What is a Health and Safety Policy?
If you employ people in the UK, you are legally required to have a health and safety policy. It is one of the most fundamental requirements of health and safety law — yet it is also one of the most misunderstood. Many businesses have a policy document sitting in a filing cabinet or on a shared drive that bears little resemblance to how health and safety is actually managed in their organisation. That is not a health and safety policy — it is a liability.
​
So what is a health and safety policy, what should it contain, and why does it matter?
​
The Legal Requirement
The duty to have a health and safety policy comes from Section 2(3) of the Health and Safety at Work Act 1974. Every employer must prepare a written statement of their general policy on the health and safety of their employees, along with the organisation and arrangements for carrying it out. If you have five or more employees, this must be in writing. It must be kept up to date. And it must be brought to the attention of all employees.
​
Failure to have an adequate health and safety policy is not just a paperwork issue — it can be a significant factor in HSE enforcement action, and in the event of a workplace accident, the absence of a proper policy will seriously weaken your legal position.
​
The Three Parts of a Health and Safety Policy
A properly structured health and safety policy has three distinct sections, each serving a different purpose. Also see what is a H&S management system?
​
The statement of intent is a clear declaration of the organisation's commitment to health and safety, signed by the most senior person in the business — typically the owner, managing director or chief executive. It sets the tone from the top and signals to every employee that health and safety is taken seriously at the highest level.
Without genuine leadership commitment expressed in this statement, the rest of the policy lacks credibility.
​
The organisation section sets out who is responsible for health and safety within the business. It names real people — not just job titles — and describes their specific health and safety responsibilities. From the employer's overall accountability, through the duties of managers and supervisors, to the responsibilities of individual workers, this section makes it clear that health and safety is everyone's business. Vague or generic responsibility statements that could apply to any organisation are not good enough.
​
The arrangements section is the most detailed and the most important. It describes in practical terms how health and safety is managed across all the relevant topics for your business — how risk assessments are carried out and reviewed, how accidents are reported and investigated, how new starters are inducted, how contractors are managed, what the first aid arrangements are, and how fire safety is maintained. This section should read like a genuine description of how your business actually operates, not a generic wish list.
​
Why a Generic Template Is Not Enough
There is no shortage of free health and safety policy templates available online or via AI — and while they can be a useful starting point, using one without thorough adaptation is a common and potentially costly mistake. A generic template cannot name the actual people responsible for health and safety in your business, cannot describe the specific hazards your workers face, and cannot reflect the particular arrangements you have in place. An HSE inspector, a client auditor or a court will look at your policy and ask whether it genuinely describes how health and safety is managed in your organisation. A template with your logo on the front will not answer that question convincingly.
​
A health and safety policy that is bespoke, current and genuinely reflective of your business is a management tool — one that gives your team clarity, demonstrates your commitment to clients and regulators, and provides a solid foundation for everything else in your health and safety management system.
​
At LESH, we write bespoke health and safety policies tailored specifically to your business — covering your activities, your people, your risks and your arrangements. Contact us on 01623 239705 or email Info@LESHonline.co.uk to find out how we can help.