ISO & Compliance Blog

Health and safety law tends to conjure images of hard hats, warning signs, and heavy machinery — which leads many small business owners, particularly those running offices, shops, or service-based businesses, to assume it doesn’t really apply to them. In reality, health and safety law applies to every business in the UK with at least one employee, regardless of industry, and even businesses without employees have duties towards customers, visitors, and contractors.

The requirements for most small businesses are far less onerous than the term “health and safety” might suggest — but ignoring them entirely leaves you exposed to real legal and financial risk. This guide covers what UK small businesses actually need to do to meet their legal obligations, sensibly and proportionately.

In this article:

• Who health and safety law applies to
• Your core legal duties as an employer
• Risk assessments: what they are and how to do one
• Do you need health and safety insurance?
• Common mistakes small businesses make
• Building simple, ongoing health and safety habits

Who Health and Safety Law Applies To

The Health and Safety at Work etc. Act 1974 places a general duty on every employer to ensure, so far as is reasonably practicable, the health, safety, and welfare of employees, along with anyone else affected by the business — customers, visitors, delivery drivers, and passers-by included.

This applies whether you run a construction firm or a small accountancy practice. The nature and scale of the risks differ enormously, and so does the amount of formal documentation required, but the underlying legal duty applies universally.

Your Core Legal Duties as an Employer

As a UK employer, your core health and safety duties include:

1. Providing a safe working environment — appropriately maintained premises, equipment, and safe systems of work.
2. Carrying out risk assessments — identifying hazards and taking reasonable steps to reduce or eliminate them.
3. Providing information, instruction, training, and supervision — ensuring staff understand risks relevant to their role and how to work safely.
4. Consulting employees on health and safety matters — either directly or through a representative.
5. Reporting certain injuries, diseases, and dangerous occurrences under RIDDOR (Reporting of Injuries, Diseases and Dangerous Occurrences Regulations).
6. Having employers’ liability insurance if you employ staff — this is a legal requirement, not optional, for almost all employers.
7. Displaying the health and safety law poster, or providing the equivalent leaflet to staff, setting out basic rights and responsibilities.

If you employ five or more people, you’re also legally required to have a written health and safety policy setting out how you manage health and safety in your business.

Risk Assessments: What They Are and How to Do One

A risk assessment is simply a careful examination of what could cause harm in your workplace, so you can take reasonable steps to prevent it. It doesn’t need to be complicated for most small businesses — a straightforward five-step approach works well:

1. Identify the hazards — anything with the potential to cause harm: trailing cables, slippery floors, manual handling, lone working, chemicals, or work equipment.
2. Decide who might be harmed and how — employees, customers, contractors, or members of the public, and in what circumstances.
3. Evaluate the risks and decide on precautions — what controls are already in place, and what more is reasonably practicable to do.
4. Record your findings — if you have five or more employees, this must be written down; for smaller businesses, it’s still good practice even though not strictly mandatory.
5. Review and update regularly — particularly after any incident, near-miss, or significant change to how the business operates.

Do You Need Health and Safety Insurance?

If you employ staff, employers’ liability insurance is a legal requirement in almost all cases, covering compensation costs if an employee is injured or becomes ill because of their work. Failing to hold adequate cover when required can result in significant fines. Beyond this legal minimum, many businesses also carry public liability insurance to cover claims from customers or members of the public injured on their premises or because of their work, even though this isn’t always a strict legal requirement.

Common Mistakes Small Businesses Make

• Assuming health and safety only applies to “dangerous” industries. Office-based and service businesses have real, if less obvious, risks — trip hazards, display screen equipment strain, lone working, and stress among them.
• Never carrying out a risk assessment. Even a simple, informal review is far better than nothing, and demonstrates a proactive approach if anything is ever questioned.
• No written policy despite having five or more employees. This is a specific legal threshold that’s easy to overlook as a business grows.
• Treating health and safety as a one-off task. Risks change as the business changes — new premises, new equipment, new ways of working all warrant a fresh look.
• Ignoring reporting obligations under RIDDOR. Certain workplace injuries and incidents must be formally reported, and failing to do so is a compliance breach in its own right.

Building Simple, Ongoing Health and Safety Habits

Health and safety doesn’t need to dominate your time as a small business owner — it works best as a habit built into how the business runs:

• Review your risk assessment at least annually, or after any significant change
• Keep basic records of any incidents or near-misses, even minor ones
• Ensure new staff receive a basic safety induction as part of onboarding
• Check your insurance policies annually to confirm cover remains adequate
• Keep the health and safety poster or leaflet accessible and up to date

A Legal Duty Worth Taking Seriously

Health and safety compliance isn’t about excessive paperwork or box-ticking — it’s about genuinely protecting the people who work for and interact with your business, while meeting a legal duty that applies regardless of size or industry. Most small businesses can meet their obligations proportionately, without disrupting day-to-day operations, once the basics are in place.

If you’d like support reviewing your health and safety practices, risk assessments, or wider business compliance, CAW Consultancy works with UK business owners to build practical, audit-ready foundations across every area of the business.

Get in touch with CAW Consultancy today for a free, no-obligation consultation — visit www.cawconsultancy.co.uk to find out how we can help you build a safer, more compliant business.