Example Of Health And Safety Policy

You've been asked to write a health and safety policy. Maybe you're a new business owner. Practically speaking, maybe you've been put in charge of compliance. Maybe you're just trying to figure out what the hell goes in one of these things because the template you downloaded from a government website looks like it was written by a committee of lawyers who've never set foot on a shop floor.

Here's the thing: most health and safety policies are useless. Not because the regulations are bad — they're not. But because companies treat them like a checkbox exercise. They copy a template, swap the company name, print it, stick it in a drawer, and forget it exists until an inspector asks to see it.

That's not a policy. That's a liability waiting to happen.

What Is a Health and Safety Policy

A health and safety policy is a written statement that sets out how your organization manages health and safety. It's not a rulebook. Plus, it's not a risk assessment. It's the framework that tells everyone — from the CEO to the newest apprentice — what you're committed to, who's responsible for what, and how you actually keep people safe.

In the UK, if you employ five or more people, you're legally required to have one written down. But the legal minimum isn't the point. In real terms, other jurisdictions have similar thresholds. The point is whether the thing works.

A real policy has three parts. That's it. Three.

The Statement of Intent

At its core, your commitment. Signed by the most senior person in the organization. Not the safety officer. Not the HR manager. Even so, the person who can actually authorize budget and fire people who ignore the rules. It says: we take this seriously, here's what we're aiming for, and here's who's accountable.

Keep it to one page. If it's longer, nobody reads it.

The Organization Section

Who does what. Think about it: names. Roles. Reporting lines. Even so, not "management" — which managers. Not "employees" — which employees have specific duties. The site supervisor who checks scaffolding. Day to day, the office manager who arranges DSE assessments. The director who reviews accident stats quarterly.

If you can't point to a name next to a responsibility, the responsibility doesn't exist.

The Arrangements Section

This is the "how.But " How you handle risk assessments. Because of that, how you train people. Consider this: how you consult with workers. Practically speaking, how you manage contractors. In real terms, how you investigate incidents. Which means how you monitor and review. Each arrangement should reference a procedure or process — not repeat it in full.

Why It Matters / Why People Care

Look, I've seen companies with beautiful policies and terrible safety records. The document isn't the magic. I've also seen scruffy, handwritten policies on a clipboard in a site hut that actually kept people alive. The culture behind it is.

But the policy is where culture gets written down. That said, it's the reference point when someone asks "wait, who's supposed to check the fire extinguishers? " or "do I need a permit for this hot work?" Without it, you're relying on memory, habit, and luck.

The Legal Reality

In the UK, the Health and Safety at Work etc. Plus, act 1974 Section 2(3) makes it explicit: employers of five or more must have a written policy. Fail to produce it during an inspection? Think about it: that's a material breach. Improvement notice. Maybe a fee for intervention (currently £166/hour). Maybe prosecution if something goes wrong.

But the real cost isn't the fine. It's the civil claim when someone gets hurt and your policy says "we provide adequate training" but your training records are empty. In real terms, or your policy names a safety officer who left two years ago. Courts love that stuff.

The Business Case

Good safety management correlates with good business management. It's not magic — it's discipline. Companies with strong safety cultures tend to have better productivity, lower turnover, fewer quality defects. The same systems that prevent injuries prevent errors, rework, delays.

Clients know this. So big contractors pre-qualify subcontractors on safety. Insurance premiums reflect it. Public sector tenders require it. A real policy isn't a cost — it's a commercial asset.

How It Works (or How to Write One That Works)

Don't start with a template. Start with your business.

Step 1: Map Your Hazards

Walk the site. Even so, driving? Talk to the people doing the work. Lone working? Practically speaking, be honest. Stress? Consider this: chemicals? What can hurt them? Plus, manual handling? Plus, falls? Noise? Make a list. Worth adding: machinery? Vibration? If you don't know your hazards, your policy is fiction.

For more on this topic, read our article on an emergency action plan must include or check out what is the purpose of msds.

Step 2: Define Your Structure

Draw an org chart. The procurement lead checks contractor competence before award. For each role with safety duties, write one sentence: what they're responsible for, and who they report to. Real names. The site manager ensures daily inspections happen. Real roles. The director reviews the annual audit.

No vague "management will ensure." Names. Titles. Accountability.

Step 3: Write the Arrangements

For each significant hazard or process, write a short arrangement statement. Example:

Risk Assessment: All tasks with significant risk will be assessed before work starts. Still, assessments are recorded using the company RA form, reviewed annually or after any significant change, and communicated to affected workers during toolbox talks. The site supervisor owns this process.

That's it. One paragraph per arrangement. Reference the form, the frequency, the owner, the communication method. Done.

Step 4: Consult Your Workers

This isn't optional. Which means it's the law (Safety Representatives and Safety Committees Regulations 1977 / Health and Safety (Consultation with Employees) Regulations 1996). So if you have union reps, involve them. If not, elect employee reps or consult directly. Ask: does this policy reflect reality? Worth adding: what's missing? What's wrong?

They'll tell you things you missed. Guaranteed.

Step 5: Sign, Date, Communicate

The top person signs. Practically speaking, talk about it in team meetings. Distribute it — physically and digitally. Post it on noticeboards. Which means put it on the intranet. Date it. Include it in induction. If a new starter can't find it in three clicks or three steps, it's not communicated.

Step 6: Review Annually (At Minimum)

Set a calendar reminder. Review after: serious incidents, near misses, enforcement action, significant changes (new site, new process, new legislation), or annually — whichever comes first. Think about it: record the review. Also, note what changed. Re-sign if material changes.

Common Mistakes / What Most People Get Wrong

The Template Trap

Downloading the HSE example policy, changing "ABC Company" to your name, and calling it done. It doesn't know your site has asbestos in the roof void. Because of that, it doesn't know you use MEWPs. The HSE template is a structure, not a policy. Still, it doesn't know you have night shift cleaners. You have to fill in the blanks with your reality.

The "Safety Officer Does Everything" Fallacy

Naming one person as responsible for everything. " That's not delegation — that's abdication. "The Health and Safety Officer is responsible for all risk assessments, training, inspections, audits, contractor management, and first aid.On top of that, line managers own safety in their areas. The safety officer advises, monitors, supports. They don't do it for everyone.

Policies That Contradict Reality

Policy says "all visitors must be inducted." Reality: the receptionist waves people through because she's busy and the induction takes 20 minutes. Policy

is a piece of paper; reality is what happens on the shop floor. If your policy dictates a level of rigor that is impossible to maintain during peak production, your policy is a lie. When there is a gap between what is written and what is practiced, that gap is where accidents happen.

The "Set and Forget" Mentality

Treating a policy like a trophy on a shelf rather than a living document. In real terms, it must be a dynamic tool that evolves alongside your business. A policy that sits in a binder in a locked office, untouched for three years, is useless. If your company grows from five employees to fifty, or if you transition from manual assembly to automated robotics, your policy must change with you.

Conclusion

Writing a Health and Safety policy is not a "check-box" exercise to satisfy an auditor or an insurance company. It is the foundation of your safety culture. A high-quality policy is concise, site-specific, and—most importantly—accurate.

By following these steps—identifying hazards, consulting your workforce, and committing to regular reviews—you move beyond mere compliance and toward true safety leadership. Remember: a policy is only as strong as the weakest link in its implementation. Write it for the person doing the most dangerous job on your site, not for the person sitting in the boardroom. If they understand it, can follow it, and believe in it, you have succeeded.