Health and Safety at Work Act (UK)
The UK's primary workplace safety legislation (1974) that places a general duty on employers to ensure, so far as is reasonably practicable, the health, safety, and welfare of all their employees at work.
- What Is the Health and Safety at Work Act?
- Key Duties Under the Act
- Risk Assessment Obligations
- Enforcement and Penalties
- Corporate Manslaughter and Corporate Homicide Act 2007
- RIDDOR: Reporting Injuries, Diseases, and Dangerous Occurrences
- Mental Health and Psychosocial Risks
- UK Workplace Safety Statistics [2026]
- HSWA Compliance Checklist for Employers
- Frequently Asked Questions About the Health and Safety at Work Act
What Is the Health and Safety at Work Act?
Key Takeaways
- ✓The Health and Safety at Work etc. Act 1974 (HSWA) is the primary piece of legislation covering occupational health and safety in England, Scotland, and Wales (Northern Ireland has parallel legislation).
- ✓It places a general duty on employers to protect the health, safety, and welfare of employees and anyone else affected by their business activities, including contractors, visitors, and members of the public.
- ✓The duty is qualified by "so far as is reasonably practicable" (SFARP), meaning employers must weigh the risk against the cost, time, and effort of eliminating it.
- ✓Enforcement is carried out by the Health and Safety Executive (HSE) and local authorities, with powers ranging from improvement notices to criminal prosecution.
- ✓Individual directors and managers can face personal criminal liability, including imprisonment of up to 2 years, for breaches where their consent or negligence contributed to the offence.
The Health and Safety at Work Act 1974 was a landmark. Before it, workplace safety law in the UK was a patchwork of industry-specific regulations that left large parts of the workforce unprotected. The Robens Report of 1972 recommended replacing this fragmented system with a single overarching statute. The result was the HSWA. It doesn't prescribe specific rules for every industry. Instead, it sets out broad duties and enables the Secretary of State to make detailed regulations (like the Management of Health and Safety at Work Regulations 1999 and the Control of Substances Hazardous to Health Regulations 2002). The Act covers roughly 31 million workers in Great Britain. It applies to all employers, the self-employed, employees, and anyone who controls work premises. Even organisations with just one employee must comply. For HR teams, the HSWA intersects with employment law at multiple points: risk assessments, return-to-work processes, occupational health referrals, workplace adjustments, lone worker policies, and disciplinary action for safety breaches.
Key Duties Under the Act
The Act assigns duties to employers, employees, the self-employed, and anyone controlling premises. These aren't optional guidelines. They're legal obligations backed by criminal sanctions.
Employer duties (Section 2)
Section 2 is the most cited provision. Employers must ensure, so far as is reasonably practicable: safe plant and systems of work, safe use, handling, storage, and transport of substances, adequate information, instruction, training, and supervision, a safe working environment with adequate welfare facilities, and a written health and safety policy (mandatory for employers with 5 or more employees). The duty extends beyond physical safety to include mental health and psychosocial risks. HSE guidance now explicitly covers work-related stress as a health and safety issue.
Employee duties (Section 7)
Employees must take reasonable care for their own health and safety and that of others who may be affected by their actions. They must cooperate with the employer on health and safety matters and not interfere with or misuse anything provided for health and safety purposes. Employees who deliberately or recklessly breach safety rules can face prosecution, though it's rare. More commonly, employers use the disciplinary process for safety breaches, with gross misconduct dismissals upheld by tribunals where the breach was serious.
Duties to non-employees (Section 3)
Employers and the self-employed must conduct their work in a way that doesn't expose non-employees (contractors, visitors, customers, members of the public) to health and safety risks, so far as is reasonably practicable. This duty is particularly relevant for businesses operating on shared sites, running public-facing venues, or engaging contractors.
Risk Assessment Obligations
While the HSWA itself doesn't use the term "risk assessment," the Management of Health and Safety at Work Regulations 1999 (made under the HSWA) require every employer to carry out a suitable and sufficient assessment of risks.
What a risk assessment must cover
The assessment must identify hazards (anything with the potential to cause harm), evaluate the risks (likelihood and severity of harm), record significant findings (mandatory for employers with 5+ employees), implement control measures, and review and update regularly. The HSE's five-step approach is: identify hazards, decide who might be harmed and how, evaluate risks and decide on precautions, record findings and implement them, review and update as needed. Special assessments are required for specific risks: young workers, new or expectant mothers, display screen equipment users, manual handling tasks, and hazardous substances.
Common risk assessment failures
Generic risk assessments copied from templates without tailoring to the specific workplace. Assessments that haven't been reviewed after a workplace change or incident. Failure to consult employees during the assessment process (a legal requirement). Focusing only on physical hazards while ignoring psychosocial risks like stress, bullying, and lone working. Not assessing risks to non-employees who access the premises.
Enforcement and Penalties
The HSE and local authorities enforce the Act through a graduated system of interventions, from advice and guidance up to criminal prosecution.
| Enforcement Action | What It Means | Consequence of Non-Compliance |
|---|---|---|
| Improvement notice | Requires the employer to fix a breach within a specified period | Failure to comply is a criminal offence: unlimited fine or up to 2 years' imprisonment |
| Prohibition notice | Stops a work activity immediately because of imminent risk of serious personal injury | Continuing the activity is a criminal offence with unlimited fines or imprisonment |
| Prosecution (magistrates' court) | Criminal charges for health and safety offences | Up to GBP 20,000 fine per offence and/or up to 12 months' imprisonment |
| Prosecution (Crown Court) | Serious cases tried on indictment | Unlimited fines and/or up to 2 years' imprisonment for individuals |
| Fee for Intervention (FFI) | Employer charged GBP 174/hour for HSE time spent identifying and resolving a material breach | Must be paid; can be challenged through a dispute process |
Corporate Manslaughter and Corporate Homicide Act 2007
When a workplace death occurs due to a gross breach of a duty of care by senior management, the organisation can face corporate manslaughter charges. This isn't part of the HSWA directly, but it's closely linked.
How corporate manslaughter works
The offence applies to organisations (not individuals) and requires proof that a gross breach of a relevant duty of care by senior management caused a person's death. "Senior management" means those who play a significant role in the management of the organisation's activities. Penalties include unlimited fines (the highest to date exceeded GBP 20 million), publicity orders (requiring the organisation to publicise its conviction), and remedial orders (requiring the organisation to fix the underlying breach). Individual directors can't be charged with corporate manslaughter, but they can be charged separately under the HSWA or with gross negligence manslaughter under common law.
Recent prosecutions and fines
HSE's Sentencing Council guidelines (introduced in 2016) significantly increased fines for health and safety offences. Large organisations (turnover of GBP 50M+) can face fines starting at GBP 1.15M for negligence causing death, rising to GBP 20M+ for the most serious cases. In 2023/24, total fines for health and safety offences exceeded GBP 65 million. For HR teams, these figures underline the financial and reputational risk of poor safety management. Investing in prevention is orders of magnitude cheaper than dealing with enforcement action.
RIDDOR: Reporting Injuries, Diseases, and Dangerous Occurrences
The Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 (RIDDOR) require employers to report specific workplace incidents to the HSE. Failing to report is a criminal offence.
- Deaths: report immediately by telephone (0345 300 9923), then follow up with an online report within 10 days.
- Specified injuries (fractures other than fingers/thumbs/toes, amputations, loss of sight, crush injuries, burns covering more than 10% of the body): report online within 10 days.
- Over-7-day incapacitation: report within 15 days if an employee is away from work or unable to do their normal duties for more than 7 consecutive days.
- Non-fatal injuries to non-workers (members of the public taken to hospital from the scene): report within 10 days.
- Occupational diseases (carpal tunnel, hand-arm vibration syndrome, occupational dermatitis, occupational asthma, tendonitis): report when confirmed by a doctor.
- Dangerous occurrences (near-misses defined in RIDDOR Schedule 2): report within 10 days even if no injury occurred.
- Keep records of all reportable incidents for at least 3 years.
Mental Health and Psychosocial Risks
The HSWA duty to protect health includes mental health. Work-related stress, anxiety, and depression accounted for 49% of all work-related ill health and 54% of all working days lost in Great Britain in 2022/23 (HSE).
HSE Management Standards for stress
The HSE identifies six primary stressors: demands (workload, work patterns, environment), control (how much say workers have over their work), support (from managers and colleagues), relationships (including bullying and harassment), role (clarity about job expectations), and change (how organisational change is managed and communicated). Employers should assess these factors, identify groups at particular risk, and implement interventions. While the Management Standards aren't legally binding, failure to manage work-related stress can result in enforcement action under the general duties of the HSWA.
HR's role in mental health compliance
HR teams often sit between occupational health services and line management. Key responsibilities include: training managers to spot signs of work-related stress, establishing return-to-work processes that include mental health assessments, ensuring absence management policies don't penalise employees with stress-related conditions (which may be disabilities under the Equality Act), and contributing to risk assessments that address psychosocial hazards alongside physical ones.
UK Workplace Safety Statistics [2026]
Data showing the current state of workplace health and safety in Great Britain.
HSWA Compliance Checklist for Employers
A practical checklist for HR and operations teams to verify core compliance with the Health and Safety at Work Act and its key regulations.
- Written health and safety policy: required for employers with 5+ employees. Must include a statement of intent, organisation details (who does what), and arrangements (specific procedures and risk controls).
- Risk assessments: conducted for all work activities, specific groups (young workers, pregnant employees, disabled workers), and special hazards (DSE, manual handling, hazardous substances). Recorded and reviewed regularly.
- Competent person appointed: at least one person (internal or external) designated as the competent health and safety adviser (required by Regulation 7 of the Management Regulations).
- Employee consultation: either through elected safety representatives (unionised workplaces) or directly with employees or elected representatives of employee safety (non-unionised workplaces).
- Information and training: all employees trained on hazards, emergency procedures, and safe working practices during induction and whenever risks change.
- Employers' Liability Insurance: minimum GBP 5 million cover (most policies provide GBP 10M+). Certificate must be displayed or made available electronically.
- First aid: adequate first aid equipment, facilities, and trained first aiders based on the risk assessment.
- Fire safety: separate compliance under the Regulatory Reform (Fire Safety) Order 2005, including fire risk assessment, emergency plan, fire detection equipment, and training.
Frequently Asked Questions
Does the HSWA apply to people working from home?
Can an employee refuse to work if they believe conditions are unsafe?
What's the difference between an improvement notice and a prohibition notice?
Are the self-employed covered by the Act?
How often should risk assessments be reviewed?
Can individual managers go to prison for health and safety offences?
Written by Adithyan RK