A health and safety policy is a formal document that sets out how an organization will manage risks to the health and safety of its employees, visitors, and anyone else affected by its work. It covers everything from who is responsible for safety decisions to the specific procedures workers follow to avoid injuries. In the UK, businesses with five or more employees are legally required to have a written policy under the Health and Safety at Work etc Act. In the US, OSHA doesn’t mandate a single umbrella policy for all employers, but it does require written safety programs for dozens of specific hazards.
Why a Policy Matters
A health and safety policy shifts an organization from reacting to accidents after they happen to identifying and controlling hazards before anyone gets hurt. That distinction is significant. Traditional approaches wait for an incident, then investigate. A written policy forces you to think through risks in advance, assign clear ownership, and put procedures in place so problems get caught early.
The practical benefits extend beyond injury prevention. Organizations with strong safety programs tend to see higher employee engagement, lower turnover, and fewer lost workdays. OSHA puts it simply: “A safe workplace is sound business.” When employees see that their employer has invested in a structured safety program, they’re more likely to follow safe practices themselves and to speak up when something looks wrong.
The Three Core Sections
Most health and safety policies follow a three-part structure. This format is recommended by the UK’s Health and Safety Executive, but it’s widely used internationally because it covers the essentials in a logical order.
Statement of Intent
This is the opening section, usually no more than a page. It states the organization’s general commitment to health and safety, outlines its broad aims, and signals that safety is a priority at the highest level. The most senior person in the company, whether that’s the owner, CEO, or managing director, should sign it personally. That signature matters because it establishes accountability at the top. The statement should be reviewed regularly to make sure it still reflects how the business actually operates.
Organization of Responsibilities
The second section spells out who is responsible for what. Safety doesn’t work when everyone assumes someone else is handling it, so this section names roles explicitly. A typical breakdown looks like this:
- Senior leadership is responsible for providing the resources, authority, and support needed to implement the policy. They set the overall direction and make sure managers can actually carry out their safety duties.
- Managers and supervisors are responsible for maintaining a safe environment in their specific areas. They enforce preventive measures, ensure equipment meets safety standards, and address hazards as they arise.
- All employees are expected to comply with safety policies and procedures, and to stop work immediately if they believe conditions are unsafe.
Some organizations also include a dedicated safety officer or director who has the authority to shut down operations, restrict the use of hazardous materials, and initiate corrective actions when someone isn’t following the rules.
Arrangements
This is the longest and most detailed section. It describes the specific procedures and systems the organization uses to manage health and safety day to day. Common topics include risk assessments, fire safety procedures, first aid provisions, emergency evacuation plans, incident reporting processes, equipment maintenance schedules, and training requirements. The exact content depends on the nature of the business. A construction company will need detailed arrangements for fall protection and excavation safety. An office-based company may focus more on workstation ergonomics, fire prevention, and mental health support.
Legal Requirements in the UK
Under the Health and Safety at Work etc Act, every employer with five or more employees must have a written health and safety policy. The Management of Health and Safety at Work Regulations further detail the steps employers must take, including conducting risk assessments and appointing competent people to oversee safety. Even businesses with fewer than five employees still have a legal duty to manage health and safety, they just aren’t required to write it down.
Legal Requirements in the US
The US doesn’t have a single law requiring every business to produce one overarching safety policy. Instead, OSHA requires written programs for specific hazards depending on the type of work being done. If your employees could be exposed to blood or bodily fluids, you need a written exposure control plan. If your workplace has confined spaces that require permits to enter, you need a written entry procedure. If workers use respiratory protection, you need a formal nine-step respiratory protection program in writing.
Some of the most common written programs OSHA requires include:
- Hazard communication program: Required for any employer where hazardous chemicals are present. Each employer must develop a written plan explaining how chemical hazards are identified and communicated to workers.
- Emergency action plan: Must be written for businesses with more than 10 employees. Companies with 10 or fewer can communicate the plan orally.
- Fire prevention plan: Follows the same threshold: written for businesses with more than 10 employees, oral for smaller ones.
- Fall protection program: Required for all construction activities, with a written plan.
- Lockout/tagout procedures: Written procedures required wherever workers could be exposed to electrical shock or the unexpected startup of equipment.
Even where OSHA doesn’t specifically mandate a written program, the agency strongly recommends that employers develop a comprehensive safety and health program as a best practice.
Making the Policy Accessible
A policy that sits in a filing cabinet isn’t protecting anyone. Employees need to actually know what’s in it and understand how it applies to their work. Information should be presented in language that workers can readily understand, with attention to literacy levels and language barriers. If your workforce includes non-native speakers, you may need translated versions or visual aids.
Verbal communication alone isn’t enough for most workplaces. Written materials, posters, and digital copies should supplement any in-person training. Workers who handle hazardous substances or perform high-risk tasks need specific information about the hazards they face and the methods they should use to stay safe. Making the policy available in the workplace itself, not just during onboarding, keeps it visible and reinforces that it’s a living document rather than a one-time formality.
How Often to Review and Update
OSHA recommends evaluating your safety program at least annually. The review should assess whether the program is operating as intended, controlling identified hazards, and making progress toward its safety goals. But annual reviews are a minimum. Certain events should trigger an immediate review: a serious injury, significant property damage, a change in equipment or processes, or an increase in safety-related complaints from employees.
The review process doesn’t need to be complicated. Step back, look at what’s working and what isn’t, and adjust. If your business has grown, added new services, or moved into a new facility, the policy needs to reflect those changes. The statement of intent should also be re-signed periodically by senior leadership to confirm ongoing commitment.