Health and safety compliance is a crucial responsibility for all UK small business owners. Ensuring a safe workplace not only protects employees and customers but also helps your business avoid costly fines and legal issues under UK law.
Understanding your legal obligations under health and safety legislation can seem daunting, but with clear guidance and practical steps, you can create a safer working environment and remain compliant with regulations enforced by the Health and Safety Executive (HSE).
| Key Health and Safety Facts for Small Businesses | |
|---|---|
| Risk assessments | Required by law; must identify and control workplace hazards |
| Employer’s Liability Insurance | Compulsory for most businesses with employees |
| Reporting accidents | Certain work-related injuries and illnesses must be reported under RIDDOR |
| HSE enforcement | HSE can inspect premises and issue improvement or prohibition notices |
The Legal Framework: What UK Law Requires
The primary legislation governing health and safety in the workplace is the Health and Safety at Work etc. Act 1974 (HSWA). This Act places a general duty on employers to ensure, so far as reasonably practicable, the health, safety and welfare of all employees and others affected by their business activities.
In addition to HSWA, various regulations support and expand on these duties, including the Management of Health and Safety at Work Regulations 1999, which specifically require employers to carry out risk assessments and implement appropriate control measures.
The Health and Safety Executive (HSE) is the national regulator responsible for enforcing these laws, providing guidance, and investigating workplace incidents. Small business owners must familiarise themselves with these responsibilities to avoid enforcement action, which can include fines or even prosecution.
Risk Assessments: The Cornerstone of Compliance
Under the Management of Health and Safety at Work Regulations 1999, every employer must carry out a suitable and sufficient risk assessment. This process involves identifying potential hazards in the workplace, evaluating the risks they pose, and deciding on measures to control or eliminate risks.
A risk assessment should be a practical document that helps manage health and safety effectively. It must cover all relevant hazards, including physical, chemical, biological, and psychosocial risks depending on your business type.
Practical Steps to Conduct a Risk Assessment
- Identify hazards: Walk around your premises and list anything that could cause harm.
- Determine who might be harmed: Consider employees, contractors, visitors, and members of the public.
- Evaluate the risks: Decide how likely it is that harm could occur and how severe it might be.
- Implement controls: Remove the hazard or reduce the risk as much as reasonably practicable.
- Record your findings: Keep a written record if you have five or more employees, as required by law.
- Review regularly: Update the assessment when circumstances change or new risks emerge.
Employer’s Liability Insurance: A Legal Must-Have
Most UK businesses that employ staff are legally required to have Employer’s Liability (EL) insurance. This insurance protects your business if employees are injured or become ill as a result of their work.
The Employers’ Liability (Compulsory Insurance) Act 1969 makes this insurance compulsory. Failure to have a valid EL insurance policy can lead to significant fines and, in some cases, criminal prosecution.
You must display your Employers’ Liability insurance certificate where employees can easily see it, or provide it electronically if preferred. The policy should cover at least £5 million in liability.
Ready to open your business bank account?
Open a Tide business account free and get up to £200 cash — use Tide referral code REFER200 when signing up or click the link below. Takes under 5 minutes, no credit check.
Reporting Accidents and Incidents: What You Must Do
Under the Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 (RIDDOR), certain work-related accidents, diseases, and dangerous occurrences must be reported to the HSE or your local authority.
This includes deaths, major injuries (such as fractures or amputations), work-related illnesses, and incidents that could have caused serious harm. Reporting helps the HSE identify where risks are and take action to prevent future accidents.
Failure to report when required is a criminal offence and can result in prosecution. You should keep records of all reportable incidents for at least three years.
Key Points for RIDDOR Reporting
- Report fatalities and major injuries immediately, usually within 10 days.
- Report occupational diseases and dangerous occurrences as soon as possible.
- Notify your insurer and inform your employees about how to report incidents internally.
- Use the official online reporting system on the GOV.UK website.
Maintaining Compliance: Ongoing Health and Safety Management
Health and safety is not a one-off task but an ongoing process. Small businesses should establish clear policies, provide adequate training, and regularly review procedures to maintain compliance and protect everyone involved.
Consulting authoritative resources such as the HSE website and ACAS guidance can help you keep up to date with your responsibilities and best practices.
Remember, specific industries may have additional regulations – for example, construction, manufacturing, or hospitality – so tailor your health and safety management accordingly.
Seeking professional legal advice is advisable if you have complex situations or require help creating compliant policies and procedures.
- Carry out and regularly review risk assessments covering all workplace hazards.
- Maintain valid Employer’s Liability insurance and display the certificate where employees can see it.
- Report certain accidents, injuries, and dangerous occurrences to the HSE under RIDDOR.
- Keep clear records of risk assessments, training, and accident reports.
- Follow HSE and ACAS guidance to maintain a safe work environment.
- Seek professional advice for complex health and safety issues or compliance concerns.
Do I need to do a risk assessment if I have no employees?
Yes. If you are self-employed or run a sole trader business, you still have a legal duty to protect yourself and others from health and safety risks. A risk assessment will help you identify hazards and reduce risks in your workplace.
How long should I keep health and safety records?
You must keep risk assessments for at least three years from the date they were made. Records of reportable accidents under RIDDOR should also be kept for a minimum of three years. Training and inspection records should be retained as long as they remain relevant.
What happens if I don’t comply with health and safety laws?
Non-compliance can result in enforcement action by the HSE, including fines, improvement or prohibition notices, and in serious cases, prosecution leading to criminal penalties. Poor health and safety management also increases the risk of accidents and claims, harming your business reputation.
Official Sources
* GOV.UK: Set up a business · * HMRC: Income Tax rates · * HMRC: Corporation Tax · * HMRC: VAT registration