Health and Safety Policy: What UK Law Requires

If your business has five or more employees, you are legally required to have a written health and safety policy. Under the Health and Safety at Work Act 1974, this policy must set out how you manage health and safety, who is responsible, and the arrangements you have in place. This guide explains what a health and safety policy must contain and how to write one that is genuinely useful, not just a document on a shelf.

What a health and safety policy is

A health and safety policy is your written statement of how your organisation manages health and safety. It demonstrates your commitment to protecting your workers and others, makes clear who is responsible for what, and describes the practical arrangements you have put in place. It is the document that ties together your risk assessments, training, procedures and records into a coherent management approach.

Far from being a formality, a good policy gives everyone in the business a clear understanding of how safety is managed and what is expected of them, and it is often the first thing an inspector, insurer or prospective client will ask to see.

Is a written policy a legal requirement?

Yes, if you employ five or more people. The Health and Safety at Work Act 1974 requires employers with five or more employees to have a written health and safety policy. Businesses with fewer than five employees still have all the same duties to manage health and safety, but they are not legally required to write the policy down, although doing so is good practice and helps demonstrate compliance.

The three parts of a health and safety policy

A health and safety policy is conventionally made up of three distinct parts, each serving a different purpose:

• The statement of intent: a short declaration of your commitment to health and safety and your general aims, usually signed and dated by the most senior person in the business.

• The responsibilities section: who is responsible for what, naming roles and the duties attached to them, so everyone knows their part.

• The arrangements section: the practical detail of how you manage specific risks, covering matters such as risk assessment, training, first aid, fire safety, accident reporting and consultation.

Writing the statement of intent

The statement of intent is a clear, concise expression of your commitment to managing health and safety. It should state that you will provide a safe workplace, safe equipment and systems of work, adequate training and information, and that you will consult employees on health and safety matters. It should be signed and dated by the owner or most senior manager, which signals genuine leadership commitment, and it should be reviewed and re signed periodically to keep it current.

Defining responsibilities

The responsibilities section makes clear who does what. It typically names the person with overall responsibility, usually the owner or a director, and sets out the duties of managers, supervisors and employees. Even in a small business, spelling this out matters, because health and safety failures often happen in the gaps where everyone assumed someone else was responsible. Employees also have legal duties to take reasonable care and to cooperate, which the policy should acknowledge.

Setting out your arrangements

The arrangements section is the practical heart of the policy and should reflect the real risks in your business. Common arrangements to cover include how you carry out and review risk assessments, how you provide information, instruction and training, your first aid and accident reporting arrangements, fire safety and emergency procedures, how you manage specific hazards relevant to your work, how you maintain equipment, and how you consult and communicate with employees. The detail should match your actual activities rather than being copied from a generic template.

Keeping the policy alive

A policy is only useful if it reflects what actually happens and if people know about it. Bring it to life by communicating it to all staff, including it in induction, and making it easily accessible. Review it regularly and whenever there is a significant change, such as new activities, new equipment, a change in the law, or lessons from an incident. A policy that is reviewed, communicated and acted upon is a genuine management tool; one that is written once and forgotten offers little protection.

Common mistakes to avoid

The most common mistake is downloading a generic template and adopting it without tailoring it to your business, which produces a policy that looks compliant but does not describe your actual arrangements. Other frequent errors include leaving the statement of intent unsigned or undated, listing responsibilities that nobody actually carries out, describing arrangements that are not really in place, and never reviewing the document. A short, honest, accurate policy is far better than a long, generic one.

Frequently asked questions

• Is a written health and safety policy a legal requirement: Yes, if you employ five or more people, under the Health and Safety at Work Act 1974.

• What are the three parts of a health and safety policy: The statement of intent, the responsibilities section, and the arrangements section.

• Who should sign the health and safety policy: The most senior person in the business, usually the owner or a director, and it should be dated.

• How often should a health and safety policy be reviewed: Regularly, and whenever there is a significant change such as new activities, equipment, legislation or lessons from an incident.

• Do small businesses need a written policy: Businesses with fewer than five employees are not legally required to write it down, but they have the same duties and writing it down is good practice.

Featherstone Safety Hub keeps your policy, risk assessments, training records and arrangements organised in one place, so your health and safety management is joined up and easy to evidence. Start your free 14 day trial of Featherstone Safety Hub.