Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
Contents
When you’re busy building your business in the UK-whether that’s running a retail shop, launching a tech startup, or growing a team-liability is one of those legal concepts that’s all too easy to overlook. But, what if we told you that there are some duties so serious under UK law that you can’t simply hand them off, even if you outsource or get someone else to do the work?
That’s where the idea of a non delegable duty comes in. If you aren’t aware of how these responsibilities could impact your business, you could face some nasty surprises. In this article, we’ll break down what non-delegable duties actually are, why they matter for business owners, and how you can keep your legal risks in check while growing your company. Let’s dive in.
What Is a Non-Delegable Duty?
Let’s start with the basics. In most situations, if you hire a contractor-say, a cleaning company, a builder, or a web developer-you’re not legally responsible for how they do the job (unless you’ve been careless in your choice, or you’ve asked them to do something unsafe). This is the general rule with contract law: you’re responsible for your employees, but not for separate businesses you hire to perform services.
A non-delegable duty is the exception. It’s a legal obligation that you cannot escape by paying someone else to do the work. Even if you hire a specialist or hand the task off to a third party, the duty remains with you. If things go wrong and someone suffers harm, you could be liable-even if you never touched the work yourself.
Think of non-delegable duties as the legal equivalent of “the buck stops here.” They place a higher level of responsibility on business owners to make sure certain tasks or areas are handled with absolute care.
When Do Non-Delegable Duties Arise for UK Businesses?
Non-delegable duties are most likely to exist in situations where:
- There’s a particular risk of harm to others (for example, health and safety hazards).
- The relationship is one where one party is especially dependent or vulnerable (like a school’s duty to its students, or a hospital’s duty to its patients).
- The law, a contract, or industry regulations state that the duty cannot be delegated.
For most small and medium-sized businesses, the main areas where non-delegable duties might crop up include:
- Health and safety obligations (such as for staff, customers or visitors on your premises).
- Employer responsibilities (especially around workplace safety, discrimination, and harassment).
- Data protection and privacy under UK GDPR.
- Certain consumer protection laws (like product safety or fair trading).
Why Can’t I Just Outsource These Duties?
Outsourcing can be a fantastic way to boost your business’s efficiency and bring in expert help. But with non-delegable duties, the law draws a line: you can’t contract out of your core legal responsibilities, no matter how much you trust your contractor or partner.
This means if you operate a café and outsource your food safety checks, you’re still responsible if a customer gets sick due to unsafe practices. If you run an online store and hire an IT company to manage your security, you could still be liable if there’s a major personal data breach. In short, the responsibility for these duties stays with you, even if someone else “does the work.”
This is particularly important to keep in mind when negotiating contractor agreements or engaging outside professionals. You need to be clear on which obligations you can’t hand off, so you don’t end up with accidental legal exposure.
Main Types of Non-Delegable Duties Affecting UK Businesses
Health and Safety Obligations
If you employ staff or have people coming into your place of business, you have a non-delegable duty under the Health and Safety at Work etc. Act 1974. You must take reasonable steps to prevent harm to staff, customers, contractors, and visitors-regardless of whether you use internal staff or bring in outside help.
Key examples include:
- Carrying out risk assessments (and acting on them!).
- Keeping premises and equipment safe.
- Ensuring employees have proper training and supervision.
- Maintaining clear policies and reporting procedures for accidents.
Even if you hire a cleaning contractor, you’re still responsible for slip hazards in your shop. If someone is injured, you can be liable-so always have a clear policy in place and check it’s carried out properly.
Employer Duties: Staff Wellbeing and Discrimination
Employers are held to a non-delegable duty in areas like safeguarding against workplace discrimination, harassment, and bullying. The Equality Act 2010 means you must take all steps reasonably possible to prevent unlawful behaviour-outsourcing HR or using temp agencies doesn’t remove this obligation.
This duty covers:
- Preventing discrimination on the grounds of race, gender, age, disability, religion, etc.
- Making reasonable adjustments for disabled employees.
- Actively dealing with harassment complaints.
- Maintaining safe and respectful work environments.
Worried about confusing compliance rules? Our guide to UK employment laws breaks it all down in plain English.
Data Protection and Privacy
Are you collecting, storing, or using customer or employee data? UK businesses are responsible for complying with the UK GDPR and Data Protection Act 2018. While you can use cloud providers or IT contractors, you still have a non-delegable duty to safeguard data and notify the ICO of breaches.
This covers:
- Determining the legal basis for collecting and processing data.
- Ensuring proper cybersecurity measures are in place.
- Being prepared for data breaches and reporting to authorities fast.
For smaller businesses, it’s worth getting up to speed with our practical GDPR compliance tips.
Product Safety and Consumer Protection
If you manufacture or supply products (including importing, making, or selling online), you owe customers a non-delegable duty to make sure your products are safe and accurately described under the Consumer Rights Act 2015 and related product safety legislation.
You can’t contract out of this by blaming a supplier or manufacturer if something you sell injures or misleads a consumer. Even if someone else made the product, as a seller you remain responsible for its safety and compliance-so due diligence on your supply chain is a must.
Check out our in-depth resource on product liability in the UK for an overview of what’s required to avoid claims.
How Does a Non-Delegable Duty Affect My Business?
Not understanding your non-delegable duties can be a recipe for trouble-think legal claims, fines, or reputational damage. Here’s what’s at stake, and why it matters for your business:
- Legal liability: If you breach a non-delegable duty and someone is harmed (physically, financially, or otherwise), your business could be on the hook for damages-no matter who was actually at fault.
- Insurance won’t always help: Insurers may refuse to cover claims if you’ve neglected a non-delegable duty.
- Reputation risk: Breaches can erode trust with customers, clients, and employees.
- Enforcement action: Authorities like the HSE (Health and Safety Executive) or the ICO (Information Commissioner’s Office) can investigate and issue fines, stop-work orders, or even criminal penalties in severe cases.
For example, if a cleaning contractor misses a vital task and a customer slips, you could face a personal injury claim-and the fact you “delegated” the work won’t cut it as a defence. Similarly, if a data processing company loses your customer data, your business can be sued or fined under data protection law.
How Can I Protect My Business?
Luckily, there are practical steps you can take to manage your non-delegable duties and reduce liability:
1. Understand Your Legal Duties
Start by working out which obligations can’t be delegated. Every business will have different risks depending on its structure, industry, and size. If you’re unsure, having a chat with a legal expert can help clarify where you stand.
2. Use Clear Contracts-But Don’t Rely Solely on Them
Always have professionally drafted contracts or service agreements with contractors and third parties, especially around health and safety, data processing, and supply of goods or services. However, remember that even the best contract clauses can’t shift legal duties the law says are non-delegable.
3. Carry Out Due Diligence and Take Active Steps
Regularly check (and record) that contractors and suppliers are following agreed safety procedures, maintaining data protection standards, and complying with legal requirements. Don’t just set it and forget it-actively monitor compliance.
4. Train Your Team
Make sure employees know your business’s health and safety procedures, equality policies, and data protection rules. Good training helps everyone understand their responsibilities and spot problems early.
5. Keep Up-To-Date With the Law
Laws do change, so it’s well worth keeping an eye on updates to business regulations. Busy? An annual review with your legal advisor can help catch changes so you can update your internal policies and contracts as needed. Our article on business regulations compliance outlines key obligations to keep in mind.
6. Be Prepared for Incidents and Complaints
Have a clear policy for handling complaints, accidents, or data breaches. Document what happened, how you responded, and how you’ll prevent it next time. This can help demonstrate you took your responsibilities seriously if you’re ever investigated or sued.
7. Get the Right Insurance-But Don’t Assume It’s a Get-Out Clause
Appropriate business insurance (like public liability, professional indemnity, employers’ liability) can help manage risks. Just check the small print: insurers may exclude cover for breaches of non-delegable duties, so risk management is always better than a payout!
What Legal Documents Are Important to Manage These Duties?
While you can’t delegate away non-delegable duties, having the right legal documents in place is absolutely vital:
- Contractor or service agreements-clearly state expectations, indemnities, and compliance obligations.
- Service agreements-to clarify standards for third-party suppliers.
- Data processing agreements-to establish privacy duties if you outsource data handling.
- Staff handbooks or workplace policies-to set out rules on health and safety, discrimination, and equal opportunity.
- Incident and complaint reporting forms-to demonstrate steps taken in the event of accidents, complaints, or breaches.
Tailored contracts and effective compliance policies not only help protect you legally, they also make sure everyone involved knows their responsibilities upfront.
Key Takeaways
- Some business duties can never be delegated: You are always legally responsible for key obligations (like safety, data protection or discrimination), even if you outsource the work.
- Non-delegable duties span health & safety, data, products and HR: The main risks for UK businesses include staff/customers’ safety, preventing discrimination, protecting personal data and ensuring products are safe.
- Outsourcing won’t protect you from liability: Even with contracts in place, you can still be liable for harm if core duties are breached.
- Set up robust legal documents and processes: Good contracts, staff policies, and clear risk management can help demonstrate you take your duties seriously and reduce the risks of fines or claims.
- Stay updated and seek tailored advice: The law can change, and every business is different. Having a conversation with a legal expert is the best way to make sure you’re protected.
If you need help understanding your non-delegable duties, reviewing your contracts, or setting up practical compliance systems, our friendly legal team is here to help. Contact us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat about protecting your business.
