Health and Safety for Trade Businesses: What UK Tradespeople Must Know (2026)

Health and safety gets a bad reputation among tradespeople — piles of forms, bureaucratic box-ticking, rules that seem designed to slow real work down. But the legal obligations exist for a reason, and the consequences of ignoring them are severe: prosecution, unlimited fines, and in the worst cases, serious injury or death on a site you are responsible for. This guide cuts through the noise and tells you exactly what you need to do to stay compliant in 2026.

Why Health & Safety Matters Beyond the Paperwork

The Health and Safety Executive (HSE) prosecuted 554 cases in 2023/24, securing convictions in 93% of them. Total fines issued to businesses reached £34.8 million in that same period. For large companies, individual fines can hit £10 million. For smaller firms and sole traders, the courts can impose unlimited fines for serious breaches — and custodial sentences are a real possibility when gross negligence is established.

Beyond the courts, the reputational damage to a trade business can be devastating. A single HSE improvement notice becomes public record. A prohibition notice shuts your site down immediately. Clients — particularly commercial and insurance-conscious domestic customers — increasingly check compliance history before awarding contracts. And if an accident happens and your records are incomplete, your public liability insurer may refuse to pay out, leaving you personally exposed.

The construction and trades sector continues to account for a disproportionate share of workplace fatalities in the UK. In 2023/24, 51 construction workers were killed at work. Falls from height remain the single biggest killer, followed by being struck by moving objects and contact with electricity. These are not abstract statistics — they represent real people on real sites, and in most cases, a proper risk assessment and basic controls would have prevented the incident entirely.

What the Law Actually Requires

Two pieces of legislation form the backbone of health and safety law for trade businesses. The Health and Safety at Work Act 1974 (HSWA) is the primary duty-holder legislation. It places a general duty on employers to ensure, so far as is reasonably practicable, the health, safety and welfare of their employees. It also places duties on self-employed persons in relation to anyone who might be affected by their work — including members of the public and workers employed by others.

The Management of Health and Safety at Work Regulations 1999 (MHSWR) add the specific requirement to carry out formal risk assessments, appoint a competent person to manage health and safety, establish emergency procedures, and provide employees with information and training. These regulations brought the UK into line with European directives and remain fully in force post-Brexit.

On a construction or trade site, responsibility is layered. The client who commissions the work has duties under CDM 2015 (Construction Design and Management Regulations). The principal contractor — usually the main firm on site — must coordinate health and safety across all trades. Individual subcontractors and self-employed tradespeople remain personally responsible for their own work and for anyone they employ. If you put someone to work on a site without proper controls, you carry the liability.

Risk Assessments: The 5-Step Process

A risk assessment is not a document for its own sake. It is a structured way of identifying what could go wrong on a job, deciding how likely and how serious the harm would be, and putting in place the controls that reduce the risk to an acceptable level. The HSE has formalised this into a five-step process that every trade business should follow.

• Step 1 — Identify the hazards. Walk the site or think through the task. What substances, equipment, activities or conditions could cause harm? Don’t overlook housekeeping hazards like trailing cables or poor lighting.
• Step 2 — Decide who might be harmed and how. Your own employees, subcontractors, the client’s staff, members of the public, or vulnerable persons such as children or elderly occupants. Consider each group separately.
• Step 3 — Evaluate the risks and decide on controls. Is the existing control adequate? Consider the hierarchy of controls: eliminate the hazard first, then substitute, then engineering controls, then administrative controls, then PPE as a last resort.
• Step 4 — Record your findings. If you employ five or more people, written records are a legal requirement. Even if you are a sole trader, a simple written record demonstrates due diligence if anything goes wrong.
• Step 5 — Review and update. A risk assessment is a live document. Review it whenever the job changes, a new hazard appears, or an incident occurs. Date your reviews and keep previous versions.

Trade-specific hazards require trade-specific assessments. Electricians must assess the risk of live working, contact with energised conductors, and arc flash. Roofers must assess fall risk, fragile surfaces, and manual handling of heavy materials at height. Plasterers must assess exposure to cement and silica dust, repetitive strain, and working from staging. A generic one-size-fits-all template won’t satisfy an inspector — your assessment must reflect the actual job.

COSHH: Controlling Hazardous Substances

The Control of Substances Hazardous to Health Regulations 2002 (COSHH) require employers to prevent or adequately control exposure to substances that can damage health. In the trades, these substances are everywhere — solvents in adhesives and primers, isocyanates in spray paints and foam insulation, cement dust, silica dust from cutting masonry or concrete, wood dust, lead paint in older properties, and asbestos in buildings constructed before 2000.

A COSHH assessment must be carried out for every hazardous substance your workers might be exposed to. Start by obtaining the Safety Data Sheet (SDS) from the manufacturer — these are legally required to be provided and contain the exposure limits, PPE requirements, and emergency procedures for each product. Your assessment must identify who is at risk, what controls are in place (ventilation, substitution, enclosure), and what PPE is required. Workplace exposure limits (WELs) set by the HSE define the maximum airborne concentrations of substances that workers can legally be exposed to over an eight-hour shift.

Silica dust deserves particular attention. Respirable crystalline silica (RCS) causes silicosis — a permanent, progressive and potentially fatal lung disease. Cutting, drilling or grinding concrete, brick, tile or stone generates RCS. The HSE’s COSHH essentials for silica require water suppression or on-tool extraction as the primary control, not just a dust mask. If your workers are regularly cutting masonry without wet cutting or LEV (local exhaust ventilation), you are likely in breach and your workers are at serious long-term risk.

PPE Requirements and the 2022 Regulations

Personal Protective Equipment is the last line of defence — not the first. The hierarchy of controls means you should always try to eliminate or engineer out a hazard before relying on PPE. But where PPE is required, the Personal Protective Equipment at Work (Amendment) Regulations 2022 significantly expanded the duties that employers hold.

Critically, the 2022 amendments extended the full PPE duties to workers who were previously classified as “self-employed” under the original 1992 regulations. If you engage workers on a self-employed basis but they work under your direction and supervision, you may now have employer-equivalent duties to provide suitable PPE — and you cannot expect them to source their own. Take legal advice if you are unsure how your workforce is classified.

Practically, you must assess the PPE required for each task, select equipment that matches the hazard, ensure it is CE or UKCA marked, maintain it in good condition, and train workers to use it correctly. You must also keep records of what PPE was issued to each worker, when it was replaced, and that they received instruction on its use. A basic logbook or digital record is sufficient — but you need it if an inspector asks.

Working at Height

The Work at Height Regulations 2005 (WAHR) apply to any work where a person could fall a distance liable to cause personal injury — including from ground level into an excavation. There is no minimum height threshold. If the fall could injure someone, the regulations apply.

Ladders remain legal and often appropriate for short-duration, low-risk work — but the regulations require that you first consider whether the work can be done without using a ladder (for example from a mobile elevated work platform). Where ladders are used, they must be the right type for the task, inspected before use, secured at the top or footed at the base, and positioned at the correct angle (1 unit out for every 4 units up). Overreaching from a ladder is one of the most common causes of falls — ensure the work can be reached safely without leaning out.

For longer duration or higher-risk work at height, scaffolding, mobile towers, or MEWPs are required. Scaffolding erected and dismantled by your own workers must be done by those with CISRS (Construction Industry Scaffolders Record Scheme) training. Tube-and-fitting scaffolding requires a higher level of competence than system scaffolding. Inspection records for scaffolding must be kept for every seven-day period and after any event that might have affected its integrity.

RIDDOR: What You Must Report and When

The Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 (RIDDOR) require employers and the self-employed to report certain workplace incidents to the HSE. Failure to report is itself a criminal offence, separate from and additional to any liability arising from the incident itself.

The following must be reported under RIDDOR:

• Deaths: Any work-related death must be reported immediately by telephone, followed by a written report within 10 days.
• Specified injuries to workers: These include fractures (other than fingers, thumbs and toes), amputations, loss of sight, crush injuries, scalping, unconsciousness caused by head injury or asphyxia, and any injury requiring admittance to hospital for more than 24 hours. Report within 10 days.
• Over-7-day incapacitation: If a worker is unable to do their normal work for more than seven consecutive days (not counting the day of the accident), you must report within 10 days of the accident.
• Injuries to non-workers: If a member of the public or a client is injured on your site and taken to hospital, report it.
• Occupational diseases: Including carpal tunnel syndrome, occupational asthma, tendonitis, and vibration white finger, where a doctor confirms the diagnosis in writing.
• Dangerous occurrences: Near-misses with serious injury potential — such as scaffolding collapse, the unintentional release of flammable gas or liquid, or electrical incidents involving overhead power lines.

Report online at the HSE’s RIDDOR reporting portal at riddor.hse.gov.uk. Keep a copy of every report you submit. Record all accidents — even minor ones that do not meet the RIDDOR threshold — in your accident book. This record becomes important evidence of your compliance culture if you are ever subject to investigation.

Toolbox Talks: Simple, Consistent, Documented

A toolbox talk is a short, informal safety briefing held on site — typically five to fifteen minutes — covering a specific hazard, task, or safety topic. They are one of the most practical and cost-effective ways to maintain a visible safety culture and demonstrate ongoing competence to an inspector.

There is no legal minimum frequency for toolbox talks, but best practice for active construction and trade sites is weekly. High-risk tasks or changes in site conditions should trigger an additional briefing regardless of the schedule. Good topics for trade businesses include: working at height, COSHH and dust control, manual handling, use of power tools, site induction for new workers, hot works permits, and emergency procedures.

Format matters less than consistency. A foreman talking through a single topic for five minutes before work starts counts. What matters is that you record it: the date, the topic covered, the name of the person who delivered it, and the signatures of everyone who attended. These records serve as direct evidence of your training programme if the HSE ever investigates an incident and asks what safety information your workers were given.

Your Health and Safety Policy

If you employ five or more people, you are legally required to have a written Health and Safety Policy under Section 2(3) of the Health and Safety at Work Act 1974. Even if you have fewer employees, having a written policy signals professionalism to clients, principal contractors, and insurers — and many larger clients will require you to produce one before awarding a contract.

A compliant Health and Safety Policy must contain three sections:

• Statement of Intent: A signed commitment from the most senior person in the business (the director or owner) to provide a safe and healthy working environment. This should be reviewed and re-signed annually.
• Organisation: Who is responsible for health and safety in the business. Name the competent person, list the responsibilities of managers, supervisors and workers. If you have a safety officer, name them here.
• Arrangements: The specific procedures your business follows for risk assessments, COSHH, PPE, working at height, accident reporting, inductions, toolbox talks, emergency procedures, and any trade-specific controls. This is the meat of the policy — it should be specific to your business, not a generic template with your name pasted in.

Review your policy whenever there are significant changes to your business — new types of work, new substances, significant changes to your workforce — and at least once a year regardless. Date every revision and keep previous versions. An inspector who sees an undated, unchanged policy from 2019 will not be impressed.

Practical Compliance Without Drowning in Paperwork

The most common reason trade businesses fall foul of the HSE is not deliberate disregard for safety — it’s disorganisation. Risk assessments that were written but not updated. Toolbox talk records that were lost. PPE issues that were never documented. An accident book that nobody filled in because it was buried in the van. The solution is not more paperwork; it is better systems.

Digital tools make compliance dramatically easier. Store risk assessments as PDFs in a cloud-based job management system, linked to the specific job they relate to. Send toolbox talk attendance records as a simple digital form that workers sign on a tablet or phone. Log PPE issue in the same platform as your job records so you can pull the complete compliance history for any site in seconds. Take photographs of site conditions, signage, and PPE in use — time-stamped and attached to the job record.

When an HSE inspector arrives on site — and they can arrive unannounced — they will typically ask to see: your risk assessment for the current task, evidence that workers have been briefed on the risks, records showing that PPE has been provided and is being used, and your Health and Safety Policy. If you can pull all of that up within five minutes on a phone or tablet, you are already in a strong position. If you have to say “it’s back at the office”, you are immediately under scrutiny.

Getting Compliance Right in 2026

Health and safety compliance is not optional and it is not bureaucratic theatre. It is the basic professional standard that separates legitimate trade businesses from cowboy operators. Done properly, it protects your workers, protects your business from prosecution and financial ruin, and increasingly forms part of the criteria by which commercial and domestic clients choose who to hire.

The tradespeople who get this right are not the ones with the most elaborate systems — they are the ones who are consistent. A risk assessment written and used on every job. A toolbox talk every week without fail. An accident book that gets filled in every time. PPE logged and replaced before it wears out. None of this requires a full-time safety manager. It requires discipline, simple tools, and the understanding that the paperwork exists to protect real people — including you.