Free tool
Do I need a risk assessment?
Answer three quick questions and get a clear, regulation-backed answer for your situation — in under 60 seconds.
How many people work at your organisation?
Include employees, workers, contractors and self-employed people who work under your control.
Why risk assessments matter
The duty to assess workplace risks sits primarily in Regulation 3(1) of the Management of Health and Safety at Work Regulations 1999 (MHSWR), which requires every employer — and most self-employed people — to make a “suitable and sufficient” assessment of the risks to which employees and others may be exposed. This is not optional guidance: it is a statutory requirement enforceable by the Health and Safety Executive (HSE) and local authority Environmental Health Officers.
The Health and Safety at Work etc. Act 1974 provides the broader framework, requiring employers to ensure, so far as is reasonably practicable, the health, safety and welfare of all employees (s.2) and of others affected by their work (s.3). Risk assessments are the primary mechanism through which organisations demonstrate compliance with this duty.
Sector-specific regulations add further layers. Construction projects above a certain threshold trigger duties under the Construction (Design and Management) Regulations 2015 (CDM 2015). Workplaces with hazardous substances must comply with the Control of Substances Hazardous to Health Regulations 2002 (COSHH). Settings involving children must follow the Early Years Foundation Stage Framework 2024. In each case, the specific assessment duty is additional to, not a replacement for, the general MHSWR duty.
Employers with five or more employees must also record the significant findings of their risk assessment in writing — a requirement that is regularly checked during HSE inspections.