Corporate Values Are Real Only When They Constrain the Corporation

Organizations commonly treat values as expectations for employee behaviour. The more consequential test is whether those values restrict how the institution uses its power when its own interests are threatened.

The New York Times reported on August 4 that Uber’s strategy for defending sexual-assault lawsuits has included asking claimants what they were wearing. The newspaper contrasted the aggressive litigation approach with Uber’s earlier promise to handle legal claims in a manner considered best for survivors.

The immediate controversy concerns the treatment of women who report sexual assault. The larger institutional issue concerns the authority of corporate values.

Uber has the right to defend itself, challenge allegations, test evidence, and receive due process. No responsible governance standard requires an organization to concede liability merely because a claim is serious or disturbing. The harder question is whether an organization’s declared principles place any meaningful restrictions on how it may defend itself.

That question extends far beyond Uber.

Organizations routinely declare commitments to dignity, respect, safety, fairness, trust, inclusion, and accountability. They publish those principles, teach them to employees, incorporate them into leadership competencies, and use them to describe the culture they intend to create.

Yet most corporate values are designed primarily to govern employee behaviour. They explain how managers should treat subordinates, how colleagues should interact, how complaints should be handled, and how customers should be served. They rarely establish equivalent limits on what the institution itself may authorize when money, reputation, executive standing, or legal exposure is at risk.

That omission has been treated as a culture problem.

It is a governance failure.

The Values Gap Has Been Misdiagnosed

When an organization’s conduct contradicts its stated values, the contradiction is commonly described as hypocrisy, inconsistent leadership, weak culture, or a failure to live the values. The conventional response follows quickly: communicate the values more forcefully, train managers again, revise the code of conduct, measure employee sentiment, or ask leaders to model the desired behaviour more visibly.

These interventions assume that the principal failure is insufficient awareness or belief.

They cannot explain why an organization may enforce its values against employees while exempting senior executives, corporate counsel, investigators, insurers, and advisers acting in the institution’s interest. Nor can they explain why principles that appear mandatory under ordinary conditions become negotiable when observing them would disadvantage the corporation.

The deeper problem is that the values were never given authority over institutional decisions.

In 2018, Uber announced that survivors of sexual assault and harassment would control how they pursued individual claims. The company ended mandatory arbitration for those claims, allowed survivors to choose open court, and said survivors should decide whether to speak publicly about what happened. Uber also committed to greater transparency, arguing that transparency fosters accountability.

Those were consequential commitments. They do not, however, resolve the governance question now exposed by the litigation: What happens when survivor-centred principles conflict with the company’s interest in defeating a claim?

The contradiction is not that Uber has taken no action on safety or accountability. The company reports substantial safety investments and disputes claims that its systems are inadequate. A February 2026 federal jury nevertheless found Uber liable for a driver’s actions and awarded a claimant $8.5 million. Uber said it would appeal and emphasized that the jury rejected claims that the company had been negligent or maintained defective safety systems. More than 3,000 similar federal lawsuits were pending at the time.

The existence of contested facts and legitimate legal defences makes the governance issue more important, not less.

Values do not exist only for situations in which the right decision is obvious, uncontested, and inexpensive. Their governing function becomes relevant precisely when interests compete and the institution has something substantial to lose.

If dignity governs managers but not litigation strategy, dignity is not yet an institutional value. If respect governs employee conversations but not investigations conducted in the company’s name, respect is not yet an institutional value. If fairness disappears when a powerful executive, profitable business unit, or substantial legal exposure is involved, fairness has been reduced to a behavioural preference.

A principle that governs employees but exempts the institution is not a corporate value.

It is an employee rule.

Values Must Constrain Institutional Power

Corporate values are commonly presented as cultural aspirations: descriptions of the workplace leaders hope to create and the behaviours they want employees to demonstrate.

That definition is inadequate because it assigns values little authority when the organization exercises its greatest power.

A stronger definition is required:

Corporate values are institutional constraints governing how organizational power may be used.

Under this standard, a value does more than encourage desirable behaviour. It restricts the means available to the institution, including some means that are lawful, professionally recommended, or financially advantageous.

The law establishes the outer boundaries of permissible conduct. It does not determine the entire standard by which an institution should govern itself. A tactic can be legally available and still violate the principles the organization claims should govern conduct undertaken in its name.

Corporate counsel may identify a method that could weaken a claimant’s credibility. An investigator may recommend an approach that protects a senior executive. An insurer may favour a response that reduces immediate exposure. A consultant may suggest delaying disclosure until disclosure becomes unavoidable.

Each adviser may be acting competently within a defined professional mandate.

Senior leaders still decide what the organization will authorize.

Organizations frequently obscure that responsibility through delegation. Outside counsel is said to control the litigation. The investigator is described as independent. The insurer is said to direct the defence. Human Resources is consulted but lacks decision authority. The board receives updates after the consequential choices have already been made.

Delegation does not remove institutional responsibility. It changes who acts on the institution’s behalf.

A company cannot separate itself from the methods of lawyers, investigators, consultants, or insurers it retains, instructs, finances, and authorizes. If corporate values govern the organization, they must also govern the agents through whom the organization exercises its power.

The Institutional Self-Protection Test

Seattle Consulting Group defines the Institutional Self-Protection Test as the standard for determining whether a declared corporate value possesses governing authority.

The test examines whether the principle continues to control institutional conduct when following it becomes disadvantageous.

Cost: Does the value remain binding when observing it increases legal exposure, financial cost, operational difficulty, or reputational risk?

Agency: Does the value govern lawyers, investigators, insurers, consultants, and other parties acting with institutional authorization?

Authority: Who can stop an otherwise lawful or commercially advantageous action because it violates the organization’s stated principles?

Consistency: Would the organization permit a manager or employee to use the same conduct under ordinary workplace conditions?

The Cost Test determines whether the principle survives contact with organizational self-interest. Values that apply only when compliance is inexpensive do not govern the organization. They describe its preferences when interests happen to align.

The Agency Test closes the delegation loophole. Organizations cannot preserve the credibility of their values by assigning uncomfortable conduct to external specialists whose mandates contain no values-based limits.

The Authority Test determines whether the principle can change an actual decision. A CHRO, ethics officer, or executive adviser who can raise concerns but cannot stop or escalate the conduct does not govern the outcome. Consultation without decision authority is ceremonial.

The Consistency Test exposes the institutional double standard. Organizations often prohibit employees from using conduct that becomes acceptable when the corporation uses it against someone perceived as a threat. That asymmetry teaches employees that values regulate power only when power is exercised downward.

Together, the four tests move corporate values out of communications and culture programming and into decision rights, legal instructions, investigative protocols, executive accountability, and board oversight.

That is where values acquire governing authority.

What Stronger Governance Requires

Giving values authority over the corporation does not mean surrendering legitimate legal defences or preventing leaders from protecting the organization. It means deciding what forms of protection remain institutionally acceptable.

The difference is consequential.

The conventional mandate to outside counsel is to defend the company, reduce exposure, and prevail where possible within the law. A values-governed mandate also identifies the methods the institution will not authorize, the tactics requiring executive review, and the decisions that must be escalated because they implicate the company’s stated principles.

Boards and executive teams should translate significant values into explicit institutional obligations and refusal points.

A commitment to dignity should identify conduct the organization will not use to humiliate, intimidate, exhaust, or unnecessarily discredit another person, even when doing so might provide an advantage.

A commitment to fairness should define the evidentiary, investigative, and procedural standards that remain binding when a senior executive, major customer, or substantial financial interest is involved.

A commitment to trust should determine what the organization must disclose, explain, investigate, and follow through upon when concealment or delay would be easier.

Those boundaries should govern everyone acting in the organization’s name. They should appear in engagement instructions for lawyers, investigators, consultants, and insurers rather than remaining confined to an employee handbook.

Responsibility must also be assigned to a person or governing body with real authority. High-consequence decisions require a named decision owner, a defined escalation path, and a record showing how the organization reconciled its legitimate interests with its declared principles.

This changes the role of the CEO, board, CHRO, and general counsel.

Values can no longer be delegated to Human Resources as culture language while legal, financial, and operational decisions proceed under a separate standard. Senior leadership becomes responsible for ensuring that the corporation does not demand conduct from employees that it is unwilling to require of itself.

It also changes how organizations should evaluate values programs.

Employee awareness, training completion, survey results, and the quality of the language may still matter. They do not demonstrate that the values govern the institution. The decisive evidence is whether those values alter consequential decisions when the organization has something significant to lose.

The stronger question is therefore not whether employees know the values.

It is whether the corporation has ever been prevented from doing something advantageous because its values would not permit it.

The Stronger Standard

The Uber litigation will be decided through evidence, trials, settlements, and appeals. The institutional significance of the Times reporting does not depend on deciding those individual claims outside the legal process.

Its significance is that it exposes a question every organization must answer:

Do corporate values govern only the people who work for the institution, or do they govern the institution itself?

The answer becomes visible during litigation, internal investigations, executive misconduct, whistleblower complaints, layoffs, discrimination claims, preventable customer harm, and other moments when accountability carries a substantial cost.

Under those conditions, values either constrain institutional power or surrender authority to institutional self-protection.

Organizations do not prove their values by publishing them, teaching them, or invoking them when interests are aligned. They prove their values by establishing what they will refuse to do even when doing it could protect the corporation.

Corporate values are real only when they constrain what the organization is willing to do for its own benefit.

About Jim Woods

Jim Woods is the founder of Seattle Consulting Group, originator of The Woods HR Power Model™, and co-creator of The Five Decisions of Leadership™. His work examines leadership judgment, HR governance, institutional accountability, organizational trust, and the management failures prevailing doctrine often misdiagnoses.