sport. The CWO's contact details are published, known at the club, and known at the NGB.

Process. Incidents are logged and escalated through a documented pathway. Records are maintained. The CWO has actively acknowledged the current NGB framework, not just received the email. Case files survive a committee handover at the AGM.

A board can ask for evidence at any of the three levels. Your system either produces it or it does not.

Why spreadsheets fail at scale

Most NGBs still run safeguarding compliance out of a spreadsheet maintained by one person. The failure pattern is consistent:

1. The compliance officer emails clubs asking for confirmation of their safeguarding status
2. Responses arrive over a fortnight, in four different formats, from three different email addresses per club
3. The officer updates the spreadsheet with whatever each club has reported about itself
4. At no point is any of it independently verified
5. When the officer rotates role, the spreadsheet and the tacit knowledge of which clubs were actually compliant both leave with them

This is self-reporting without verification. It produces a document that looks like compliance and is not.

Whyte made exactly this point about British Gymnastics. The organisation had records. The records described what it had been told, not what was true.

Role-based task assignment is the infrastructure underneath

The alternative is to assign specific compliance tasks to specific roles at each club, not to the club generically. Tasks route to the Club Welfare Officer. Acknowledgements are time-stamped. Evidence is uploaded once and lives somewhere durable. The NGB's view is real-time.

What a modern compliance layer produces:

• Green, amber and red status for every affiliated club, updated automatically as deadlines pass
• Role-based routing so a new safeguarding bulletin reaches every CWO directly, not via a forwarded committee email that loses its context
• One-click acknowledgement so every CWO can confirm receipt, and the NGB can see exactly who has and who has not
• Evidence persistence so when a CWO rotates out of the role at the AGM, their successor inherits the record instead of starting from zero
• Funder-ready reporting for Sport England, UK Sport, sportscotland, Sport Wales or Sport Northern Ireland, without the compliance officer rebuilding a PDF in a weekend

None of this is surveillance. It is evidence. A governing body that can demonstrate implementation is a governing body that can defend its funding, its affiliations and its reputation when a journalist, a regulator or a court asks what it actually did.

Adults at risk: the half most NGBs forget

Child safeguarding dominates UK sport conversations, and it should. Adult safeguarding is the quieter half, and it is where most NGBs have the least infrastructure.

The Ann Craft Trust's Safeguarding Adults in Sport & Activity Framework sets an equivalent standard for adults at risk: adult participants with care and support needs, including older participants, disability-sport participants, and adults experiencing mental ill-health or domestic abuse.

If your NGB's compliance tracking covers DBS checks and children's safeguarding training but does not cover the Ann Craft Trust framework, you have a blind spot a regulator will eventually find for you. Adult safeguarding belongs in the same three-tier evidence structure: policy, people, process.

Devolved realities: England, Scotland, Wales, Northern Ireland

UK safeguarding is a shorthand that hides a real complexity. Clubs are regulated differently depending on which nation they sit in.

• England. Sport England and UK Sport jointly administer the Code for Sports Governance. Statutory child-safeguarding sits under Working Together to Safeguard Children (2023).
• Scotland. sportscotland sets governance expectations; Children 1st and the CPSU collaborate on Scottish safeguarding standards.
• Wales. Sport Wales operates its own governance expectations alongside the shared CPSU framework.
• Northern Ireland. Sport Northern Ireland maintains the distinct NI safeguarding arrangements.

A four-nation NGB cannot operate on a single English-law assumption. Your compliance layer needs to reflect which nation each club sits in, because the rules it is evidencing against are not identical.

What good looks like on a Tuesday afternoon

A compliance lead at a UK NGB should be able to answer three questions on any Tuesday afternoon, without chasing anyone:

1. Which clubs are currently compliant across policy, people and process, and which are not?
2. Which Club Welfare Officers have not acknowledged the most recent framework update, and how long has it been?
3. If a safeguarding concern landed at a named club right now, would the case file survive the committee handover at that club's next AGM?

If those three questions require a day of email to answer, your compliance layer is the problem. If they are a screen you look at, you have done the work.

The three words an Australian colleague recently named as the expectation clubs bring to governance reform were transparency, accountability, communication - covered in AFL Barwon's governance reform. UK NGBs hear the same three words, almost verbatim. The structure is different, the expectation is identical.

FAQ

What's the minimum every UK NGB should track on safeguarding?

The named Club Welfare Officer at every affiliated club, the date of their most recent safeguarding training, the status of their Enhanced DBS check, acknowledgement of your current NGB framework, and a documented incident-reporting pathway. That is the floor, not the ceiling.

Do we need to meet Tier 3 requirements if we are a Tier 1 body?

No, but the UK Code for Sports Governance is a floor, not a ceiling. Tier 1 bodies that want to attract larger funding rounds, or that run programmes for children and adults at risk, tend to evidence at Tier 2 level by choice.

Does a compliance platform replace NSPCC CPSU training?

No. CPSU training is the content of safeguarding education. The infrastructure described here is how the NGB verifies that every CWO has completed it, acknowledged the NGB framework, and remains in date. Both layers are required.

How does this relate to on-field registration platforms?

On-field platforms handle fixtures, player registration and results. Off-field platforms handle governance, compliance, welfare and committee operations. The two are complementary. Most UK NGBs have an on-field tool in place; the safeguarding gap is on the off-field side.

Where to start this quarter

Not ninety days of overhaul. Ninety days of the first honest pass.

1. Map your NGB's current safeguarding framework into specific, trackable obligations, one row per obligation
2. Identify the role at each club responsible for each obligation (almost all of it will be the Club Welfare Officer)
3. Audit the current evidence for each obligation at a representative sample of ten clubs of different sizes
4. Pick a compliance layer that supports role-based task assignment across your affiliation base so you are not emailing spreadsheets to 120 clubs every quarter
5. Set a quarterly welfare review on the board agenda, not the operations team's agenda. Welfare sits at board level because the Code for Sports Governance says it does

At the end of those ninety days you do not have perfect compliance. You have the beginnings of an evidence base that can survive a journalist's question, a funder's audit or a regulator's enquiry.

That is what Whyte, Sheldon and ICEC have been telling us for four years now. The frameworks are not the problem. The implementation layer is.

If you would like to compare notes on how other federations are closing this gap, our contact page is the easiest way to reach us. No pitch. Our architecture thinking sits in Introducing TidyConnect and safeguarding compliance at scale.

References

• Whyte Review (2022) - Anne Whyte KC's independent review into British Gymnastics.
• Sheldon Report (2021) - Clive Sheldon KC's independent review into non-recent child sexual abuse in football, commissioned by The FA.
• Independent Commission for Equity in Cricket - Holding Up a Mirror to Cricket (2023), the ECB-commissioned independent review.
• UK Code for Sports Governance - The governance expectations for publicly funded sport in the UK, Tier 1 through Tier 3.
• NSPCC Child Protection in Sport Unit (CPSU) - Standards for Safeguarding and Protecting Children in Sport and supporting resources.
• Ann Craft Trust - Safeguarding Adults in Sport & Activity - The adult safeguarding framework used across UK sport and activity.
• Working Together to Safeguard Children (2023) - Statutory guidance for England.
• Disclosure and Barring Service (DBS) and the DBS Update Service - UK criminal-records checks and continuous-update registration.
• Sport England - Governance, safeguarding and investment framework for English sport.
• UK Sport - High-performance funding body; joint steward of the Code for Sports Governance.
• sportscotland - National sports agency for Scotland.
• Sport Wales - National sports agency for Wales.
• Sport Northern Ireland - National sports agency for Northern Ireland.
• TidyConnect - Governance infrastructure layer used by federations to assign, track and evidence safeguarding compliance across affiliated clubs.