Governance lessons from the Post Office Horizon failure

Practical guidance to help boards close governance gaps

The Post Office Horizon scandal is often viewed as a technology failure. Yet the subsequent public inquiry has shown that the problems ran far deeper.

The wider lessons lie in corporate governance - how organisations identify and escalate risk, challenge assumptions and respond when reality begins to contradict established, or assumed, positions. Ultimately, it was not one decision that led to one of the UK's most significant corporate failures, but a series of choices made over several years.

While the circumstances surrounding Horizon were exceptional, the governance principles it highlights are relevant to every board across the country. As organisations continue to invest in emerging technologies, the challenge is not simply implementing the tech but ensuring it remains subject to effective oversight throughout its lifecycle.

Successful innovation requires good governance

Businesses face constant pressure to modernise. Whether implementing AI, automating processes or investing in new digital infrastructure, boards are expected to support innovation while maintaining operational resilience.

The Horizon failure reinforces the importance of balancing innovation with governance. Errors in the Horizon system appeared in as early as 1996, but instead of the issue being escalated and the technology re-tested, innovation at speed took precedence. By 1999, Horizon was already in use across the country – marking the first of many governance gaps. 

New technologies should be subject to thorough testing, clear accountability and ongoing oversight once implemented. Governance should not end when a system goes live.

Enable a speak-up culture

One of the recurring problems highlighted by major corporate failures, including the Post Office, is not necessarily a lack of information but a failure to ensure that it reaches decision-makers in a way that prompts action.

Boards should therefore consider whether their reporting structures enable concerns to be identified and genuinely challenged across the organisation. Legal, risk and compliance functions should be engaged early enough to assess potential legal and regulatory implications well before issues become entrenched.

Strong governance depends as much on organisational culture as formal reporting lines. Employees need an environment where they can freely raise concerns, and management should encourage constructive challenges rather than reinforcing existing assumptions.

Follow the numbers

Large organisations generate significant volumes of operational and financial data. Unexpected discrepancies, customer complaints or recurring operational issues are inevitable.

In the case of the Post Office this was millions of pounds gained from the sub-postmasters who were forced to pay back the supposed shortfalls they had allegedly caused in the Horizon system. The Post Office chose not to question things when the numbers didn’t add up and instead just noted the profit.  In other words, they didn’t respond when the data started to challenge the status quo.

Boards should expect anomalies to be investigated thoroughly and objectively, particularly where similar issues arise repeatedly. Independent review and a willingness to revisit earlier conclusions can often prevent relatively contained issues developing into wider legal or regulatory disputes.

From a disputes perspective, organisations are frequently judged not only on the issue itself, but on the quality of their decision-making once concerns emerge.

Operational issues can become a legal risk

Many disputes begin as operational issues rather than legal ones. A technology failure, customer complaint or compliance concern may initially appear isolated. Over time, however, repeated incidents can expose broader governance weaknesses and create regulatory, contractual or litigation risk.

Appropriate mechanisms must be installed to identify when operational concerns require legal input or independent investigation. Early engagement by legal and risk teams can help preserve evidence, assess potential exposure and advise on appropriate remedial action before positions become more difficult to defend.

Grasp the nettle and act decisively

No organisation is immune from mistakes. What often distinguishes those that successfully navigate a crisis is the speed and effectiveness of their response.

Where credible concerns arise, boards should take action. Consider whether independent investigation, external assurance or early engagement with regulators and other stakeholders is appropriate.

While these decisions are rarely straightforward, our extensive experience handling such matters for clients consistently shows that early intervention is generally less disruptive - and significantly less costly - than allowing issues to escalate through prolonged disputes or litigation.

Turn governance lessons into action 

At Freeths, our disputes team works with boards and senior leadership to identify these risks before they escalate, combining frontline litigation experience with a proactive, commercially focused approach to risk management.

If you’re looking for help identifying governance gaps in your businesses and understanding how to close them, get in touch with Jade at: jade.flint@freeths.co.uk or visit our team page.