Health and safety compliance sounds like it belongs to a factory floor or a construction site, but the legal duty applies to every UK business, including a small office or a single-person consultancy. The good news is that the actual requirements scale with your genuine risk level, not a fixed enterprise standard.
Direct answer: every UK business must assess workplace risks, provide a safe working environment, and have employers’ liability insurance if you employ staff. Businesses with five or more employees need a written health and safety policy. Beyond these legal basics, the specific steps required depend heavily on your actual risk level, an office poses very different risks to a workshop.
The legal basics every business needs
A risk assessment
Every business must identify what could realistically cause harm in the workplace and take reasonable steps to address it. For a low-risk office environment, this is often straightforward and can be handled without external help. Higher-risk environments, involving machinery, chemicals, or physical work, need a more thorough assessment.
A written health and safety policy
Legally required once you employ five or more people, though genuinely good practice at any size. This document sets out how your business manages health and safety, who’s responsible, and what procedures are in place.
Employers’ liability insurance
A legal requirement for almost any business with employees, covering compensation if a staff member is injured or becomes ill because of their work.
Safe systems of work
Clear, sensible procedures for tasks that carry genuine risk, communicated to staff and actually followed, not just documented and forgotten.
A practical checklist by business type
| Business type | Key considerations |
|---|---|
| Office-based | Display screen equipment, trip hazards, fire safety, basic first aid provision |
| Retail | Manual handling, slips and trips, safe use of equipment like ladders |
| Trade or workshop | Machinery safety, protective equipment, chemical handling, more detailed risk assessments |
| Remote or hybrid teams | Home working risk assessment, display screen equipment guidance for home setups |
Reporting serious incidents
Certain workplace accidents, injuries and dangerous occurrences must be formally reported under RIDDOR, the UK’s official reporting system for workplace incidents. Familiarity with what specifically triggers this requirement matters, since failing to report when required carries real legal risk.
Fire safety as part of the wider picture
Fire safety is a specific, related legal duty of its own, requiring a fire risk assessment for most business premises. Our guide on fire risk assessments for small business covers this specific requirement in depth, since it’s substantial enough to need its own dedicated attention.
A simple starting checklist
- Carry out a genuine risk assessment for your specific workplace and activities
- Put a written health and safety policy in place if you employ five or more people
- Confirm employers’ liability insurance is in place and adequate
- Provide basic first aid provision appropriate to your workplace size and risk
- Carry out a fire risk assessment for your premises
- Communicate safety procedures clearly to staff, and review them periodically
Do you need outsourced health and safety support?
For a low-risk office environment, many small businesses manage the basics without external help, using free guidance from the Health and Safety Executive. Higher-risk environments, or businesses wanting the reassurance of expert review, often benefit from outsourced health and safety support, which is commonly bundled with broader HR support for a small business.
FAQs
What health and safety requirements apply to every small business? Every business must carry out a risk assessment, maintain a safe working environment, and have employers’ liability insurance if they employ staff. A written policy is legally required once you have five or more employees.
Do I need a formal risk assessment if I run a low-risk office business? Yes, though it can be straightforward for a genuinely low-risk environment. The depth of assessment required scales with actual risk, not a fixed standard regardless of your business type.
What happens if a workplace accident occurs? Certain serious incidents must be formally reported under RIDDOR. Beyond reporting, a genuine review of what happened and whether procedures need updating is good practice regardless of the incident’s severity.
Can I handle health and safety compliance myself, or do I need to outsource it? Many small, low-risk businesses manage the basics themselves using free HSE guidance. Higher-risk businesses, or those wanting expert reassurance, often benefit from outsourced support.
