Health and Safety Policy Statement: UK Requirements and Key Inclusions

If you’re running a small business, health and safety can feel like one of those “I’ll deal with it later” tasks - right up until something goes wrong.

A clear health and safety policy statement helps you do two important things at the same time: (1) set expectations for how work is done safely, and (2) show that you’re taking your legal duties seriously.

Whether you have a small office team, a shop floor, a warehouse, or you’re sending staff out to client sites, a good policy statement gives you a practical starting point for keeping people safe and protecting your business from avoidable risk.

Below, we’ll break down what a health and safety policy statement is, when you need one, and what you should include as a UK small business - in plain English.

What Is A Health And Safety Policy Statement (And Why Does It Matter)?

A health and safety policy statement is a written statement that sets out your business’ commitment to health and safety. In practice, it’s usually the “front page” of your wider health and safety policy, which is then supported by more detailed procedures and risk assessments.

Think of it as your business’ official position on health and safety - and a framework for how you’ll manage it day-to-day.

Why Small Businesses Shouldn’t Skip This

Even if your business is small and your team is close-knit, having things written down matters because:

• It makes expectations clear - staff don’t have to guess what “safe” looks like in your workplace.
• It supports training and onboarding - especially if you’re hiring your first employees or growing quickly.
• It helps you show compliance - if you ever need to demonstrate what you’ve done to manage safety.
• It reduces legal and commercial risk - accidents, complaints, and disputes are more likely when responsibilities are unclear.

Health and safety is also closely tied to your other people documents. For example, it’s common to align your safety expectations with your broader Workplace Policy and your onboarding documentation.

Do You Legally Need A Health And Safety Policy Statement In The UK?

In the UK, employers have health and safety duties regardless of size. But whether you must have a written policy depends on your headcount.

The “5 Or More Employees” Rule

If you employ five or more people, you must have a written health and safety policy (and you must bring it to your employees’ attention). This requirement comes from the Management of Health and Safety at Work Regulations 1999.

This written policy is typically set out in three parts:

• Part 1: A statement of intent (often referred to as the policy statement)
• Part 2: Responsibilities (who does what)
• Part 3: Arrangements (how you manage safety in practice)

Even if you have fewer than five employees (so the written policy requirement usually won’t apply), it’s still often a smart move to write down your approach - especially if your work involves higher-risk activities (for example, tools and machinery, customer-facing premises, driving, or hazardous substances).

What Laws Sit Behind This?

Most small business owners come across health and safety through practical actions (risk assessments, training, incident reporting) rather than reading legislation end-to-end. But the key idea is this: as an employer, you must take reasonable steps to protect the health, safety and welfare of your staff (and, in many cases, others affected by your business - like customers and visitors).

If you’d like to build your foundations properly, it helps to treat health and safety as part of your overall compliance setup, alongside your contracts and workplace documents such as an Employment Contract.

What Should A Health And Safety Policy Statement Include?

A strong health and safety policy statement is short, clear, and specific enough that it actually guides behaviour - not just a generic paragraph that could belong to any business.

As a small business, you want something that is:

• Easy for your team to understand
• Realistic to implement (based on how your business actually operates)
• Supported by practical procedures (risk assessments, training, reporting)

1) A Statement Of Intent (Your Commitment)

This is the core “policy statement” part. It’s normally signed by the owner, director, or the most senior person in the business.

Your statement of intent typically covers:

• Your commitment to protecting health, safety and welfare at work
• Your commitment to providing safe equipment, safe systems of work, and appropriate training/supervision
• Your commitment to reviewing and improving safety practices over time
• Your approach to consulting and communicating with employees about safety

Tip: Avoid overpromising. You don’t want to state you will do something you can’t realistically maintain (for example, “we inspect everything daily” if you know it will be ad hoc). It’s better to commit to consistent, achievable measures.

2) Who Is Responsible For Health And Safety (Roles And Accountability)

A common weak spot in small business documents is vagueness around responsibility - especially where “everyone chips in”.

Your policy should clearly identify:

• The person with overall responsibility (often a director, owner, or general manager)
• Who completes risk assessments and how often they’re reviewed
• Who manages training and keeps records
• Who investigates incidents and near-misses
• What employees are responsible for (following procedures, using PPE properly, reporting hazards)

If you use contractors or casual workers, your policy should also explain (at a high level) how you manage safety with non-employees on site, including inductions and supervision where needed.

3) Your Health And Safety Arrangements (How You Actually Manage Risk)

This is where you translate your policy statement into practical systems. The “arrangements” section will vary depending on your industry, but for many small businesses it covers:

• Risk assessments (when you do them, how you record them, and how you act on them)
• Training and induction (including refresher training)
• First aid arrangements and supplies
• Fire safety procedures and evacuation plans
• Accident, incident and near-miss reporting
• Equipment safety (maintenance, checks, safe use)
• Workplace hazards relevant to you (manual handling, slips/trips, display screen equipment, working at height, etc.)
• PPE requirements where applicable
• Visitors and customers (especially if you operate premises open to the public)

If you capture names, health details, CCTV footage, or incident reports, your arrangements should also consider data protection and privacy. Health and safety can overlap with GDPR compliance, so it can help to align your approach with a GDPR package (for example, data minimisation, retention periods, and access controls).

4) Consultation And Communication

Small businesses often do this informally (a quick chat on shift, a note in a WhatsApp group, or a toolbox talk). That’s fine - but your policy statement should still explain how safety info is communicated.

Common approaches include:

• Safety updates in team meetings
• Induction training for new starters
• Noticeboards or internal shared folders
• Named contact person for safety concerns

You want employees to feel confident raising concerns early, before they become incidents.

5) Sign-Off, Version Control, And Review Dates

Your health and safety policy statement should include:

• The date it was created
• The date it was last reviewed
• The next planned review date
• Who approved it (and their signature)

This sounds small, but it’s one of the easiest ways to show you’re actively managing the policy - not just filing it away.

How Do You Make Your Policy Statement Work In Real Life (Not Just On Paper)?

Having a health and safety policy statement is a great start, but it only protects your business if it’s actually implemented.

Here’s how small businesses can make it practical without turning it into a giant corporate exercise.

Step 1: Match The Policy To Your Actual Work

A retail shop, a café, and an IT consultancy will have very different risks. Your policy statement should reflect what’s real for you.

If you have multiple locations or mobile workers, consider whether you need site-specific procedures too.

Step 2: Train Your Team (And Keep Simple Records)

Training doesn’t have to be complicated, but it should be consistent. You might run:

• new starter safety inductions
• role-specific training (e.g. machinery, manual handling)
• refresher training every 6–12 months

Even a basic training log (date, topic, attendees) can help you stay organised and show what you’ve done if questions come up later.

Step 3: Put It Somewhere People Can Actually Find It

If your policy is locked away in a folder no one sees, it won’t guide behaviour. Make it accessible, for example:

• in your shared drive
• inside your onboarding pack
• in your staff handbook

Many small businesses include health and safety policies as part of a wider Staff Handbook, so expectations are in one place.

Step 4: Treat Incidents And Near-Misses As “Free Lessons”

No one wants an incident, but when something happens (or nearly happens), it’s a chance to tighten your processes.

Build a simple workflow:

• report it
• record it
• investigate it
• fix the root cause
• update your policy/training if needed

This kind of loop is exactly what regulators expect when they talk about managing risk “so far as is reasonably practicable”.

Common Mistakes Small Businesses Make (And How To Avoid Them)

Most health and safety problems we see aren’t caused by bad intentions - they come from being busy, growing quickly, or copying templates that don’t fit.

Using A Generic Template That Doesn’t Match Your Business

A generic policy statement might look “official”, but if it doesn’t reflect your working environment, it can create gaps or confusion.

Make sure yours is tailored to your:

• premises (or lack of premises)
• equipment and tools
• staff roles
• customer interactions
• industry risks

Not Clearly Assigning Responsibility

In a small business, people often wear multiple hats. That’s normal - but your policy needs to clarify who owns what, especially around:

• risk assessments
• training
• maintenance checks
• incident response

Forgetting Contractors, Temps, And Work Experience Placements

If you engage contractors, hire temps, or bring in students, they can still be exposed to risks on your site (and sometimes create risks for others). Your policy should explain how you manage inductions and supervision.

It’s also worth making sure your contractor arrangements are documented properly in writing, such as a Contractors Agreement, so responsibilities and site rules aren’t left ambiguous.

Not Reviewing The Policy When Your Business Changes

Your health and safety policy statement shouldn’t be static. You should revisit it when you:

• hire more staff
• move premises
• introduce new equipment or processes
• start offering new services
• have an incident or repeated near-misses

Keeping it current is one of the simplest ways to stay protected from day one - and as you grow.

Key Takeaways

• A health and safety policy statement sets out your business’ commitment to keeping staff (and others) safe and is usually the “headline” part of your wider health and safety policy.
• If you have five or more employees, you must have a written health and safety policy (including a statement of intent, responsibilities, and arrangements) and bring it to employees’ attention.
• A strong policy statement should cover your statement of intent, who is responsible for safety tasks, and the practical arrangements you use to manage risk.
• Your policy should be easy to understand, realistic for how your business operates, and supported by training, reporting processes, and regular reviews.
• Avoid common pitfalls like using a generic template, failing to assign responsibility, and forgetting to cover contractors, temps, or new work activities.
• Health and safety often links to other key documents like your employment contracts, handbook, and workplace policies, so it’s worth keeping them consistent.

If you’d like help putting together a health and safety policy statement (or reviewing your broader workplace documentation), you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.