Health and safety can sound like a burden designed for big factories, but the basics matter just as much to a small shop, office, café or trade business. They protect the people who work for you, and they protect you from the legal and financial fallout of an avoidable accident. The good news is that for most small businesses, getting it right is more about sensible thinking than mountains of paperwork.
This guide covers what the law expects, the role of risk assessments, when you need a written policy, and the everyday duties that keep people safe.
This article is general information only and is not legal advice. Employment rules can change, so always confirm the details that apply to you on GOV.UK or speak to a qualified employment adviser.
Why health and safety matters
There are two reasons to take this seriously, and both are compelling. The legal reason is that, as an employer, you have a duty to protect the health, safety and welfare of your staff, and also of customers, visitors and others affected by your work. Failing in that duty can lead to enforcement action, fines and, in serious cases, far worse.
The practical reason is simpler. An injured employee cannot work, an accident can damage your reputation, and the disruption of a serious incident can be enough to sink a small business. Good health and safety is not red tape, it is risk management that keeps your business running.
Health and safety also sits alongside your other obligations as an employer. It fits within the broader picture covered in our guide to UK workplace rules for small businesses, which is a useful companion to this one.
Risk assessments: the foundation
The risk assessment is the cornerstone of health and safety, and it is more straightforward than it sounds. It simply means looking at what in your workplace could cause harm, and deciding whether you have done enough to prevent it. You do not need a science degree, you need to think honestly about your own workplace.
A sensible approach follows a few steps:
- Identify the hazards, meaning anything with the potential to cause harm, such as wet floors, heavy lifting, machinery or working at height.
- Decide who might be harmed and how.
- Evaluate the risks and decide on sensible precautions to reduce them.
- Record your significant findings and put the precautions in place.
- Review the assessment regularly, and whenever something changes.
The aim is not to eliminate every conceivable risk, which is impossible, but to take reasonable steps to control the real ones. Check current guidance on how to record and review assessments on GOV.UK.
When you need a written policy
Whether you must write down your health and safety policy generally depends on the size of your business. Smaller employers below a certain headcount may not be legally required to have a written policy, while larger ones are. The exact threshold can change, so confirm the current position on GOV.UK rather than assuming.
That said, even if you are not strictly required to, a short written policy is good practice. It sets out who is responsible for what, how you manage risks, and what staff should do. It need not be long. A clear page or two that people actually read beats a thick document that gathers dust. Writing it down also helps you think the issues through properly.
Common employer duties
Beyond risk assessments, there are everyday duties that apply to most workplaces. None are exotic, but they are easy to overlook when you are busy.
- Provide a safe working environment, including safe equipment and safe systems of work.
- Keep the workplace clean, well maintained and properly ventilated, lit and heated.
- Provide adequate welfare facilities, such as toilets, washing facilities and drinking water.
- Give staff the information, instruction and supervision they need to work safely.
- Make sure you have the right insurance in place, which for most employers includes employers' liability cover.
That last point is a legal requirement for most businesses with staff, and our explainer on employers' liability insurance covers what it is and why it matters. Getting these basics in place removes most of the common ways a small business falls short.
First aid, accidents and reporting
Every workplace needs arrangements for when something goes wrong. At a minimum that usually means an appropriately stocked first aid kit, someone responsible for first aid, and clear information for staff on what to do in an emergency. The scale of provision should match your workplace and its risks: a low-risk office needs less than a busy workshop.
You should also record accidents and injuries that happen at work. Keeping an accident record helps you spot patterns and shows you are taking safety seriously. Separately, certain serious incidents, injuries and dangerous occurrences must be reported to the authorities under reporting rules often referred to as RIDDOR. The categories of reportable events and the timescales are specific, so check exactly what must be reported, and how, on GOV.UK.
The principle is simple: deal with the injury first, record what happened, and report it where the rules require.
Training and communication
Rules on paper achieve nothing if your team does not know about them. Health and safety only works when it is part of how people actually behave, which comes down to training and communication.
Make sure new starters get a proper induction covering the hazards relevant to their role and what to do in an emergency. Give task-specific training where it is needed, for example for machinery, manual handling or hazardous substances. Keep the conversation going with brief reminders, signage where appropriate, and an open door for staff to raise concerns. People on the ground often spot risks before managers do, so make it easy for them to speak up.
Your contracts and handbooks are a good place to reinforce expectations, and our guide on what to include in employment contracts shows how to weave responsibilities in clearly.
Good health and safety is mostly common sense written down, reviewed regularly, and actually followed by the people who do the work.
Frequently asked questions
Do I really need a risk assessment if I only have a couple of staff?
Yes, the duty to assess risks applies even to very small employers. What changes is the scale, not the principle. A small low-risk business will have a short, simple assessment, but you still need to think through the hazards, decide on sensible precautions, and keep things under review. Check current recording requirements on GOV.UK.
Does health and safety apply if I have no employees?
Even without staff, you usually have duties towards anyone affected by your work, such as customers, visitors and members of the public. The detail depends on what you do and where, but you should not assume the rules ignore you simply because you work alone. Confirm your position on GOV.UK.
What counts as a reportable incident?
Certain serious injuries, occupational diseases and dangerous occurrences must be reported under the reporting rules, often within set timescales. The exact categories are specific and can change, so do not rely on memory. Always check the current list and reporting method on GOV.UK when something serious happens.
Keeping your team safe is one of the most important things you do as an employer. For more clear, practical guidance on running a compliant business, subscribe to our newsletter and get plain-English updates without the jargon.
