Skip to main content
Governance Authority
Category: Sustainability and ESG

Social Responsibility

Also known as: SR, Corporate Social Responsibility, CSR, Social Responsibility Norm, SRN
Simply put

Social responsibility is the idea that individuals and organizations have a duty to act for the benefit of society and to avoid causing harm to people, communities, or the natural environment. For businesses, this concept is often expressed as corporate social responsibility (CSR), the notion that a company bears responsibility toward the society in which it operates. It is generally understood as an ethical concept and a voluntary standard rather than a single binding legal requirement.

Formal definition

Social responsibility is an ethical concept under which a person or organization works cooperatively with others for the benefit of the wider community, guided by principles such as accountability and transparency. In an organizational context it is frequently framed as corporate social responsibility (CSR), reflecting a business's responsibility to the surrounding society, and is sometimes positioned as a means of pursuing sustainability. As applied here it describes a values-based, generally voluntary orientation informed by societal expectations of positive social behavior; the term is not itself a defined legal standard, and any specific obligations depend on applicable law, sector, jurisdiction, and the frameworks an entity chooses to adopt.

Why it matters

Social responsibility matters because it captures a set of societal expectations that increasingly shape how organizations are judged by their stakeholders, even where no single binding legal requirement applies. As an ethical concept, it reflects the idea that individuals and organizations have a duty to act for the benefit of the wider community and to avoid causing harm to people, society, or the natural environment. For a board, general counsel, or compliance function, understanding this distinction is important: social responsibility is generally a voluntary, values-based orientation rather than a defined legal standard, and confusing the two can lead to overstated commitments or unmet expectations.

Because social responsibility is often expressed at the corporate level as corporate social responsibility (CSR), the notion that a business bears responsibility toward the society in which it operates, it can influence reputation, stakeholder trust, and an entity's broader sustainability objectives. Some frameworks position social responsibility as a means of pursuing sustainability, guided by principles such as accountability and transparency. Where an organization chooses to adopt such principles or make public commitments, those commitments can carry practical consequences even when they originate from voluntary standards rather than statute.

It is important to recognize the limits of the concept. Social responsibility is not itself a defined legal standard, and any specific obligations depend on applicable law, sector, jurisdiction, and the frameworks an entity chooses to adopt. Whether a particular activity is required or merely aspirational is a matter that depends on the facts and on professional judgment; this entry is educational and does not constitute legal, audit, or compliance advice.

Who it's relevant to

Boards and their committees
Boards typically hold oversight responsibility for an organization's values, reputation, and strategic direction, which can include how the entity frames its social responsibility commitments. The board's role is generally one of oversight rather than day-to-day execution, and directors should be clear about whether a given commitment is a voluntary standard the organization has chosen to adopt or an obligation grounded in applicable law.
General counsel and compliance officers
Because social responsibility is generally an ethical, voluntary concept rather than a defined legal standard, legal and compliance functions are well placed to distinguish public commitments from binding obligations that vary by law, sector, and jurisdiction. Where an organization makes representations about its social conduct, these functions typically help assess whether those statements create expectations or exposures that require management.
Management and operational functions
Management typically owns the operational activities through which any social responsibility commitment is put into practice, including the adoption of principles such as accountability and transparency. Whether and how such principles are implemented depends on the frameworks the organization chooses to adopt and the context in which it operates.
Assurance and internal audit functions
Where an organization has made social responsibility commitments or adopted related principles, assurance functions may be asked to evaluate whether stated practices are in place. Any such assessment depends on the specific commitments made and the criteria the entity has chosen, since social responsibility is not itself a defined standard against which performance can be measured universally.

Inside SR

Ethical Business Conduct
The expectation that an organization operates with integrity beyond the minimum required by law, addressing how it treats employees, customers, suppliers, and communities. This dimension is generally framed by voluntary standards and internal codes rather than binding statute, though certain elements may intersect with legal requirements depending on jurisdiction and sector.
Environmental Stewardship
Practices addressing an organization's environmental impact, such as resource use, emissions, and waste. Depending on jurisdiction and sector, some environmental obligations are binding law while others remain voluntary commitments; social responsibility typically encompasses commitments that go beyond legal compliance.
Stakeholder Engagement
The process of identifying and considering the interests of parties affected by the organization's activities, including employees, communities, investors, and others. The degree to which stakeholder interests must be considered varies by jurisdiction and entity type and is often shaped by non-binding governance codes and frameworks.
Governance Linkage
The connection between social responsibility commitments and the organization's governance structures. The board typically holds oversight responsibility for the organization's approach to social responsibility, while management is generally accountable for implementing programs and day-to-day activities.
Reporting and Disclosure
Communication of social responsibility performance, which may be voluntary or, in some jurisdictions and for certain entities, subject to mandatory disclosure requirements. Practitioners should confirm whether a given disclosure is a legal requirement or a voluntary practice under an applicable framework.

Common questions

Answers to the questions practitioners most commonly ask about SR.

Is corporate social responsibility a legal requirement that companies must comply with?
Generally, social responsibility as a broad concept is a voluntary standard rather than a single binding legal obligation, and it should not be conflated with the specific statutory or regulatory requirements that may apply in a given jurisdiction. In many jurisdictions, certain disclosure, labor, environmental, or human rights due diligence obligations are legally mandated for particular entity types or sectors, and those binding rules must be complied with regardless of a company's broader social responsibility posture. The overarching commitment to social responsibility, however, is typically framed through non-binding codes, frameworks, and best practice rather than a universally applicable law. Whether a specific activity is a legal requirement or a voluntary aspiration depends on the jurisdiction, sector, entity type, and the facts, and this entry is educational rather than legal advice.
Are social responsibility, ESG, and sustainability just different names for the same thing?
No; while these terms overlap, they are not interchangeable and treating them as synonyms can obscure important distinctions. Social responsibility typically refers to a broad ethical commitment by an organization to consider its impact on society and stakeholders. ESG generally refers to a set of environmental, social, and governance factors used, often by investors and in disclosure frameworks, to assess and describe an organization's practices. Sustainability commonly emphasizes the long-term viability of environmental, social, and economic resources. The precise meaning of each depends on the framework or standard being referenced, and organizations should define the terms they use rather than assume a shared meaning across contexts.
Who within the organization owns social responsibility, and where does board oversight fit?
Accountability is typically split between oversight and execution. The board, often through a designated committee, generally holds an oversight role, reviewing the organization's approach, monitoring alignment with stated values and strategy, and challenging management, without taking on day-to-day operational responsibility. Management typically owns the design and execution of social responsibility programs, policies, and reporting. Assurance functions, where relevant, may provide independent evaluation of controls or reported information. The specific allocation of responsibilities varies by jurisdiction, entity type, and governance structure, so organizations should confirm roles against their own charters and applicable requirements rather than assume a standard model.
How can a board obtain assurance that social responsibility commitments are actually being implemented rather than merely stated?
Boards generally seek assurance by distinguishing between what is claimed and what is operating in practice. This can involve reviewing whether relevant controls and processes are both designed appropriately and operating effectively, requesting evidence from management, and, where appropriate, drawing on independent assurance functions such as internal audit or external providers. Boards typically also consider whether reported information is consistent, reliable, and aligned with any applicable disclosure requirements. The nature and depth of assurance depend on the organization's risk profile, the materiality of the commitments, and the resources available, and involve professional judgment rather than a single prescribed method.
How should social responsibility considerations be integrated into an organization's risk management process?
Social responsibility considerations can be incorporated into risk management by identifying and assessing the related risks, such as reputational, operational, legal, or strategic risks, and evaluating them in terms of likelihood and impact before and after controls are applied. Organizations typically consider these risks against their stated risk appetite and tolerance, and management generally owns the identification and treatment of such risks while the board provides oversight. Frameworks such as widely used enterprise risk management or risk management standards may inform the approach, but their use is generally voluntary and should be adapted to the organization's context. How rigorously these risks are treated depends on their materiality and the organization's judgment.
What should an organization consider when deciding which social responsibility frameworks or standards to adopt?
Organizations typically consider the scope and purpose of each framework, whether it is voluntary or reflects a binding requirement in their jurisdiction or sector, and how well it fits their size, industry, and stakeholder expectations. Because most social responsibility frameworks are non-binding best practice rather than universally mandatory rules, adoption is generally a matter of governance judgment, subject to any legal disclosure or conduct obligations that apply. It is also useful to distinguish between frameworks that guide internal management and those that shape external reporting. The appropriate choice depends on the facts, the applicable jurisdiction, and the organization's objectives, and this entry does not constitute legal, audit, or compliance advice.

Common misconceptions

Social responsibility is a single legally mandated obligation that applies uniformly to all organizations.
Social responsibility spans a mix of binding legal requirements and voluntary standards that vary significantly by jurisdiction, sector, and entity type. Many components are guided by non-binding codes and frameworks rather than statute, and what is mandatory in one setting may be voluntary in another.
Social responsibility is an operational task owned entirely by management, with no board involvement.
While management is generally accountable for implementing social responsibility programs, the board typically retains oversight responsibility for the organization's overall approach. Conflating these roles obscures where accountability for oversight versus execution actually sits.
Social responsibility and regulatory compliance are the same thing.
Compliance addresses adherence to binding legal and regulatory requirements, whereas social responsibility often extends beyond the legal minimum to encompass voluntary ethical, environmental, and stakeholder commitments. The two are related but distinct, and treating them interchangeably can misrepresent an organization's obligations.

Best practices

Clarify for each social responsibility commitment whether it is a binding legal requirement or a voluntary standard, and document the applicable jurisdiction, sector, and entity-type considerations.
Define board oversight responsibilities and management implementation accountabilities separately, ensuring the distinction between oversight and execution is reflected in charters and reporting lines.
Confirm whether any social responsibility disclosures are subject to mandatory requirements before treating them as voluntary, recognizing that obligations differ across jurisdictions and entity types.
Distinguish social responsibility commitments from baseline regulatory compliance so that reporting does not overstate what is legally required versus what is voluntarily undertaken.
Establish a structured stakeholder engagement process appropriate to the organization's context, acknowledging that the extent to which stakeholder interests must be considered varies by jurisdiction and framework.
Periodically reassess social responsibility commitments against evolving legal requirements and applicable voluntary frameworks, and treat this guidance as educational rather than a substitute for legal, audit, or compliance advice.