When Is a Written Health and Safety Policy a Legal Requirement in the UK?

If you're employing staff in the UK, you need to understand when a written health and safety policy becomes a legal requirement. The answer isn't just about numbers — it's about understanding your legal duties and protecting your business from prosecution and unlimited fines.

Under the Health and Safety at Work etc. Act 1974, every employer with 5 or more employees must have a written health and safety policy. This isn't guidance — it's a legal requirement with serious consequences for non-compliance.

The 5-Employee Legal Threshold Explained

Section 2(3) of the Health and Safety at Work etc. Act 1974 is crystal clear: "Except in such cases as may be prescribed, it shall be the duty of every employer to prepare and, as often as may be appropriate, revise a written statement of his general policy with respect to the health and safety at work of his employees..."

The "prescribed cases" are employers with fewer than 5 employees. This means:

1-4 employees — Written policy not legally required (though recommended)
5+ employees — Written health and safety policy is mandatory
No upper limit — The requirement applies to all employers regardless of size

The count includes all employees, whether full-time, part-time, temporary, or on fixed-term contracts. It doesn't include genuine contractors or volunteers.

When the Count Changes

If your business fluctuates around the 5-employee threshold, err on the side of compliance. Once you reach 5 employees — even temporarily — the legal duty applies. You can't simply remove the policy if your headcount drops below 5 later.

Seasonal businesses that regularly exceed 5 employees during peak periods must have a written policy in place before reaching that threshold, not after.

What Must Be Included in Your Policy

A legally compliant health and safety policy has three essential parts, each serving a specific legal purpose:

Part 1: Statement of General Policy

This section outlines your commitment to health and safety. It must:

Be signed by the most senior person — Usually the managing director or business owner
State your commitment to protecting employee health and safety
Include a review date — Annual reviews are standard practice
Be dated to show when it was created or last updated

Part 2: Organisation and Responsibilities

This identifies who does what for health and safety in your organisation:

Senior management responsibilities — Who makes H&S decisions
Line management duties — Day-to-day safety responsibilities
Employee responsibilities — What staff must do
Specialist roles — Safety representatives, first aiders, fire wardens

Part 3: Arrangements

This describes your practical arrangements for managing health and safety:

Risk assessment procedures — How you identify and control hazards
Training arrangements — Induction and ongoing training
Accident procedures — Reporting and investigation
Emergency arrangements — Fire, first aid, evacuation
Consultation methods — How you involve employees

For detailed guidance on creating each section, see our comprehensive guide on health and safety policy requirements for small businesses.

Consequences of Non-Compliance

Failing to have a written health and safety policy when legally required is a criminal offence under Section 33 of the Health and Safety at Work etc. Act 1974.

HSE Enforcement Powers

HSE inspectors can:

Issue improvement notices — Giving you time to create a compliant policy
Issue prohibition notices — Stopping work until you comply
Prosecute your business — Taking you to court
Prosecute individuals — Directors and senior managers personally

Financial Penalties

In Magistrates' Courts, fines for policy failures are typically £1,000-£5,000. In Crown Courts, fines are unlimited — with major companies receiving six-figure penalties for systematic failures.

Beyond fines, prosecution brings reputational damage, legal costs, and potential director disqualification in serious cases.

What About Businesses with Fewer Than 5 Employees?

If you employ 1-4 people, a written policy isn't legally required — but you still have fundamental health and safety duties.

Your Legal Obligations Still Include

Risk assessments — Required regardless of business size
Safe systems of work — Ensuring tasks are performed safely
Information and training — Telling employees about hazards
Employers' liability insurance — Minimum £5 million cover
Accident reporting — RIDDOR obligations apply to all employers

Our guide to health and safety for 1-4 employees explains exactly what's required for very small businesses.

Why Create a Policy Anyway?

Even without the legal requirement, a written policy provides:

Clear expectations — Everyone knows their responsibilities
Consistency — Standard approaches to safety issues
Evidence of commitment — Shows you take safety seriously
Future-proofing — Ready for when you expand

Special Considerations for Growing Businesses

Planning for the 5-Employee Milestone

Don't wait until you hit 5 employees to think about your health and safety policy. Prepare in advance:

Draft your policy before hiring — Have it ready to implement
Include it in your growth planning — Factor the time and cost
Consider professional help — Templates might not cover your specific risks
Train your management team — They need to understand their new duties

Multi-Site Operations

If you operate across multiple sites, your employee count includes everyone. A business with 3 employees at Site A and 3 at Site B needs a written policy for all 6 employees.

Your policy can cover all sites or have site-specific sections reflecting local hazards and arrangements.

Beyond the Policy: Your Wider Duties

Having a written policy is just the starting point. Businesses with 5 or more employees face additional compliance requirements:

Written Risk Assessments

Under Regulation 3 of the Management of Health and Safety at Work Regulations 1999, employers with 5+ employees must record their risk assessment findings. This includes:

Significant hazards identified
People at risk
Control measures in place
Further actions needed

Learn how to create compliant assessments with our complete risk assessment guide.

Safety Representatives

If your workforce is unionised, you may need to appoint safety representatives under the Safety Representatives and Safety Committees Regulations 1977. Even in non-unionised workplaces, the Health and Safety (Consultation with Employees) Regulations 1996 require meaningful consultation.

Training Documentation

You must keep records of health and safety training provided to employees. This becomes increasingly important as your team grows and training needs become more complex.

Industry-Specific Considerations

While the 5-employee threshold applies universally, some sectors have additional policy requirements regardless of size:

Construction Companies

Construction businesses must also consider CDM 2015 requirements, which may mandate additional written procedures for project management and coordination.

Care Providers

Care homes and healthcare providers may need policies covering infection control, manual handling of patients, and clinical waste — regardless of staff numbers. Our health and safety guide for care homes covers these specialist requirements.

Food Businesses

Food preparation and catering businesses need HACCP procedures alongside health and safety policies, with specific requirements for hygiene and temperature control.

Getting Professional Help

While you can write your own policy using templates, professional help ensures your policy:

Reflects your actual risks — Not generic hazards
Complies with all relevant legislation — Beyond just HSWA 1974
Integrates with other systems — Quality, environment, training
Grows with your business — Scalable arrangements

Consider professional input when:

Your business involves significant hazards
You operate in multiple locations
You're in a regulated sector
You're planning rapid growth

Implementation and Review

Creating your policy is only the first step. Effective implementation requires:

Communication

Display the policy prominently — Noticeboard or intranet
Discuss during induction — All new employees
Reference in training — Regular safety briefings
Make copies available — Physical or digital access

Regular Review

Review your policy annually or when:

Significant changes to your business
New hazards are identified
After serious accidents
Following regulatory changes
After organisational restructuring

Common Mistakes to Avoid

Don't fall into these traps when creating your health and safety policy:

Generic Templates Without Customisation

A policy that mentions hazards you don't have, or misses risks specific to your business, is worse than useless — it shows you haven't thought about your actual safety arrangements.

Focusing Only on Compliance

Your policy should drive real improvements in workplace safety, not just tick a legal box. Make it a working document that people actually use.

Forgetting to Update

An outdated policy with wrong names, closed facilities, or superseded procedures undermines your entire health and safety system.

No Management Buy-In

If senior managers don't visibly support and follow the policy, employees won't take it seriously either.

What to Do Now

If you currently employ or are planning to employ 5 or more people:

Audit your current position — Do you have a compliant written policy?
Review your employee count — Include all contract types
Check your arrangements — Are they documented and working?
Plan for growth — Factor policy requirements into expansion plans
Consider your risks — Generic templates may not be sufficient

Even with fewer than 5 employees, having clear safety arrangements protects your business and prepares you for future growth. Use our responsibility checker tool to understand what applies to your specific situation.

Remember: the cost of creating a proper health and safety policy is minimal compared to the potential consequences of prosecution, accidents, or systematic safety failures. Don't wait for an incident or HSE visit to get your house in order.

Need Help?

If you're unsure whether you need a written policy, or want help creating one that actually works for your business, get in touch. We can assess your requirements and connect you with the right support for your situation.