If you run a business in the UK, a health and safety policy is not optional.
It is the law.
And yet, thousands of businesses either do not have one or have a policy that is outdated, incomplete, and would not stand up to an HSE inspection.
Getting this right is not complicated. But it does require you to understand exactly what a proper health and safety policy must include.
In this guide, we break down every key component of a health and safety policy in the UK. We explain what each section means, why it matters, and what happens if you get it wrong.
Whether you are writing a policy from scratch or reviewing an existing one, this guide has everything you need.
At BizGrow Holdings, we help UK businesses navigate health and safety compliance from policy creation to full certification support.
What Is a Health and Safety Policy?
A health and safety policy is a written document that sets out how your business manages health and safety.
It explains:
- What your business commits to doing to keep people safe
- Who is responsible for health and safety within the business
- What practical measures are in place to manage risk
The policy applies to your employees, visitors, contractors, and anyone else affected by your work.
Under UK law, every business must have a policy for managing health and safety. If you have five or more employees, you must write your policy down.
Fail to comply, and you could face fines, legal action, and serious reputational damage.
Why Does Your Business Need One?
Many business owners see a health and safety policy as just another piece of admin. It is not.
A well-written policy protects your people. It also protects your business.
Here is why it matters:
- Legal compliance: It is a requirement under the Health and Safety at Work etc. Act 1974
- HSE inspections: If the HSE visits, your policy is the first thing they will ask for
- Liability protection: A strong policy reduces your legal exposure if an accident occurs
- Employee confidence: Staff feel safer and more valued when policies are clear
- Insurance: Many insurers require a documented policy before providing cover
If health and safety laws are breached, the Health and Safety Executive may issue a notice of improvement or prohibition, with consequences becoming increasingly severe for more serious breaches including unlimited fines or imprisonment.
The cost of not having a proper policy is far greater than the cost of getting one right.
The Legal Framework Behind the Policy
Before we examine the components, it helps to understand the legal basis for them.
Health and Safety at Work etc. Act 1974
This is the foundation of UK workplace health and safety law. It places a duty on employers to ensure the health, safety, and welfare of employees and anyone affected by their work, from daily tasks to long-term strategic planning.
Management of Health and Safety at Work Regulations 1999
These regulations build on the 1974 Act. They require employers to conduct formal risk assessments, put protective measures in place, and appoint competent people to manage health and safety.
Reporting of Injuries, Diseases and Dangerous Occurrences Regulations (RIDDOR)
These rules require businesses to report certain workplace accidents, injuries, and near misses to the HSE.
Together, these laws form the backbone of what your health and safety policy must address.
The 3 Core Sections of a UK Health and Safety Policy
Under the Health and Safety at Work etc. Under the 1974 Act, every workplace must have a structured health and safety policy divided into three key sections: a statement of intent, defined responsibilities, and arrangements for managing health and safety.
Let us look at each one in detail.
Component 1: Statement of Intent
This is the opening section of your policy. It sets the tone for everything that follows.
The statement of intent should outline the company’s commitment to maintaining a safe workplace, highlight key safety objectives and responsibilities, and be signed by senior management to show accountability.
Think of it as your promise to your workforce. It should be clear, direct, and meaningful, not just corporate language.
What to include in your Statement of Intent:
- Your overall commitment to health and safety
- The aims and objectives of the policy
- A statement that safety is treated as a top priority
- The signature and date of the most senior person in the business (usually the CEO or MD)
- A review date to show the policy is kept up to date
The most senior person in the company who holds financial and resource control should sign the policy and ensure it is reviewed regularly, to avoid any confusion about who is ultimately responsible for health and safety.
Component 2: Responsibilities
This section is where you clearly define who does what.
Health and safety are everyone’s job. But certain roles carry specific responsibilities, and your policy must make that clear.
This part of your health and safety policy should list the specific responsibilities of different organisational roles. The names of particular individuals can be mentioned if they are responsible for certain health and safety activities, such as lone worker safety or managing PPE allocation.
A typical responsibilities structure looks like this:
- Employer / Directors: Overall accountability for health and safety across the business
- Health and Safety Manager / Officer: Day-to-day management of safety procedures and compliance
- Supervisors and Line Managers: Ensuring their teams follow safe working practices
- Employees: Following safety guidelines and reporting hazards or incidents
- Contractors and Visitors: Complying with site-specific safety rules
This section should be specific to your business. It should name actual job titles and, where appropriate, actual individuals.
If someone leaves the business, the policy must be updated to reflect the change. An outdated responsibilities section is one of the most common reasons businesses fail HSE inspections.
Component 3: Arrangements
This is the most detailed section of your policy. It explains the practical steps your business takes to manage health and safety on a day-to-day basis.
In the arrangements section, employers should present specific details, including how to report work accidents, how staff training is provided, how risk assessments are used, how safe working conditions are created, and how the workplace environment is maintained.
This section should cover all the key areas of risk in your business. Here are the most important ones to include:
Risk Assessments
Every UK employer must carry out regular risk assessments. This is not optional.
A risk assessment identifies what could go wrong, who might be harmed, and what steps are being taken to reduce the risk.
Employers must conduct regular risk assessments covering physical, chemical, biological, and psychosocial hazards and provide clear training and accessible information tailored to job roles.
Your policy should explain:
- How often are risk assessments carried out
- Who is responsible for conducting them
- How findings are recorded and acted upon
Health and Safety Training
A policy is only useful if your staff know about it and understand how to apply it.
To ensure employees can follow the policy effectively, it should be made easily accessible, whether in a handbook or on the company intranet, and training should be provided to all staff.
Your training section should cover:
- Induction training for new starters
- Role-specific safety training
- Regular refresher training (at least annually)
- Records of who has been trained and when
In 2026, digital training records and e-learning platforms are becoming essential tools in demonstrating compliance, offering an auditable trail of who has been trained, when, and on what subjects.
Accident and Incident Reporting
No matter how good your safety measures are, accidents can still happen.
Your policy must explain what employees should do if an accident occurs and how the business records and reports incidents.
Key elements to include:
- How to report an accident or near miss
- Where the accident book is kept
- Your RIDDOR reporting obligations
- How incidents are investigated to prevent recurrence
A clear reporting process also helps you spot patterns. If the same type of incident keeps happening, your risk assessment needs to be updated.
Emergency Procedures
Every business must have clear emergency procedures in place. These should be written into your health and safety policy.
This includes:
- Fire safety: Evacuation routes, assembly points, fire drill schedules, fire warden responsibilities
- First aid: Names and locations of first aiders, location of first aid kits
- Serious incidents: What to do in the event of a major accident or dangerous situation
The HSE has updated its guidance to expect employers to consider mental health first-aid provisions alongside traditional physical first-aid requirements, particularly for remote, lone, or at-risk workers.
Mental Health and Wellbeing
This is an area that has grown significantly in importance over recent years.
Almost half of all reported ill-health cases in the UK relate to mental health conditions, and while there has been a slight decrease, the current rate of stress, anxiety, and depression remains higher than pre-pandemic levels, costing businesses an estimated 33.7 million working days lost in 2022/23.
Your policy should acknowledge mental health as a workplace risk. It should outline:
- How the business identifies and supports employees experiencing mental health difficulties
- What resources are available (Employee Assistance Programmes, mental health first aiders, etc)
- How stress risk assessments are conducted
This is no longer a “nice to have.” It is quickly becoming a legal expectation.
Safe Working Practices and Use of Equipment
Your arrangements section should also cover specific procedures for any high-risk tasks or equipment used in your business.
This might include:
- Manual handling procedures
- Use of personal protective equipment (PPE)
- Safe use of machinery, tools, or chemicals (COSHH)
- Display screen equipment (DSE) assessments for office workers
The more detail here, the better. Generic statements are not enough. Your procedures should reflect what actually happens in your workplace.
Reviewing and Updating Your Policy
A health and safety policy is not a one-time document. It must be reviewed regularly.
The HSE recommends an annual review of your health and safety policy. It is also best practice to review policies after serious accidents and injuries, when significant business changes occur, or when new health and safety laws are introduced.
In 2026, the pace of regulatory change makes regular reviews even more important.
Recent reports have shown an increase in HSE inspections and prosecutions, with higher fines being issued for training failures and outdated risk assessments, making it essential to have clear evidence that your workforce has received up-to-date training.
Set a review date when you first create or update the policy. Stick to it.
Communicating the Policy to Your Team
Writing a policy is step one. Making sure your team understands it is step two.
Your policy must be:
- Shared with every employee when they join the business
- Accessible at all times online, in a staff handbook, or on a noticeboard
- Explained clearly during induction and training sessions
- Updated and re-communicated whenever changes are made
A policy that sits in a drawer and no one reads is not a policy. It is a liability.
Do You Need Help Getting Your Health and Safety Policy Right?
Many UK businesses, especially smaller and growing ones, struggle to write a health and safety policy that is genuinely compliant and fit for purpose.
This is where professional consultancy makes a real difference.
BizGrow Holdings provides expert health and safety consultancy services to UK businesses. We help you create policies that meet legal requirements, pass HSE scrutiny, and reflect the real risks in your workplace.
Whether you need a policy written from scratch, an existing policy reviewed, or full health and safety certification support, our team is here to help.
Get in touch with BizGrow Holdings today and take the stress out of health and safety compliance.
Final Thoughts
A health and safety policy is one of the most important documents your business will ever produce.
It protects your people. It protects your business. And it demonstrates to the world, including the HSE, that you take your responsibilities seriously.
The three core sections, Statement of Intent, Responsibilities, and Arrangements, form the legal foundation. But a truly effective policy goes further. It covers risk assessments, training, emergency procedures, mental health, and clear communication to every member of your team.
Get it right, and your policy becomes a genuine asset. Get it wrong or fail to have one at all, and the consequences can be severe.
For expert guidance on health and safety compliance and policy development, visit BizGrow Holdings, trusted by UK businesses to get compliance right, first time.
Frequently Asked Questions (FAQs)
Q1. Is a health and safety policy a legal requirement in the UK?
Yes. Under the Health and Safety at Work etc. Under the 1974 Act, every employer in the UK must have a health and safety policy. If you have five or more employees, it must be written down and shared with all staff. Failure to comply can result in fines and legal action from the HSE.
Q2. What are the three main components of a health and safety policy?
The three core components are: (1) the Statement of Intent, your commitment to health and safety; (2) Responsibilities, who is accountable for what; and (3) Arrangements, the practical measures you have in place to manage risk. All three sections are required by the HSE.
Q3. How often should a health and safety policy be reviewed?
The HSE recommends reviewing your health and safety policy at least once a year. You should also review it after any serious accident, major business change, or when new health and safety legislation comes into effect. Regular reviews ensure your policy stays compliant and relevant.
Q4. What happens if my business does not have a health and safety policy?
If the HSE inspects your business and you do not have a written health and safety policy (and you employ five or more people), you could face enforcement action. This can include improvement notices, prohibition orders, and fines. In serious cases, individuals can be prosecuted and face unlimited fines or imprisonment.
Q5. Can a health and safety consultancy help me write my policy?
Absolutely. Many businesses, especially growing ones, benefit from professional support when creating or updating their health and safety policy. BizGrow Holdings offers specialist consultancy to help UK businesses develop compliant, effective health and safety policies tailored to their specific workplace and industry.