Understanding Your Legal Obligations: Health and Safety Policies for UK Businesses

If you’re starting or running a business in the UK, you’ve probably been told that a health and safety policy isn’t just a good idea - it’s a legal must. But what exactly does a health and safety policy involve? How do you know if your company needs one, and what should it cover?

Don’t worry - whether you’re hiring your first employee or want to stay on top of compliance as your business grows, understanding workplace health and safety policies is simpler than you might think. In this guide, we’ll break down your legal responsibilities, explain what a proper policy in health and safety should look like, and help you avoid common mistakes that trip up new business owners.

Ready to take the guesswork out of health and safety? Let’s get started.

What Is a Health and Safety Policy, and Do I Need One?

A health and safety policy is a written document that sets out your business’s commitment to keeping people safe at work. It explains how you manage health and safety risks, who is responsible for what, and what practical steps you take to prevent accidents and injuries.

So, do you need a health and safety policy?

• If you have five or more employees (including directors), you’re legally required to have a written health and safety policy under the Health and Safety at Work etc. Act 1974 and supporting regulations.
• If you have fewer than five employees, you’re still required to manage health and safety - but you don’t legally need a written policy document. That said, it’s best practice to have one anyway, especially if your business is growing.

Remember, your health and safety obligations apply whether your team works on-site, remotely, or a mix of both. If you’re in any doubt, play it safe and put your policy in writing - it’s easier to show evidence of compliance if you’re ever asked by inspectors, insurers, or employees.

Why Is a Health and Safety Policy Important for Businesses?

Your company health and safety policy isn’t just ticking a legal box - it’s about protecting your people, your reputation, and your bottom line. Here’s why having clear health and safety policies and procedures is so important:

• It’s the law. Non-compliance can result in hefty fines, prosecution, being shut down, or difficulties with insurance claims.
• It reduces accidents and absences. A well-implemented policy can help prevent injuries and work-related illnesses, keeping your workforce healthy and productive.
• It builds trust. Staff, customers, suppliers, and investors will all expect your business to act responsibly and care for your people.
• It helps you manage risk. By identifying hazards and having clear procedures, you’re less likely to face workplace disputes or claims.

In short - a business health and safety policy is just good business. It signals your professionalism and commitment as an employer, and sets a solid foundation for growth.

Who Is Responsible for Preparing a Health and Safety Policy?

The legal duty to prepare a written health and safety policy for a business falls to the employer - usually the owner, managing director, or the company board. It cannot be delegated entirely to an external adviser or a junior staff member.

While you can (and should) involve employees, health and safety reps, or consultants in developing your safety policy, the ultimate responsibility for health and safety compliance rests with the business. If you outsource writing your policy, make sure you understand and actually implement its measures - don’t just file it away!

What Should a Health and Safety Policy Include?

Wondering what a health and safety policy should include? The Health and Safety Executive (HSE) recommends structuring your policy into three main sections:

1. Statement of Intent

• This is your business’s commitment to health and safety - a short, punchy statement from the most senior person (e.g. owner, director).
• It might say something like: “We are committed to ensuring the health, safety, and welfare of our employees and anyone affected by our work activities.”

2. Responsibilities for Health and Safety

• Set out who does what. Who is responsible for implementing the policy, carrying out risk assessments, reporting hazards, and investigating incidents?
• Name specific people if possible (e.g. “The Health and Safety Lead is John Smith”), and make sure this is kept up to date.

3. Arrangements (Practical Measures)

• This is the “how.” Detail the day-to-day procedures and rules to control risks - including:
• How you identify and manage hazards (risk assessments)
• Training and supervision for staff (especially new starters or work experience placements)
• Procedures for dealing with emergencies (fire drills, first aid, evacuations)
• Reporting accidents and near misses
• Ongoing monitoring and reviews of your safety measures

For some businesses, you should also include specifics like equipment maintenance, use of PPE (personal protective equipment), and any industry-specific rules (for example, food safety for catering businesses, or COSHH controls for handling chemicals).

The HSE provides free health and safety policy templates, but remember - all policies should be tailored to your business. Generic templates rarely cover the unique risks and arrangements of your specific workplace.

Is My Health and Safety Policy a Legal Requirement?

Yes - for any business with five or more employees, you must have a written health and safety policy document (and it must be brought to the attention of all employees). This is set out under section 2 of the Health and Safety at Work etc. Act 1974 and supported by regulations such as the Management of Health and Safety at Work Regulations 1999.

If you’re a sole trader or have a very small team, you still need to actively manage health and safety risks. Inspectors may still want to see evidence, and you still owe a duty of care, but a written document is not legally required. However, having clear procedures is always wise, as it makes compliance much easier if your business grows or if you pursue tenders/contracts in the future.

Keep in mind that certain trades, such as construction, manufacturing, or healthcare, may require more detailed policies and even industry-specific procedures. If you’re unsure what’s required for your sector, it’s smart to seek expert advice on workplace health and safety.

Health and Safety Policy vs. Procedures: What’s the Difference?

In practice, your health and safety policy is the overarching statement and structure for health and safety in your business. It sets out your commitments, responsibilities, and the big-picture approach.

Health and safety procedures are the practical instructions that support your policy. These might include:

• How to carry out a risk assessment step-by-step
• The process for reporting accidents or near misses
• Specific training or induction checklists for new staff
• Maintenance schedules for equipment
• Detailed fire evacuation and first aid arrangements

Think of your health and safety policy as the “what and why,” and your procedures as the detailed “how.” Both are essential for keeping your business compliant and your people safe. If you want practical advice on drafting effective policies and procedures, check out our guide to core company policies.

Common Pitfalls: Mistakes to Avoid With Health and Safety Policies

Even well-meaning business owners can stumble when it comes to health and safety policy UK requirements. Here are some common mistakes to avoid:

• Using generic templates: A copy-and-paste policy won’t cover unique risks in your business.
• Not communicating the policy: All staff (including temps or part-timers) must know and understand your policy. Keep it visible and discuss it in onboarding and refresher training.
• Neglecting regular reviews: Your policy should be kept up to date. If your business expands, starts new activities, hires new staff, or moves location, review and update your policy.
• Forgetting about remote workers: Health and safety duties extend to those working from home or off-site - not just the office or warehouse.
• Failing to follow through: Written statements are useless unless actually implemented. Make sure you check what you say you’ll do is happening in practice.

Want to avoid other costly legal pitfalls? Check out our list of 10 small business mistakes (and how to steer clear of them).

How Do I Create an Effective Health and Safety Policy?

Writing a health and safety policy document doesn’t have to be complicated, but it should be done carefully. Here are the steps we recommend:

1. Assess Your Risks

Start with a risk assessment - what hazards could cause harm in your workplace? Look at your work activities, equipment, environment, and people.

2. Set Out Responsibilities

Decide who will be in charge of health and safety overall, and who will be responsible for specific tasks (like risk assessments or first aid).

3. Draft the Policy Statement and Arrangements

Write your statement of intent, define responsibilities, and list your arrangements and safety measures.

4. Consult Employees

The law requires you to consult staff on health and safety matters. Ask for feedback and encourage ownership of safety across your team.

5. Communicate and Train

Share your policy with all employees and contractors. Build it into new starter inductions and refresher training. Make sure everyone knows how to report issues and what to do in an emergency.

6. Review and Update Regularly

Set a schedule to review your policy at least annually - or whenever there’s a major change to your team, work, or premises. Update your policy when new risks are identified or legislation changes.

Not sure where to start, or worried about getting it right? Our workplace policy package can help ensure your documents are legally robust and truly fit for your business.

Health and Safety Policy for Employees: What Are Their Rights?

Your staff have the right to a safe place of work. Under UK employment law, they can:

• See and get a copy of your health and safety policy document
• Be consulted on health and safety matters
• Report hazards or unsafe conditions without fear of retaliation
• Refuse to work if they reasonably believe there is a serious and imminent danger

Make sure staff are aware of their own duties as well - including following safety instructions, using provided equipment correctly, and reporting concerns promptly.

For more about your duty of care and compliance with staff rights, check out our guide to UK employment laws.

What If I Don’t Have a Health and Safety Policy?

If your business is inspected and you can’t show a valid written policy (when required), you may face enforcement action from the HSE or your local authority. This could mean:

• Improvement notices ordering you to fix compliance failures
• Fines or prosecution for serious breaches
• Problems with insurance claims if an accident occurs
• Reputational damage and loss of contracts (especially if clients require evidence of a strong safety record)

Even if a written policy isn’t a strict legal requirement for your business size, failing to manage safety risks still exposes you to costly accidents, staff claims, and avoidable disruption. As with most things in law - it’s always better to be proactive!

Other Workplace Safety Obligations to Consider

It’s important to remember that a health and safety policy is just one part of your legal responsibilities. UK employers must also:

• Carry out risk assessments and act on their findings
• Display the HSE health and safety law poster
• Report certain accidents and dangerous occurrences under RIDDOR
• Arrange suitable first aid cover
• Provide adequate facilities and welfare arrangements
• Manage stress, mental health, and wellbeing at work

If you work with young people, have work experience staff, or operate in higher-risk sectors, you’ll need extra precautions. See our further reading on managing disability at work and handling sickness and absences in line with your legal duties.

Key Takeaways

• UK businesses with five or more employees must have a written health and safety policy, but all employers must manage workplace safety risks.
• Your policy should cover your commitment (statement of intent), clear responsibilities, and practical arrangements for safety.
• Policies must be reviewed, updated, and communicated to all staff - including remote and part-time workers.
• Templates can be a helpful starting point, but your health and safety policy must reflect the actual risks and practices of your business.
• Failing to have a valid policy can result in enforcement action, fines, loss of reputation, and employee claims.
• Addressing health and safety from day one will give you legal peace of mind and contribute to a safer, more productive workplace.

---

If you’d like help drafting or reviewing your health and safety policy, or need advice on workplace compliance, get in touch with our friendly legal team. You can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.