ALARP stands for “As Low As Reasonably Practicable” and is a principle used in health and safety regulation to determine how much effort an organization must put into reducing risk. Rather than demanding that all risk be eliminated (which is often impossible or absurdly expensive), ALARP requires that risks be reduced until the cost, time, and trouble of further reduction would be grossly disproportionate to the safety benefit gained. It originates from UK law but is now used across industries worldwide, from offshore oil platforms to nuclear power plants.
The Core Idea Behind ALARP
ALARP sits on a simple but powerful insight: zero risk doesn’t exist in most workplaces and industrial operations. A chemical plant can’t eliminate every hazard, and a construction site will always carry some danger. The question isn’t whether risk exists, but whether the organization has done enough to bring it down.
The principle asks you to weigh the remaining risk against the “sacrifice” needed to reduce it further, where sacrifice means money, time, and operational difficulty. If a safety measure would cost relatively little and meaningfully reduce risk, you’re expected to implement it. You can only stop reducing risk when the next available measure would cost vastly more than the safety benefit it delivers. The key word here is “grossly” disproportionate. A slight imbalance between cost and benefit isn’t enough to justify skipping a safety improvement. The gap has to be extreme.
Where ALARP Comes From
The legal foundation sits in the UK’s Health and Safety at Work Act 1974, which places general duties on employers to ensure the health and safety of employees and others “so far as is reasonably practicable.” That phrase, sometimes abbreviated SFAIRP, is treated by the UK’s Health and Safety Executive (HSE) as functionally identical to ALARP. Both terms call for the same set of tests.
The meaning of “reasonably practicable” was defined decades earlier in a landmark 1949 court case, Edwards v National Coal Board. A colliery worker was killed by a fall caused by a latent defect in a roadway wall. The court found that the employer had never even considered whether it was reasonably practicable to provide artificial support for that roadway, despite already supporting more than half of its existing roads. The ruling established that “reasonably practicable” requires a weighing exercise: if there is a gross disproportion between the risk and the sacrifice needed to avert it, with the risk being insignificant compared to the cost, only then is the duty holder off the hook. That gross disproportion test remains the backbone of ALARP decisions today.
One important legal detail: under Section 40 of the 1974 Act, the burden of proof falls on the employer. If regulators question whether you’ve reduced risk far enough, it’s your job to demonstrate that further measures would be grossly disproportionate, not the regulator’s job to prove otherwise.
The Three Risk Regions
ALARP is commonly visualized as a triangle (sometimes called the “carrot diagram”) divided into three horizontal bands. The triangle widens toward the bottom, representing the idea that more activities fall into lower-risk categories.
- Intolerable region (top): Risk is so high that the activity cannot be permitted regardless of the benefits it provides. No cost-benefit argument justifies operating here. The risk must be reduced or the activity stopped entirely.
- ALARP region (middle): Risk is tolerable only if it has been reduced as low as reasonably practicable. This is where most real-world safety decisions happen. Organizations operating in this zone must actively demonstrate they’ve implemented every reasonable safety measure, unless the cost of a specific measure is grossly disproportionate to the risk it would address.
- Broadly acceptable region (bottom): Risk is so low it’s considered negligible. No further action is needed, though organizations should still ensure risk doesn’t drift upward over time.
The boundaries between these regions are set using numerical risk thresholds, typically expressed as the annual probability of a fatality. For workers and for members of the public, separate thresholds apply. Most operational risk falls squarely in the middle ALARP region, which is why the principle gets so much attention in practice.
How the Gross Disproportion Test Works
When an organization claims a safety measure isn’t reasonably practicable, it needs to show that the costs are grossly disproportionate to the benefits. This isn’t a simple break-even calculation. The HSE has made clear that the disproportion “must always be gross,” though it has deliberately avoided defining a precise numerical threshold for what counts as gross. The assessment considers both individual risk (the chance of harm to any one person) and societal concerns (the broader impact of a potential accident, including public anxiety about catastrophic events).
In practice, this means the higher the risk, the more you’re expected to spend to reduce it. For a high-hazard facility like a chemical plant or nuclear installation, regulators will expect significant investment in safety measures. The proportion factor shifts: when lives are at stake in a major way, cost arguments carry less weight. For lower-risk situations, the balance tips more easily toward accepting that a measure isn’t worth implementing.
The HSE also expects organizations to adopt new technology as it becomes available, unless gross disproportion can be demonstrated “unequivocally.” You can’t keep using outdated safety systems simply because they met the standard when they were installed.
ALARP in High-Hazard Industries
The principle sees its most rigorous application in industries where failures can be catastrophic. In the UK’s offshore oil and gas sector, ALARP is central to the safety case regime that replaced prescriptive regulation after the Piper Alpha disaster in 1988. Operators must submit a safety case demonstrating that risks from their installation have been reduced ALARP. The default position is that any identified risk-reducing measure should be implemented unless the operator can show the costs are grossly disproportionate to the benefits.
Norway’s offshore industry uses a related but slightly different approach. Risk acceptance criteria (numerical upper limits on acceptable risk) have been used on the Norwegian Continental Shelf for over 20 years. The ALARP principle applies alongside these criteria, but the Norwegian approach places more emphasis on meeting pre-set numerical targets. This has drawn some criticism: relying too heavily on fixed criteria can shift the focus toward hitting a number rather than finding the most cost-effective overall safety improvements. Risk analyses also lack the precision needed for a purely mechanical pass/fail approach.
Nuclear regulation, major accident hazard sites governed by COMAH regulations, and railway safety all use ALARP as a core decision-making framework. The COMAH regulations require operators to “take all measures necessary” to prevent major accidents, which the HSE interprets as equivalent to reducing risks ALARP.
What ALARP Looks Like in Practice
Demonstrating ALARP compliance typically follows a structured process. An organization identifies hazards, estimates the level of risk each one poses, and then considers what measures could reduce that risk further. For each potential measure, it evaluates the cost, difficulty, and time required against the expected safety benefit. If the measure is proportionate, it gets implemented. If it isn’t, the organization documents why not.
This documentation matters. Because the legal burden falls on the duty holder, organizations need a clear record showing they considered available options and made defensible decisions. A common mistake is failing to consider measures at all. In the Edwards case, the employer’s officials had “never applied their minds” to whether supporting the roadway was practicable, and that failure alone was enough to find them liable.
ALARP is not a one-time exercise. As technology advances, costs change, and new information about risks emerges, what counts as “reasonably practicable” shifts. A safety measure that was genuinely too expensive five years ago might be affordable and standard today. Organizations are expected to revisit their ALARP assessments periodically and whenever circumstances change significantly.