They should have just had the Code of Conduct from day 1 and not waited until they had an incident to overreact to. I've worked for many places with Codes of Conduct and diversity programs and they are usually run pretty well and are not heavy-handed or staffed with exuberant amateurs. There are proven benefits and established best practices to get it done.