Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
Contents
In recent years, working from home has quickly shifted from a temporary fix to a long-term reality for small businesses and startups across the UK. Whether your team is fully remote, hybrid, or simply flexible, a clear working from home policy is now an absolute must.
But crafting a work from home policy isn’t just about keeping operations running smoothly-it’s also a legal minefield. As an employer, you’re responsible for ensuring that your working from home policy UK is both practical and fully compliant with UK law, or you could risk fines, disputes, or even harm to your business’s reputation.
Not sure where to start? Don’t stress - with the right know-how (and maybe a little expert guidance), you can design a working from home policy that empowers your team, minimises risk, and ticks all the legal boxes. Keep reading to learn how.
What Is A Working From Home Policy-And Why Does It Matter?
A working from home policy sets out the ground rules for employees doing their jobs away from your business premises. It outlines things like expectations, communication, data security, health and safety, and the process for requesting or managing remote work.
Here’s why getting your policy right really matters:
- Legal protection: You’re responsible for your staff’s health, safety, and well-being-even when they’re working from their kitchen table.
- Consistency: Clear policies ensure everyone knows what’s expected, reducing confusion and disputes.
- Data security: With sensitive company and customer info being accessed remotely, you need robust privacy rules.
- Fairness and inclusion: Transparent processes help avoid discrimination claims and ensure equal treatment.
Ultimately, a good working from home policy protects both your business and your employees from day one.
Is A Working From Home Policy Legally Required?
While there’s no blanket law demanding a written work from home policy, several key legal requirements apply:
- You must comply with employment law, including the Employment Rights Act 1996 and, where appropriate, the Flexible Working Regulations.
- From 6 April 2024, employees have the right to request flexible working from day one of employment (not after 26 weeks, as previously)-so your policy should reflect the new rules. Read more on the 2024 flexible working reforms.
- Health and safety duties extend to home workers under the Health and Safety at Work etc. Act 1974.
- You must observe data protection laws (including UK GDPR and the Data Protection Act 2018) if your team handles personal or sensitive data remotely. See our GDPR essentials guide.
While you’re not obliged to commit every policy to writing, a documented (and well-communicated) process is strongly recommended for both compliance and best practice.
What Should You Include In A Legally Compliant Working From Home Policy?
Your working from home policy should address all the practical and legal bases. Here’s a checklist of what to cover:
- Eligibility and Application Procedure
- Who can request to work from home?
- How are requests made and reviewed? (Reflecting the new flexible working rights)
- Is there a trial period or a review process?
- Expectations and Responsibilities
- Clear guidance on working hours, availability, and output
- Rules for reporting sickness, absence, or technical issues
- Performance Management
- How performance will be monitored and measured remotely
- Processes for feedback, support, and tracking goals
- Health, Safety & Welfare
- Employer's duty of care for risk assessment and workstation safety (more on this below)
- Guidance for staff on creating a safe working environment
- Equipment and Expenses
- Who provides and maintains equipment?
- Policy for IT support, reimbursement, or use of personal devices
- Data Protection and Confidentiality
- Rules for keeping company and customer data safe and private
- Clear directions for using secure passwords, safe file storage, confidentiality when working in shared households, and procedures for data breach notification
- Communication
- How and when team members should stay in touch (calls, email, video, messaging apps, etc.)
- Guidance on attending virtual meetings and maintaining team culture
- Insurance and Liability
- Explain employer liability and what insurance covers (e.g. equipment, accidents at home)
Need help drafting workplace documentation that ticks all the legal boxes? Here’s what makes a great company policy.
How To Build Your Working From Home Policy: Step-By-Step Guide
1. Assess Your Business Needs
Every organisation is a little different. Start by considering:
- Which roles can (or can’t) be performed remotely?
- Are there key security, safety, or customer-facing requirements preventing full remote work?
- How much flexibility can you offer without impacting business needs?
2. Review Legal Obligations
Now map out your legal “musts”:
- Flexible working requests: As of April 2024, any employee (even on day one) can make a flexible working request. You must consult and give a clear answer in a reasonable timeframe-and refusal has to be for a permitted business reason. Learn more at The 2024 Flexible Working Reforms.
- Health & safety duty: You must take “reasonable steps” to protect employees, even at home. This means risk assessments (which can be self-assessments), guidance about good posture/equipment, preventing excess working, and tackling stress.
- Confidentiality & privacy: GDPR and data protection rules don’t stop for remote work. Spell out how staff can keep client and employer information secure at home (and check your own GDPR obligations).
3. Put The Policy In Writing
Turning your plan into a formal document is strongly recommended. Your working from home policy should either stand alone or be included within your Employee Handbook or staff contracts. Either way, get it signed, communicated, and easily available.
Don’t be tempted to just “copy and paste” a policy from another business-a generic template likely won’t cover your legal bases or reflect your business’s specific needs. For specialist help, see our guide to staff handbooks.
4. Consult and Get Feedback
Where practical, consult employees or representatives before finalising your policy. Not only is this often required by law (where contract terms are being changed), but it also helps get buy-in and ensures practical issues are flagged early. Be transparent about why decisions are being made-this builds trust and reduces disputes down the line.
5. Train Managers And Staff
Roll out your new work from home policy with a clear explanation to all team members. Provide relevant training for both staff (e.g. on cybersecurity and data handling at home) and line managers (e.g. on monitoring performance remotely, handling requests fairly).
6. Review And Update Regularly
Legal requirements evolve and flexible working habits change. Put your working from home policy on the list for regular review-at least once a year, or after any employment law developments. Invite feedback. Is the policy working in practice? Are there health and safety concerns cropping up? Continuous improvement is key.
What Laws And Risks Should Your Working From Home Policy Address?
Employment Law
UK employment law requires you to treat remote workers fairly and not disadvantage them compared to on-site colleagues. Your policy should clearly state that home workers receive equal pay, benefits, and opportunities, and that no discrimination will occur. Ensure any performance targets or disciplinary processes for remote workers are reasonable and documented. See our guide to employment rights here.
Health & Safety
Your health and safety obligations under the Health and Safety at Work etc. Act 1974 apply no matter where staff are based. For remote workers, this means:
- Risk assessing their home work environment (they can self-assess with your template or checklist)
- Providing information about workstation setup, posture, screen breaks, and reporting concerns
- Tackling remote work-associated risks (loneliness, stress, or overwork)
- Documenting actions in line with your general health and safety policy
If you supply equipment, clarify your process for repairs and replacements. If staff use their own kit, make clear what’s required for safe working and what support you’ll offer.
Data Protection & Privacy
Home working can expose your business to greater data protection and cybersecurity risks. Your working from home policy should set out rules about:
- Handling confidential documents-both in digital and paper form
- Restrictions on sharing devices with family or housemates
- Using secure connections (VPNs, strong passwords, updated antivirus)
- Steps for reporting any data breach or suspicious activity promptly
Read more about building a privacy-first culture.
Expenses and Tax Considerations
You don’t have to reimburse every home working cost, but it’s good practice to set out what you’ll cover (e.g. extra phone use, broadband, printer ink, etc.). Be clear how employees can claim. Consider whether home workers will need to change their insurance (home contents, or “business equipment” coverage).
It’s wise to remind staff that they are responsible for checking with their insurer or mortgage lender about working from home. The business may need to issue a letter for this.
Contractual Terms
Your employment contracts should reference the possibility of home working, either permanently or on a flexible basis. If contractual changes are required (for example, permanent change of workplace), do so via a formal contract amendment and proper consultation. Learn about changing employment contracts here.
FAQs: Common Issues With Work From Home Policies
Do I Need To Provide Equipment For Home Workers?
You’re not legally required to equip every remote employee, but you must ensure staff can work safely and effectively. Decide if you’ll provide essentials (laptop, monitor, desk chair) or expect staff to use their own. Be clear about what’s supplied, how to request equipment, and how to report issues. For health and safety, a basic ergonomic assessment (and follow-up) is expected.
How Should I Handle Flexible Working Requests?
From April 2024, all employees can request flexible working from day one. You must handle requests in a “reasonable manner”: consult, consider business needs, and keep a written record. Only refuse for valid business reasons (such as impact on quality or performance). Check out our detailed breakdown.
What If A Home Worker Has An Accident While Working?
Your liability as an employer extends to work-related incidents at home. That’s why risk assessments, clear reporting protocols, and insurance arrangements all matter. If an employee is injured during work hours in their home office and it’s connected to their job, you could be held responsible.
How Can I Protect Data And Avoid A Breach?
Strong, well-communicated processes are essential. Your working from home policy should reference your wider privacy policy and IT security guidance, set out device and password rules, and provide mandatory induction or regular reminders. For higher-risk roles (e.g., handling lots of customer info), you may need enhanced supervision or device tracking.
Key Takeaways: Creating A Compliant Working From Home Policy
- Every UK business should have a clear, accessible working from home policy tailored to its operations and legal responsibilities.
- Comply with UK laws on health & safety, flexible working, equality, data protection, and contracts-your duty doesn’t stop when staff work remotely.
- Cover all essential areas: eligibility, expectations, performance, equipment, expenses, health & safety, data security, and communication.
- Get your policy in writing, consult employees, and train your team to understand their rights and duties-don’t rely on word-of-mouth or one-size-fits-all templates.
- Review and update your policy regularly to capture changing law, technology, and feedback from staff.
- If in doubt, seek specific legal advice to protect your business and reassure your team-you don’t have to do it alone.
If you’d like help drafting a legally compliant working from home policy or reviewing your approach to remote work, you can reach us at team@sprintlaw.co.uk or call 08081347754 for a free, no-obligations chat with our expert team. Set your business up with confidence.
