PR ethics: accuracy, disclosure, and editorial independence

Make ethics enforceable through evidence, named authority, access controls, correction duties, and exit rights. A provider’s code or promise is useful context, but the company remains accountable for the facts, permissions, accounts, risk decisions, and conduct it authorizes.

The PRSA Code of Ethics calls for accuracy, prompt correction, sponsor and conflict disclosure, confidentiality, and fair dealing. It applies to PRSA members, is voluntary, and PRSA says its enforcement authority is limited. Put the standards you require in the agreement and operating process.

Require evidence and authority for material claims

Each consequential product, customer, market, financial, security, employment, health, safety, regulatory, or research claim should have:

• a company fact owner and supporting source;
• the population, period, method, and necessary qualification;
• approved channels and uses;
• a legal, finance, security, privacy, people, or regulatory approver where required; and
• an expiration date or event that triggers review.

For U.S. commercial claims, the FTC’s advertising substantiation policy says advertisers and agencies need a reasonable basis for objective express and implied claims before dissemination. Evidence obtained later does not replace prior substantiation. Other jurisdictions and regulated products may set different or higher standards.

The company decision owner approves the communication and accepts residual risk. The provider owns verification against the approved evidence and must stop or escalate unsupported language. Executive enthusiasm does not override a required specialist approval.

Disclose money, interests, identity, and channel

Require clear disclosure of sponsors, paid spokespeople, influencer relationships, affiliate arrangements, gifts, provider commissions, financial interests, and relevant client conflicts. The FTC’s current endorsement guidance covers material connections in U.S. advertising. Publishers and other jurisdictions have their own rules.

Label sponsored content, paid placement, company-owned posts, wire copies, and incentivized reviews accurately in the work record and reporting. Fabricated people, fake grassroots activity, false accounts, undisclosed paid advocacy, and impersonation should trigger immediate suspension and investigation.

Independent editors control whether, when, and how they cover a subject. Reuters’ public standards illustrate newsroom commitments to accuracy, sourcing, corrections, and independence, including a refusal to let sources vet stories before publication. A provider cannot promise favorable coverage or ordinary editorial approval.

Control data, accounts, assets, and AI use

Company-controlled accounts should use company-approved administrators and access methods. Define ownership and return of media lists, recordings, approvals, source files, drafts, analytics, paid accounts, and credentials. Restrict confidential, embargoed, personal, privileged, and security-sensitive information to approved people, systems, purposes, and retention periods.

Require disclosure of subcontractors and AI services that can receive company or contact data. The provider should document provenance, rights, human review, and material AI assistance. NIST’s voluntary Generative AI Profile identifies confidently presented false output as a generative AI risk; generated facts, quotations, sources, people, or evidence need independent verification and must never be represented as real.

Privacy, security, and legal owners decide whether a tool or data use is allowed. The provider remains accountable for its output when a tool contributes to it.

Put corrections and remedies on a clock

The agreement should define severity, notification deadlines, who can pause publication or outreach, and who approves a correction. For a material error, preserve the record, stop controllable distribution, notify affected owners, correct company-controlled channels, and request correction from third parties. The company can supply evidence to an editor but cannot dictate an independent correction.

Require conflict and incident reporting, audit evidence, access revocation, asset return, deletion certification, indemnity decisions with counsel, and termination rights for serious or repeated breaches. Public-company disclosures, active litigation, safety incidents, protected employee activity, and whistleblower matters need specialist authority rather than an improvised communications decision. See approval workflows, agency red flags, and scope-of-work terms.

The gated Startup PR Playbook contains the detailed claim register and correction workflow.