Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
- What Is A Health And Safety Document And Do Small Businesses Need One?
What Should Your Health And Safety Document Include?
- Policy Statement (Your Commitment)
- Roles And Responsibilities
- Risk Assessment And Controls
- Safe Systems Of Work And Procedures
- Training, Induction And Supervision
- Consultation With Workers
- Incident Reporting And Investigation
- Emergency Preparedness
- Working Time, Breaks And Welfare
- Contractors, Visitors And Third Parties
- Monitoring, Inspections And Maintenance
- Record-Keeping And Data
- Review And Continuous Improvement
- Which UK Laws Apply To Your Health And Safety Document?
- Audits, Evidence And Record-Keeping: Proving You Comply
- Practical Tips To Keep Your Health And Safety Document Alive
- Key Takeaways
If you employ people or run a site where anyone works, you’re responsible for their health and safety. That’s not just good practice – it’s a legal duty. A clear, practical health and safety document is how you turn those duties into day-to-day actions your team can follow.
In this guide, we’ll break down what a health and safety document actually is, what UK law expects to see, and how to create one that genuinely reduces risk (and admin headaches). We’ll also cover rollout tips, common scenarios for small businesses, and the records you should keep to prove you’re compliant.
With the right approach, you’ll be protected from day one and your people will know exactly what to do to stay safe at work.
What Is A Health And Safety Document And Do Small Businesses Need One?
A “health and safety document” is the collection of written policies, risk assessments, procedures and records that explain how your business keeps people safe at work. It’s sometimes called a health and safety policy, safety management system or H&S manual – the label matters less than the content and how you implement it.
UK law expects every employer to manage health and safety risks “so far as is reasonably practicable”. In practice, that means you should:
- Identify your work-related hazards and assess risks.
- Decide what control measures you’ll put in place.
- Train people on safe working methods and supervision.
- Record what you’ve done and keep it under review.
If you employ five or more people, you must put your health and safety policy and risk assessments in writing. If you have fewer than five, you still have the same legal duties – and in reality, written documents make it much easier to train staff, show compliance to clients, and respond if something goes wrong. Many small businesses keep their core safety commitments in a short policy and put the details (risk assessments, procedures, checklists) in a practical pack or Staff Handbook.
If you’re building out your overall safety framework, you can speak to us about tailored support for health and safety in the workplace.
What Should Your Health And Safety Document Include?
There’s no one-size-fits-all template. Your document should be proportionate to your risks and the way your business operates. However, most UK small businesses will cover the following headings.
Policy Statement (Your Commitment)
Open with a short policy statement signed by the most senior person (e.g. a director). Confirm your commitment to comply with health and safety law, prevent injury and ill health, provide resources, consult staff and continually improve. Include who is responsible for making this happen.
Roles And Responsibilities
Spell out who does what – directors, managers, supervisors, employees, contractors. Make sure responsibilities are practical and tied to job roles. If you have senior managers on service agreements, align their safety duties with those agreements and any Employment Contract terms.
Risk Assessment And Controls
Explain your process for identifying hazards and assessing risks. Attach your actual risk assessments as appendices or link to where they’re stored. For each significant risk, list the control measures (engineering controls, safe systems of work, PPE, supervision, maintenance, etc.).
Safe Systems Of Work And Procedures
Provide step-by-step procedures for your higher-risk tasks: using equipment, handling chemicals, cash handling, opening/closing, working at height, hot works, lifting/handling, food safety, or lone working. Keep procedures simple, visual where possible, and job-specific.
Training, Induction And Supervision
Set out how you induct new starters, provide refresher training, and keep competency records. Note any mandatory training (e.g. manual handling, food hygiene, first aiders) and how often it’s renewed.
Consultation With Workers
Confirm how you involve your team – safety briefings, toolbox talks, safety reps, feedback channels. Consultation is a legal requirement, and it also makes your controls more realistic on the shop floor.
Incident Reporting And Investigation
Explain how to report near-misses, injuries and hazards, who investigates and how you learn lessons. Include when you must report serious incidents to the regulator. If you do need to examine events formally, align your process with fair workplace investigations practices.
Emergency Preparedness
Document your fire safety arrangements (alarms, drills, evacuation, marshals), first aid provision, spill response and any location-specific emergencies. Make sure names and contact numbers are kept up to date.
Working Time, Breaks And Welfare
Cover how you schedule shifts to avoid fatigue and how staff can take legally required rest breaks. Your policy should align with the rules on employee breaks and any internal rota procedures.
Contractors, Visitors And Third Parties
Explain how you vet and manage contractors and keep visitors safe. Include induction requirements for contractors and how you coordinate safety with them on site.
Monitoring, Inspections And Maintenance
Commit to regular checks of premises, equipment, and PPE. Keep maintenance logs and inspection schedules – they’re invaluable if you ever need to evidence what you’ve done.
Record-Keeping And Data
List what safety records you keep (risk assessments, training logs, inspections, accident book). Because these records contain personal data, align your approach with your Privacy Policy and store them securely.
Review And Continuous Improvement
Set a review schedule (at least annually, and after incidents or changes). Document how you will measure performance and implement improvements.
Which UK Laws Apply To Your Health And Safety Document?
Your health and safety document should reflect the core duties set by UK law and any regulations specific to your activities. Key laws small businesses commonly engage with include:
- Health and Safety at Work etc. Act 1974 – the foundation of your general duty to protect employees and others affected by your work.
- Management of Health and Safety at Work Regulations 1999 – requires risk assessment, arrangements for planning, organisation, control, monitoring and review, plus competence and cooperation.
- Reporting of Injuries, Diseases and Dangerous Occurrences Regulations (RIDDOR) 2013 – sets out what serious incidents must be reported to the regulator and when.
- Control of Substances Hazardous to Health (COSHH) 2002 – risk assessment and control of exposure to hazardous substances (including cleaning products, fumes, dusts).
- Provision and Use of Work Equipment Regulations (PUWER) 1998 – ensuring equipment is suitable, maintained, and used by trained people.
- Regulatory Reform (Fire Safety) Order 2005 – duty to assess fire risk, implement measures, maintain systems and train staff.
- Manual Handling Operations Regulations 1992 – avoid hazardous lifting where possible, and control/reskill where it cannot be avoided.
- Health and Safety (Display Screen Equipment) Regulations 1992 – assessments and controls for screen work, including remote workstations.
- Working Time Regulations 1998 – maximum weekly hours and minimum rest and break entitlements, which your scheduling should reflect.
- Employers’ Liability (Compulsory Insurance) Act 1969 – you must hold insurance to cover injury and disease claims by employees; if you’re unsure of the scope and exemptions, see employers’ liability insurance.
- Equality Act 2010 – duty to make reasonable adjustments for disabled workers and avoid discrimination, including in your safety arrangements.
- Data Protection Act 2018 and UK GDPR – governs personal data in your safety records and incident files.
Don’t worry if this feels like a lot. Your job isn’t to memorise every regulation – it’s to identify your risks, put sensible controls in place, and document how your business will manage them. The laws simply reinforce that approach and specify extra duties for certain activities.
How To Create And Roll Out Your Health And Safety Document (Step-By-Step)
If you’re starting from scratch or updating what you have, follow these steps to build a usable, compliant document and embed it in daily operations.
1) Map Your Activities And Risks
List your locations, tasks and equipment. Walk the premises and speak to your team to uncover real-world risks (not just what’s on paper). Prioritise the top five risks to address first, then work through the rest.
2) Decide Your Structure And Assign Ownership
Choose where your content lives (a PDF policy plus annexes, an intranet page, or a Handbook section). Assign a responsible person for each area, from risk assessments to training logs. Accountability drives compliance.
3) Draft Your Core Policy And Procedures
Write a short, plain-English policy statement and practical procedures for your higher-risk tasks. Avoid jargon and use the same terminology your team uses day-to-day. Where it makes sense, place safety procedures alongside operational SOPs so they’re actually followed.
4) Align With Employment Documents
Make sure your health and safety commitments are reflected in your people documents. This may include your Employment Contract (responsibilities and cooperation), your Staff Handbook (disciplinary approach for safety breaches), and any overarching Workplace Policy framework. Consistency helps you enforce standards fairly.
5) Train, Induct And Communicate
Roll out tailored induction for new starters and refresher training for current staff. Keep it focused on the hazards they face and what you expect in practice. Use short toolbox talks to keep safety live – little and often is effective.
6) Display, Signpost And Share
Make it easy to find – a signed policy on the notice board, QR codes linking to procedures, quick-reference checklists near equipment, and an accessible digital copy for remote workers. Ask staff to acknowledge receipt.
7) Monitor, Record And Improve
Run periodic inspections, checklists and equipment maintenance, and keep records. Track incidents (including near misses), review root causes and update your controls. Set a calendar reminder for an annual review – it’s far easier to keep it current than to rebuild from scratch later.
Common Small Business Scenarios And How Your Health And Safety Document Should Address Them
Every business is different, but the themes below crop up for many SMEs. Consider which apply to you and make sure your document covers them with specific procedures and training.
Retail, Hospitality And Customer-Facing Spaces
- Slips, trips and falls – regular floor checks, spill response, matting, cable management.
- Fire safety – clear escapes, staff drills, training, extinguishers and alarm maintenance.
- Violence or abuse – de-escalation steps, incident reporting, lone worker protocols.
- Food safety – temperature logs, allergen controls, cleaning and personal hygiene rules.
Workshops, Trades And Light Manufacturing
- Machinery and tools – PUWER checks, lock-out procedures, guarding and competence.
- Manual handling – trolleys, team lifts, task redesign, and practical training.
- Hazardous substances – COSHH assessments, safe storage and PPE.
- Contractors – induction, method statements, and supervision on your site.
Offices, Studios And Remote/Hybrid Teams
- DSE assessments – for office and home workstations, with ergonomic guidance.
- Stress and fatigue – sensible workloads, support routes, and realistic deadlines.
- Working time and rest – scheduling aligned with the break rules and weekly limits.
- Fire and first aid – arrangements for your premises and any co-working spaces.
Lone Working And Out-Of-Hours
- Communication and check-ins – who calls whom and when, with escalation steps.
- Safe access – lighting, secure entry, and two-person policies where needed.
- Incident response – how to get help quickly and report concerns afterwards.
Young Workers, New Starters And Apprentices
- Extra supervision – competence sign-offs before solo work.
- Restricted tasks – clear lists of what they can and cannot do initially.
- Induction – bite-sized training with practical demonstrations and shadowing.
Vehicles, Deliveries And Pop-Ups
- Driving safety – licence checks, vehicle inspections, route planning and fatigue.
- Temporary sites – risk assessment for each event, weather, crowd management and setup/teardown procedures.
- Insurance – ensure your employers’ liability insurance and public liability cover the activities you’re running.
Audits, Evidence And Record-Keeping: Proving You Comply
Your health and safety document isn’t just a policy on a shelf – it’s backed by evidence. Keep clear records so you can demonstrate what you’ve done if a regulator asks questions or a claim arises. Typical records include:
- Risk assessments and method statements.
- Training logs, induction checklists and competency sign-offs.
- Equipment inspections, maintenance logs and test certificates.
- Accident book entries, RIDDOR reports and investigation notes.
- Fire alarm tests, drills and first aid stock checks.
- Consultation notes, toolbox talks and safety meeting minutes.
Personal data in these records (like names, injuries and contact details) is protected under data protection law, so align your retention and access rules with your Privacy Policy. Only keep what you need, for as long as you need it, and store it securely.
If an incident does happen, react transparently and follow your investigation process. Keep the focus on facts, root causes and corrective actions. Where conduct issues are involved, dovetail with your HR procedures and run any fact-finding in line with fair workplace investigations principles.
Practical Tips To Keep Your Health And Safety Document Alive
- Keep it short and targeted – link to detailed procedures rather than cramming everything into one long PDF.
- Use plain English – the test is whether a new starter can follow it on day two.
- Integrate safety into your ops – build checks into open/close routines, job cards and supervisor checklists.
- Make managers accountable – tie responsibilities back to role descriptions and your Workplace Policy framework.
- Refresh regularly – if you change layout, equipment or hours, update the relevant sections and re-brief your team.
- Show you mean it – directors should sign the policy and lead by example. Visible leadership matters.
- Get insured and display your certificate – most employers must hold employers’ liability insurance by law.
If you’re unsure whether your document covers everything you need, a short consultation can save a lot of time. We can help tailor your policy pack, align it with your Staff Handbook, and make sure it works in practice for your team.
Key Takeaways
- Every small business needs a health and safety document that sets out your policy, risk assessments and practical procedures – if you employ five or more people, the policy and risk assessments must be in writing.
- Cover essentials like roles and responsibilities, safe systems of work, training, consultation, incident reporting, emergency arrangements, and record-keeping, and align with your Employment Contract and Workplace Policy framework.
- Your document should reflect key UK laws such as the Health and Safety at Work Act, Management Regulations, RIDDOR, fire safety rules, and Working Time Regulations – plus insurance under the Employers’ Liability (Compulsory Insurance) Act.
- Rollout matters: train and induct your team, keep procedures simple and accessible, monitor performance and review regularly.
- Maintain evidence – risk assessments, training logs, inspections and incident reports – and handle personal data in line with your Privacy Policy.
- Tailored, well-implemented documents reduce risk, improve culture and make compliance far easier as you grow. If you need help developing or reviewing yours, we’re here to support you.
If you’d like help creating or updating your health and safety document, you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.


