Agency, Employment and Workplace Law

Introduction and Context

Business organisations rarely act only through their owners or directors. Banks appoint relationship managers, insurers use brokers and agents, employers rely on staff to negotiate with customers, and financial institutions process personal information through technology providers. Law therefore needs rules that determine when one person may act for another, who bears responsibility for those actions, and how work relationships should be created, managed and ended.

This chapter examines two connected areas. Agency law regulates relationships in which an agent acts on behalf of a principal and may affect the principal’s legal position. Employment and workplace law regulates the relationship between employer and employee, including contractual duties, workplace rights, discrimination, dismissal, confidentiality and employee data. The detailed rules differ between jurisdictions; this chapter states general common-law and statutory principles and should be read with applicable national legislation, collective agreements and regulatory guidance.

Learning Objectives

By the end of this chapter, students should be able to:

1. Explain how agency relationships are created and terminated.
2. Distinguish actual, apparent and ratified authority.
3. Analyse the contractual and tortious liability of principals and agents.
4. Identify the essential elements of an employment contract.
5. Explain workplace rights concerning equality, safety, privacy and fair treatment.
6. Apply legal principles to dismissal, confidentiality and employee-data problems.
7. Recommend practical governance controls for employers and financial institutions.

1. The Nature and Function of Agency

An agency relationship exists when an agent is authorised to act for a principal in dealings with third parties. The agent may negotiate, make contracts, receive notices, or perform other legally significant acts. The principal is usually the person whose legal or commercial interests are represented.

Three relationships should be distinguished:

• Principal–agent: the internal relationship, including authority, instructions and fiduciary duties.
• Agent–third party: the agent’s conduct in negotiating or performing a transaction.
• Principal–third party: the external legal consequences of an authorised transaction.

Agency is not necessarily employment. An employee commonly has authority to act for an employer, but an independent broker, solicitor, insurance intermediary or commercial representative may also be an agent without being an employee. Conversely, an employee may have little or no authority to bind the employer in significant transactions.

Important terminology

• Principal: the person for whom an agent acts.
• Agent: a person authorised to affect the principal’s legal relations.
• Third party: the person dealing with the agent.
• Authority: the legal power of the agent to act for the principal.
• Fiduciary duty: a duty of loyalty arising from a relationship of trust and confidence.
• Ratification: subsequent approval by the principal of an unauthorised act.
• Vicarious liability: liability imposed on one person, commonly an employer, for certain acts of another.

2. Creation of Agency

Express agreement

Agency may be created by an express oral or written agreement. A written mandate is preferable where the agent can enter contracts, handle money, access customer accounts or represent a regulated institution. The document should specify the scope of authority, duration, reporting duties, remuneration, conflicts rules and termination procedure.

Some transactions require formal execution, witnessing, registration or a power of attorney under local law. An agent cannot use an informal appointment to perform an act for which the law requires a particular form.

Implied agency

Agency may arise from conduct, circumstances or the position occupied by a person. For example, a branch manager may possess implied authority to perform ordinary branch operations even if no document lists every routine act. Implied authority must be inferred from the principal’s words, previous dealings, industry practice and the agent’s role.

Agency by necessity

In limited circumstances, necessity may justify action without prior authority where an emergency exists, communication with the principal is impracticable, the agent acts in good faith, and the action is reasonably necessary to protect the principal’s interests. The doctrine is narrow and should not be treated as a general licence to exceed instructions.

Agency by estoppel or apparent authority

A principal may be bound where the principal represents, by words or conduct, that a person has authority, and a third party reasonably relies on that representation. The representation must generally be attributable to the principal; the agent’s unsupported assertion is ordinarily insufficient. A bank that gives an employee official credentials, a business card and access to a customer-facing role may create an appearance of authority, especially for routine transactions.

Ratification

A principal may adopt an act originally performed without authority. Ratification normally requires knowledge of the material facts, acceptance of the whole transaction rather than selective benefits, and a transaction that the principal could legally have authorised. Ratification may relate back to the original act, although it cannot unfairly prejudice third-party rights or evade mandatory legal requirements.

3. Authority and Liability

Actual authority

Actual authority is the authority granted by the principal. It may be:

• Express, such as a written lending limit; or
• Implied, such as authority reasonably necessary to carry out an express assignment.

If an agent acts within actual authority, the principal is normally bound to the third party. The agent may also be entitled to indemnity for properly incurred expenses and remuneration under the agreement.

Apparent authority

Apparent authority concerns the reasonable impression created for the third party. It can bind a principal even when the agent exceeded private instructions. For example, a bank may privately limit an officer to loans below a specified amount but publicly present the officer as a senior lending executive. A borrower who reasonably relies on the bank’s representation may argue that the bank is bound, subject to jurisdiction-specific rules.

Agent’s liability

An agent may be liable when the agent:

1. Acts without authority while representing that authority exists.
2. Breaches an express or implied contractual duty to the principal.
3. Commits a tort, such as fraud, negligence or defamation.
4. Breaches fiduciary duties.
5. Signs a contract personally or fails to disclose the principal where personal liability follows from the transaction or applicable law.

An agent must not misuse confidential information, accept secret commissions, place personal interests before the principal’s interests, or make undisclosed profits. Consent may authorise a conflict, but it should be informed, specific and properly documented.

Principal’s liability

A principal may be liable for contracts made within actual or apparent authority. A principal may also be directly liable for negligent selection, instruction or supervision. In employment settings, an employer may be vicariously liable for an employee’s tort committed in the course or scope of employment. The precise boundary is jurisdiction-dependent, and intentional wrongdoing may or may not fall within the employment relationship depending on its connection with assigned work.

An employer is not automatically liable for every act occurring during working hours. Courts commonly examine the employee’s duties, the connection between the wrongful act and employment, and whether the act was a significant departure from authorised work.

4. Termination of Agency

Agency may end through:

• completion of the assigned task;
• expiry of an agreed period;
• mutual agreement;
• revocation by the principal;
• renunciation by the agent;
• death, incapacity, insolvency or loss of legal capacity, where applicable; or
• an event making performance illegal or impossible.

Termination may be subject to contract, notice requirements or an irrevocable authority created to protect a legitimate interest. Even after termination, the principal should notify customers, suppliers, staff and regulators. Failure to do so may leave apparent authority in place. The agent must return property, records, passwords, tokens and confidential information and must not present continuing authority.

5. Employment Contracts

An employment contract is an agreement under which an individual personally performs work for an employer in return for remuneration, subject to a relationship of direction or control. The classification of a worker is determined by the substance of the relationship, not merely the label used by the parties.

Typical contractual terms include:

• job title, duties and reporting lines;
• place of work and working hours;
• wages, bonuses, benefits and lawful deductions;
• probation and performance procedures;
• leave, holidays and sickness arrangements;
• confidentiality and intellectual-property obligations;
• data-processing and monitoring provisions;
• disciplinary and grievance procedures;
• notice and termination terms; and
• post-employment restrictions, where reasonable and lawful.

Employee or independent contractor?

Classification affects minimum wages, leave, tax, social insurance, workplace safety, dismissal protection and employer liability. Relevant indicators include the degree of control, integration into the organisation, personal service, financial risk, ownership of tools, ability to work for others and the parties’ practical conduct. No single factor is decisive in every legal system.

Implied duties

Employees commonly owe duties of obedience to lawful instructions, reasonable skill and care, fidelity, confidentiality and good faith. Employers commonly owe duties to pay agreed remuneration, provide a safe workplace, comply with equality law, avoid unlawful discrimination, follow contractual procedures and, in many systems, maintain mutual trust and confidence.

6. Workplace Rights and Employer Responsibilities

Equality and non-discrimination

Employment decisions should not unlawfully discriminate on protected grounds such as sex, race, ethnicity, religion, disability, age, pregnancy, family status or sexual orientation, depending on national law. Discrimination may be direct, indirect, based on harassment, or arise from failure to provide reasonable accommodation for disability.

Indirect discrimination may occur where a seemingly neutral rule disproportionately disadvantages a protected group and cannot be justified as proportionate to a legitimate objective. Employers should use objective selection criteria, document decisions and train managers.

Health, safety and dignity

Employers generally must identify workplace risks, provide training and equipment, investigate incidents and protect workers from harassment, violence and unsafe conditions. Financial-sector risks include stress, excessive working hours, lone working, customer aggression, ergonomic injuries and psychological harm.

Pay, hours and leave

Minimum wage, overtime, working-time, rest, parental, sickness and annual-leave rights are normally regulated by statute. Contractual terms cannot lawfully remove mandatory minimum rights. Payroll records should be accurate and retained for the required period.

Grievances and whistleblowing

A grievance procedure allows employees to raise concerns about pay, bullying, discrimination or management decisions. Whistleblowing laws may protect disclosures concerning fraud, corruption, regulatory breaches or threats to public safety. Organisations should provide confidential reporting routes and prohibit retaliation.

7. Discipline, Performance and Dismissal

A fair employment process separates performance management from disciplinary action. Managers should identify the issue, investigate proportionately, notify the employee of the allegations, allow a meaningful opportunity to respond, consider evidence objectively, and provide a reasoned decision with appeal rights where required.

Dismissal may be:

• For capability or performance: inability to meet reasonable standards after support and warnings.
• For misconduct: breach of rules, dishonesty, violence or serious negligence.
• For redundancy or organisational reasons: role elimination or restructuring.
• Constructive dismissal: resignation in response to a fundamental employer breach, where recognised by law.
• Automatically or unlawfully discriminatory dismissal: termination prohibited because of a protected right or characteristic.

Serious misconduct may justify summary dismissal, but the employer should still investigate and follow mandatory procedure. Notice, severance or compensation may be required. An employee’s contractual or statutory remedies may include reinstatement, compensation, back pay or a declaration of rights.

8. Confidentiality, Intellectual Property and Employee Data

Confidential information includes customer records, account details, credit assessments, passwords, business strategies, pricing, algorithms and regulatory reports. Confidentiality duties may arise from contract, fiduciary principles, privacy legislation and banking secrecy rules.

A lawful confidentiality programme should:

1. classify information by sensitivity;
2. limit access on a need-to-know basis;
3. use secure authentication and encryption;
4. train staff and monitor access appropriately;
5. define permitted disclosures;
6. provide incident-reporting procedures; and
7. require return or secure deletion when employment ends.

Confidentiality is not absolute. Disclosure may be required by law, court order, regulator or protected whistleblowing rules. Employers should not use confidentiality clauses to suppress lawful complaints or statutory rights.

Employee data may include identity information, payroll records, health information, performance assessments, biometric data, communications and monitoring logs. Data governance should identify a lawful purpose, collect only necessary data, provide transparent notices, maintain accuracy, restrict access, apply retention limits and protect data against unauthorised use. Sensitive data generally requires stronger safeguards and, in many jurisdictions, a specific lawful basis or consent.

Monitoring email, devices, location or productivity should be necessary, proportionate and transparent. Continuous surveillance may damage trust and create discrimination or privacy risks. Automated hiring or performance systems should be tested for bias, explainable to affected workers where required, and subject to meaningful human review.

9. Applied Case: The Unauthorised Loan Approval

Background

This illustrative case concerns Meridian Bank. A relationship manager, Lina, routinely handled small-business loans. Her written mandate permitted approval up to 500,000 units. The bank’s website and customer materials described her as a “senior lending manager.” During a meeting, Lina approved a loan of 800,000 units and signed a letter using the bank’s standard format. The borrower relied on the approval and incurred expenses. The bank later discovered that Lina had exceeded her internal limit and dismissed her for misconduct.

Problem

The bank must determine whether it is bound to the borrower, whether Lina is personally liable, and whether the dismissal was fair.

Analysis

Lina lacked actual authority for the full amount because her internal limit was 500,000 units. However, the bank’s public description, her role and the standard letter may have created apparent authority. The outcome depends on whether the bank made an attributable representation and whether the borrower reasonably relied on it. The borrower’s sophistication and knowledge of the internal limit are relevant.

The bank may be liable externally even though Lina breached internal instructions. Internally, Lina may have breached her employment and agency duties. The bank should not assume that external liability automatically makes dismissal fair. It should investigate the approval, give Lina the allegation and evidence, consider her explanation and apply a proportionate sanction under the contract and applicable law.

If Lina deliberately concealed the amount or falsified records, serious misconduct may justify dismissal. If she misunderstood an ambiguous delegation and had previously approved similar loans with managerial knowledge, a warning or retraining might be more proportionate.

Approach and outcome

The bank should notify the borrower promptly, preserve records, obtain legal advice on enforceability, review the customer’s reliance and consider ratification or negotiated restructuring. It should audit delegation matrices, system limits and public job descriptions. The employment decision should be made separately through a fair disciplinary process.

Learning points

1. Internal authority limits do not always defeat apparent authority.
2. Public representations and job titles require governance control.
3. Agency liability and employment discipline are separate questions.
4. Access controls and system-enforced approval limits reduce legal risk.
5. Fair process matters even where misconduct appears serious.

10. Governance and Best Practices

Organisations should maintain a written authority framework, delegation register and approval matrix. Systems should enforce transaction limits rather than relying only on policy. Contracts should distinguish employees, contractors and agents and should address confidentiality, data use, conflicts and termination.

Human-resources processes should use consistent recruitment, evaluation, discipline and dismissal criteria. Managers should document objective reasons, preserve evidence and consult specialists where discrimination, whistleblowing, dismissal or personal data is involved. Regular training should cover agency authority, fraud prevention, cybersecurity, privacy and respectful workplace conduct.

Technology creates both controls and risks. Digital signatures, access logs and workflow approvals can establish reliable evidence of authority. Conversely, automated systems may make unauthorised decisions at scale, reproduce historical bias or expose employee data. Human oversight, access minimisation, auditability and incident response remain essential.

Challenges and Limitations

Agency and employment rules are fact-sensitive. The same job title may create authority in one setting but not another. Apparent authority depends on representations and reasonable reliance. Worker classification is increasingly difficult where people work through platforms, remotely or across borders. Privacy and employment rules may conflict with monitoring, cybersecurity and regulatory recordkeeping. Finally, statutory rights and remedies vary significantly, so professional advice is necessary before applying general principles to a live dispute.

Chapter Summary

Agency law determines when one person can affect another’s legal position. Agency may arise expressly, by implication, necessity, apparent authority or ratification. Actual authority binds the principal within the granted mandate; apparent authority may bind the principal because of representations made to third parties. Agents owe duties of loyalty, care, obedience and confidentiality, while principals may bear contractual, direct and vicarious liability. Agency ends through completion, expiry, agreement, revocation, renunciation or legally significant events, but notice is important to prevent continuing apparent authority.

Employment law governs work contracts, classification, pay, safety, equality, privacy, discipline and dismissal. Employers must distinguish lawful management from discrimination, harassment, retaliation and unlawful monitoring. Confidentiality and employee-data controls are particularly important in banking and insurance. Effective governance combines clear contracts, delegated authority, fair procedures, technical controls, documentation and respect for worker rights.

Key Terms

Agency: A relationship in which an agent acts for a principal.

Agent: A person authorised to affect a principal’s legal relations.

Apparent authority: Authority reasonably represented to a third party by the principal’s conduct.

Actual authority: Authority granted by the principal, expressly or impliedly.

Employee: A worker engaged under an employment relationship, usually involving personal service and employer control.

Employer: The person or organisation engaging and directing employees.

Fiduciary duty: A duty of loyalty and good faith arising from a relationship of trust.

Indemnity: Reimbursement for liabilities or expenses properly incurred on another’s behalf.

Ratification: Approval of an unauthorised act after it has occurred.

Vicarious liability: Liability imposed on an employer for certain employee acts.

Discrimination: Unlawful disadvantage based on a protected characteristic or activity.

Harassment: Unwanted conduct that violates dignity or creates a hostile environment.

Constructive dismissal: Resignation caused by a fundamental employer breach.

Redundancy: Termination because the role or work is eliminated or reduced.

Confidential information: Non-public information protected from unauthorised use or disclosure.

Employee data: Personal information relating to a worker or applicant.

Whistleblowing: Reporting wrongdoing or risk through protected channels.

Reasonable accommodation: Appropriate adjustment enabling a person with a disability to work.

Review Questions

Short Answer Questions

1. What is the difference between a principal and an agent?
2. Define apparent authority.
3. Identify two ways an agency relationship may terminate.
4. What factors help distinguish an employee from an independent contractor?
5. Why should employee monitoring be transparent and proportionate?

Long Answer Questions

1. Explain the principal’s and agent’s liabilities where an agent exceeds internal instructions.
2. Discuss the creation, scope and termination of agency relationships.
3. Analyse the essential terms and implied duties in an employment contract.
4. Explain how a fair disciplinary and dismissal process should operate.
5. Discuss confidentiality and employee-data obligations in a financial institution.

Analytical / Application Questions

1. A cashier is publicly presented as authorised to negotiate customer refunds but privately has a narrow refund limit. Analyse the customer’s possible claim and the employer’s internal remedies.
2. An insurer introduces automated productivity monitoring that records keystrokes continuously without notice. Evaluate the employment, privacy and governance issues.
3. A manager dismisses an employee immediately after the employee reports suspected regulatory fraud. Identify the legal risks and recommend an appropriate investigation and response.

Multiple Choice Questions with Answers

Question 1

Which form of authority is created by the principal’s representation to a third party?

A. Actual authority

B. Apparent authority

C. Necessity authority

D. Retrospective employment

Correct Answer: B. Apparent authority

Question 2

What is ratification?

A. Termination by expiry

B. A third party’s rejection of a contract

C. The principal’s subsequent approval of an unauthorised act

D. An employee’s resignation

Correct Answer: C. The principal’s subsequent approval of an unauthorised act

Question 3

Which duty is most closely associated with an agent’s fiduciary position?

A. Duty to maximise personal profit

B. Duty to avoid undisclosed conflicts and secret profits

C. Duty to ignore lawful instructions

D. Duty to disclose all customer data publicly

Correct Answer: B. Duty to avoid undisclosed conflicts and secret profits

Question 4

Which factor is relevant to deciding whether a worker is an employee?

A. The colour of the employer’s logo

B. The degree of control and integration

C. The worker’s preferred job title alone

D. The number of competitors in the market

Correct Answer: B. The degree of control and integration

Question 5

What is indirect discrimination?

A. A neutral rule that disproportionately disadvantages a protected group without adequate justification

B. Any difficult management decision

C. A justified pay increase

D. A voluntary resignation

Correct Answer: A. A neutral rule that disproportionately disadvantages a protected group without adequate justification

Question 6

Which action best supports procedural fairness before dismissal?

A. Ignoring the employee’s explanation

B. Investigating, notifying the employee and allowing a response

C. Deleting all relevant records

D. Announcing the decision before investigation

Correct Answer: B. Investigating, notifying the employee and allowing a response

Question 7

Which is an appropriate employee-data practice?

A. Collecting unlimited information indefinitely

B. Providing access to all employees

C. Collecting necessary data for a lawful and transparent purpose

D. Using health data for unrelated marketing without safeguards

Correct Answer: C. Collecting necessary data for a lawful and transparent purpose

Question 8

Why should a principal notify third parties when agency ends?

A. To preserve apparent authority indefinitely

B. To reduce the risk that third parties reasonably believe authority continues

C. To transfer all employee duties to customers

D. To avoid paying lawful wages

Correct Answer: B. To reduce the risk that third parties reasonably believe authority continues

Question 9

An employee acts within actual authority when the employee:

A. Acts within authority granted expressly or impliedly by the principal

B. Always acts outside assigned duties

C. Acts only after dismissal

D. Uses a third party’s authority

Correct Answer: A. Acts within authority granted expressly or impliedly by the principal

Question 10

Which situation most clearly raises a whistleblowing issue?

A. Reporting suspected regulatory fraud through a protected channel

B. Requesting annual leave

C. Changing a work schedule by agreement

D. Updating a professional qualification

Correct Answer: A. Reporting suspected regulatory fraud through a protected channel