Skip to content

Health and Safety for Small Businesses

BusinessLast reviewed: 1 April 20256 min

Employers have a legal duty to protect the health, safety, and welfare of their employees and others who may be affected by their work. For small businesses, compliance does not need to be onerous — but ignoring it carries serious legal and financial consequences.

Important

Failure to have valid employers' liability insurance is a criminal offence. The HSE can fine businesses £2,500 per day.

Key points

  • If you employ anyone, you must have a written health and safety policy (mandatory for businesses with 5 or more employees).
  • You must carry out and record risk assessments for all significant workplace risks.
  • Employers must display the HSE health and safety law poster (or distribute the equivalent leaflet) at their workplace.
  • Businesses with 10 or more employees must keep an accident book; all businesses should record incidents.
  • RIDDOR requires certain work-related accidents, diseases, and dangerous occurrences to be reported to the HSE.
  • Employers' liability insurance is compulsory for all businesses that employ anyone, even one person, other than close family members.

Risk Assessments

A risk assessment is a systematic process of identifying hazards in your workplace and evaluating the risk they pose. The Management Regulations require employers to carry out a suitable and sufficient risk assessment. For businesses with five or more employees, the significant findings must be written down.

The HSE's five-step approach:

  • Step 1 — Identify hazards: Look around your workplace and identify what could cause harm (slippery floors, heavy machinery, hazardous chemicals, manual handling, lone working, stress)
  • Step 2 — Who might be harmed and how: Consider employees, young workers, pregnant workers, contractors, visitors, and customers
  • Step 3 — Evaluate risks and decide on controls: Is the risk currently controlled? What more can you do? Apply the hierarchy of controls: eliminate the hazard; substitute it; isolate people from it; implement engineering or administrative controls; use PPE as a last resort
  • Step 4 — Record your findings: Write down the significant hazards, who is at risk, and the controls in place
  • Step 5 — Review and update: Review the assessment when circumstances change (new equipment, new processes, accident reports)

RIDDOR: Reporting Accidents

The Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 (RIDDOR) require employers, the self-employed, and people in control of premises to report certain work-related incidents to the HSE.

You must report:

  • Deaths of workers or non-workers arising from a work-related accident
  • Specified injuries to workers — including fractures (other than fingers/thumbs/toes), amputations, permanent loss of sight, crush injuries causing internal organ damage, burns, scalping, or loss of consciousness
  • Over-7-day incapacitation — where a worker is absent or unable to do their normal work for more than 7 consecutive days (not counting the day of the accident)
  • Injuries to non-workers (e.g. customers, visitors) that are serious enough to require hospital treatment
  • Occupational diseases — such as carpal tunnel syndrome, hand-arm vibration syndrome, or occupational dermatitis
  • Dangerous occurrences — near misses that could have caused death or serious injury

Report via the HSE website or by calling the RIDDOR reporting line (0345 300 9923). Keep your own record of all workplace accidents and incidents, not just those that meet the RIDDOR threshold.

Employers' Liability Insurance

Under the Employers' Liability (Compulsory Insurance) Act 1969, all businesses that employ anyone (other than close family members in a family business) must have employers' liability insurance. The minimum coverage required is £5 million, though most policies provide £10 million or more.

You must:

  • Display your current employers' liability insurance certificate at your workplace (or make it available for inspection electronically)
  • Keep copies of certificates for 40 years (to cover long-latency diseases such as mesothelioma)

Failure to have valid employers' liability insurance is a criminal offence. The HSE can fine businesses up to £2,500 per day for failure to hold the required insurance.

In addition to employers' liability insurance, you should consider:

  • Public liability insurance — covers claims from members of the public injured on your premises or through your business activities (not legally required but very strongly recommended)
  • Product liability insurance — if you manufacture or supply products

Frequently asked questions

I run a home-based business with no employees. Do health and safety laws still apply to me?
Yes, to a degree. If you are self-employed and your work could pose a risk to others (clients visiting your home, delivery drivers), you have duties under the Health and Safety at Work Act. However, if you are self-employed and pose no risk to others, the Act does not apply to you. You should still ensure your home workspace meets basic safety standards and consider appropriate insurance.
How often should I review my risk assessments?
Risk assessments should be reviewed whenever there is a significant change in your workplace or working practices — for example, when introducing new equipment, when a new employee joins (particularly young workers or pregnant women), after an accident, or when working practices change. As a general rule, reviewing all risk assessments annually is good practice even if nothing appears to have changed.
Does a sole trader with no employees need employers' liability insurance?
No — employers' liability insurance is only required if you employ at least one person (other than a close family member). However, if you work on a client's premises or interact with the public, public liability insurance is strongly advisable. Many contracts and professional bodies also require public liability insurance as a condition of engagement.
One of my employees has had a minor accident at work. Do I need to report it?
Not necessarily to the HSE. RIDDOR reporting is triggered by specific types and severities of incident. However, you should always record all accidents in your accident book, regardless of severity. If the employee is absent for more than seven consecutive days following the accident (not counting the day of accident), you must report it to the HSE under RIDDOR.
Do you need a written health and safety policy?
If you employ five or more people, you are legally required to have a written health and safety policy under the Health and Safety at Work Act 1974. The policy must set out your general approach to managing health and safety, who is responsible for what, and the specific arrangements in place. Businesses with fewer than five employees are not legally required to write it down, but having a written policy is strongly recommended. The HSE provides free template policies for small businesses.
What is a risk assessment and who must carry one out?
A risk assessment is a systematic examination of your workplace and activities to identify hazards that could cause harm, assess the likelihood and severity of harm, and put control measures in place to reduce risk to an acceptable level. All employers must carry out suitable and sufficient risk assessments under the Management of Health and Safety at Work Regulations 1999. Those with five or more employees must record the significant findings. Risk assessments should be reviewed regularly and whenever working practices change.

Official bodies and resources

Health and Safety Executive

Regulator

Regulates workplace health, safety, and welfare, and enforces related legislation across Great Britain.

Advisory, Conciliation and Arbitration Service

Government

Provides free, impartial advice on workplace relations and employment law, and offers early conciliation before tribunal claims.

Was this page helpful?

Disclaimer

This information is for general guidance only and does not constitute legal advice. You should seek qualified legal help if your situation requires it.