Employer Risk Assessment Duties

Employer risk assessment duties form the foundation of workplace health and safety law in England and Wales. Employers are legally required to identify workplace hazards, evaluate the level of risk they pose, and implement measures to reduce or control those risks.

These duties are central to compliance under the Health and Safety at Work etc. Act 1974 and the Management of Health and Safety at Work Regulations 1999. Failure to comply can result in enforcement action by the Health and Safety Executive (HSE), civil liability for personal injury, and in serious cases, criminal prosecution.

Risk assessment is not a one-off exercise. It is an ongoing legal obligation that must be reviewed and updated as working conditions, processes, or risks change.

Legal Basis for Employer Risk Assessment Duties

The primary legal framework includes:

• Health and Safety at Work etc. Act 1974 (general duty to ensure safety so far as reasonably practicable)
• Management of Health and Safety at Work Regulations 1999 (specific duty to carry out suitable and sufficient risk assessments)
• Workplace-specific regulations such as COSHH and Manual Handling Regulations

Under Regulation 3 of the 1999 Regulations, every employer must make a “suitable and sufficient” assessment of:

• Risks to employees while at work
• Risks to non-employees affected by work activities

This includes customers, visitors, contractors, and members of the public.

What a Risk Assessment Is

A risk assessment is a structured process used to identify:

• Hazards (things that could cause harm)
• Risks (likelihood and severity of harm occurring)
• Control measures (steps to reduce or eliminate risk)

The purpose is to prevent accidents and occupational illness before they occur, rather than responding after harm has happened.

Step-by-Step Employer Risk Assessment Process

1. Identify hazards

Employers must identify anything with the potential to cause harm, including:

• Machinery and equipment
• Chemicals and hazardous substances
• Manual handling tasks
• Slips, trips, and falls
• Workplace violence or stress risks

2. Decide who may be harmed and how

Employers must consider:

• Employees in different roles
• Vulnerable workers (e.g. pregnant workers, young workers)
• Contractors and visitors
• Members of the public affected by operations

3. Evaluate risks and existing controls

This involves assessing:

• Likelihood of harm occurring
• Severity of potential harm
• Whether existing safety measures are adequate

At this stage, employers must determine whether additional precautions are required.

4. Record findings

Where an employer has five or more employees, the significant findings of the risk assessment must be recorded. This typically includes:

• Identified hazards
• Groups at risk
• Existing control measures
• Further actions required

5. Implement control measures

Employers must act on the findings by introducing appropriate controls, such as:

• Engineering controls (guards, ventilation systems)
• Safe systems of work
• Training and supervision
• Provision of personal protective equipment (PPE)

6. Review and update regularly

Risk assessments must be reviewed:

• When working practices change
• After accidents or near misses
• When new equipment or substances are introduced
• At regular intervals even if no changes occur

Legal Standard: “Suitable and Sufficient”

The law does not require perfection, but risk assessments must be:

• Proportionate to the level of risk
• Based on real workplace conditions
• Capable of identifying foreseeable risks
• Supported by evidence and reasoning

Generic or “template-only” assessments are often insufficient if they do not reflect actual workplace conditions.

Types of Risk Assessments Employers Must Consider

Different workplaces require different forms of assessment, including:

General workplace risk assessments

Cover overall workplace hazards such as layout, access, and environmental risks.

Task-specific risk assessments

Focus on individual tasks such as manual handling or operating machinery.

COSHH assessments

Required for hazardous substances, including chemicals, fumes, and biological agents.

Fire risk assessments

Required under fire safety legislation, covering evacuation routes, alarms, and fire prevention.

Stress and psychosocial risk assessments

Cover workload, workplace pressure, and organisational stress factors.

Employer Duties Under Health and Safety Law

Employers must ensure:

• Risk assessments are carried out by competent persons
• Staff are informed of identified risks
• Control measures are properly implemented and maintained
• Employees receive appropriate training and instruction
• Risk assessments are integrated into workplace management systems

Delegating risk assessments does not remove legal responsibility from the employer.

Employee Responsibilities in Risk Management

Employees also have legal duties, including:

• Following safe systems of work
• Using equipment correctly
• Reporting hazards or unsafe conditions
• Cooperating with training and safety procedures

Failure to comply can contribute to workplace incidents and disciplinary action.

Enforcement and Regulatory Oversight

The Health and Safety Executive (HSE) and local authorities enforce compliance.

Enforcement powers include:

• Improvement notices requiring corrective action
• Prohibition notices stopping dangerous activities immediately
• Prosecution in serious breach cases

Non-compliance with risk assessment duties is a common trigger for enforcement action.

Consequences of Failing to Carry Out Risk Assessments

Failure to comply can result in:

• Criminal prosecution under health and safety law
• Unlimited fines for organisations
• Personal liability for directors or senior managers in serious cases
• Civil claims for personal injury compensation
• Employment tribunal claims in cases involving dismissal or detriment

Courts treat failures in risk assessment as evidence of negligence in many workplace injury claims.

Common Risk Assessment Failures

Frequent compliance issues include:

• No written risk assessment where required
• Outdated assessments not reflecting current working conditions
• Failure to assess non-routine tasks
• Inadequate consideration of vulnerable workers
• Lack of training or communication of risks
• Ignoring reported hazards or near misses

Role of Risk Assessments in Personal Injury Claims

In workplace injury litigation, risk assessments are often central evidence.

They may demonstrate:

• Whether the employer identified known hazards
• Whether reasonable precautions were taken
• Whether the injury was foreseeable

Poor or missing risk assessments can significantly increase liability exposure in compensation claims.

Practical Compliance Measures for Employers

Effective compliance typically involves:

• Regular workplace audits
• Documented risk assessment procedures
• Staff training programmes
• Incident reporting systems
• Periodic review schedules
• Consultation with employees or safety representatives

These measures support both legal compliance and operational safety.

Key Takeaways

Employer risk assessment duties require organisations to systematically identify workplace hazards, evaluate risks, and implement appropriate control measures. These duties apply to all employers under UK health and safety law and must be ongoing, documented, and regularly reviewed. Failure to comply can result in enforcement action, criminal liability, and civil compensation claims. Proper risk assessment is a core requirement for maintaining safe working environments and reducing legal exposure.