Skip to main content
Book a call — £89
Menu

Health & Safety Policy UK: Employer Guide (2026)

We're not a law firm — we help you find the right legal support. For advice on your situation, speak to a legal adviser or find a solicitor.

Part ofUK Health & Safety Law

Updated June 2026 · England & Wales
Running a business in the UK comes with responsibilities that go well beyond turnover and growth. Looking after the people who work for you sits near the top of that list, and a written health and safety policy is one of the clearest ways to show you take that duty seriously. If your business employs five or more people, having a written policy isn't optional under the Health and Safety at Work etc. Act 1974. Even smaller employers benefit from putting their approach in writing. A good policy sets out what you believe about safety at work, identifies the risks your staff face day to day, and explains who is responsible for what when something goes wrong. This page walks through what a health and safety policy actually contains, why it matters, and how to put one together that fits the way your business really operates.

Overview

A health and safety policy is a written statement of how your business manages the wellbeing of people at work. It isn't just a tick-box exercise for regulators. It's a working document that tells your team, your contractors, and anyone visiting your premises how safety is handled and what standards you expect.

Most policies contain three connected parts. The first is a statement of intent, which is a short declaration signed by the most senior person in the business, setting out the general approach to health and safety. The second sets out responsibilities, naming who looks after what: the business owner, managers, named safety representatives, and employees themselves.

The third section covers arrangements, meaning the practical steps and procedures you use to control risks, train staff, report incidents, and review how things are working. Together, these three parts turn general good intentions into something staff can actually follow.

Key steps

  1. Assess the risks in your workplace. Walk through each area of your business and identify what could cause harm. This covers physical hazards like machinery, slips and manual handling, as well as less obvious ones such as stress, lone working, or exposure to hazardous substances. Record what you find so nothing is left to memory.
  2. Decide on sensible controls. For each risk you've identified, work out what you can reasonably do to remove or reduce it. That might mean guarding equipment, changing how a task is done, providing protective equipment, or training people differently. Focus on the higher risks first and be realistic about what is practical for your size of business.
  3. Write the policy in plain English. Draft your statement of intent, your list of responsibilities, and your arrangements for controlling risks. Keep the language straightforward so that everyone in the business can read it and understand what it asks of them. Technical jargon tends to make policies sit unread in a drawer.
  4. Share it with your workforce. A policy only works if the people it covers actually know it exists. Give staff a copy, go through it during inductions for new starters, and display the main points somewhere visible. Make space for questions, because the people doing the work often spot gaps that managers miss.
  5. Review and update regularly. Health and safety isn't a set-and-forget task. Review your policy when you change premises, bring in new equipment, take on more staff, or after any incident or near miss. An annual review is a sensible minimum for most businesses, with quicker updates when circumstances change.

Common questions

If you're dealing with this kind of situation, a call with an experienced legal adviser can help you work out the right next step — from £89.

Common questions

Q Does every UK business need a written health and safety policy?
Under the Health and Safety at Work etc. Act 1974, any business employing five or more people must have a written health and safety policy. If you employ fewer than five, you still have the same duty of care, but the policy doesn't have to be written down. In practice, most smaller employers put something in writing anyway because it makes expectations clearer and is easier to show customers, insurers, and staff.
Q Who is responsible for health and safety in a small business?
Overall responsibility rests with the employer, which usually means the business owner or the board of directors. Day-to-day responsibilities are often delegated to managers, supervisors, or a named health and safety lead. Employees also have their own legal duties to take reasonable care of themselves and others, and to follow the procedures their employer puts in place. Your policy should name who does what so there's no confusion.
Q How often should a health and safety policy be reviewed?
There's no single rule, but an annual review is a sensible default for most businesses. You should also review the policy whenever something significant changes: new premises, different equipment, a change in what you do, a new team structure, or after any accident or near miss. If a review shows your controls aren't working, update the arrangements and tell staff about the change rather than leaving an out-of-date document in place.
Q What happens if a business doesn't have a policy when one is required?
Failing to have a written policy when you employ five or more people is a breach of health and safety law. The Health and Safety Executive can take enforcement action ranging from improvement notices through to prosecution in serious cases. Fines and other penalties can be substantial, and failings often come to light after an accident, which makes the consequences worse. Having a current, realistic policy is far cheaper than dealing with enforcement.
Q Can I use a template for my health and safety policy?
Templates can be a useful starting point, but a generic policy copied from elsewhere rarely reflects the real risks in your business. The Health and Safety Executive expects policies to be specific to how you actually work. Use a template to get the structure right, then put genuine effort into the risk assessment and arrangements sections so they describe your workplace rather than someone else's.
Q Does the policy need to cover contractors and visitors?
Your duty of care extends to anyone who could be affected by your work, not just employees. That includes contractors on site, delivery drivers, visitors, and members of the public where relevant. Your policy should explain how you brief contractors, control access to hazardous areas, and deal with visitors in an emergency. If you share premises with other businesses, you also need to cooperate on shared risks.
Q What's the difference between a policy and a risk assessment?
A risk assessment is a specific exercise in identifying hazards and deciding how to control them for a particular task or area. A health and safety policy is the broader document that sets out your overall approach, who is responsible, and how the business manages risk across the board. Risk assessments feed into the policy and sit behind it, but they are separate documents serving different purposes.
If you're dealing with this kind of situation, a call with an experienced legal adviser can help you work out the right next step — from £89.

Sources

This guide is based on primary UK law and official guidance.

Brad Askew, Solicitor (non-practising)

Written & reviewed by

Brad Askew Solicitor (non-practising)

Brad is on the roll of solicitors of England & Wales but does not hold a practising certificate and does not provide legal advice. LegalDocuments.co.uk is not a law firm and does not provide regulated legal advice.

Legal disclaimer
This article is for general information only. It is a tool to help you find your way — not legal advice, and not a substitute for speaking to a qualified adviser about your situation.