Services A-Z     Pricing

Workplace risk assessments: understanding legal duties under the Management of Health and Safety at Work Regulations 1999

18 August 2025

Ensuring the safety and health of employees is a cornerstone of responsible business practice in the UK. At the heart of this responsibility lies the legal requirement to carry out workplace risk assessments - a duty enshrined in the Management of Health and Safety at Work Regulations 1999 (MHSWR). This article sets out the legal framework surrounding risk assessments, outlines practical steps for compliance, and includes expert insights from Andrew Sanderson of Kingsley Napley and Craig Lydiate of Eighty20 Risk Systems.


The legal framework: what the law requires
 

The MHSWR 1999, made under the Health and Safety at Work etc. Act 1974, places a duty on employers to assess the risks to the health and safety of employees and others affected by their work activities.

Key legal duties include:
 

  • Regulation 3: Requires every employer to make a "suitable and sufficient" assessment of the risks to employees and others.
  • Regulation 5: Requires employers to make appropriate health and safety arrangements based on the outcomes of the risk assessment.
  • Regulation 7: Requires the appointment of competent persons to assist in undertaking protective and preventive measures.
  • Regulation 10: Mandates employers to provide comprehensible and relevant information on risks and preventive measures.

Employers with five or more employees must record the significant findings of their risk assessments and any groups of employees especially at risk (e.g. young workers, pregnant workers, disabled persons).

Hazard identification and control measures
 

Risk assessment is a five-step process that focuses on systematically managing workplace hazards:

  1. Identify hazards: What in your workplace could cause harm?
  2. Decide who might be harmed and how: Employees, contractors, visitors, the public.
  3. Evaluate risks and decide on precautions: What is the likelihood and severity of harm? What control measures are already in place, and what further steps are needed?
  4. Record findings and implement them: If employing five or more people, maintain written documentation.
  5. Review and update regularly: Risk assessments must be reviewed if there is reason to believe they are no longer valid, or if there has been a significant change.

According to Craig Lydiate, Director at Eighty20 Risk Systems, "Too often we see organisations treat risk assessments as a ‘tick-box’ exercise. But the most effective assessments are dynamic—they reflect operational changes, seasonal work patterns, and new technologies. Risk management must be a living process.”

The role of training
 

To be effective, risk assessments require competent persons - those with the necessary training, experience, and knowledge. Training should focus on:

  • Recognising workplace hazards.
  • Applying appropriate control measures.
  • Understanding legal obligations.
  • Documenting and reviewing assessments effectively.

Craig Lydiate adds "Empowering staff through targeted training not only enhances safety but creates a culture where risk awareness is second nature. This is what drives real change on the ground.”

Practical tips for compliance
 

  1. Appoint a competent person: Whether internal or outsourced, ensure that someone with the right level of competence takes charge of the process. 
  2. Use sector-specific templates: While templates are not a substitute for critical thinking, industry-specific formats (such as from the HSE) can guide your approach. Eighty20’s E20 platform helps to design and deliver consistent standards.
  3. Embed risk assessment in planning: Don’t conduct assessments retrospectively. Integrate them into project planning, procurement, and policy development.
  4. Communicate outcomes: Make sure findings are shared with staff through training, briefings, signage, and digital platforms.
  5. Audit and monitor: Schedule regular audits of risk assessments and ensure implementation of control measures.

According to Andrew Sanderson, a health and safety specialist at Kingsley Napley LLP "Legal compliance is not just about avoiding enforcement - it’s about ensuring that risk is proportionately and demonstrably managed. Failure to undertake adequate risk assessments can expose employers to criminal liability, civil claims, and reputational harm.”

Enforcement and penalties
 

The Health and Safety Executive (HSE) and local authorities are responsible for enforcing the MHSWR. They have broad powers to:

  • Enter and inspect premises.
  • Issue Improvement Notices or Prohibition Notices.
  • Prosecute individuals or organisations under the Health and Safety at Work etc. Act 1974.

Penalties for non-compliance include unlimited fines and, in serious cases, imprisonment for responsible persons.

Andrew Sanderson warns "We are increasingly seeing the HSE taking a more assertive approach to enforcement, especially where there is a pattern of neglect or where vulnerable groups are affected. The courts have also shown little leniency for businesses that fail in their risk assessment duties.”

Final thoughts
 

A well-executed risk assessment is not just a legal requirement - it is a vital tool in protecting your workforce, ensuring productivity, and maintaining your organisation’s integrity.

Employers should view the MHSWR not as an administrative burden but as a structured framework to prevent harm before it occurs.

As Craig Lydiate aptly concludes "Good risk assessment isn’t just about compliance - it’s about leadership. It’s about sending the message that people’s safety comes first.”

About the authors

Andrew Sanderson specialises in the transport sector, with particular expertise in road transport matters including Public Inquiries before the Traffic Commissioners and Transport Appeal Tribunal, defending road transport prosecutions in the Magistrates’ and Crown Court, health and safety, corporate manslaughter, and Coroners’ Inquests.

Craig Lydiate is the Managing Director at Eighty20 Risk Systems, a web-based H&S Software supplier, providing our award winning E20 platform to all sectors of the economy, from manufacturing and construction firms to housing groups and charitable bodies.

 


Latest blogs & news

Preparing for Martyn’s Law: The Role of the Competent Person in the Workplace (CPiW) Qualification

The UK’s approach to counter terrorism preparedness has taken a significant step forward with the passing of the Terrorism (Protection of Premises) Act 2025 (Martyn’s Law).

Workplace risk assessments: understanding legal duties under the Management of Health and Safety at Work Regulations 1999

Ensuring the safety and health of employees is a cornerstone of responsible business practice in the UK. At the heart of this responsibility lies the legal requirement to carry out workplace risk assessments—a duty enshrined in the Management of Health and Safety at Work Regulations 1999 (MHSWR). This article sets out the legal framework surrounding risk assessments, outlines practical steps for compliance, and includes expert insights from Andrew Sanderson of Kingsley Napley and Craig Lydiate of Eighty20 Risk Systems.

Law students: academic misconduct and the SRA early character & suitability assessment

Pursuing a career in law is already a significant challenge without the added stress of worrying whether past mistakes could block your path to becoming a solicitor. Early-life convictions, cautions, academic disciplinary actions, or financial issues may all impact your eligibility for admission by the Solicitors Regulation Authority (SRA).

Recent changes to non-disclosure agreements: what do students need to know?

The Ministry of Justice published Guidance on 2 June 2025 regarding the introduction of new legislation to prohibit the use of non-disclosure agreements (“NDAs”) by higher education institutions in relation to certain complaints under the Higher Education (Freedom of Speech) Act 2023 (“the Act”). The changes, which had originally been given Royal Assent in 2023 but were placed on hold when the new Government came into power, took effect on 1 August 2025. The higher education sector is leading the way when it comes to the use of NDAs and while the changes will not see a total ban on NDAs, it paves the way forward for greater transparency and accountability during student misconduct proceedings.

Press Round-Up: Regulatory and Professional Discipline – June and July 2025

Here is a press round-up in the following sector: Regulatory and Professional Discipline, covering periods from June to July 2025.

Rethinking enforcement strategy: Key proposals from the BSB's Enforcement Consultation

The Bar Standards Board (BSB) has recently launched a consultation as part of its work towards a much-needed modernisation of its enforcement functions. The consultation seeks feedback on proposed changes to the enforcement regulations under Part 5 of the BSB handbook. It is open until Wednesday 15 October 2025, with a second consultation on the draft regulations to follow in 2026. The new regulations are scheduled to come in effect in 2027.

Tech-Driven, Ethically Bound: New FRC and ICAEW Guidance on AI Use in the Accountancy Sector

Artificial Intelligence (AI) and digital tools are rapidly transforming the accountancy sector with promises of enhanced efficiency, insight and audit quality. Embracing this innovation wave however, does not come without risk, and regulators are increasingly alert to the ethical implications. The FRC has very recently issued new guidance on the use of AI in audit, coinciding with the ICAEW’s new technology-centred revisions to its Code of Ethics, which came into force on 1 July 2025. Responsible and ethical use of AI is now therefore no longer optional, but a regulatory expectation. 

Changes to the Money Laundering Regulations: Panic stations or steady course?

HM Treasury has published its response to the 2024 consultation on the Money Laundering Regulations, and at first glance, the proposed changes appear to be constructive, and in some cases, quite welcome.

Understanding the changes to the ICAEW's Code of Ethics: a three-part series

The ICAEW has indicated that it is expanding the definition of “Professional Behaviour” in its Code of Ethics to cover bullying, harassment, victimisation and unfair discrimination.  Senior Leaders in accountancy firms need to be mindful of this important change: what should you do when behaviours which might breach the principle of Professional Behaviour are identified? An investigation should be undertaken, but it must be robust, fair and comprehensive.  Potential criminal issues should also be navigated very carefully.  You will then need to decide if, and how, any poor behaviours are reported to the regulator.

The Terminally Ill Adults (End of Life) Bill – historic legislation passes through the commons - A practical guide as to its application

On 20 June 2025, The Terminally Ill Adults (End of Life) Bill (the Bill) was passed through the House of Commons, with 341 MPs voting in favour of the Bill and 291 MPs against the Bill, with a narrow majority of 23 votes.On 20 June 2025, The Terminally Ill Adults (End of Life) Bill (the Bill) was passed through the House of Commons, with 341 MPs voting in favour of the Bill and 291 MPs against the Bill, with a narrow majority of 23 votes.

The Care Quality Commission’s Bid to Progress

What’s the issue?

The Care Quality Commission (CQC)’s update in May 2025 inevitably invoked a strong response with many in the health and social care sector. The regulator has openly acknowledged the significant delays that have affected providers in recent months - including in registration, assessment, report publication, and the handling of statutory notifications. 

RICS shines its spotlight on the use of AI: have your say

Another week, another consultation deadline for a proposed RICS standard. As foreshadowed in our previous blog, the Royal Institution of Chartered Surveyors (RICS) is currently seeking feedback on its proposed Responsible Use of Artificial Intelligence, 1st Edition standard (Proposed Standard).

The time for feedback is today: RICS’ updated Countering Financial Crime Standard

Time is running out for Royal Institution of Chartered Surveyors (RICS) members and other stakeholders to have their say on RICS’ proposed second edition of its Countering Financial Crime Standard (Proposed Standard).

 

Press Round-Up: Regulatory and Professional Discipline – February and March 2025

A summary of cases and news relating to Regulatory and Professional Discipline between February and March 2025

Navigating the Green Frontier: Clinicians' Role in the Prescription of Medical Cannabis

The landmark introduction of The Misuse of Drugs (Amendments) (Cannabis and Licence Fees) (England, Wales and Scotland) Regulations 2018. paved the way for legalised access to medicinal cannabis in the UK. Medicinal cannabis was subsequently defined as a special medicinal product which could be used in accordance with a prescription.

Starting a private prosecution – evidential sufficiency & duty of candour

A recent High Court decision Whitehead v Westminster Magistrates’ Court [2024] EWHC 2868 (Admin) serves as a helpful reminder of the steps that one must take to establish valid grounds before a summons can be issued in a private prosecution.

Press Round-Up: Regulatory and Professional Discipline - December 2024 - January 2025

A summary of media coverage between December 2024 and January 2025

We need to talk about cancel culture in Higher Education

There has been a demonstrable culture shift over the last five years. Social media is now an entrenched part of our lives. It has many uses, most of them very beneficial, but it has also led to some consequences which were unlikely unforeseen during its creation. Notably, at the click of a button, news and stories can become viral, which in turn has seen the rise of ‘cancel culture’.

Changes for accountancy firms to keep a close eye on in 2025

From an increasing spotlight on private equity investment to substantial changes in the ICAEW’s Code of Ethics, 2025 is shaping up to be a year filled with both opportunities and challenges for the accountancy and audit sector. What key areas should accountancy firms keep a close eye on over the coming year?

Festive frolics or regulatory wrongs in accountancy firms?

Best practice guidance to accountancy firms on how to conduct an investigation in the event of allegations of behavioural misconduct in the run-up to Christmas.

Share insightLinkedIn X Facebook Email to a friend Print

Email this page to a friend

We welcome views and opinions about the issues raised in this blog. Should you require specific advice in relation to personal circumstances, please use the form on the contact page.

Leave a comment

Questions?

Contact us

or call +44 (0)20 7814 1200

You may also be interested in:

Skip to content Home About Us Insights Services Contact Accessibility