A practical, up-to-date guide to UK health and safety law, responsibilities, and best practice for small business workplaces

Health and safety isn’t just paperwork—it’s a legal duty and a business essential. Whether you run a shop, office, workshop, or warehouse, you’re responsible for keeping your staff, customers, and visitors safe. This guide unpacks exactly what UK law expects of small business owners, how to comply, and how to avoid common pitfalls. You’ll get clear, actionable advice, named regulations, and practical steps to create a safe, compliant workplace from day one.
If you operate a physical workplace in the UK, you are legally obliged to protect the health, safety, and welfare of your employees and anyone else affected by your business activities. The Health and Safety at Work etc. Act 1974 is the primary piece of legislation, and it applies whether you have one employee or several hundred. The Health and Safety Executive (HSE) is the main regulator.
Your responsibilities go beyond simply avoiding accidents. You must assess and manage risks, provide information and training, consult your staff on health and safety matters, and ensure safe systems of work. Failing to do so can result in prosecution, heavy fines, business closure, or even imprisonment in severe cases. Small businesses are not exempt from these rules—if anything, the HSE expects you to be even more vigilant because you may not have a dedicated safety officer.
Many small business owners misunderstand the scope of their duties, assuming that health and safety only applies to 'dangerous' workplaces. In reality, even low-risk environments like offices must have adequate fire precautions, first aid arrangements, and safe access routes. If you employ five or more people, you must also document your health and safety policy and risk assessments in writing.
Failing to meet even basic health and safety duties can lead to spot checks, improvement notices, and prosecution by the HSE or local authority. Ignorance is not a defence.
Health and safety law is not just one Act—there are dozens of regulations that may apply to your business. Some are universal (like risk assessment requirements), while others are industry- or hazard-specific. Understanding which regulations affect your business is critical to staying compliant and protecting your people.
The cornerstone is the Management of Health and Safety at Work Regulations 1999, which require all employers to carry out risk assessments, make arrangements to implement necessary measures, appoint competent people, and provide clear information and training. There are also specific rules covering manual handling, display screen equipment, hazardous substances, workplace temperatures, first aid, and fire safety.
Other relevant regulations include the Workplace (Health, Safety and Welfare) Regulations 1992, which set out minimum standards for ventilation, lighting, cleanliness, room dimensions, washing facilities, and more. If you use computers, the Health and Safety (Display Screen Equipment) Regulations 1992 apply. For those handling chemicals, the COSHH (Control of Substances Hazardous to Health) Regulations 2002 are crucial. For businesses with employees working at height, in noisy environments, or with machinery, further specific rules will apply.
| Regulation | What It Covers | Applies To |
|---|---|---|
| Health and Safety at Work etc. Act 1974 | General employer duties | All workplaces |
| Management of Health and Safety at Work Regulations 1999 | Risk assessments, competent persons, information | All employers |
| Workplace (Health, Safety and Welfare) Regulations 1992 | Workplace conditions | Most workplaces |
| Health and Safety (Display Screen Equipment) Regulations 1992 | Computer workstation safety | Any office/computer users |
| Control of Substances Hazardous to Health (COSHH) 2002 | Hazardous substances handling | Any using chemicals |
| Provision and Use of Work Equipment Regulations (PUWER) 1998 | Safe use of equipment | Any with work equipment |
| Manual Handling Operations Regulations 1992 | Lifting, carrying, moving loads | Any manual handling |
| Fire Safety Order 2005 | Fire risk assessment and precautions | All non-domestic premises |
Some sectors, like construction, food, and care services, have additional regulations. Check the HSE website for guidance tailored to your industry.
Every UK employer is legally required to carry out a suitable and sufficient risk assessment, regardless of business size. This is not just a box-ticking exercise—the risk assessment forms the backbone of your safety management. It’s about identifying potential hazards, evaluating who might be harmed and how, and putting control measures in place to reduce risks to as low as is reasonably practicable.
If you employ five or more people, you must record your risk assessment findings in writing. However, even with fewer staff, documenting your process is good practice and provides evidence if there is an incident or inspection. Your risk assessment must be reviewed regularly, especially after significant changes (e.g., moving premises, new equipment, or following an accident).
Don’t overcomplicate: the law expects you to focus on real risks, not trivial ones. The HSE provides free risk assessment templates for typical workplaces (e.g., offices, shops, warehouses) which you can adapt. You must also involve your staff in the process—they often spot hazards you might miss.
For small, low-risk workplaces, your risk assessment doesn’t need to be lengthy or complicated. Focus on significant risks and practical control measures.
Once you’ve identified the risks, you need to put appropriate safety arrangements in place. These include physical measures (like guards or fire extinguishers), systems (like regular maintenance or cleaning schedules), and providing clear information and training to all staff. The law expects you to do what is ‘reasonably practicable’—balancing risk against the time, trouble, and cost of control measures.
At a minimum, every workplace must have first aid arrangements (including a suitably stocked first aid kit and a nominated person), a clear fire evacuation plan, safe access and exit routes, adequate lighting and ventilation, and arrangements for dealing with accidents and near misses. For display screen users, you must assess workstations and provide regular breaks or equipment adjustments to prevent strain.
If you employ staff, you must also display the HSE 'Health and Safety Law: What You Need to Know' poster (or distribute the leaflet version) in a prominent location. In addition, all employees must receive appropriate health and safety training, both at induction and when risks or working practices change. Training records should be kept as proof of compliance.
| Requirement | What You Must Do | Legal Source |
|---|---|---|
| First aid | Provide a kit, a nominated person, and information for employees | Health and Safety (First-Aid) Regulations 1981 |
| Fire safety | Carry out a fire risk assessment, provide alarms/extinguishers, train staff | Regulatory Reform (Fire Safety) Order 2005 |
| Accident book | Record all workplace accidents and near-misses | Reporting of Injuries, Diseases and Dangerous Occurrences Regulations (RIDDOR) 2013 |
| H&S poster | Display HSE-approved poster or give leaflet to staff | Health and Safety Information for Employees Regulations 1989 |
| Welfare facilities | Provide toilets, hand basins, drinking water, and rest areas | Workplace (Health, Safety and Welfare) Regulations 1992 |
According to the HSE, the most common workplace injuries in 2022/23 were slips, trips, and falls, accounting for around 30% of all non-fatal accidents reported.
Consulting your employees on health and safety is a legal requirement, not just good practice. This means involving them in risk assessments, listening to their concerns, and keeping them informed about safety measures. Consultation can be direct or via elected safety representatives, depending on your business structure and staff size.
You must also appoint one or more 'competent persons' to help you meet your health and safety duties. For most small businesses, this will be the owner or manager. The competent person doesn’t need formal qualifications but must have sufficient knowledge and experience of your business and its risks. If you don’t feel confident, you can appoint an external consultant, but this is rarely necessary for low-risk workplaces.
Failing to consult staff is a common mistake. Employees are often the first to spot hazards or unsafe practices. Regular meetings, suggestion schemes, or simply an open-door policy can help you stay aware of issues before they become problems. The law also protects employees from being dismissed or treated unfairly for raising health and safety concerns.
The Safety Representatives and Safety Committees Regulations 1977 and the Health and Safety (Consultation with Employees) Regulations 1996 set out your legal duties to consult staff, whether or not you recognise a trade union.
Certain work-related incidents must be reported to the HSE under the Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 (RIDDOR). This includes fatal and specified injuries, occupational diseases, dangerous occurrences (near misses that could have caused serious harm), and any injury that results in an employee being off work for more than seven consecutive days.
You must report these incidents online via the HSE website (or by telephone in the case of fatal or major incidents). It’s the employer’s responsibility to report, not the injured employee. Reports must be made promptly—usually within 10 days of the incident, or within 15 days for over-seven-day absences.
Common mistakes include failing to report on time, not keeping records for at least three years (required by law), or misunderstanding what counts as a reportable incident. Even if an incident isn’t reportable under RIDDOR, you should still record it in your accident book and investigate the root cause.
| Incident Type | Reportable? | Deadline |
|---|---|---|
| Work-related death | Yes | Immediately (tel), then online within 10 days |
| Specified injuries (broken bones, amputations, serious burns, etc.) | Yes | Within 10 days |
| Over-seven-day injuries | Yes | Within 15 days |
| Occupational diseases (carpal tunnel, asthma, dermatitis) | Yes | As soon as diagnosed |
| Dangerous occurrences (near-miss events) | Yes | Within 10 days |
| Minor injuries (under 7-day absence) | No | Record only |
Failure to report RIDDOR incidents can result in prosecution and substantial fines. The HSE regularly audits accident records and cross-checks with RIDDOR reports.
Fire safety is a critical part of workplace health and safety. The Regulatory Reform (Fire Safety) Order 2005 applies to all non-domestic premises in England and Wales (with similar rules in Scotland and Northern Ireland). As a business owner, you must carry out a fire risk assessment, implement appropriate fire safety measures, and ensure everyone on the premises knows what to do in an emergency.
Your fire risk assessment should cover sources of ignition, fuel, and oxygen; identify people at risk (including visitors and vulnerable staff); evaluate and reduce risks; and ensure there are adequate escape routes, alarms, and extinguishers. The assessment must be reviewed regularly, especially after changes to the premises or following a fire drill or near miss.
Fire safety arrangements must be communicated to all staff. This includes regular fire drills, clear signage, and training on how to raise the alarm and evacuate safely. You may need to appoint fire marshals, especially in larger premises or those open to the public. Local fire and rescue services can offer advice, and the HSE publishes detailed guidance.
You can download free fire risk assessment templates from GOV.UK to help you meet your legal duties.
Health and safety law requires you to consider the specific needs of vulnerable workers—such as young people, pregnant staff, new starters, or those with disabilities. These groups may be at greater risk and need extra risk assessment, adjustments, or supervision. For example, you may need to provide adjustable workstations, more frequent breaks, or additional training.
Since the COVID-19 pandemic, home working has become much more common. Employers still have a duty of care to ensure home workstations are safe and do not cause health issues (like back pain or eye strain). This usually means providing a DSE (Display Screen Equipment) self-assessment, supplying suitable equipment, and offering advice on posture and breaks. You are not expected to inspect every home personally, but you must respond to concerns and take reasonable steps to reduce risk.
If you share a building with other businesses (e.g., serviced offices, co-working spaces), you must co-operate on health and safety matters. This means sharing information about risks, agreeing emergency procedures, and ensuring common areas (corridors, kitchens, toilets) are safe. The building owner or facilities manager is usually responsible for communal areas, but you must still report hazards and ensure your own space is compliant.
Your duty of care extends to employees working from home or other remote locations. Maintain regular contact and respond swiftly to concerns about their working environment.
The HSE and local authorities have extensive powers to inspect workplaces, investigate incidents, and enforce compliance. Inspections may be announced or unannounced. Inspectors can enter your premises, interview staff, take samples, and review documents (including risk assessments, training records, and accident books).
If an inspector finds a breach, they can issue an improvement notice (requiring you to fix the problem by a set deadline), a prohibition notice (stopping dangerous activities immediately), or prosecute for serious or repeated breaches. Fines can be substantial: in recent years, small businesses have been fined tens or even hundreds of thousands of pounds for major safety failings, especially where injuries have occurred.
Common enforcement triggers include not having a written health and safety policy (if required), inadequate risk assessments, poor record-keeping, lack of staff training, or ignoring previous warnings. If you receive a notice, take it seriously and act promptly—failure to comply is a criminal offence. Most inspectors are pragmatic and will offer advice, but persistent non-compliance is dealt with harshly.
| Action | Who Can Issue | What It Means |
|---|---|---|
| Improvement Notice | HSE or Local Authority | Breach found; fix by deadline or face prosecution |
| Prohibition Notice | HSE or Local Authority | Stop unsafe work immediately; cannot resume until fixed |
| Prosecution | HSE/Local Authority/Crown Prosecution Service | Criminal court action; unlimited fines, possible prison |
| Fee for Intervention (FFI) | HSE | Hourly charge (£166/hour as of 2026) for time spent dealing with material breaches |
According to HSE statistics, the average health and safety fine for small businesses in 2023 was over £30,000, with some cases exceeding £100,000.

Ready for the next step? Open a business bank account to keep your finances organised.

Get 7,500 free points (worth £75) on your first transaction. No annual fee. Instant decision.
Affiliate disclosure: we may earn a commission via our links. This does not affect our editorial independence.


Affiliate links. We may earn a commission. Editorial independence maintained.