Why new UK rules mean “just enough” health and safety training is now a bad game plan
If you run a small business in the UK, health and safety training used to feel simple: tick a few boxes, send people on a one-off course, file the certificate and move on.
That world is gone.
Over the last few years, new UK legislation and tougher enforcement have quietly raised the bar. The law hasn’t changed the basic duty (keep people safe), but it has changed what “good enough” looks like in practice – especially around competence, documentation and the way you train people.
Think of it like sport. The rules of the game are the same. But the referees are fitter, the cameras are everywhere, and the standard of play has gone up. If your team keeps training like it’s 2005, you’ll get found out.
This article breaks down what’s changed, what actually matters for UK SMEs, and how to build a simple, results-focused training plan that keeps you compliant without drowning you in paperwork.
What’s actually changed in UK health and safety law?
The foundation is still the same:
- Health and Safety at Work etc. Act 1974 (HSWA)
- Management of Health and Safety at Work Regulations 1999
- Regulatory Reform (Fire Safety) Order 2005
But several recent moves have changed the landscape for small businesses:
1. Fire safety duties are tighter and more specific
Driven by the Grenfell tragedy, fire safety law has been strengthened:
- Fire Safety Act 2021 – clarifies that, in multi-occupied residential buildings, external walls and flat entrance doors are part of the fire risk assessment.
- Fire Safety (England) Regulations 2022 – impose new duties on “responsible persons” in certain buildings to provide more detailed information, instructions and safety checks.
Even if you’re not managing a high-rise block, the message is clear: the bar for “competent” fire safety management and training is higher. Risk assessments, emergency plans, and staff training all need to be more structured and better documented.
2. The Building Safety Act 2022 raised the stakes on competence
The Building Safety Act mainly targets higher-risk residential buildings, but its principles are spreading more widely through supply chains and best practice. Two key ideas affect SMEs:
- Accountability – named “dutyholders” must be able to show they are competent and that they use competent people.
- “Golden thread” of information – safety-critical information must be accurate, up-to-date and accessible.
In plain English: if you’re a contractor, subcontractor, or supplier, your clients will increasingly ask for proof of training, competence and up-to-date records for your staff. “He’s been doing this 20 years” is no longer enough.
3. PPE rules now clearly cover more workers
The PPE at Work (Amendment) Regulations 2022 extended PPE duties. If you use “limb (b)” workers (casual staff, gig workers, some zero-hours contracts), you may now be required to provide them with PPE and training, not just your traditional employees.
If someone is doing risky work for you, you can’t assume “they’re self-employed, it’s their problem”. You need to check their status and how you manage their training.
4. Enforcement and sentencing are much tougher
Sentencing guidelines and recent prosecutions have changed the risk calculation for small businesses:
- Fines are now linked to turnover, even for SMEs.
- Courts look hard at training, supervision and records when deciding penalties.
- The HSE and local authorities expect training matched to risk, not just a generic “health and safety course”.
When something goes wrong, the questions are simple:
- Did you identify the risk?
- Did you provide the right training for that risk?
- Can you prove it?
How legislation is reshaping what “good” training looks like
Most new rules don’t tell you, “Run a 3-hour course every April.” The law sets outcomes; you choose the methods. But the direction of travel is clear. Regulators and insurers are now expecting training to be:
1. Role-specific, not one-size-fits-all
The days of sending everyone on the same generic course and calling it done are over. Modern expectations:
- Leaders – need training on legal duties, risk management, and how to set up a safe system of work.
- Supervisors – need practical skills: toolbox talks, monitoring, intervening when they see bad practice.
- Frontline staff – need simple, specific instructions for the tasks they actually do.
That’s exactly how we design training in sport: the physio, the head coach and the striker don’t follow the same programme.
2. Ongoing, not “once and done”
New fire rules, the Building Safety Act and HSE guidance all push the same idea: competence is maintained over time, not created in one day.
In practice, for most SMEs, that means:
- Initial training when someone starts or changes role.
- Refresher training at set intervals (often every 12–36 months, depending on risk).
- Short, regular “top-up” sessions: toolbox talks, safety briefings, drills.
If you wouldn’t expect a player to stay match-fit on one pre-season session, don’t expect staff to stay safety-competent on one induction.
3. Evidence-based and recorded
New legislation doesn’t just want you to do the right thing. It wants you to prove you did the right thing.
That means your training system needs at least:
- A simple training matrix – who needs what, and how often.
- Completion records – dates, topics, attendance, assessments.
- A method to check understanding (tests, practical demonstrations, observed practice).
If the HSE visits after an incident and you can immediately show, “Here’s the risk assessment, here’s the training, here are the attendance records and test scores”, the conversation is very different to “We did something a while back, I think.”
4. Smarter use of online training
Regulators now broadly accept online learning, if it’s well designed and backed up with practice on the job. For typical SME risks (fire awareness, manual handling, DSE, basic health and safety awareness), online courses can be:
- Cheaper than in-person days.
- Easier to schedule around shifts.
- Better tracked – completion data, scores, reminders.
But they’re not a magic shield. You still need:
- Practical demonstrations for higher-risk tasks.
- Site-specific briefings on your equipment, your layout, your procedures.
- Supervisors who challenge unsafe habits.
Use online courses as a training backbone, then coach the details on your “pitch” – your actual workplace.
Which areas should UK SMEs prioritise right now?
Every business is different, but most SMEs will feel the impact of recent changes in a few key areas. Here’s where to look first and what to do.
Fire safety training: your non-negotiable
Fire is the one risk almost every workplace shares. Legislation is getting stricter, and insurers are paying close attention.
For a typical small office, shop, gym, workshop, or studio, aim for this as a baseline:
- All staff – fire safety awareness:
- What causes fires in your workplace.
- How to raise the alarm.
- Evacuation routes and assembly points.
- What to do and not do in a fire.
- Fire wardens / marshals – extra training:
- Checking escape routes.
- Coordinating evacuation.
- Using extinguishers (where appropriate).
- Post-evacuation roll calls and reporting.
Action steps you can take this month:
- Run or buy a short fire awareness course for all staff (online works well here).
- Nominate at least 1–2 fire wardens per floor or per shift and give them specific training.
- Schedule 2 fire drills per year and log:
- Time to evacuate.
- Any issues (blocked doors, confusion, missing people).
- Corrective actions.
Manual handling and PPE: closing the obvious gaps
New PPE rules and long-standing manual handling regulations hit SMEs hard because the risks are everywhere: lifting stock, moving equipment, handling deliveries.
Minimum training coverage should include:
- Manual handling awareness for anyone lifting, carrying, or pushing:
- Basic spinal mechanics in simple terms.
- Assessing load, distance and frequency.
- Using trolleys, pallet trucks, or mechanical aids.
- PPE selection and use for anyone using:
- Gloves, masks/respirators, eye protection, hearing protection.
- Specialist PPE (harnesses, fall arrest, chemical suits, etc.).
With the 2022 PPE amendment, check carefully:
- Do you use freelancers, casual staff or gig workers for hazardous tasks?
- Who supplies their PPE?
- Who trains them in how to use it properly?
If you think “They sort themselves out”, you may now be on the hook legally.
Working with contractors: shared risks, shared responsibilities
Many SMEs bring in electricians, builders, cleaners, security, or other contractors. Recent legislation and guidance make one thing clear: you can’t contract out your legal duties.
Your responsibilities include:
- Sharing your risk assessments and procedures with contractors.
- Checking that contractors are competent and trained for what they do.
- Coordinating emergency arrangements (fire, first aid, etc.).
Practical steps:
- Before work starts, ask for:
- Relevant training certificates for high-risk activities (e.g. working at height, asbestos awareness).
- Method statements and risk assessments.
- Brief contractors on:
- Your fire procedures.
- Your site rules (PPE, access, restricted areas).
- Who to report to if something goes wrong.
This is where the “golden thread” mindset from the Building Safety Act filters down: clear information, shared, recorded.
Mental health, stress and “people risks”
Not a new law, but a clear shift in enforcement focus. The HSE is now vocal about:
- Work-related stress.
- Bullying and harassment.
- Excessive workload and long hours.
For SMEs, that means training can’t just cover ladders and lifting. It should also give managers tools to spot and manage stress.
Practical moves:
- Train line managers in:
- Basic stress risk factors.
- How to hold one-to-one check-ins.
- How to adjust work demands before people burn out.
- Give all staff a short session on:
- Recognising early signs of stress.
- Internal support routes (who they can talk to).
- What reasonable adjustments might look like.
This is no longer “soft stuff”. Poor management of stress can now trigger enforcement just like poor management of machinery.
Designing a simple, compliant training plan for your SME
Let’s turn the law into something you can actually run, like a training programme for a team.
Goal: within the next 8–12 weeks, move from “random historic training” to a clear, documented, risk-based plan.
Step 1 – Map your key risks (1–2 hours)
Grab your risk assessments and a blank table. List your main activities and risks, for example:
- Fire and evacuation.
- Manual handling.
- Working at height.
- Use of machinery or vehicles.
- Chemicals/cleaning agents.
- DSE/office work.
- Violence and aggression (if public-facing).
- Stress and mental health.
For each risk, ask: “Who is exposed? What do they actually need to know and be able to do?”
Step 2 – Build a basic training matrix (2–3 hours)
Create a simple table (spreadsheet works) with:
- Names down the left.
- Training topics across the top.
- Columns for:
- Date completed.
- Method (online, in-person, toolbox talk).
- Refresher due date.
Aim for:
- All staff – induction health and safety + fire awareness + role-specific basics.
- Key roles – fire wardens, first aiders, supervisors, managers with extra training.
Step 3 – Decide what goes online vs on-site (1 hour)
Online training works well for:
- General health and safety awareness.
- Fire awareness.
- Manual handling theory.
- DSE/office ergonomics.
On-site/face-to-face training is better for:
- Specific machinery or equipment.
- Working at height and harness use.
- Emergency drills and practical scenarios.
- Stress and difficult conversations for managers.
Blend the two. Use structured online courses for the theory, and short, focused on-site sessions for practical application.
Step 4 – Set clear minimum standards and frequencies
Use legislation and HSE guidance as your benchmark and then write down your own internal rules. For example:
- Fire awareness – for all staff, within 2 weeks of starting, refresh every 12 months.
- Manual handling – for anyone lifting regularly, within 1 month of starting, refresh every 24 months.
- Supervisors’ H&S training – within 3 months of promotion, refresh every 3 years.
- Stress and mental health awareness – all managers every 3 years.
These aren’t hard-coded in law for every topic, but they are reasonable, defendable and easy to manage.
Step 5 – Track, review, adjust (ongoing)
Once your system is running, treat it like a training cycle in sport:
- Every month – check who is due or overdue training, send reminders.
- After any incident or near miss – ask, “Was this a training issue, a supervision issue, or both?” Then adjust your plan.
- Once a year – review your entire training matrix against:
- Any legislative changes.
- New equipment or processes.
- Growth in staff numbers or sites.
Bringing it all together on your workplace “pitch”
New UK legislation hasn’t changed the basic rule: you must protect your people and anyone affected by your work. What it has changed is the standard of proof and the expectation around competence.
For UK SMEs, that means three practical shifts:
- Stop relying on generic, one-off courses and start training by role and by risk.
- Use a mix of online courses and on-site coaching to keep people competent over time.
- Document everything in a simple, live training matrix you can actually use.
If you approach health and safety training like a good coach approaches a season – clear plan, regular sessions, honest feedback, constant small improvements – you’ll stay on the right side of the law and, more importantly, keep your team fit to work, day after day.