Compliance Training Doesn't Change Behaviour. Here’s What Does

Most organizations treat compliance as an ethics problem.

When people break the rules, the instinct is to add more training, send stronger messaging, or tighten enforcement. The underlying assumption is that non-compliance happens because people don't know the rule, don't understand it, or don't care enough about it.

But in most cases, that assumption is wrong.

People already know the rule

Behavioural science research is consistent on this point: in the vast majority of compliance failures, the people involved knew what the rule was. Knowledge was not the problem. What determined whether they followed the rule was something else entirely, the conditions around them.

This distinction matters enormously. If you diagnose a behaviour problem as a knowledge problem, you will keep investing in solutions that don't work. More e-learning modules. More policy reminders. More town halls about values. And you will keep getting the same outcomes.

Three things that actually shape compliance behaviour

If knowledge and intention are not the primary drivers of compliance behaviour, what is? Behavioural science points to three conditions that matter far more in practice.

The first is friction. How easy is it to actually follow the process? When compliance requires navigating a cumbersome system, completing a time-consuming approval chain, or interrupting a fast-moving workflow, people find workarounds. Not because they are trying to circumvent the rules, but because the path of least resistance leads them elsewhere. Compliance behaviour improves significantly when the compliant option is also the easy option.

The second is social norms. What do people see others doing around them? Human beings are deeply social, and our behaviour is shaped powerfully by what we observe in our environment. If someone joins a team where the informal norm is to skip a particular step because everyone does, they will almost certainly follow suit, regardless of what the policy says. The visible behaviour of peers and leaders is a stronger signal than any training programme.

The third is what the organization actually rewards. When speed is celebrated, thoroughness is quietly penalized. When targets are hit at the expense of process, and that goes unaddressed, the message is clear. People respond to what is actually rewarded in practice, not what is stated in values documents. When the incentive structure pulls against the compliance expectation, compliance loses, consistently.

Why similar organizations get different outcomes

This is why two organizations can have nearly identical policies, training programmes, and stated values, yet experience completely different compliance outcomes. The policies are the same. The conditions are not.

One organization has streamlined its processes so the compliant path is also the efficient one. Its leaders visibly model the behaviours they expect. Its recognition and reward systems reinforce doing things the right way, not just getting results.

The other organization has layered policies on top of processes that were never designed with compliance in mind. Its informal norms send different signals than its formal ones. Its incentive structures reward outcomes without scrutiny of how they were achieved.

Same rules. Different environments. Different behaviour.

What this means in practice

Addressing compliance culture through a behavioural science lens means shifting attention from what people know to the conditions shaping what they do.

That means auditing for friction, identifying where compliant behaviour is harder than it needs to be and redesigning processes so the right path is also the easy one.

It means examining social norms, understanding what informal behaviours are actually being modelled at the team and leadership level, and whether they reinforce or undermine the formal expectations.

And it means scrutinizing incentive structures, looking honestly at what the organization actually rewards and whether those rewards are aligned with the compliance behaviours it expects.

This is what behavioural design looks like in a compliance context. It does not replace policy or training. But it addresses the conditions that determine whether policy and training translate into consistent behaviour in practice.

When organizations get these conditions right, compliance stops feeling like a constant enforcement challenge and starts becoming a natural feature of how work gets done.