This guide is maintained as a current resource for July 2026 and covers only the laws of England and Wales. Information is for general guidance, not legal advice. Consult a qualified solicitor for advice specific to your situation.
Understand employers' legal obligations regarding health and safety in England and Wales, including statutory duties under the Health and Safety at Work etc. Act 1974, risk assessments, safety training, reporting requirements and enforcement. Clear guidance for businesses, workers and solicitors.
Employers in England and Wales have wide‑ranging legal duties to protect the health, safety and welfare of employees and others who may be affected by their business activities. These duties arise primarily from the Health and Safety at Work etc. Act 1974 (HSWA) and supporting regulations made under that Act, and are enforced by the Health and Safety Executive (HSE) and local authorities. Failure to comply with statutory obligations can lead to enforcement action, including fines, improvement notices, and criminal prosecution. This article explains employers' legal responsibilities, how they arise in practice, the role of risk assessments and policies, reporting requirements, and what workers can expect in terms of protection.
Core Legal Duties Under the Health and Safety at Work Act 1974
Employers' General Duty of Care
Under section 2 of HSWA, an employer must ensure, so far as is reasonably practicable, the health, safety and welfare at work of all employees. This includes creating and maintaining safe systems of work, safe equipment, and safe premises. Employers must also provide information, instruction, training and supervision necessary for health and safety compliance. The duty extends to risks arising from the use, handling, storage and transport of articles or substances at work, and to means of access and egress from workplaces.
The statutory phrase “so far as is reasonably practicable” requires employers to balance the level of risk against the cost and effort of mitigating it; high risks generally demand robust preventive steps unless doing so would be grossly disproportionate.
Duties to Others Affected by Work
Employers must also conduct their undertaking in a way that protects persons not in their employment who may nevertheless be affected by their work activities. This includes contractors, visitors, customers and members of the public. The duty to protect others is set out in section 3 of HSWA.
Supporting Regulations and Practical Controls
Risk Assessments and Management
The Management of Health and Safety at Work Regulations 1999 require employers to carry out suitable and sufficient risk assessments to identify hazards and take steps to prevent or control risks to health and safety. Employers must record the significant findings where they employ five or more people and must regularly review risk assessments to reflect changes in work activities or new risks. Risk assessments form the foundation of health and safety management and help employers decide on necessary controls such as equipment changes or training.
Health and Safety Policy and Consultation
Where an employer has five or more employees, it must prepare a written health and safety policy that sets out the organisation's approach to managing risks. The policy should be communicated to workers and cover roles, responsibilities, arrangements for training, and procedures for managing hazards. Employers are also required to consult employees on health and safety matters, either directly or through elected safety representatives if there is union recognition or appointed representatives.
Specific Regulatory Duties
In addition to general duties under HSWA:
- Workplace (Health, Safety and Welfare) Regulations cover basic workplace conditions such as ventilation, lighting, floor conditions, sanitary facilities, and space requirements.
- The Personal Protective Equipment at Work Regulations 1992 require employers to provide PPE where risks cannot be controlled by other methods, at no cost to the employee.
- Display Screen Equipment Regulations 1992 oblige employers to assess and manage risks associated with computer workstations, provide training and ensure workers take appropriate breaks.
- Reporting of Injuries, Diseases and Dangerous Occurrences Regulations (RIDDOR) 2013 require employers to report and record specified work‑related injuries, diseases and dangerous occurrences to the enforcing authority.
Training, Information and Supervision
Employers must ensure that workers receive appropriate health and safety training relevant to their roles and the risks they face. This includes induction training for new starters, role‑specific training for hazardous tasks, and refresher training where risks change. Employers should also provide information and instruction on the hazards identified in risk assessments and on control measures in place. Adequate supervision is an integral part of health and safety compliance, particularly for new or inexperienced workers.
Reporting and Record‑Keeping
Reporting Incidents and Dangerous Occurrences
Under RIDDOR, employers must report certain workplace events to the HSE or relevant local authority. This includes deaths, major injuries, certain occupational diseases and dangerous occurrences (near misses with high potential for harm). Prompt reporting and accurate documentation help regulators monitor risk trends and can influence enforcement activity.
Record‑Keeping Requirements
Employers should document risk assessments, training records, health surveillance outcomes (where applicable), and records of incidents and accidents. These records demonstrate compliance with statutory duties and assist during inspections or in the event of enforcement action.
Enforcement and Consequences of Non‑Compliance
The HSE and local authorities have powers to enforce health and safety law. They can issue improvement notices requiring steps to rectify breaches and prohibition notices to stop dangerous activities. Serious breaches can lead to prosecution in the criminal courts, with penalties including substantial fines and, in extreme cases, imprisonment for directors or managers whose neglect contributes to a breach. Under section 37 of HSWA, individuals in control of organisations can be personally liable if they consent to or neglect health and safety duties.
Employer and Employee Interaction
While employers bear primary responsibility for health and safety systems, employees also have duties to co‑operate with employers and to follow safe systems of work. This includes using equipment and PPE as instructed, attending training, and reporting hazards or shortcomings in protective measures. Employers and workers must work collaboratively to identify and mitigate risks in everyday operations.
Practical Application: Examples
Example 1 – Conducting a Risk Assessment:
An employer operating a warehouse must assess hazards such as manual handling, forklift traffic and storage stability. After identifying risks, the employer implements controls including staff training, clear pedestrian routes, mechanical aids for lifting, and regular equipment maintenance. These measures are documented and reviewed periodically.
Example 2 – PPE Provision:
In a construction setting, risk assessments identify potential exposure to harmful dust. The employer provides suitable respiratory protective equipment at no cost and trains workers on its correct use, as required by regulation.
Common Questions
Do health and safety duties apply to all workplaces?
Yes. All employers, regardless of size or sector, must protect workers' health and safety “so far as is reasonably practicable”. Specific regulations may apply depending on the nature of the work.
Can employees report unsafe conditions without risk of detriment?
Workers have the right to report hazards and can do so without fear of detrimental treatment. Protection for reporting comes from general employment rights and, in some cases, whistleblowing law.
Are employers responsible for remote and hybrid working risks?
Yes. Employers must consider foreseeable risks associated with remote or hybrid arrangements and take reasonable steps to manage those risks as part of their duty of care.
Key Takeaways
Employers in England and Wales have comprehensive legal obligations to ensure the health, safety and welfare of employees and others affected by their business activities. These duties stem from the Health and Safety at Work etc. Act 1974 and supporting regulations, which require risk assessment, effective training, health and safety policies, consultation with workers, provision of safe systems and equipment, and reporting of incidents. Compliance protects people at work and reduces the risk of enforcement action and liability. Both employers and employees share responsibility for maintaining safe workplaces, and proactive health and safety management is integral to lawful, effective business operations.
