Health and Safety for Small Businesses in the UK: What You Actually Need

TL;DR — Key Takeaways

Health and safety law applies to every business in the UK and Ireland — including sole traders and the self-employed. You cannot opt out.

The core legislation is the Health and Safety at Work etc. Act 1974 (HSWA) and the Management of Health and Safety at Work Regulations 1999 (MHSWR). In Ireland, it is the Safety, Health and Welfare at Work Act 2005.

At a minimum, every business must carry out risk assessments, provide adequate first aid, report certain accidents under RIDDOR 2013, and ensure fire safety.

If you employ five or more people, you must have a written health and safety policy and written risk assessments.

You do not need to hire an expensive consultant. Most small businesses can handle compliance themselves with the right guidance and templates.

Getting compliant can realistically be done in a single day if you know what you need.

Introduction

If you run a small business in the UK or Ireland — whether you are a sole trader, a one-person limited company, or you have a handful of staff — you have almost certainly asked yourself: what do I actually need to do about health and safety?

Maybe a client has asked you for a health and safety policy before you can start a job. Maybe you have seen something about risk assessments on a government website and felt overwhelmed. Or maybe you are filling in a tender and there is a whole section about compliance that you have no idea how to answer.

Here is the good news: health and safety for small businesses does not have to be expensive, complicated, or time-consuming. The law is not out to get you. It is designed to protect people — including you — and the requirements for a small business are far more manageable than most people think.

This guide explains everything in plain English. What the law actually says, what documents you need, what you can skip, what happens if things go wrong, and how to get yourself sorted without spending a fortune.

What the Law Actually Says

Let us start with the legislation. There are two main pieces of law you need to know about if you operate in the UK, and one more if you work in Ireland.

Health and Safety at Work etc. Act 1974 (HSWA)

This is the big one. The HSWA is the primary piece of health and safety legislation in England, Scotland, and Wales. It places duties on every employer, every self-employed person, and every employee.

In simple terms, it says:

Employers must ensure, so far as is reasonably practicable, the health, safety, and welfare of all their employees while at work.
Self-employed people must conduct their work in a way that does not put themselves or others at risk.
Everyone has a duty not to endanger other people through their work activities.

The phrase “so far as is reasonably practicable” is important. It means the law does not expect you to eliminate every conceivable risk. It expects you to take sensible, proportionate steps to manage the risks that are relevant to your work.

Management of Health and Safety at Work Regulations 1999 (MHSWR)

The MHSWR sits underneath the HSWA and adds specific requirements. The most important one for small businesses is this: every employer and every self-employed person must carry out a suitable and sufficient assessment of the risks to their own health and safety, and the health and safety of anyone else who may be affected by their work.

That is where risk assessments come in. They are not optional. They are a legal requirement.

The MHSWR also requires you to:

Put in place preventive and protective measures based on your risk assessments
Appoint one or more competent persons to help you comply with health and safety law (this can be yourself, if you are competent to do so)
Provide employees with clear information about risks and the measures in place to deal with them
Cooperate and coordinate with other employers if you share a workplace

Safety, Health and Welfare at Work Act 2005 (Ireland)

If your business operates in Ireland, the equivalent legislation is the Safety, Health and Welfare at Work Act 2005 (SHWW Act 2005). The duties are broadly similar to the UK framework:

Employers must manage and conduct activities in a way that prevents risks to health and safety.
Every employer must prepare a written safety statement based on a risk assessment. This applies regardless of how many people you employ — there is no threshold in Ireland.
Self-employed people have duties to protect themselves and others.

If you work across the UK and Ireland, you need to be aware of both frameworks. The good news is that they are aligned closely enough that getting compliant for one will put you in a strong position for the other.

RIDDOR 2013

The Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 (RIDDOR) require you to report certain workplace accidents, occupational diseases, and dangerous occurrences to the Health and Safety Executive (HSE). This applies across the UK. We will cover this in more detail later in this guide.

What You Need vs What Is Optional

This is the section most small business owners are looking for. Let us break it down clearly.

Legally Required for ALL Businesses

These apply to every business in the UK, regardless of size — including sole traders with no employees:

Risk assessments — You must identify the hazards in your work and assess the risks they pose. If you employ five or more people, these must be recorded in writing. Even if you have fewer than five employees, you still have to carry out the assessments — you just do not technically have to write them down (though you absolutely should, and we will explain why shortly). See our risk assessment guide for a full walkthrough.
COSHH assessments — If you use any hazardous substances (cleaning chemicals, paints, solvents, dusts, adhesives), you need to assess the risks under the Control of Substances Hazardous to Health Regulations. This is separate from your general risk assessments. Our COSHH assessment guide explains when this applies and how to do it.
Safe systems of work — You need to have safe working procedures in place for your activities. This does not necessarily mean a formal written document, but you must be able to show how work is carried out safely.
First aid provision — Every workplace must have adequate first aid arrangements. At a minimum, this means a first aid kit and an appointed person who can take charge if someone is injured.
Accident reporting (RIDDOR) — Certain types of accident, injury, and dangerous occurrence must be reported to the HSE.
Fire safety — You must carry out a fire risk assessment for your premises and ensure you have appropriate fire safety measures in place (fire extinguishers, escape routes, alarms as needed).

Required if You Have 5 or More Employees

Written health and safety policy — If your business employs five or more people, you must have a written health and safety policy. This document sets out your commitment to health and safety, who is responsible for what, and how you manage risks in practice.
Written risk assessments — The significant findings of your risk assessments must be recorded in writing.

Required if You Use Chemicals

COSHH assessments — As mentioned above, if you work with any substances that could be hazardous to health, you need specific COSHH assessments. This is common in trades like cleaning, hairdressing, landscaping, painting, and construction.

Required for Specific Situations

PAT testing — If your business uses portable electrical appliances, you have a duty to ensure they are maintained and safe. There is no specific legal requirement for formal PAT testing at set intervals, but you must be able to demonstrate that equipment is safe.
Fire risk assessment — Required for all non-domestic premises. If you work from home but have employees visiting, or you have a separate workshop or office, you need one.
Manual handling assessment — If your work involves lifting, carrying, pushing, or pulling, you need to assess the manual handling risks.
Display screen equipment (DSE) assessment — If employees use computers or screens for a significant part of their work, you need to assess the risks.

NOT Legally Required but Smart to Have

These are not demanded by law for most small businesses, but having them will protect you, impress clients, and save you trouble down the line:

Method statements — A method statement describes how a job will be done safely, step by step. Clients (especially in construction and facilities management) often ask for these alongside risk assessments as part of RAMS (Risk Assessments and Method Statements). They are not a legal requirement, but you will struggle to win certain jobs without them.
Training records — Keeping written records of any training you or your staff have completed is not mandatory in most cases, but if an inspector asks what training has been given, you need to be able to demonstrate it. Written records make this easy.
Equipment maintenance logs — Documenting when equipment was checked, serviced, or replaced is good practice. If something goes wrong and you can show a maintenance history, that is far better than trying to remember when you last checked something.
Lone working procedures — If you or your staff work alone (common for cleaners, tradespeople, landscapers, and many other small businesses), having a written procedure for managing the risks of lone working is strongly recommended.

Need H&S documents for your trade? Check our trade-specific kits — pre-filled and ready to customise. Or download a free sample to see the quality.

The Essential Documents Explained Simply

Let us go through the key documents one by one.

Health and Safety Policy

A health and safety policy is a written document that sets out three things: your general commitment to health and safety, who in your business is responsible for what, and the practical arrangements you have in place to manage risks.

When you need one: You are legally required to have a written policy if you employ five or more people (UK). In Ireland, every employer must have a written safety statement, which serves a similar purpose. Even if you have fewer than five employees, having a written policy is strongly recommended — clients often ask for one, and it shows you take your responsibilities seriously.

What to put in it: Your general statement of intent (signed and dated), a clear breakdown of responsibilities, and your arrangements for things like risk assessment, fire safety, first aid, accident reporting, training, and equipment maintenance.

For a step-by-step walkthrough, see our full health and safety policy guide. If you are a sole trader wondering whether this applies to you, read do I need a health and safety policy as a sole trader?.

Risk Assessments

A risk assessment is a careful look at what could cause harm in your work and whether you have taken enough precautions to prevent it.

What it involves: Identify the hazards, decide who might be harmed and how, evaluate the risks and decide on precautions, record your findings, and review regularly.

How many you need: This depends on your business. You need to cover all significant risks. A cleaner might need risk assessments for slips and trips, working at height (even step ladders count), chemical use, manual handling, and lone working. A landscaper might add assessments for power tools, noise, and working near roads.

How to do them: You do not need a degree. You need to think about your work honestly, identify what could go wrong, and write down what you do to stop it. The HSE has a straightforward five-step approach, and our risk assessment guide walks you through the whole process.

COSHH Assessments

COSHH stands for the Control of Substances Hazardous to Health. A COSHH assessment looks specifically at the risks from any hazardous substances you use in your work.

When you need them: If you use cleaning chemicals, solvents, paints, adhesives, oils, dusts (including wood dust, silica dust, or flour dust), or any other substance that could be harmful to health, you need a COSHH assessment for each one.

What chemicals count: More than you might think. Standard household cleaning products, bleach, white spirit, cement dust, hair dyes, nail products, weed killers — all of these fall under COSHH. If it has a safety data sheet, you almost certainly need a COSHH assessment for it.

What to include: The substance name, what it is used for, the hazards it presents, who is at risk, the control measures in place (ventilation, PPE, safe storage), emergency procedures, and monitoring arrangements.

Method Statements

A method statement is a document that describes how a particular task or activity will be carried out safely. It is essentially a step-by-step plan that includes the hazards, the controls, the equipment needed, and the sequence of work.

When you need them: Method statements are not a specific legal requirement, but they are frequently requested by clients, especially in construction, facilities management, and property maintenance. If you are asked for RAMS, you need both a risk assessment and a method statement.

What to include: A description of the work, the location, the people involved, the equipment and materials, the step-by-step method, the hazards identified, and the control measures for each step.

Fire Risk Assessment

If you have premises (an office, a workshop, a salon, a warehouse), you must carry out a fire risk assessment. This is required under the Regulatory Reform (Fire Safety) Order 2005 in England and Wales, and equivalent legislation in Scotland, Northern Ireland, and Ireland.

What it covers: Identifying potential fire hazards, identifying people at risk, evaluating and reducing risks, recording findings, and reviewing regularly. You need to consider ignition sources, fuel sources, escape routes, fire detection and warning systems, firefighting equipment, and emergency planning.

If you work from home and have no employees visiting, a formal fire risk assessment of your home is not legally required. But if you have a home office where staff or clients visit, you should consider one.

First Aid

Every business must have adequate first aid provision. What counts as “adequate” depends on the nature of your work and the number of people involved.

At a minimum: You need a suitably stocked first aid kit and an appointed person — someone who takes charge of first aid arrangements and calls the emergency services if needed. If your work involves higher risks (sharp tools, chemicals, remote locations), you may need a trained first aider rather than just an appointed person.

Common Myths Debunked

There is a lot of misinformation about health and safety for small businesses. Let us clear up the most common myths.

”I’m a sole trader — health and safety doesn’t apply to me”

Wrong. Since a change in the law in 2015, the Health and Safety at Work etc. Act 1974 applies to all self-employed people whose work activities pose a risk to the health and safety of other people. In practice, this covers almost every trade and service business. If you interact with clients, work in their homes or premises, work near the public, or your activities could affect anyone else, the law applies to you.

Even if your work genuinely poses no risk to others (which is rare), you still have duties under more specific regulations like COSHH and manual handling if those apply to your activities.

For a full breakdown, read our guide: do I need a health and safety policy as a sole trader?.

”I need to hire a consultant”

Not necessarily. The law says you must appoint a “competent person” to help you manage health and safety. For most small businesses, that competent person can be you — provided you understand the risks in your work and know how to manage them.

Consultants can be helpful for complex or high-risk businesses, but for a typical small business — a cleaning company, a landscaping sole trader, a beauty salon, a dog groomer — you can handle this yourself with the right templates and guidance. Spending thousands on a consultant is not proportionate to the risk for most small operations.

”Risk assessments have to be complicated”

They do not. A risk assessment is simply a structured way of thinking about what could go wrong and what you do to prevent it. For a small business, a risk assessment might be a single page. The HSE itself says that risk assessments should be straightforward and proportionate. If you are overcomplicating it, you are probably doing it wrong.

”I only need this if I have employees”

Not true. While some requirements (like having a written policy) only kick in at five employees, the core duties under the HSWA apply to all self-employed people. You must carry out risk assessments, manage hazardous substances properly, report serious incidents, and ensure fire safety — whether or not you have staff.

If you are a sole trader who works in client premises, your clients may also require you to provide health and safety documentation before you can start work. Having proper documents is not just a legal issue — it is a commercial one.

”Once it’s done, I can forget about it”

Absolutely not. Health and safety is not a one-off task. Your risk assessments, policy, and other documents must be reviewed regularly — at least annually, and sooner if anything significant changes. That includes new equipment, new premises, a change in the type of work you do, new staff, or after an accident or near miss.

A document that is three years old and does not reflect how you actually work is worse than useless. It shows an inspector that you did the paperwork once and then ignored it.

What Happens if You Get Inspected

The Health and Safety Executive (HSE) is the regulator responsible for enforcing health and safety law in the UK. In Ireland, this role falls to the Health and Safety Authority (HSA). Local authorities also have enforcement responsibility for certain types of premises, including offices, shops, and leisure facilities.

How inspections work

HSE inspectors can visit your workplace without notice. They may come because of a complaint, as part of a targeted campaign in your sector, or simply as a routine check. When they arrive, they will want to see that you are managing health and safety sensibly.

They will typically ask to see your:

Health and safety policy (if you have five or more employees)
Risk assessments
COSHH assessments (if applicable)
Accident book and RIDDOR reports
Training records
Any other relevant documentation

They will also look at your actual working conditions — not just the paperwork.

What can happen

Verbal or written advice — If the inspector finds minor issues, they may simply advise you on what to improve.
Improvement notice — If there is a breach of health and safety law, the inspector can issue an improvement notice requiring you to fix the problem within a set timeframe.
Prohibition notice — If there is a risk of serious personal injury, the inspector can issue a prohibition notice that stops the activity immediately until the risk is dealt with.
Prosecution and fines — In serious cases, the HSE can prosecute. Fines for health and safety offences can be unlimited for the most serious breaches. Even for smaller businesses, fines of several thousand pounds are not uncommon.
Fee for Intervention (FFI) — If an inspector finds a material breach, you will be charged for the time the HSE spends dealing with it. The current rate is over 160 pounds per hour.

The best way to avoid any of this is to have your documentation in order and to actually follow the procedures you have written down.

What Happens if Something Goes Wrong

Nobody starts the day expecting an accident. But if one happens, what you did before that moment matters enormously.

Accident reporting

Under RIDDOR 2013, you must report certain incidents to the HSE. These include:

Deaths — Must be reported immediately by phone.
Specified injuries — Fractures (other than fingers, thumbs, and toes), amputations, crush injuries, loss of consciousness, chemical or hot metal burns, and injuries requiring hospital admission for more than 24 hours.
Over-seven-day incapacitation — If a worker is unable to do their normal work for more than seven consecutive days as a result of an injury.
Non-fatal accidents to non-workers — If a member of the public or client is injured on your premises or by your work activities and is taken to hospital.
Occupational diseases — Certain diseases linked to specific types of work (such as occupational dermatitis, asthma, or hand-arm vibration syndrome).
Dangerous occurrences — Near misses that could have been serious, such as the collapse of scaffolding, electrical incidents, or the unintended release of hazardous substances.

Reports are made online through the HSE website. You should keep your own records of all accidents and incidents, even those that do not meet the RIDDOR threshold. An accident book is the standard way to do this.

Insurance implications

If someone is injured because of your work and you do not have proper health and safety documentation, your insurance provider may challenge your claim. Employers’ liability insurance is a legal requirement if you have employees, and public liability insurance is essential for almost all businesses — but neither will protect you if you have been negligent.

Having up-to-date risk assessments, a clear policy, and evidence that you follow your own procedures strengthens your position enormously. If an injured person makes a claim against you, the first thing their solicitor will ask for is your health and safety documentation.

How to Get Compliant in a Day

If you are starting from scratch, this might feel overwhelming. It is not. Here is a practical, step-by-step plan to get your health and safety sorted in a single day.

Step 1: Write your health and safety policy. Use our health and safety policy guide to work through the three sections: statement of intent, responsibilities, and arrangements. This should take about an hour for a small business.

Step 2: Carry out your risk assessments. Think about every significant activity in your business and the hazards involved. Write a risk assessment for each one. Use our risk assessment guide for a step-by-step walkthrough. For most small businesses, three to six risk assessments will cover everything.

Step 3: Complete COSHH assessments if needed. If you use any chemicals or hazardous substances, do a COSHH assessment for each one. Gather the safety data sheets from the manufacturer (usually available on their website) and work through the assessment.

Step 4: Sort your first aid. Buy a first aid kit appropriate for your workplace. Make sure you or someone in your team is the appointed person for first aid. Consider whether you need a trained first aider based on the risks in your work.

Step 5: Check your fire safety. If you have premises, carry out a fire risk assessment. Make sure you have appropriate fire extinguishers, clear escape routes, and working smoke or fire alarms.

Step 6: Set up accident reporting. Get an accident book and make sure you know when and how to report incidents under RIDDOR.

Step 7: Create any additional documents you need. Depending on your trade, this might include method statements, manual handling assessments, lone working procedures, or equipment maintenance logs.

Step 8: Put a review date in your diary. Set a reminder to review everything in 12 months, or sooner if anything changes.

That is it. For a typical small business, the whole process can realistically be completed in a day — especially if you are using pre-filled templates rather than starting with blank documents.

How Much Should It Cost?

One of the biggest barriers to compliance is the perception that it is expensive. Let us break down the real costs.

Hiring a consultant: 500 to 2,000 pounds or more

A health and safety consultant will typically charge between 500 and 2,000 pounds for a small business, depending on the scope of work. For a comprehensive package including a site visit, policy, risk assessments, and COSHH assessments, you could be looking at the higher end. For complex or high-risk businesses, this might be money well spent. For a typical small business, it is often disproportionate.

DIY with free templates: 0 to 50 pounds

You can find free templates online from the HSE and other sources. The downside is that these are generic and require significant work to tailor them to your business. You will spend time researching what you actually need, filling in blanks, and hoping you have not missed anything. It is free in terms of money, but it costs you time — and if you get it wrong, it costs you more later.

Pre-filled trade-specific kits: 49 to 79 pounds

This is the middle ground. A pre-filled kit gives you documents that are already tailored to your trade — the risks, the chemicals, the tasks, and the language are all specific to what you actually do. You review them, customise the details for your business, and you are done. It is faster than DIY, far cheaper than a consultant, and more accurate than generic templates.

For most small businesses, a trade-specific kit is the most cost-effective option. You get professional documents without the professional price tag.

Trade-Specific Guides

Different trades have different risks, and health and safety requirements vary accordingly. We have written detailed guides for several common trades:

Cleaning businesses — Slip hazards, chemical exposure, lone working, and client premises. Read our full guide: health and safety for cleaning businesses.
Landscaping businesses — Power tools, noise, manual handling, working near roads, and pesticides. Read our full guide: health and safety for landscaping businesses.
Beauty salons — Chemical exposure, sharps, skin contact, allergic reactions, and hygiene. Read our full guide: health and safety for beauty salons.
Dog groomers — Animal handling, chemical products, electrical equipment, slips and falls. Read our full guide: health and safety for dog groomers.

Each guide covers the specific risks, the documents you need, and practical advice for getting compliant in your trade. If your trade is not listed above, the principles in this guide still apply — the core legal requirements are the same across all sectors.

For a comprehensive overview of what you should have in place, use our health and safety compliance checklist to make sure nothing has been missed.

Browse all kits at /kits/ — from 49 pounds for a complete compliance set.

Summary

Health and safety for small businesses in the UK and Ireland is not as daunting as it seems. The law is clear, the requirements are proportionate, and the cost of getting compliant is far less than the cost of getting it wrong.

Here is what to remember:

The law applies to you. Whether you are a sole trader or have a small team, health and safety legislation applies to your business. The HSWA 1974, the MHSWR 1999, and (in Ireland) the SHWW Act 2005 set out your duties.
Risk assessments are the foundation. Every business must assess its risks. If you do nothing else, do this.
Written documentation protects you. Even when it is not strictly required, having your policy, risk assessments, and procedures in writing protects you legally, commercially, and practically.
You do not need a consultant. For most small businesses, the right templates and a bit of time are all you need.
Review regularly. Health and safety is not a one-off job. Set a date to review your documents at least once a year.
Getting compliant is achievable. A day of focused effort, a modest investment in the right documents, and a commitment to reviewing them regularly is all it takes.

If you have been putting this off, today is a good day to start. The requirements are manageable, the documents are straightforward, and the peace of mind that comes from knowing you are compliant is worth every minute you invest.