Health and Safety at Work: The Basics Every Employer Needs to Know

Health and safety training often gets filed away as something for construction sites and factory floors — hard hats and hazard signs, not much relevance to an office, a client-facing team or a remote workforce. That framing undersells what health and safety law actually requires. Every employer, in every sector, carries a statutory duty to protect the people who work for them, and the basics of that duty are the same whether the workplace is a warehouse or a laptop at a kitchen table.

The Legal Baseline, in Plain Terms

In the UK, the Health and Safety at Work etc. Act 1974 is the foundational legislation, requiring employers to ensure, so far as reasonably practicable, the health, safety and welfare of their employees, and to a lesser extent, others affected by their work. In Ireland, the Safety, Health and Welfare at Work Act 2005 sets out an equivalent duty. Neither law is limited to physically hazardous industries — both apply to every employer, and both require a proactive approach (risk assessment and prevention) rather than a reactive one (responding only after something goes wrong).

A Practical Framework for Any Workplace

1. Carry out a genuine risk assessment for your actual working environment. For an office or hybrid workforce, this covers things like display screen equipment, lone working, and stress and workload, not just physical hazards — a generic template rarely captures the real risk profile.
2. Make sure the policy is genuinely known, not just written. A health and safety policy that sits in a folder no one has read provides little real protection and doesn't meet the spirit of the legal duty.
3. Review risk assessments when working arrangements change. A shift to remote or hybrid working, a new office layout, or a new client-facing process all change the risk profile and warrant a fresh look, not a one-off assessment done years ago.
4. Treat near-misses and minor incidents as information, not noise. A pattern of small incidents often points to a systemic issue worth addressing before it produces a serious one.

Worked Example: Reassessing Risk After a Move to Hybrid Working

A professional services firm moves to a hybrid working model without formally revisiting its health and safety risk assessment, which still assumes a fully office-based team. Several months in, a review prompted by a routine insurance audit reveals the assessment doesn't address home-working setups at all — display screen equipment, workspace suitability, or how an employee working alone would get help in an emergency. The firm runs a straightforward self-assessment questionnaire for home workers and updates its policy accordingly. The gap wasn't the result of any single bad decision, just an assumption that health and safety obligations hadn't really changed when the working model had.

Common Pitfalls

The most common mistake is assuming health and safety obligations are mainly relevant to physically hazardous industries, missing that the duty applies universally and covers things like ergonomics, workload and lone working as much as physical hazards. The second is treating a risk assessment as a one-off exercise rather than something that needs revisiting as working arrangements change.

Building This Into Organisational Practice

Employers that manage this well build health and safety review into routine business change — a new office, a new working model, a new client-facing process — rather than treating it as a separate, occasional compliance exercise.

Why This Belongs in a Structured CPD Programme

Health and safety awareness is a baseline professional competency expected of managers across every sector, and structured training ensures the legal basics are genuinely understood, not assumed from general awareness.

How This Fits Into a Broader Risk and Compliance Programme

Health and safety compliance is a statutory obligation with real legal and financial consequences for failure, and treating it as core to organisational risk management, alongside financial and operational risk, reflects its actual standing rather than sidelining it as a separate HR matter.

Who Should Own Health and Safety in a Non-Industrial Business

In a business without an obvious safety-critical function, health and safety responsibility often ends up informally attached to whoever is willing to take it on, rather than being clearly assigned. That ambiguity is itself a risk: without a named, accountable owner, risk assessments drift out of date and incidents go unrecorded because no one is clearly responsible for tracking them. Naming a specific person or role as accountable, even in a small organisation, and giving them the time and authority to actually do the job, closes a gap that's common precisely because the risk doesn't feel urgent day to day.

FAQ

Does health and safety law only apply to physically hazardous workplaces?
No — the statutory duty applies to every employer regardless of sector, and covers ergonomic, psychological and lone-working risks alongside physical hazards.

Do remote and hybrid workers need a separate risk assessment?
Generally yes — a home or remote working environment carries a different risk profile from an office, and a proper assessment should reflect that rather than defaulting to an office-based template.

Who is legally responsible for health and safety within an organisation?
Ultimate responsibility sits with the employer, though day-to-day compliance depends on managers understanding and applying the policy in practice.

For related reading, see our guides to workplace violence prevention and leading remote and hybrid teams. Build your organisation's compliance knowledge further with Learnsignal's CPD courses.