Health & Safety for Small Businesses: Essential UK Compliance Guide

Health and safety law applies to every UK employer regardless of size, but many small business owners either assume it does not apply to them or believe compliance requires expensive consultants and mountains of paperwork. Neither is true. The basics are straightforward, and most small businesses can manage compliance in-house with the right guidance.

This guide covers the essential health and safety duties that every small UK employer must meet, with a focus on practical steps rather than legal theory.

The legal framework

The primary legislation is the Health and Safety at Work etc. Act 1974 (HSWA). This places a general duty on every employer to ensure, so far as is reasonably practicable, the health, safety, and welfare of all employees at work. "Reasonably practicable" means balancing the risk against the cost, time, and effort of reducing it — you do not need to eliminate every conceivable risk, but you must do what a reasonable employer would do.

Supporting regulations include:

• The Management of Health and Safety at Work Regulations 1999 (risk assessments)
• The Workplace (Health, Safety and Welfare) Regulations 1992 (working environment)
• The Health and Safety (Display Screen Equipment) Regulations 1992 (DSE/screens)
• The Regulatory Reform (Fire Safety) Order 2005 (fire safety)
• The Health and Safety (First-Aid) Regulations 1981 (first aid provision)

Risk assessments

Risk assessment is the foundation of health and safety compliance. Every employer must assess the risks to their employees (and others affected by their work) and take reasonable steps to control those risks.

The 5-employee rule

If you employ 5 or more people, you must record your risk assessment findings in writing. Employers with fewer than 5 employees still have to carry out risk assessments — they just do not have to write them down (though it is strongly recommended that you do, as written records provide evidence of compliance).

How to conduct a risk assessment

The HSE recommends a five-step approach:

Step 1: Identify the hazards

Walk around your workplace and look for anything that could cause harm. Common hazards in office and small business environments include:

• Trailing cables and trip hazards
• Manual handling of heavy items
• Prolonged screen use (DSE)
• Slippery floors
• Working at height (even standing on chairs to reach shelves)
• Lone working
• Work-related stress

Step 2: Decide who might be harmed and how

Consider employees, visitors, contractors, cleaners, delivery drivers, and members of the public. Think about workers who may be particularly at risk — new or young workers, pregnant employees, and those with disabilities.

Step 3: Evaluate the risks and decide on precautions

For each hazard, consider the likelihood of harm and its potential severity. Then decide what you can reasonably do to reduce the risk. Apply the hierarchy of controls:

1. Eliminate the hazard entirely
2. Substitute with something less hazardous
3. Engineering controls (guards, ventilation, barriers)
4. Administrative controls (procedures, training, signage)
5. Personal protective equipment (PPE) — always the last resort

Step 4: Record your findings and implement them

Write down the significant hazards you identified, who is at risk, and what controls you have in place or plan to implement. This does not need to be a lengthy document — a simple table format works well.

Step 5: Review and update regularly

Review your risk assessment whenever something changes — new equipment, new processes, new premises, or after an accident or near miss. Even without changes, review at least annually.

Display Screen Equipment (DSE)

If your employees use computers, laptops, or other screens as a significant part of their work, the Display Screen Equipment Regulations apply. This covers the vast majority of office workers and many remote workers.

Employer duties for DSE users

1. Carry out a DSE workstation assessment for each user. This evaluates the screen, keyboard, chair, desk, lighting, and the user's posture
2. Reduce risks identified in the assessment — adjust equipment, provide suitable chairs, ensure adequate lighting
3. Provide information and training about DSE risks and how to set up their workstation correctly
4. Plan work to include regular breaks from screen use — short, frequent breaks are more effective than occasional long ones
5. Provide eye tests if requested by DSE users, and pay for corrective glasses if they are needed specifically for DSE work (not general prescription glasses)

First aid

The Health and Safety (First-Aid) Regulations 1981 require every employer to provide adequate first aid arrangements. What counts as "adequate" depends on the nature of your work and the number of employees.

Minimum requirements for small, low-risk businesses

For a small office or retail environment:

• A suitably stocked first aid kit — the HSE no longer specifies exact contents, but a standard workplace first aid kit from a reputable supplier will cover the basics
• An appointed person responsible for taking charge of the first aid kit and calling emergency services if needed. This person does not need formal first aid training, but must know what to do in an emergency
• Information for employees about first aid arrangements — who the appointed person is, where the first aid kit is kept, and how to call for help

When you need trained first aiders

For higher-risk workplaces or larger teams, you may need one or more employees with a formal first aid qualification. Assess this based on:

• The nature of the work (manual labour, hazardous substances, or machinery increase the need)
• The number of employees
• How far you are from emergency medical services
• Whether employees work shifts or alone

A First Aid at Work (FAW) certificate lasts three years and requires a three-day training course. An Emergency First Aid at Work (EFAW) certificate also lasts three years but requires only a one-day course.

Fire safety

Fire safety in England and Wales is governed by the Regulatory Reform (Fire Safety) Order 2005 (similar legislation applies in Scotland and Northern Ireland). The "responsible person" — usually the employer, owner, or occupier — must ensure fire safety compliance.

Essential fire safety duties

1. Carry out a fire risk assessment — assess sources of ignition, fuel, and oxygen; identify who is at risk; evaluate existing controls; and record findings (mandatory for 5+ employees)
2. Implement fire safety measures — fire detection and alarm systems, emergency lighting, fire exits and escape routes, fire extinguishers, and clear signage
3. Prepare an emergency plan — what to do if fire breaks out, how to raise the alarm, evacuation routes, assembly point, and who is responsible for what
4. Provide fire safety training for all employees — when they start, and refresher training regularly (at least annually)
5. Conduct fire drills at least once a year (twice a year is best practice)
6. Maintain fire safety equipment — test alarms weekly, inspect extinguishers annually, check emergency lighting monthly

Common fire safety failures in small businesses

• Blocked fire exits — storing stock in front of emergency doors
• No fire alarm testing — weekly tests take 30 seconds but are frequently forgotten
• Missing or expired extinguishers — extinguishers need annual professional servicing
• No fire drills — staff who have never practised evacuation will not respond effectively in a real fire
• Poor housekeeping — accumulation of waste, especially paper and cardboard, near heat sources

Employer's liability insurance

You are legally required to have employer's liability (EL) insurance if you employ anyone (with very limited exceptions). The minimum cover is £5 million, though most policies provide £10 million.

You must:

• Display the EL certificate where employees can see it (or make it easily accessible electronically)
• Keep copies of expired certificates for 40 years
• Ensure the policy covers all employees, including temporary and casual workers

Failure to have EL insurance is a criminal offence with fines of up to £2,500 per day.

Health and safety policy

If you employ 5 or more people, you must have a written health and safety policy. This should contain:

• A general statement of your commitment to health and safety, signed by the most senior person in the business
• Organisation — who is responsible for what (named individuals and their roles)
• Arrangements — the practical steps you take to manage health and safety (risk assessments, training, monitoring, emergency procedures)

Keep the policy proportionate to your business. A small office does not need a 50-page document — a clear, honest statement of how you manage safety is sufficient.

Reporting accidents and incidents (RIDDOR)

Under the Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 (RIDDOR), you must report certain workplace incidents to the HSE. Reportable incidents include:

• Deaths
• Specified injuries (fractures, amputations, loss of consciousness, injuries requiring hospital admission for more than 24 hours)
• Over-7-day incapacitation (the injured person is unable to work for more than 7 consecutive days)
• Occupational diseases (as listed in the regulations)
• Dangerous occurrences (near misses with serious potential, such as a scaffolding collapse)

Reports must be made online at the HSE's RIDDOR website. Fatal and specified injuries must be reported without delay (by phone: 0345 300 9923). Over-7-day injuries must be reported within 15 days.

Frequently asked questions

Next steps

Key takeaways

Health and safety compliance for small businesses comes down to a few fundamentals: carry out and record risk assessments, provide first aid arrangements, ensure fire safety, assess DSE workstations, and train your employees. None of this requires expensive consultants or complex systems — start with the HSE's free resources and build from there.

If you have five or more employees, you must have a written health and safety policy, written risk assessments, and employer's liability insurance. These are non-negotiable legal requirements.

For related compliance topics, see our auto-enrolment guide for pension duties and our employment contract essentials to ensure your contracts reflect your health and safety obligations.