What Is a Health and Safety Policy? UK Definition and Requirements

If you’re running a small business, health and safety can feel like one of those “we’ll sort it later” admin tasks.

But the reality is this: a clear, practical health and safety policy is one of the simplest ways to protect your people, your customers, and your business (including your reputation and your finances) from day one.

In this guide, we’ll break down what a health and safety policy means in practice, when you need one, what it should include, and how to make it actually work in the real world of small business operations.

What Is A Health And Safety Policy? (Definition For UK Businesses)

A health and safety policy is a written document that sets out your organisation’s general approach to managing health and safety at work - including how you’ll identify risks, put controls in place, and keep arrangements under review.

In plain English, it’s your plan for:

• keeping people safe while they work (employees, workers, contractors, volunteers)
• reducing the chance of injuries, ill health, and accidents
• showing you take your legal responsibilities seriously
• explaining who is responsible for what (so it’s not vague or “everyone’s job”)

It’s also a key part of your wider legal foundations as an employer. It usually sits alongside other documents you use to run your workplace properly, such as an Employment Contract and a wider Workplace Policy suite.

Is A Health And Safety Policy Just A “Safety Document”?

Not quite. A good policy is more than a box-ticking exercise.

It should describe your business approach to safety in a way that matches what you actually do day-to-day - whether that’s running a café, a warehouse, a salon, a construction business, an office, or a fully remote team.

Do Small Businesses Need A Written Health And Safety Policy?

In the UK, some businesses must have a written health and safety policy - and even when it’s not strictly required, it’s usually still a smart move.

The General Legal Position

The main starting point is the Health and Safety at Work etc. Act 1974, which places duties on employers to ensure (so far as reasonably practicable) the health, safety and welfare of employees and others who may be affected by the business.

Alongside that, the Management of Health and Safety at Work Regulations 1999 require employers to put in place suitable arrangements for managing health and safety, including risk assessments.

When A Written Policy Is Legally Required

In practice, the commonly cited rule is:

• If you employ 5 or more people, the law requires you to have a written health and safety policy.

In general, this headcount is based on the number of people you employ under contracts of employment (including part-time employees) - and it’s sensible to take advice if your staffing arrangements are more complex.

If You Have Fewer Than 5 Employees

If you employ fewer than 5 people, you might not be legally required to have a written policy - but you’re still legally required to manage health and safety risks.

From a small business perspective, having a simple written policy is often worth it because it:

• makes expectations clear (especially when you start hiring)
• helps you train new starters consistently
• shows you took reasonable steps if something goes wrong
• supports insurance applications and renewals

In other words: even if you’re not forced to have it in writing, it’s often the easiest way to stay organised and protected.

What Should A Health And Safety Policy Include?

A good health and safety policy doesn’t need to be long - but it does need to be clear, relevant and used.

Most UK health and safety policies are structured around three core sections.

1. Statement Of Intent

This is your high-level commitment to health and safety. Think of it as the “why” and “what we believe in” section.

It typically covers:

• your commitment to providing a safe workplace
• your commitment to meeting legal requirements
• your approach to continuous improvement (reviewing risks as your business changes)

This section is short, but it sets the tone. If it reads like generic fluff, people will treat it that way - so it’s worth tailoring to your business.

2. Responsibilities

This section is where you spell out who does what. This is especially important in small businesses where people wear multiple hats.

You might cover responsibilities for:

• the business owner / director (overall responsibility)
• managers or supervisors (day-to-day implementation)
• employees (following procedures, reporting hazards)
• first aiders or fire marshals (if you have them)
• contractors (complying with site rules, reporting risks)

If you want this to work smoothly, it often helps to place the policy inside (or alongside) a broader set of employment documents like a Staff Handbook, so your safety rules don’t sit in isolation.

3. Arrangements (Your Practical Safety Procedures)

This is the “how” section: the actual steps your business takes to manage risk.

What you include depends on your industry, but common topics include:

• Risk assessments (how you identify hazards, who carries them out, and how often you review them)
• Training (induction training, role-specific training, refresher training)
• Accident reporting and near-miss reporting
• First aid arrangements
• Fire safety and evacuation procedures
• Manual handling procedures (if relevant)
• Work equipment checks and maintenance
• Personal protective equipment (PPE) rules (if needed)
• Display screen equipment (DSE) guidance for office and home workers
• Stress and wellbeing (especially where workload pressures exist)

How Does A Health And Safety Policy Work With Risk Assessments?

A common misconception is that a health and safety policy is your risk assessment.

It’s not.

Your health and safety policy is the overall framework - and your risk assessments are the practical tools you use to identify hazards and control them.

What Is A Risk Assessment (In Practical Terms)?

A risk assessment is a structured process where you:

1. identify hazards (things that could cause harm)
2. decide who might be harmed and how
3. evaluate the risks and decide on precautions
4. record your findings (and implement them)
5. review and update as needed

Your policy should explain how you do this in your business - for example, when you review risk assessments (new equipment, new site, an incident, changes to working patterns).

Why This Matters For Small Businesses

In a small business, changes happen quickly - new staff, new suppliers, a new premises, a new product line, or a busy season where you bring in casual workers.

A policy that links to a real risk assessment process helps you keep up without reinventing the wheel each time something changes.

How To Create A Health And Safety Policy That Actually Protects Your Business

Plenty of businesses have a health and safety policy sitting in a folder somewhere - unsigned, unread, and basically useless.

If you want your policy to genuinely protect your business, focus on these practical steps.

Step 1: Match The Policy To Your Workplace

Start with the reality of how you work:

• Do people work with machinery or chemicals?
• Do staff handle hot food, sharps, or heavy items?
• Is anyone working alone, late at night, or off-site?
• Do you have members of the public coming onto your premises?
• Do you use contractors regularly?

A generic policy that doesn’t reflect your actual risks can leave gaps - and those gaps are where problems usually happen.

Step 2: Make Responsibilities Unmissable

In small teams, it’s easy for safety tasks to fall between the cracks.

Be very clear on:

• who is responsible for day-to-day checks
• who signs off on maintenance and repairs
• who runs inductions and training
• who investigates incidents

And make sure those responsibilities line up with what you’ve agreed in your employment documentation (for example, senior responsibilities may also be referenced in a Directors Service Agreement or senior employment terms where relevant).

Step 3: Train People On The Policy (Don’t Just Email It)

It’s not enough to say “the policy is on the drive.” If an incident occurs, the question often becomes whether you took reasonable steps to implement your safety systems.

For most small businesses, “implementation” looks like:

• including health and safety in onboarding
• having staff sign to confirm they’ve read it
• running short refreshers (especially after changes)
• making it accessible (printed copy onsite, digital copy for remote teams)

Step 4: Keep It Updated As You Grow

Your health and safety policy shouldn’t be a one-time job.

Build a habit of reviewing it when:

• you move premises
• you introduce new equipment or substances
• you change how work is done (e.g. adding delivery, offering home visits, hiring contractors)
• there’s an accident or near miss
• your headcount grows (especially around the 5+ employee mark)

This “review rhythm” is one of the best ways to stay compliant without feeling like compliance is taking over your life.

Common Health And Safety Policy Mistakes (And How To Avoid Them)

Even well-intentioned business owners can trip up on health and safety documentation - usually because they’re busy and trying to keep operations running.

Here are some common mistakes we see, and how to avoid them.

Using A One-Size-Fits-All Template

Templates can be a starting point, but a policy that doesn’t reflect your real risks can be worse than having none - because it can create a false sense of security.

Fix: tailor your policy to your workplace, and make sure the “arrangements” section matches what you actually do.

Not Covering Non-Obvious Risks

Health and safety isn’t just slips, trips and machinery. Depending on your business, you may need to consider:

• work-related stress and burnout
• violence or abuse from customers (retail, hospitality, healthcare)
• lone working risks
• driving for work
• home working setup (DSE and mental wellbeing)

Fix: treat health and safety as “how people work safely” - not just physical hazards.

Not Documenting Training Or Actions

Having a policy is one thing. Being able to show you put it into practice is another.

Fix: keep simple records of inductions, training, equipment checks, and incident reports. You don’t need a complex system - just something consistent.

Forgetting Contractors And Visitors

Your duties can extend beyond employees. Customers, suppliers, and contractors may be affected by your work activities, especially if they’re on your premises.

Fix: include contractor and visitor safety processes (sign-in rules, PPE requirements, restricted areas, supervision where needed).

If you want a practical overview of how these duties play out in day-to-day business operations, it can help to look at the broader picture of Health And Safety In The Workplace requirements.

Key Takeaways

• A health and safety policy is a written plan explaining how your business manages workplace health and safety risks, including responsibilities and practical procedures.
• If you employ 5 or more employees, you are legally required to have a written health and safety policy - and it’s often beneficial even for smaller teams.
• A strong policy usually includes: a statement of intent, responsibilities, and arrangements (your practical safety steps, including risk assessments and training).
• Your policy should match your real-world operations - generic documents that don’t reflect your actual risks can leave your business exposed.
• Implementation matters: train your staff, keep basic records, and review your policy when your business changes.
• Health and safety policies work best when aligned with your wider employment framework, like your Employment Contract and Staff Handbook.

If you’d like help putting the right workplace documentation in place (including policies that fit how your business actually runs), you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.