Skip to main content
Safety Solutions TrainingSafety Solutions Training

Legal duties

Workplace Safety Legislation Guide

This is the Safety Hub statute map. Other Hub pages link here rather than copying law. Start with the work and the foreseeable harm, then find the duty that governs it.

Workplace safety legislation guidance

Which nation

This map is weighted to Great Britain. Safety Solutions Training researches the client's law rather than exporting England as the default.

Wales and England

Health and Safety at Work etc. Act 1974 and the Management of Health and Safety at Work Regulations 1999 apply across Great Britain. Housing hazards, adult safeguarding and some criminal tools differ. Wales uses Social Services and Well-being (Wales) Act 2014 and Wales Safeguarding Procedures. England uses Care Act 2014 for adult safeguarding. Awaab's Law is England only.

Scotland, Northern Ireland and Ireland

Scotland and Northern Ireland share much of the health and safety core, with their own safeguarding and some reporting rules. Ireland follows the Safety, Health and Welfare at Work Act 2005 and the Health and Safety Authority. Do not copy Health and Safety Executive wording onto an Irish notice.

How to use the guide

Start with the work and the foreseeable harm, not with a list of Acts. Identify who may be affected, the activities and environments involved, the known incident pattern and the controls currently relied upon. Then use the guide to locate the legal and official source that governs each part of the problem.

The same incident may engage several frameworks. A threat against a lone housing officer can involve health and safety management, internal incident reporting, possible police action, equality considerations, personal-data handling and safeguarding. Those frameworks should be connected without being treated as interchangeable.

  • Legal duty: a requirement created by legislation or regulations.
  • Official guidance: regulator or government material explaining expected practice.
  • Recognised practice: a standard or professional approach that may help shape controls.
  • Safety Solutions Training Ltd interpretation: practical training and implementation guidance, clearly labelled as such.

Health and Safety at Work etc. Act 1974 (HSWA)

Section 2 provides the central employer duty to ensure, so far as is reasonably practicable, employees' health, safety and welfare at work. For the work Safety Solutions Training Ltd covers, foreseeable violence, lone working, unsafe work design and weak emergency arrangements belong in the employer's health and safety system. They are not only staff behaviour problems.

Section 2 is the central duty to employees. Section 3 separately requires employers to conduct their undertaking so that, so far as is reasonably practicable, persons other than employees are not exposed to risks to their health or safety.

The Act does not prescribe one conflict-management course, lone-worker device or communication script. Employers must decide proportionate controls from the actual risk. Training and technology can support those controls, but neither establishes compliance on its own.

Practical application

For training purposes, the important connection is between the employer's assessed system and the decisions staff make during real work. Delegates should understand the controls provided for their role, the limits of their authority, how to obtain help and when continuing the activity would move outside the agreed safe system.

Managers should be able to evidence that learning reflects foreseeable incidents and local arrangements rather than an off-the-shelf syllabus. Useful evidence includes role-specific objectives, attendance and competence records, scenario observations, supervision notes, worker consultation and changes made after incidents or control failures.

What training should enable staff to do
  • Apply the role's actual controls, limits and emergency arrangements rather than relying on generic awareness.
  • Recognise foreseeable risk, obtain support and stop work safely when agreed controls are no longer effective.
  • Show through practice and supervision that procedures can be used during real public-facing and lone-working activity.

Applies to: England, Scotland and Wales (Great Britain). Northern Ireland: The Health and Safety at Work (Northern Ireland) Order 1978 provides equivalent duties, enforced by HSENI rather than HSE. Read the legislation opens in a new tab Republic of Ireland: Does not apply. Equivalent employer duties sit under the Safety, Health and Welfare at Work Act 2005, enforced by the Health and Safety Authority (HSA). Read the legislation opens in a new tab

Evidence question

Can the organisation show how foreseeable frontline risks were identified, controlled, communicated, supervised and reviewed in practice?

Public Order Act 1986

The Public Order Act 1986 defines specified public-order offences in England and Wales. It does not create a general workplace risk-management code for employers, and whether conduct meets an offence depends on the facts and the competent authorities.

For employers, its practical relevance is the response to threatening or abusive conduct connected with work. Preserve relevant information lawfully, support the affected worker, use 999 for immediate danger or a crime in progress, and use the appropriate non-emergency police route otherwise. Do not require staff to investigate suspected offences or remain in unsafe contact.

Practical application

Training should help staff respond safely to threatening or abusive conduct without asking them to make a legal finding. They need practical distinctions between poor behaviour, a breach of service boundaries, immediate danger and information that should be passed to police through the organisation's agreed route.

Managers should define who decides whether and how a police report is made, what information can be preserved, how staff leave or end contact and what happens afterwards. Exercises should test emergency calls, non-emergency reporting, witness information, body-worn or telephone evidence and support for the affected worker.

What training should enable staff to do
  • Distinguish difficult behaviour, an immediate emergency and conduct requiring a non-emergency police report.
  • Withdraw safely, record facts accurately and preserve available evidence without investigating or confronting a suspected offender.
  • Use the organisation's police-reporting, management-escalation and post-incident support routes confidently.

Applies to: England and Wales, with parts also extending to Scotland. Scotland: Most Scottish public order matters are covered separately by the common-law offence of breach of the peace and the Criminal Justice and Licensing (Scotland) Act 2010, not this Act. Northern Ireland: The Public Order (Northern Ireland) Order 1987 is Northern Ireland's equivalent framework. Read the legislation opens in a new tab Republic of Ireland: Does not apply. Public-order offences in Ireland sit under the Criminal Justice (Public Order) Act 1994. Read the legislation opens in a new tab

  • Set a clear emergency and police-reporting route for staff.
  • Record the incident and preserve available evidence without unlawful access or confrontation.
  • Review whether work design, staffing, information or security controls exposed staff to foreseeable risk.
  • Avoid stating that conduct is criminal unless that conclusion has been made by a competent authority.

Protection from Harassment Act 1997

The Protection from Harassment Act 1997 addresses courses of conduct involving harassment and includes civil and criminal routes. Application depends on the pattern, knowledge, facts and jurisdiction; an employer should not promise that a reported pattern meets a legal threshold.

Employers should provide a safe reporting route, assess continuing workplace exposure, preserve relevant records lawfully and consider police, legal, safeguarding or security advice where stalking, fixation, repeated contact or online targeting continues. The worker should not be asked to investigate or confront the person responsible.

Practical application

A single interaction may appear minor while a connected pattern creates serious risk. Training should therefore show staff how repeated calls, visits, messages, online posts, unwanted gifts, surveillance or contact through colleagues can be recorded and linked without requiring the worker to prove harassment.

Managers need a cross-team method for identifying repeated behaviour, restricting unnecessary access to staff details and agreeing a safety plan with the affected worker. Records should show escalation decisions, protective changes, advice obtained and review dates while maintaining confidentiality and lawful information handling.

What training should enable staff to do
  • Recognise repeated contact, fixation and cross-channel behaviour as a possible pattern rather than isolated incidents.
  • Record concerns through a confidential route that can join information across teams while protecting staff details.
  • Know when to involve security, police, safeguarding or specialist advice without gathering further evidence unsafely.

Applies to: England and Wales. A modified version of the same Act also extends to Scotland. Scotland: The Scotland provisions (ss.8 to 11) are a civil harassment regime. Breach of a non-harassment order is a criminal offence. Stalking and threatening or abusive behaviour are separate Scottish offences, including under the Criminal Justice and Licensing (Scotland) Act 2010. Do not treat England and Wales stalking offences as applying in Scotland. Read the legislation opens in a new tab Northern Ireland: The 1997 Order remains Northern Ireland's harassment framework. Separate stalking and threatening or abusive behaviour offences now sit in the Protection from Stalking Act (Northern Ireland) 2022. Do not assume the 2012 England and Wales stalking amendments apply in Northern Ireland, and do not assume Northern Ireland has no stalking law. Read the legislation opens in a new tab Republic of Ireland: Harassment is an offence under the Non-Fatal Offences Against the Person Act 1997, with online and image-based harassment separately covered by the Harassment, Harmful Communications and Related Offences Act 2020 ('Coco's Law').

  • Join repeated incidents across teams and channels so a course of conduct is not missed.
  • Protect contact details, schedules and lone-working information where targeting is foreseeable.
  • Agree escalation, communication and support arrangements with the affected worker.
  • Seek specialist advice where injunctions, criminal reporting or evidence handling may be relevant.

Management of Health and Safety at Work Regulations 1999 (MHSWR)

Regulation 3 requires a suitable and sufficient assessment of relevant risks. Other provisions support effective arrangements, competent assistance, procedures for serious and imminent danger, information, cooperation and worker capability. The practical requirement is a living control system that reflects real work, not a generic risk-assessment form stored without review.

Practical application

The risk assessment should drive the learning content. Staff need to understand the foreseeable hazards, who may face additional exposure, the preventive controls, the warning signs that conditions have changed and the action authorised when a planned control is missing or ineffective.

Managers should test whether information, supervision and emergency arrangements work across different shifts, locations and contact channels. Evidence should connect significant findings to induction, refresher learning, equipment checks, lone-worker monitoring, incident review and action ownership rather than treating the assessment as a static document.

What training should enable staff to do
  • Understand the hazards, controls, decision limits and escalation route attached to the work they actually perform.
  • Reassess conditions when circumstances change and identify when supervision, staffing or emergency arrangements are inadequate.
  • Refresh and demonstrate competence after incidents, near misses, control failure or material change.

Applies to: England, Scotland and Wales, made under the Health and Safety at Work etc. Act 1974. Northern Ireland: The Management of Health and Safety at Work Regulations (Northern Ireland) 2000 provide the equivalent duties, enforced by HSENI. Republic of Ireland: Does not apply. Equivalent duties sit under the Safety, Health and Welfare at Work (General Application) Regulations 2007, made under Ireland's 2005 Act.

  • Assess roles, tasks, locations, public contact and lone-working conditions.
  • Consider who may face different or additional exposure.
  • Record significant findings where the legal threshold applies.
  • Review after incidents, material change, control failure or new information.
  • Connect training content to the organisation's procedures and decision limits.
Awaab's Law (England only)

The Hazards in Social Housing (Prescribed Requirements) (England) Regulations 2025 apply to social landlords in England. They are not a Wales duty and they are not a general workplace-safety statute.

Phase 1 from 27 October 2025: emergency hazards must be investigated and relevant safety work started within 24 hours of becoming aware. Significant damp and mould: investigate within 10 working days; give a written summary to the tenant within 3 working days of the investigation concluding; relevant safety work within 5 working days of the investigation concluding.

Phase 2 from 30 November 2026 extends significant-hazard timescales to further Housing Health and Safety Rating System hazards. Check GOV.UK. Do not use secondary blogs for timescales.

Wales housing hazards (not Awaab's Law)

Renting Homes (Wales) Act 2016 fitness for human habitation treats damp and mould as Matter 1. Welsh Housing Quality Standard Element 1c from 1 April 2026 sets investigation and remedy timescales for Housing Health and Safety Rating System hazards. Do not call this Awaab's Law.

Equality Act 2010

The Equality Act 2010 governs protected characteristics and workplace discrimination, harassment and victimisation. For frontline work, employers should consider whether role design, reporting confidence, lone working, night work, public contact or management response creates different exposure or weaker protection for particular workers.

Employers can be liable for unlawful acts committed by workers in the course of employment, subject to the statutory framework and available defences. They should maintain effective equality and anti-harassment arrangements, provide safe reporting routes, respond consistently and avoid decisions that disadvantage workers because of a protected characteristic.

Practical application

Training should use realistic examples of discrimination, harassment and victimisation involving colleagues, managers and members of the public. Staff need accessible reporting options, confidence that reasonable concerns will be taken seriously and clear boundaries where protected-characteristic abuse occurs during service delivery.

Managers should examine whether risk controls, work allocation, lone working, reporting and post-incident support operate fairly in practice. Useful assurance includes equality-informed risk assessment, reasonable adjustments, alternative reporting routes, consistent investigation standards and review of patterns affecting particular groups.

What training should enable staff to do
  • Recognise discrimination, harassment and victimisation and report concerns without fear of retaliation.
  • Use reporting, lone-working and support arrangements that remain accessible for different protected characteristics and adjustment needs.
  • Respond to customer or third-party harassment using clear boundaries, safe withdrawal and formal escalation routes.

Applies to: England, Scotland and Wales (Great Britain). Northern Ireland: Does not apply, other than in very limited circumstances. Equality is a transferred matter in Northern Ireland, which instead relies on a patchwork of separate Acts and Orders (covering sex, race, disability, religion/political opinion and sexual orientation separately) overseen by the Equality Commission for Northern Ireland. Read the legislation opens in a new tab Republic of Ireland: Does not apply. Equivalent protections sit under the Employment Equality Acts 1998-2015 and the Equal Status Acts 2000-2018, overseen by the Irish Human Rights and Equality Commission (IHREC).

Frontline application

Check whether work allocation, lone working, reporting, investigation and support arrangements operate fairly for workers with different protected characteristics.

Employment Rights Act 2025 (ERA 2025)

Employment Rights Act 2025: what is in force now, and what is planned to change. The Employment Rights Act 2025 introduces employment-law changes in stages across 2026 and 2027. Acas states that many provisions are not yet in force, so employers must separate current duties from future requirements and check the official timetable before changing legal statements.

For SST's scope, sexual-harassment disclosures became qualifying whistleblowing disclosures on 6 April 2026. Acas currently states that, on 30 October 2026, employers will be liable for third-party harassment unless they took all reasonable steps, and the preventative sexual-harassment duty will move from reasonable steps to all reasonable steps. Third-party liability is for harassment generally, not only sexual harassment. Check the Acas timetable before treating those provisions as operative.

Practical application

Because provisions commence in stages, training material must separate current rights and duties from planned changes. Staff and managers should know the present whistleblowing and harassment routes, how qualifying disclosures are handled and where to obtain updated HR or legal advice.

The organisation should maintain a commencement tracker with named ownership and version-controlled policies, briefings and course materials. Assurance should show when content was checked, what changed, who was informed and how managers were prepared before each operative provision took effect.

What training should enable staff to do
  • Understand which protections are currently in force and where the organisation's whistleblowing and harassment procedures apply.
  • Receive and route qualifying disclosures safely while protecting workers from retaliation.
  • Use updated procedures as provisions commence without treating planned legal changes as current duties.

Applies to: Mostly England, Scotland and Wales. Most provisions do not extend to Northern Ireland. Northern Ireland: Northern Ireland is developing separate proposals through the Department for the Economy's 'Good Jobs' Bill, which mirrors some but not all of this Act's provisions and is at an earlier stage of the legislative process. Do not assume Northern Ireland shares Great Britain's commencement dates or final scope. Republic of Ireland: Does not apply. Irish employment law develops independently, through the Workplace Relations Commission.

Implementation check

Keep current duties and planned changes separate, and recheck official commencement information before revising policy, training or assurance statements.

Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 (RIDDOR)

RIDDOR requires specified responsible persons to report defined work-related deaths, injuries, diseases and dangerous occurrences. HSE states that work-related violence resulting in death, a specified injury or a physical injury causing more than seven days' incapacity may be reportable, subject to the work-related test and the facts.

Internal recording must be broader than statutory reporting. Threats, verbal abuse, near misses and lower-level events can reveal patterns and control failures even when they are not reportable under RIDDOR. Managers should check current HSE criteria rather than using this guide as a reporting decision tool.

Practical application

Staff training should encourage prompt internal reporting of injuries, threats, abuse and near misses without suggesting that every event is reportable under RIDDOR. The responsible person, not the affected worker, should apply the current statutory criteria and obtain competent advice where the position is uncertain.

Managers should preserve the facts needed for that decision, including the work connection, injury, incapacity and event circumstances. The wider incident record should still drive welfare support and risk-control review even when the statutory reporting threshold is not met.

What training should enable staff to do
  • Record injury, incapacity, threats, abuse and near misses promptly enough for a competent reporting decision.
  • Distinguish broad internal reporting from the narrower statutory RIDDOR tests.
  • Use incident information to support affected workers, identify trends and improve controls even where no statutory report is required.

Applies to: England, Scotland and Wales. Northern Ireland: The Reporting of Injuries, Diseases and Dangerous Occurrences Regulations (Northern Ireland) 1997 place the equivalent duty on employers, reporting to HSENI or the local council. Read the legislation opens in a new tab Republic of Ireland: Does not apply. Incident-reporting duties sit under the Safety, Health and Welfare at Work Act 2005 and related regulations, reported to the HSA.

Children Act 1989

The Children Act 1989 is a principal foundation for child welfare and protection in England and Wales, including local-authority duties where there is reasonable cause to suspect significant harm. It does not impose the same safeguarding function on every employer. In England, the current statutory guidance is Working together to safeguard children 2026 (Department for Education). GOV.UK added this edition on 18 March 2026. It applies to organisations and agencies in England with functions relating to children. It is not the Cardiff or Wales default.

Employers whose staff work with children should identify the statutory and sector guidance that applies to their organisation, maintain a verified reporting route, train staff to recognise and record concerns, and ensure urgent risks reach police or children's social care promptly. General personal-safety guidance must not replace child-protection procedures.

Practical application

Role-appropriate training should help staff notice indicators of harm, listen without leading questions, record the child's words accurately and act through the verified safeguarding route. It should also explain immediate-danger action and why staff must not investigate, promise secrecy or wait for proof.

Managers should evidence current safeguarding leads, deputy arrangements, local contact details, induction and refreshers, supervision and escalation checks. Scenarios should reflect the service and should test what happens when the usual lead is unavailable or the concern involves a colleague or manager.

What training should enable staff to do
  • Recognise signs of harm, respond to immediate danger and use the verified local safeguarding route.
  • Record facts without investigating, promising confidentiality or delaying a concern while seeking certainty beyond the role.
  • Escalate to the designated safeguarding lead, children's social care or police and obtain support after a difficult disclosure.

Applies to: England and Wales. Scotland: The Children (Scotland) Act 1995, together with the Children's Hearings (Scotland) Act 2011, sets out Scotland's separate child-welfare and safeguarding framework. Northern Ireland: The Children (Northern Ireland) Order 1995 is Northern Ireland's equivalent framework. Read the legislation opens in a new tab Republic of Ireland: Does not apply. The Child Care Act 1991 and the Children First Act 2015 set out Ireland's child-protection framework, overseen by Tusla, the Child and Family Agency.

  • Name the safeguarding lead and an alternative route when that person is unavailable.
  • Record facts, actions and decisions without conducting an unauthorised investigation.
  • Control information sharing according to safeguarding need and data-protection requirements.
  • Check jurisdiction and sector rules before relying on a generic procedure.

Working together 2026 (England only)Working together to safeguard children 2026 replaced the 2023 version in England on 18 March 2026. It is not the Cardiff housing default. Wales uses Wales Safeguarding Procedures. Designated Officer for Safeguarding is the Wales allegation route. LADO is England. Keeping children safe in education is an England schools pointer, not a visiting-staff framework.

Adult Support and Protection (Scotland) Act 2007

This Act provides the principal Scottish framework for identifying and protecting adults at risk of harm. Statutory functions fall on councils and specified public bodies; not every employer becomes an adult-protection authority.

Employers operating in Scotland should know whether their service or staff fall within sector duties, maintain a route to the relevant council or emergency service, support staff to record concerns accurately and follow the current Scottish code of practice rather than an England-only safeguarding process.

Practical application

Scottish services need training grounded in the Act, current code of practice and relevant council arrangements. Staff should understand the adult-at-risk framework, recognise possible harm, take immediate safety action and pass factual information to the correct route without assuming an investigative role.

Managers should confirm which statutory or sector responsibilities apply to their organisation and maintain reliable council, police and emergency contacts. Evidence should include Scottish-specific learning, role levels, supervision, referral quality and lessons from cases rather than an unmodified England procedure.

What training should enable staff to do
  • Use the current Scottish adult-protection pathway rather than an England-only safeguarding process.
  • Recognise harm, record facts and contact the relevant council or emergency service when required.
  • Obtain advice, supervision and reflective support after raising an adult-protection concern.

Applies to: Scotland only. See the separate Care Act 2014 (England) and Social Services and Well-being (Wales) Act 2014 entries in this guide for the equivalent duties in England and Wales. Northern Ireland: There is no equivalent primary legislation. Adult safeguarding in Northern Ireland operates under the regional policy 'Adult Safeguarding: Prevention and Protection in Partnership' (Department of Health, 2015) rather than a discrete Act. Republic of Ireland: There is also no single adult-safeguarding Act. Ireland's approach sits under the HSE's 'Safeguarding Vulnerable Persons at Risk of Abuse' national policy, with a new sector-wide policy framework recently issued by the Department of Health. Read the legislation opens in a new tab

Care Act 2014

In England, section 42 places an enquiry duty on a local authority where the statutory conditions for an adult at risk of abuse or neglect are met. The Act does not make every employer responsible for conducting that enquiry.

Employers in relevant services should maintain a reliable referral route, act on immediate danger, preserve factual records, cooperate with authorised safeguarding enquiries and ensure staff do not substitute an internal HR or incident process for the statutory safeguarding pathway.

Practical application

In England, learning should distinguish the responsibility to recognise and report a concern from the local authority's section 42 enquiry duty. Different staff groups require different depth: general awareness for all relevant staff, procedural competence for managers and specialist capability for people supporting or undertaking enquiries.

Employers should maintain a rolling programme supported by supervision and reflective practice. Assurance should show that temporary staff and volunteers are included, local procedures are current, referrals are reviewed for quality and internal HR or incident processes do not delay the statutory safeguarding pathway.

What training should enable staff to do
  • Recognise abuse or neglect, act on immediate danger and follow the organisation's verified local reporting procedure.
  • Understand the difference between awareness, referral and specialist enquiry responsibilities.
  • Maintain competence through regular refreshers, supervision and reflective practice across every relevant staff group.

Applies to: England only. Scotland: The Adult Support and Protection (Scotland) Act 2007 is Scotland's equivalent framework (listed separately in this guide). Northern Ireland: There is no equivalent primary legislation. Adult safeguarding in Northern Ireland operates under the regional policy 'Adult Safeguarding: Prevention and Protection in Partnership' (Department of Health, 2015) rather than a discrete Act. Republic of Ireland: There is also no single adult-safeguarding Act. Ireland's approach sits under the HSE's 'Safeguarding Vulnerable Persons at Risk of Abuse' national policy. Read the legislation opens in a new tab

Social Services and Well-being (Wales) Act 2014

The Act is the Welsh statutory framework for social services and includes safeguarding provisions for adults and children. Duties differ according to the organisation and function, including duties on relevant partners to report specified concerns.

In Wales, do not import the England Working together to safeguard children title. The current Welsh Government statutory guidance under Part 7 of this Act is Working together to safeguard people. Operational procedures sit in the Wales Safeguarding Procedures.

Employers in Wales should use current Welsh safeguarding procedures, identify whether they are a relevant partner or regulated provider, train staff on the correct local-authority route and avoid applying England-only Care Act wording to Welsh cases.

Practical application

Welsh training should use the terminology, reporting duties and safeguarding procedures applying in Wales. Staff need to recognise adult and child concerns, respond to immediate danger, record facts and understand the local-authority route relevant to their role and organisation.

Managers should verify whether the service is a relevant partner or regulated provider and tailor learning accordingly. Evidence should include Wales-specific materials, current regional procedures, referral contacts, supervision and learning from safeguarding practice reviews.

What training should enable staff to do
  • Use current Wales safeguarding procedures, terminology and local-authority routes.
  • Recognise concerns, take immediate safety action, record facts and share information proportionately.
  • Understand any role-specific duty applying to a relevant partner or regulated provider.

Applies to: Wales only. See the separate Care Act 2014 (England) and Adult Support and Protection (Scotland) Act 2007 entries in this guide for the equivalent duties in England and Scotland. Northern Ireland: There is no equivalent primary legislation. Adult safeguarding in Northern Ireland operates under the regional policy 'Adult Safeguarding: Prevention and Protection in Partnership' (Department of Health, 2015) rather than a discrete Act. Republic of Ireland: There is also no single adult-safeguarding Act. Ireland's approach sits under the HSE's 'Safeguarding Vulnerable Persons at Risk of Abuse' national policy. Read the legislation opens in a new tab

Modern Slavery Act 2015

The Act addresses slavery, servitude, forced labour and human trafficking. Section 54 requires qualifying commercial organisations meeting the statutory turnover and business tests to publish an annual slavery and human trafficking statement.

Employers should know whether the transparency requirement applies, maintain a route for concerns about exploitation in work or supply chains, protect people raising concerns and seek police, safeguarding or specialist advice where facts may indicate an offence. A modern-slavery statement is not a substitute for operational controls or safe reporting.

Practical application

Training should make exploitation recognisable in practical contexts such as recruitment debt, withheld documents or pay, controlled movement, fearful behaviour, unsafe accommodation and coercion within supply chains or service use. Staff must know that one indicator is not proof and that confrontation may increase danger.

Managers should define confidential reporting, urgent police or safeguarding routes and access to specialist advice. Procurement, HR and operational teams need connected but role-specific learning, with records showing how concerns, supplier due diligence and any transparency statement lead to operational action.

What training should enable staff to do
  • Recognise indicators of exploitation, coercion and trafficking in the workforce, service delivery and supply chain.
  • Use a protected reporting route without confronting a suspected exploiter or attempting to investigate an offence.
  • Connect concerns to the appropriate safeguarding, police and specialist-support pathway.

Applies to: The core offences apply to England and Wales. The transparency-in-supply-chains duty (section 54) and the Independent Anti-Slavery Commissioner role apply UK-wide. Scotland: The Human Trafficking and Exploitation (Scotland) Act 2015 sets out Scotland's own offences and victim-support provisions. Read the legislation opens in a new tab Northern Ireland: The Human Trafficking and Exploitation (Criminal Justice and Support for Victims) Act (Northern Ireland) 2015 sets out Northern Ireland's own offences and victim-support provisions. Republic of Ireland: Does not apply. Ireland's core anti-trafficking framework sits under the Criminal Law (Human Trafficking) Act 2008 and later amending legislation.

Domestic Abuse Act 2021

The Act provides statutory definitions and measures concerning domestic abuse. The statutory guidance recognises that domestic abuse can affect work, that perpetrators may target a victim at work and that employers have an important supporting role.

Employers should consider domestic-abuse risks within applicable health and safety, employment and safeguarding duties; provide a confidential route; agree practical safety and communication measures with the affected worker; signpost specialist support; and avoid asking managers to investigate abuse or mediate with a suspected perpetrator.

Practical application

Training should prepare managers to receive a disclosure calmly, respect the worker's choices and recognise that abuse may reach the workplace through calls, visits, stalking, surveillance or technology. It should avoid turning managers into investigators, counsellors or mediators.

Organisations should evidence confidential reporting, immediate-danger procedures, flexible workplace safety measures, secure handling of contact information and specialist signposting. Any plan should be agreed with the affected worker where possible and reviewed as circumstances change.

What training should enable staff to do
  • Receive a disclosure sensitively without mediation, investigation or contact with a suspected perpetrator.
  • Recognise workplace contact, stalking, technology misuse and routine changes that may form part of domestic-abuse risk.
  • Use confidential reporting, immediate-danger action, workplace safety planning and specialist signposting.

Applies to: England and Wales. Scotland: The Domestic Abuse (Scotland) Act 2018 creates a specific offence covering a course of abusive behaviour, including coercive and controlling behaviour, and generally commenced ahead of the equivalent England and Wales provisions. Northern Ireland: The Domestic Abuse and Civil Proceedings Act (Northern Ireland) 2021 creates Northern Ireland's equivalent offence and related civil protections. Republic of Ireland: The Domestic Violence Act 2018 is Ireland's core framework, with paid domestic-violence leave for employees introduced separately from November 2023.

Data Protection Act 2018 (DPA 2018)

The UK GDPR and Data Protection Act 2018 can apply when an employer collects, stores, shares or monitors information about workers and incidents. ICO guidance states that worker monitoring must be lawful and fair, and that high-risk processing may require a data protection impact assessment.

Employers should define the purpose and lawful basis, use necessary and proportionate monitoring, tell workers what is happening, limit access and retention, protect special-category data and complete a data protection impact assessment where required. A member of the public recording a worker and an employer monitoring workers are different issues and should not be treated as one legal question.

Practical application

Staff need practical guidance on the information they may collect during incidents, why it is needed, who may access it and when it can be shared. Training should cover accurate factual notes, special-category data, secure storage and the difference between preserving evidence and circulating it unnecessarily.

Managers should connect monitoring and recording decisions to a defined purpose, lawful basis, transparency, retention and access controls. Assurance may include privacy information, data-protection impact assessments where required, authorisation records, deletion schedules and review of inappropriate access or disclosure.

What training should enable staff to do
  • Handle incident and worker information using lawful purpose, data minimisation, secure access and proportionate sharing.
  • Understand the limits of monitoring, transparency requirements and when specialist privacy advice may be needed.
  • Separate personal recording, organisational monitoring, evidence preservation and disclosure decisions in practice.

Applies to: UK-wide, including Northern Ireland, alongside UK GDPR and regulated by the ICO. Republic of Ireland: Does not apply. Ireland remains in the EU and is governed directly by EU GDPR together with its own, separate Data Protection Act 2018, regulated by the Data Protection Commission (DPC), not the ICO. Read the legislation opens in a new tab

Dangerous Dogs Act 1991 (as amended)

The Dangerous Dogs Act 1991 is the main statute governing dog control in England, Wales, and Scotland. It bans possession of specified dog types outright, and separately makes it an offence to allow any dog to be dangerously out of control, in any place, public or private. For organisations whose staff visit homes, gardens, or shared premises, this is directly relevant risk and legal context, not a specialist policing topic.

The dog risk for visiting staff article carries the operational detail. This entry is practical legal awareness, not legal advice on an individual dog, incident or enforcement decision.

Practical application

Confirm that any role involving property visits, home assessments, or enforcement includes dangerous dogs awareness in its induction and refresher training, not only for staff who work in housing or animal-related roles. Build a no unverified assumption rule into visit protocols: a record showing no dog on file is not a safety guarantee.

Where staff may be involved in seizure, enforcement, or kennelling, ensure they understand the seizure process and their organisation's role in it, distinct from the police's.

What training should enable staff to do
  • Recognise that the dangerously out of control offence applies inside a private home or garden, not only in public places, and understand why that matters for a visit.
  • Carry out basic pre-entry checks and read early warning signs in a dog's behaviour.
  • Make and record a withdrawal decision confidently, without needing to justify it against a checklist in the moment.

Applies to: England, Wales and Scotland. Northern Ireland: Northern Ireland has its own regime under the Dogs (Northern Ireland) Order 1983 and the Dangerous Dogs (Northern Ireland) Order 1991, amended by the Dogs (Amendment) Act (Northern Ireland) 2011, with its own banned-breed list. Read the legislation opens in a new tab Republic of Ireland: Ireland operates a separate control regime under the Control of Dogs Act 1986. It restricts, rather than bans, specified breeds and requires muzzling, leading, and a competent handler in public. Read the legislation opens in a new tab

  • A dog does not need to have bitten anyone for a section 1 banned-type offence, or a section 3 dangerously out of control concern, to be relevant to a visit.
  • In England and Wales, the householder exemption applies only where the dog is out of control in or partly in a dwelling and the person is, or is believed to be, a trespasser there. CPS guidance says it does not apply to a postal worker using a letterbox, and does not extend to gardens, driveways or outbuildings. Lawful visitors are not trespassers. Scotland does not use this England and Wales householder wording.
  • Seizure and the legal process that follows can keep a dog in kennels for months, which is a direct operational and welfare consideration for kennels contractors and partner organisations.
  • Staff should escalate a suspected banned type or dangerous dog to their manager and, where appropriate, the police, rather than making that determination themselves.

2026 exemption changes (England and Wales)Statutory Instrument 2026/602 ended the insurance certificate-of-exemption condition on 1 July 2026. An under-12 close-contact exemption condition is planned from 1 November 2026. That is not a duty for all dogs. Operational visiting practice sits in the dogs on visits guide.

Terrorism (Protection of Premises) Act 2025 (commonly known as Martyn's Law)

The Act, commonly known as Martyn's Law, received Royal Assent in 2025. Statutory guidance was published in 2026, but that guidance states that the substantive requirements of the Act have not yet been commenced and that further commencement details will be provided.

Organisations should use the Home Office material to understand potential scope and prepare proportionately, but must not present future requirements as already operational. Premises security and emergency preparedness should also remain distinct from general workplace-violence training.

Practical application

Preparatory learning should focus on proportionate emergency capability without describing uncommenced duties as current law. Staff need simple role-based actions for recognising urgent information, raising an alert, communicating, evacuating, invacuating or supporting people who may need assistance.

A named owner should monitor commencement and statutory guidance and translate confirmed requirements into premises-specific procedures. Exercises, debriefs, accessibility considerations, contractor arrangements and corrective actions provide stronger evidence than a generic awareness certificate.

What training should enable staff to do
  • Keep current emergency preparedness distinct from future statutory claims until relevant duties commence.
  • Apply the actions for the role: raise the alert, get people out, or keep them in a safer part of the building (invacuation), then communicate and follow the incident plan.
  • Follow revised procedures and training when commencement and final operational requirements are confirmed.

Applies to: UK-wide (England, Scotland, Wales and Northern Ireland) once in force. Republic of Ireland: Does not apply, and no direct Irish equivalent has been identified. Organisations in the Republic of Ireland should seek current premises-security guidance from An Garda Síochána rather than assuming this Act's requirements apply.

Worker Protection (Amendment of Equality Act 2010) Act 2023

A practical guide to the current duty to take reasonable steps to prevent sexual harassment of workers, including in public-facing roles. General violence and aggression remain a health and safety issue, not this duty. The Act introduced the current positive duty for employers to take reasonable steps to prevent sexual harassment of workers in the course of employment. EHRC guidance emphasises that prevention requires active, evidence-based measures rather than a policy that is not implemented.

Employers should assess where sexual harassment may arise, including customer and third-party contact; maintain an effective policy and confidential reporting routes; train staff and managers; respond to concerns; monitor patterns; and review whether controls work. The current duty must remain distinct from stronger Employment Rights Act 2025 provisions that Acas currently states are planned for 30 October 2026.

Practical application

Preventative training should cover what sexual harassment can look like, including conduct by customers, clients, patients or other third parties where that exposure is foreseeable. Workers need safe ways to report, intervene where appropriate, obtain support and understand protection from victimisation.

Managers require additional competence in receiving concerns, preserving confidentiality, taking immediate protective action and avoiding victim-blaming or informal suppression. Employers should evaluate learning, repeat it at suitable intervals and combine it with risk assessment, policy, leadership action and monitoring of themes.

What training should enable staff to do
  • Recognise sexual harassment, report or witness it safely and respond appropriately to a complaint.
  • Apply clear intervention and withdrawal options in foreseeable customer, client, patient and other third-party scenarios.
  • Revisit learning through evaluated refreshers because attendance records alone do not demonstrate effective prevention.

Applies to: England, Scotland and Wales. Northern Ireland: Does not apply. Northern Ireland's separate equality framework does not currently include an equivalent proactive duty to prevent sexual harassment. Republic of Ireland: There is no equivalent proactive duty. An earlier proposal to extend Irish law to cover harassment by third parties such as customers or clients was removed during the passage of Irish equality legislation, so Irish law addresses harassment between colleagues but not this Act's third-party prevention duty.

  • Assess role, location, lone-working, power and third-party contact risks.
  • Make reporting routes safe, accessible and known to workers.
  • Train managers to respond without retaliation, victim-blaming or informal suppression.
  • Record actions and review themes while protecting confidentiality and personal data.

Lone working: no separate risk-assessment shortcut

HSE's current guidance explains that employers should include risks to lone workers in the general risk assessment and take steps to avoid or control those risks. A separate document is not automatically required, but lone-working conditions must be examined properly.

Effective arrangements may include supervision, contact, monitoring, escalation, emergency response, information sharing, training and suitable equipment. A phone, app or alarm is one possible control. Its value depends on coverage, usability, staff confidence, response arrangements and management follow-through.

Work-related violence and aggression

HSE defines work-related violence as abuse, threats or assault in circumstances relating to work. Its employer guidance connects the legal framework to assessment, preventive controls, incident response, reporting, support and learning.

Employers should not normalise abuse as part of a public-facing role. They need usable reporting, reliable action on patterns, support after incidents and review of the organisational factors that created or increased exposure.

HSE psychosocial risk guidance: work-related stress and work design

HSE describes psychosocial risk factors as features of work and workplace conditions that can affect workers' psychological response. Examples include excessive demands, tight deadlines, limited control, poor support, restricted social interaction and work systems that encourage people to work too quickly or skip breaks.

For employers, this sits alongside physical risk assessment rather than replacing it. HSE's work-related stress guidance identifies demands, control, support, relationships, role and change as six areas to assess and manage. The same issues can be especially important for lone workers, who may have less access to immediate support and fewer opportunities to raise concerns during the working day.

The practical test is whether the organisation has identified the work factors creating pressure, consulted workers, agreed actions, assigned ownership and checked whether those actions reduce risk. A wellbeing message or resilience course is not a substitute for changing unsafe work design or inadequate support arrangements.

Practical application

For training purposes, psychosocial risk should be treated as a feature of work design and management, not as a weakness in individual resilience. Staff and managers should be able to identify excessive demands, poor contact, isolation, limited control, inadequate support and repeated exposure to abuse, then use the agreed route to raise the concern.

Managers should connect HSE's six areas of work-related stress risk, demands, control, support, relationships, role and change, to the actual roles and locations they oversee. Evidence should include worker consultation, action ownership, review dates and changes to staffing, supervision, contact, recovery or escalation arrangements where the risk assessment shows a problem.

What training should enable staff to do
  • Recognise work-related psychosocial hazards such as excessive demands, isolation, poor support, limited control and exposure to abuse.
  • Use the organisation's reporting, support and escalation arrangements when work factors are creating unsafe pressure or isolation.
  • Apply role-specific controls and review them with managers and workers when work patterns, staffing, contact arrangements or incident trends change.

Applies to: Great Britain. HSE is the regulator for England, Scotland and Wales. Northern Ireland: Equivalent guidance and enforcement sit with HSENI (the Health and Safety Executive for Northern Ireland). Republic of Ireland: Equivalent guidance and enforcement sit with the HSA (Health and Safety Authority).

  • Include workload, work patterns, isolation, contact arrangements and exposure to abuse in risk assessment.
  • Give lone workers reliable ways to seek advice, report concerns and receive timely support.
  • Review whether staffing, supervision, escalation and recovery arrangements match the foreseeable demands of the role.
  • Use incident, absence, turnover and worker feedback carefully, protecting confidentiality and avoiding assumptions about individual resilience.

ISO 45003:2021 and psychological harm from abuse and aggression

ISO 45003:2021 is international guidance for managing psychosocial risk within an occupational health and safety management system based on ISO 45001. It is not UK legislation and it does not create a standalone legal duty, but it provides a useful framework for organisations that want psychological health and safety to be managed with the same discipline as other workplace risks.

Applied to public-facing and lone-working roles, violence and aggression can be treated as a psychosocial hazard as well as a possible physical-safety hazard. Verbal abuse, threats, bullying, harassment, victimisation and repeated exposure to hostile behaviour may affect psychological safety, dignity and wellbeing even when there is no physical injury. The organisation should therefore consider foreseeable psychological harm when it assesses work-related violence.

The useful shift is from treating abuse as an unavoidable service problem to examining the work system around it. This includes lone-worker support, staffing, workload, contact arrangements, leadership, reporting routes, conflict-resolution capability, post-incident support and whether workers can withdraw or escalate without fear of blame or reprisal.

Practical application

ISO 45003 can help an organisation examine the psychological effects of violence and aggression alongside physical injury. Training should use realistic examples of verbal abuse, threats, bullying, harassment, victimisation and repeated hostile contact, and should show staff how to report, withdraw and obtain support without requiring them to diagnose a mental-health condition or prove a legal case.

Managers should use the standard's psychosocial-risk perspective to examine root causes and system controls: lone-worker arrangements, staffing, workload, leadership, communication, conflict-resolution capability, incident learning and post-incident support. Evidence should show worker consultation, action ownership and review of whether controls reduce exposure, rather than relying on attendance at resilience training as proof of prevention.

What training should enable staff to do
  • Recognise abuse, threats, bullying, harassment and victimisation as possible psychosocial hazards as well as possible physical-safety risks.
  • Use reporting, withdrawal, escalation and post-incident support arrangements without treating individual resilience as the main control.
  • Apply the organisation's risk controls, worker consultation and incident-learning arrangements to improve psychological health and safety at work.

Applies to: An international standard, not tied to any single jurisdiction - it applies equally wherever an organisation chooses to adopt it, including across every nation this guide covers.

  • Assess psychological as well as physical effects of abuse, threats and aggression, including repeated lower-level incidents.
  • Identify work-system factors that increase exposure, such as isolation, poor support, high-pressure public-facing work or inadequate training.
  • Provide reporting routes for abuse, threats and near misses that workers can use without fear of retaliation.
  • Use worker consultation, incident learning and management review to improve the system rather than placing responsibility on individual resilience alone.

What a workable employer system looks like

The legal frameworks differ, but the practical management disciplines connect. A workable system makes ownership, evidence and review visible without claiming that paperwork guarantees an outcome.

  • Named ownership for each risk and legal subject.
  • Risk assessments based on actual work and worker consultation.
  • Controls addressing work design before relying on individual skill.
  • Clear emergency, withdrawal, reporting and support procedures.
  • Training linked to local roles, equipment, limits and escalation routes.
  • Incident records that support learning and statutory reporting decisions.
  • Scheduled and event-driven review of law, guidance and operational evidence.

Crime and Policing Act 2026

The Crime and Policing Act 2026 introduces updated legal frameworks and enforcement powers for social landlords, local authorities, and community safety practitioners in England and Wales, with commencement taking effect from 26 October 2026.

Practical application

For housing providers and frontline teams, the legislation modernises how persistent anti-social behaviour is managed within communities. It replaces older civil injunction structures with more direct, enforceable mechanisms, including Respect Orders for individuals aged 18 and over. Crucially, while older civil injunction breaches relied on contempt of court proceedings, breaching a Respect Order constitutes a criminal offence, enabling direct police intervention and powers of arrest. These orders can also incorporate mandatory positive requirements, such as rehabilitation, substance misuse treatment, or anger management, with an appointed supervisor tracking compliance.

In addition, the Act provides registered social housing providers with enhanced, direct closure powers to issue Closure Notices and apply for Closure Orders on premises they own or manage, reducing reliance on external agencies for immediate community protection.

What training should enable staff to do
  • Understand the legal scope and operational thresholds of Respect Orders, Housing Injunctions, and Youth Injunctions.
  • Apply evidence-gathering procedures that align with lawful, proportionate, and transparent community safety practices.
  • Coordinate effectively with multi-agency partners, including local police forces and housing management teams, when initiating enforcement action.
Jurisdiction

Applies to England and Wales only.

Scotland: Scottish anti-social behaviour and housing enforcement operate under separate legislation, primarily the Antisocial Behaviour etc. (Scotland) Act 2004 opens in a new tab, which provides frameworks such as antisocial behaviour notices (ASBNs) for landlords, local authority closure powers, and sheriff court orders.

Northern Ireland: Northern Ireland maintains its own distinct framework governed by legislation such as the Housing (Northern Ireland) Order 2003 opens in a new tab (covering introductory tenancies, possession grounds, and housing management powers) and the Anti-Social Behaviour (Northern Ireland) Order 2004 opens in a new tab.

Republic of Ireland: Ireland operates under a separate legal system for community safety and housing enforcement, with civil and criminal matters governed by Irish statutes such as the Housing Acts opens in a new tab and public order legislation opens in a new tab.

Evidence question

Can the organisation demonstrate how frontline staff are trained to identify, record, and respond to anti-social behaviour using the updated statutory powers while maintaining proper risk assessments and safeguarding protocols?

Training

This page maps duties. Training does not replace a risk assessment, a policy or competent advice on a named case.

Discuss how Conflict Management and Lone Worker Safety fit the duties that apply to your service.

Return to the start of this guide

Plan training around your staff and risks

Tell us about your staff roles, working environment and the situations your staff face. We will recommend the right training approach for your organisation.

Trusted by organisations across the UK for practical, scenario-led staff safety training.