Conducting a thorough risk assessment is essential for any UK business owner to ensure the safety of employees, customers, and visitors while complying with health and safety laws. A well-prepared risk assessment helps you identify potential hazards, evaluate risks, and implement measures to reduce or eliminate those risks, protecting your business from legal liabilities and operational disruptions.

Key Facts About Risk Assessments
  • Required by law under the Management of Health and Safety at Work Regulations 1999
  • Must be suitable and sufficient for the size and nature of your business
  • Should identify hazards, decide who might be harmed, and control risks
  • Needs to be reviewed regularly and updated following significant changes
  • Small businesses with fewer than five employees are not required to write assessments but should still carry them out

Understanding Risk Assessments and Their Legal Importance

A risk assessment is a careful examination of what could cause harm to people in your business and whether you are doing enough to prevent that harm. The legal basis for risk assessments in the UK primarily derives from the Management of Health and Safety at Work Regulations 1999, which require employers to assess risks to workers and others affected by their business activities.

Failure to carry out a suitable risk assessment can lead to enforcement action by the Health and Safety Executive (HSE) or local authorities, including fines or prosecution under the Health and Safety at Work Act 1974. Beyond legal compliance, risk assessments promote a safer workplace culture that can reduce accidents and associated costs.

The Five Steps of a Risk Assessment

Effective risk assessments follow a clear, structured process. The HSE recommends five key steps to help you identify and manage workplace risks:

  1. Identify hazards: Look around your workplace and activities to spot anything that could cause harm. Hazards can be physical, chemical, biological, ergonomic, or psychosocial.
  2. Decide who might be harmed and how: Consider employees, contractors, visitors, and the public, as well as vulnerable groups such as young workers or those with disabilities.
  3. Evaluate the risks and decide on precautions: Assess the likelihood and severity of harm, and determine whether existing controls are adequate or further measures are needed.
  4. Record your findings: Write down the significant hazards and control measures, especially if you have five or more employees, to demonstrate compliance.
  5. Review and update the assessment: Keep your risk assessment current by reviewing it regularly and after changes such as new equipment, processes, or incidents.

Following these steps ensures your risk assessment is comprehensive and useful in maintaining workplace safety.

Common Hazards to Look For in Your Business

While hazards vary depending on your type of business, some risks are common across many workplaces. Being aware of these can help you conduct a more thorough assessment:

  • Slips, trips, and falls: Uneven floors, wet surfaces, trailing cables, or cluttered walkways.
  • Manual handling: Lifting or moving heavy items improperly, leading to musculoskeletal injuries.
  • Chemicals and substances: Exposure to cleaning products, solvents, or other hazardous materials requiring COSHH assessments.
  • Equipment and machinery: Risk of injury from moving parts, inadequate guards, or poor maintenance.
  • Fire hazards: Faulty wiring, blocked fire exits, or lack of fire safety training.
  • Workplace stress: Excessive workload, poor communication, or harassment affecting mental health.

Remember to tailor your assessment to your specific workplace conditions and operations.

£200
Free cash when you open & spend

Ready to open your business bank account?

Open a Tide business account free and get up to £200 cash — use Tide referral code REFER200 when signing up or click the link below. Takes under 5 minutes, no credit check.

REFER200
Click to copy code Claim £200 Free →

Read our full Tide review →

*T&Cs apply. Affiliate link.

How to Record and Review Your Risk Assessment

If your business has five or more employees, you must write down your risk assessment findings. This written record should be clear and straightforward, detailing the hazards identified, the people at risk, and the control measures you have implemented.

There is no mandatory format for risk assessments, but many businesses find it helpful to use templates or forms to ensure consistency and completeness. Free templates are available from the HSE website and other reputable sources.

Tips for Effective Documentation

  • Use plain language and avoid jargon to ensure all staff can understand the assessment.
  • Include dates and the name of the person responsible for the assessment.
  • Specify the actions required, who will carry them out, and deadlines.
  • Keep the document accessible to all employees and relevant parties.

Regularly review your risk assessment, especially after incidents, changes in work practices, or new equipment. This ensures your controls remain effective and your business stays compliant with the Health and Safety at Work Act 1974 and related regulations.

Risk assessments form part of your general duty of care as an employer under UK law. Besides the Management of Health and Safety at Work Regulations 1999, specific regulations such as the Control of Substances Hazardous to Health (COSHH) Regulations 2002 and the Provision and Use of Work Equipment Regulations 1998 may apply depending on your business activities.

The Health and Safety Executive (HSE) provides extensive guidance and resources to help small businesses comply. ACAS also offers practical advice on workplace safety and managing risks. For complex or high-risk situations, it is advisable to seek professional legal or health and safety consultancy advice to ensure your assessments meet all legal requirements.

Additionally, remember that risk assessments must consider data protection principles under the UK GDPR if you record personal health information as part of your assessment process.

Quick Summary:
  • Conduct risk assessments to identify hazards and protect employees and others.
  • Follow the five-step process recommended by the HSE for thorough assessments.
  • Document your findings if you have five or more employees, keeping records clear and accessible.
  • Review and update your risk assessments regularly and after any significant workplace changes.
  • Use free templates and official guidance but seek professional advice for complex risks.

Additional Resources

For further guidance on health and safety and risk assessments, visit the official HSE Risk Assessment page or the ACAS health and safety advice page. To explore more legal topics relevant to your business, see our Legal & HR section.

Always ensure your risk assessment complies with current legislation and consider consulting a qualified health and safety professional or solicitor if you are unsure about any aspect of the process.

Do I need a written risk assessment if I have fewer than five employees?

No, there is no legal requirement to write down your risk assessment if you have fewer than five employees, but you must still carry out a thorough assessment and take appropriate action to manage risks.

How often should I review my risk assessment?

You should review your risk assessment regularly, at least annually, and after any significant changes to your workplace, equipment, or procedures, as well as following any accidents or near misses.

Can I use a free risk assessment template for my business?

Yes, using a free risk assessment template from trusted sources like the HSE can simplify the process. However, ensure it is tailored to your business’s specific risks and regularly updated to remain effective and compliant.

Official Sources
* GOV.UK: Set up a business  ·  * HMRC: Income Tax rates  ·  * HMRC: Corporation Tax  ·  * HMRC: VAT registration