Corporate policies, standard operating procedures (SOPs), and compliance frameworks are designed to minimize risk, ensure safety, and maintain operational predictability. However, within almost every business organization, employees occasionally circumvent, bypass, or directly violate established rules.
While rule breaking is frequently viewed through the lens of misconduct, organizational psychology reveals a more nuanced reality: rule breaking falls into distinct categories, driven by different motivations and resulting in vastly different outcomes for the business.
1. Malicious Rule Breaking (Deviant Behavior)
Malicious rule breaking occurs when an individual intentionally violates organizational policies or legal frameworks for personal gain, spite, or to cause harm to the business. This behavior undermines corporate governance and threatens the financial and legal stability of the firm.
- Primary Motivations: Financial fraud, corporate espionage, revenge against management, or simple self-interest at the expense of others.
- Organizational Impact: Severe financial losses, regulatory fines, reputational damage, and a breakdown of internal trust.
- Real-World Example: In 2023, the European energy firm Vattenfall discovered an internal data breach where an employee leaked sensitive customer data to third-party marketing companies for personal financial gain, directly violating strict European GDPR policies and the company’s internal data handling rules.
2. Prosocial Rule Breaking
Prosocial rule breaking occurs when an employee intentionally violates a formal policy, not for personal benefit, but to help the organization, a colleague, or a customer. Employees engage in this behavior when they believe the existing bureaucracy hinders efficiency, performance, or customer satisfaction.
- Primary Motivations: A desire to provide better customer service, protect a coworker from an unfair policy, or bypass an inefficient process to get a critical job done on time.
- Organizational Impact: Increased agility and customer satisfaction in the short term, but it exposes systemic flaws in corporate processes and can lead to unmonitored operational risks.
- Real-World Example: In the retail sector, floor managers at companies like Zara or H&M have occasionally bypassed strict inventory transfer protocols to manually swap stock between nearby stores. By breaking the formal, slow corporate request process, they immediately satisfy an in-store customer’s demand, prioritizing service over bureaucracy.
3. Creative and Creative-Destructive Rule Breaking
This form of rule breaking occurs when employees disregard established protocols to innovate, experiment, or develop new products and services. In highly bureaucratized environments, strict adherence to current procedures can stifle innovation.
- Primary Motivations: Intrinsic motivation to solve complex problems, dissatisfaction with the status quo, and the pursuit of breakthrough innovation.
- Organizational Impact: Driving long-term competitive advantage, discovering new revenue streams, and fostering an entrepreneurial culture. However, it can result in the wasted allocation of corporate resources if the unauthorized experiments fail.
- Real-World Example: The creation of the PlayStation at Sony is a classic case. Ken Kutaragi, a Sony engineer, secretly worked with Nintendo to develop a digital sound chip, directly violating Sony management’s explicit directives against entering the video game market. Kutaragi’s unauthorized experimentation eventually laid the foundation for Sony’s most profitable business segment.
The Management Dilemma: Control vs. Autonomy
Managing rule breaking requires corporate leaders to distinguish between behavioral deviance and well-intentioned autonomy. Striking the right balance involves specific management strategies.
Streamlining Processes
When prosocial rule breaking becomes frequent, it serves as a leading indicator that the organization’s formal procedures are too rigid or outdated. Management should use these instances to re-engineer workflows, removing unnecessary bureaucratic hurdles that prevent employees from doing their jobs efficiently.
Psychological Safety and Guardrails
To channel creative rule breaking constructively, organizations can establish bounded zones for experimentation. Google’s famous (and evolved) “20% time” policy or internal corporate incubators allow employees to deviate from routine tasks without violating compliance or safety protocols.
Strong Compliance Architecture
Malicious rule breaking requires robust internal controls, clear whistleblowing channels, and consistent enforcement of consequences. Transparency in how rules are enforced deters opportunistic misconduct while reinforcing corporate values.
When employees consistently break a rule to get their work done, the problem is rarely the employees—it is usually the rule.
