Tony Carlyon: UK Compliance & Fire Safety

A lone worker policy is one of those documents that sounds like a nice-to-have until something goes wrong and there's nothing written down about how the business manages the risk. If you have anyone working alone, whether that's a maintenance engineer visiting sites solo, a care worker doing home visits, a shop assistant on a late shift, or an office worker who's last out the building, you need a policy that sets out how you manage that risk, not just a sentence in the handbook saying "be careful." Here's what a lone worker policy actually needs to cover to be worth the paper it's written on. Define who counts as a lone worker in your business Start by being specific about who the policy applies to. Lone working isn't just about people who work completely by themselves all day. It covers anyone who works without close or direct supervision, including someone who works alone for part of a shift, someone in a building with other people but no one n...

Every workplace needs a way to record accidents, and it's a legal requirement, not just good practice. The Social Security (Claims and Payments) Regulations 1979 require employers to keep an accident book, and what goes into it feeds directly into other duties too, particularly RIDDOR reporting and any insurance or legal process that follows an incident. Here's what an accident report actually needs to cover, and where people go wrong. The minimum information a valid accident record needs Full name, job title, and department of the person who had the accident Date, time, and precise location of the accident A factual description of what happened, in the words of the person reporting it where possible The nature of any injury sustained, however minor it seemed at the time Name of the person completing the report, if different from the injured person Any witnesses present, with their names and contact details Whether first aid was given, and by whom Whether the person...

The Regulatory Reform (Fire Safety) Order 2005 uses the phrase "competent person" repeatedly, but it never hands you a qualification list or a certificate to check against. That ambiguity is deliberate, but it's also where a lot of responsible persons get caught out, either by assuming they're competent when they're not, or by hiring someone competent on paper who doesn't actually know the building. What the Fire Safety Order actually says Article 18 of the Order requires the responsible person to appoint one or more competent persons to help them carry out the preventive and protective measures required by the Order. A competent person is defined as someone with sufficient training, experience, knowledge, and other qualities to properly assist in undertaking those measures. Notice what's missing from that definition: a specific certificate. Competence is assessed by what someone can demonstrably do, not just what a piece of paper says. Competence ha...

A toolbox talk is only worth doing if it's actually relevant to what's happening on site that week, not a random topic pulled off a list because it's Monday morning and someone needs to say something for five minutes. That said, having a solid bank of topics to draw from makes it much easier to keep them running regularly rather than skipping them when nobody's got time to think one up. Here's a working list, grouped so you can match the topic to what's actually going on. General site safety Housekeeping and slips, trips and falls Correct use of PPE, and why "appropriate" isn't good enough Reporting near misses, and why it matters even when nothing happened Site induction refreshers for long running jobs Fire safety and what to do if you find a fire on site Welfare facilities and why they're not optional extras Working at height Scaffold inspections and what a handover certificate actually means Ladder safety: when a ladder is ...

COSHH, the Control of Substances Hazardous to Health Regulations 2002, covers anything on site that could harm someone through breathing it in, skin contact, swallowing, or absorption, from obvious chemicals like solvents and adhesives through to things people don't always think of as hazardous, such as cement dust, wood dust, or diesel exhaust fumes. If your site uses, stores, or generates any of these, you need a COSHH assessment covering it. Here's how to actually do one. Step 1: Identify every hazardous substance on site Start with a proper list, not a guess. Walk the site and check what's actually being used: cleaning products, paints and coatings, adhesives, fuels, and anything generating dust or fumes as a by-product of the work itself, like cutting, grinding, or welding. Don't forget substances that arrive as part of the work rather than being brought in deliberately, silica dust from cutting concrete or block is a common one that gets missed because nobody ...

Display screen equipment (DSE) assessments used to be something most employers only thought about for a desk in an office. Hybrid and home working changed that, and a lot of small businesses still haven't updated how they handle it. The legal duty under the Health and Safety (Display Screen Equipment) Regulations 1992 applies wherever a "DSE user" is working, including their kitchen table, whether that's part time or full time. Who actually counts as a DSE user Not everyone who occasionally looks at a screen is a DSE user in the legal sense. Someone counts as a user, and is owed a DSE assessment, if they use a computer, laptop, or similar equipment as a significant part of their normal work, generally meaning daily use, for continuous spells of an hour or more, where the work depends on the screen and needs a reasonable level of attention. Someone who checks emails on their phone for ten minutes doesn't meet this bar. Someone doing most of their working day on...

PPE sits right at the bottom of the hierarchy of control for a reason: it protects the person wearing it, but it doesn't remove the hazard itself. That's exactly why a PPE risk assessment gets misunderstood so often. It's not really an assessment of the PPE, it's an assessment of the task, that happens to conclude PPE is needed because nothing higher up the hierarchy removed the risk. Here's how to do it properly, without the jargon. PPE is the last resort, not the first thought Before you get anywhere near deciding what PPE is needed, the question has to be whether the hazard can be removed or reduced another way. Can the task be done differently so the risk isn't there at all? Can the hazard be enclosed or guarded? Can the way people work be changed to reduce exposure? Only once those options are genuinely considered and ruled out (or used alongside PPE, not instead of it) does PPE selection actually start. A risk assessment that jumps straight to "...

Under the Health and Safety (First-Aid) Regulations 1981, every employer in the UK has to make sure there's adequate first aid provision for staff, whatever the size of the business. There's no exemption for being small. What changes with size is how much provision you need, not whether you need any at all. Here's what that actually means in practice for a small business. Start with a first aid needs assessment Before you can say what you need, you're supposed to have worked out what you need, and that means a first aid needs assessment. This doesn't have to be a lengthy document. For most small, low risk workplaces (a typical office, shop, or small service business) it can be a short, common sense look at: The nature of the work and the hazards involved The number of people on site, including visitors where relevant Whether there are any employees with specific health conditions the first aider should know about How spread out the workplace is, and whethe...

Ask most site managers whether they've got a working at height risk assessment and they'll say yes. Ask them whether it actually covers the job being done that day, and the answer gets shakier. Working at height is one of the most heavily regulated areas of construction safety, and it's also one of the most commonly done on autopilot, using a generic assessment that technically ticks a box without addressing what's actually happening 3 metres up a scaffold tower. Here's where working at height risk assessments most often fall short, and what a proper one actually needs to cover. The hierarchy gets skipped The Work at Height Regulations 2005 set out a clear hierarchy: avoid working at height where you can, use equipment to prevent falls where you can't avoid it, and only fall back on equipment that minimises the distance and consequences of a fall as a last resort. A lot of risk assessments jump straight to "operatives will wear a harness" without...

If you've ever had a method statement bounced back by a principal contractor with "not suitable for the works" scrawled across the top, you'll know it's rarely because the site team don't know how to do the job safely. It's because the document didn't say so clearly enough. A method statement isn't there to prove you're careful, it's there to prove it in a way a reviewer who has never seen your site can follow in five minutes flat. Here's what actually gets a method statement through review first time, and what gets it sent back. Start with the sequence, not the hazards The most common mistake is writing a method statement as a list of hazards with controls bolted on, rather than a description of how the work is actually going to happen. A reviewer wants to see the job broken into a logical sequence of steps, in the order they'll happen on site. Something like: Site set up and welfare checks Isolate and permit Erect acces...

 Short answer: you have to report a work-related death, a specified serious injury, or an injury that keeps someone off work for more than 7 days, plus certain diseases and dangerous occurrences, even if nobody actually got hurt. RIDDOR isn't asking you to log every scraped knuckle, it's asking for the incidents serious enough that the Health and Safety Executive needs to know about them. DEATHS Any death resulting from a work-related accident has to be reported, full stop. This excludes suicides, but includes a death that happens up to a year later if it's traceable back to a reportable injury from work. SPECIFIED INJURIES These are the injuries serious enough to report regardless of how long someone's off work: fractures other than to fingers or toes, amputations, permanent loss of sight, crush injuries to the head or torso, serious burns covering more than 10% of the body, scalping that needs hospital treatment, loss of consciousness from a head injury or from asphyx...

 Short answer: they're checking three things, that people can escape a fire safely, that the amenities are adequate for how many people are actually living there, and that you've got the paperwork to prove you've been keeping on top of it. Miss any of the three and it shows immediately. FIRE SAFETY This is usually the first thing checked. Escape routes need to be clear and unobstructed, properly signed, with fire doors in the higher risk areas like kitchens and communal hallways. Fire extinguishers, where required, need to be accessible and show evidence of regular servicing. Smoke alarms on every floor, carbon monoxide detectors in any room with a fuel burning appliance, none of this is optional or something you can catch up on the morning of the visit. ROOM SIZES AND AMENITIES HMOs have legal minimum room sizes, 6.51 square metres for an adult, 4.64 for a child under 10, and inspectors will measure if they're unsure. Shared bathrooms and kitchens have to be genuinely ...

 Short answer: an assessor is checking whether people can get out safely, whether they'd know there's a fire in time to do it, and whether the building itself will hold back the fire long enough for that to happen. Everything on the checklist sits under one of those three questions. DETECTION AND WARNING Smoke alarms need to be properly positioned on each floor, working, and giving proper coverage rather than one unit stuck in a hallway and forgotten. Kitchens usually need heat detectors instead, since smoke alarms near cooking just get switched off eventually. Larger buildings need an interconnected alarm system meeting BS 5839, with battery backup, loud enough to actually wake someone asleep. ESCAPE ROUTES This is where an assessor spends most of their time. Routes need adequate width, generally a minimum of 750mm, completely clear of obstructions, with enough alternative exits and acceptable travel distances to the nearest one. The final exit door has to open from the inside...

 Short answer: a gas safety check every year, an electrical check every five years, and both need to actually reach your tenants, not just sit in a folder. Skip either one and you're not just risking a fine, you can lose the ability to evict a tenant through the standard route until it's sorted. GAS SAFETY CERTIFICATE, THE CP12 This one's annual, no exceptions. It has to be carried out by a Gas Safe registered engineer, and self certifying it yourself is a criminal offence under the Gas Safety Regulations 1998, it's not a paperwork technicality you can work around. The engineer checks your gas appliances, the pipework, flues, ventilation, and the safety devices, confirming everything is actually safe to use rather than just present. Once it's done, you have to give your tenant a copy within 28 days, and any new tenant needs to see it before they move in, not after. Get this wrong and the penalties are real: fines up to £6,000 in a magistrates' court, unlimited f...

 Short answer: walk the actual workplace, write down what could genuinely hurt someone, decide what you're going to do about it, and make sure the actions actually happen. That's it in one sentence. The detail is in doing each of those properly rather than filling in a generic template and filing it away. STEP 1: FIND THE HAZARDS PROPERLY Don't do this from a desk. Walk the workplace systematically and talk to the people who actually work there, because the person doing the job every day will spot things a manager walking through once won't. Look at routine operations, but also maintenance, cleaning, and anything that only happens occasionally, those are often where the real risks hide. Past incidents and near misses are worth reviewing too, they tell you what's already gone wrong once. STEP 2: WORK OUT WHO'S ACTUALLY AT RISK Not everyone faces the same exposure. Office staff, warehouse workers, maintenance people, contractors on site, visitors, young workers, p...

 Short answer: most small premises are looking at somewhere between £200 and £650, and it climbs from there depending on what kind of building you've got. There's no single fixed price because a fire risk assessment isn't a tick box exercise, it's priced on how long a competent assessor actually needs to spend on your specific building. SMALL, SIMPLE PREMISES: £200 TO £400 A small office, shop or cafe usually sits at the lower end. Simple layout, lower occupancy, straightforward escape routes, less time on site and less to write up afterwards. MEDIUM COMPLEXITY: £300 TO £650 Restaurants, pubs, dental practices and small residential blocks tend to land in this middle bracket. Things like cooking risks and extraction systems, or shared escape routes serving several flats, mean more inspection time and a longer report. LARGER OR HIGHER RISK BUILDINGS: £750 AND UP Hotels, care homes and high rise buildings cost more because the stakes are different, sleeping occupants, vuln...

 Short answer: what counts as compliant changes depending on which room you're standing in. HMOs get treated differently to a normal let because more unrelated people are sharing escape routes, so the requirements are more detailed room by room rather than one blanket rule for the whole property. BEDROOMS Doors opening onto an escape route generally need to be fire doors, rated FD30, with a self closer, intumescent strips and smoke seals fitted. Distance matters too: a bedroom should be within 18 metres of a way out, or 7.5 metres if there's only one direction of escape available. Smoke detection in bedrooms is normally covered by the property's interlinked alarm system rather than a standalone unit. KITCHENS Kitchens are usually the highest fire risk room in an HMO, and the requirements reflect that. Fire doors here need to be to the same FD30 standard as bedrooms. Detection is different though, shared kitchens should have heat detectors rather than smoke alarms, since coo...

 Short answer: nothing happens until something does, and then it happens fast. There's no automatic fine that lands on your doormat for not having one. But if an inspector visits, or worse, there's a fire, not having a fire risk assessment turns a bad situation into a genuinely serious one. THE LAW YOU'RE ACTUALLY BREAKING The Regulatory Reform (Fire Safety) Order 2005 makes a suitable fire risk assessment a legal duty for the person responsible for most non-domestic premises and the shared areas of multi-occupied buildings. Not having one, or having one that's clearly inadequate, is a failure to meet that duty, full stop. WHAT AN INSPECTION ACTUALLY LOOKS LIKE Fire and rescue authorities can and do visit premises to check. What happens next depends on what they find. Minor issues might just get verbal advice. More significant gaps can bring a formal notice: an enforcement notice giving you a minimum of 28 days to fix specific breaches, an alterations notice requiring y...

 Short answer: there's no fixed number of months written into law. The Regulatory Reform (Fire Safety) Order 2005 just says it has to be kept under review and updated when it's no longer valid. In practice, that works out to roughly once a year for most properties, plus straight away whenever something changes. WHAT THE LAW ACTUALLY SAYS The RRO 2005 doesn't set a review deadline like "every 12 months." It focuses on the assessment staying accurate rather than ticking a calendar date. The person responsible for the property has to keep it under review and update it if it stops reflecting reality, whenever that happens to be. WHAT TRIGGERS AN EARLIER REVIEW A few things mean you shouldn't wait for the anniversary date: the building's layout or structure has changed, who's using the building or how many people has changed, a new fire hazard has turned up, there's been a fire or a near miss, or something in the original assessment (a fire door, an ala...

 Short answer: RAMS stands for Risk Assessment and Method Statement, two connected documents that most UK construction sites will ask you to produce before they let you start work. If you've been asked for one and aren't sure what it actually needs to contain, here's the plain version. WHAT THE TWO PARTS ACTUALLY ARE A risk assessment identifies the hazards in a specific work activity: who could be harmed, how likely it is, how severe it could be, and what you'll do to control it. A method statement is the practical companion document. It sets out the actual sequence of works, step by step, so anyone reading it knows exactly how the job will be carried out safely. Put together, RAMS answers two questions a site manager or principal contractor needs answered before they let anyone start: what could go wrong, and exactly how you're going to stop it going wrong. WHERE THE LEGAL REQUIREMENT COMES FROM The Management of Health and Safety at Work Regulations require risks...

 Short answer: yes. If you're a landlord you have a legal duty to assess the risk of legionella in your rental property's water system, and it applies whether you own one flat or fifty. WHERE THE DUTY COMES FROM The duty comes from the Health and Safety at Work Act 1974, backed up by the Control of Substances Hazardous to Health Regulations 2002, which treats legionella bacteria as a hazardous substance you have to control. The Health and Safety Executive's Approved Code of Practice, known as L8, sets out what a suitable and sufficient assessment actually looks like in practice. L8 talks in terms of employers, but HSE guidance is clear it extends to anyone who controls premises with a water system, which includes landlords. WHAT "DOING ONE" ACTUALLY MEANS For most standard residential properties, a legionella risk assessment is a straightforward, low cost check, not the intensive testing regime a hotel or hospital would need. It looks at things like water storage ...

 Short answer: yes, you still need one. The 5 employee threshold changes how detailed it has to be, it doesn't remove the requirement altogether. WHAT THE LAW ACTUALLY SAYS Section 2(3) of the Health and Safety at Work Act 1974 requires every employer to prepare a written statement of their general policy on health and safety, and to revise it as often as needed. That applies to every employer, there's no exemption for being small. WHERE THE 5 EMPLOYEE NUMBER COMES IN The Management of Health and Safety at Work Regulations 1999 is where the size threshold actually appears. If you employ five or more people, you need to record your full arrangements in writing too: who's responsible for what, and how the policy is actually put into practice day to day. Under five employees, you still need the written policy statement itself, you just aren't legally required to formally document every arrangement behind it, although doing so properly is still worth it if you ever need to ...

 Short answer: it depends on what you're letting, but for a lot of UK landlords, yes, and it's a legal requirement, not a nice-to-have. Here's how to tell where you stand. WHEN YOU DEFINITELY NEED ONE The Regulatory Reform (Fire Safety) Order 2005 is the law that creates this duty, and it applies to the communal parts of any multi-occupied building. In plain terms, that covers blocks of flats (for the shared hallways, stairwells and entrances), HMOs where several unrelated tenants share the property, rooms let individually within one property, and mixed-use buildings such as a shop with flats above it. If your property has shared areas that different households or tenants pass through, you almost certainly need a fire risk assessment covering those shared parts. WHEN YOU'RE LIKELY EXCLUDED If you let a whole house or flat to a single household on one tenancy, with no shared areas involved, the Order generally doesn't apply to that property. You still have other fire...