What is health and safety in schools? The complete UK guide

Health and safety in schools is the set of arrangements a school puts in place to protect pupils, staff, visitors and contractors from foreseeable harm. It covers the everyday — corridor slips, allergies, PE lessons, science practicals — as well as the higher-consequence risks such as fire, asbestos, legionella and contractor works. Done well, it is proportionate, practical and largely invisible. Done poorly, it becomes either a paperwork exercise nobody reads or a genuine risk to children.

This guide is the most complete practical resource we publish. It explains what UK schools are legally required to do, who is responsible, what each major risk area involves, how compliance is monitored and evidenced, and where schools most often trip up. Every section links to a deeper guide where one exists, so you can use this page as the map and follow the routes that matter to you.

The legal framework for school health and safety

The primary duty comes from the Health and Safety at Work etc. Act 1974. Section 2 requires employers to ensure, so far as is reasonably practicable, the health, safety and welfare at work of their employees. Section 3 extends that duty to people who are not employees but are affected by the employer's activities — in a school, that means pupils, parents, visitors and contractors. Section 7 places duties on employees themselves to take reasonable care and cooperate with their employer.

The Act applies to every school in Great Britain regardless of type — maintained, academy, free school, independent or early years setting. Sitting underneath it is a body of regulation that turns those general duties into specific requirements:

• Management of Health and Safety at Work Regulations 1999 — the duty to carry out suitable and sufficient risk assessments and to appoint competent assistance.
• Regulatory Reform (Fire Safety) Order 2005 — the fire risk assessment, the "responsible person" and the duty to keep arrangements under review.
• Control of Asbestos Regulations 2012 — the duty to manage asbestos in non-domestic premises, including a register and management plan.
• Control of Substances Hazardous to Health (COSHH) Regulations 2002 — cleaning chemicals, science and DT materials, and legionella control in water systems.
• Reporting of Injuries, Diseases and Dangerous Occurrences Regulations (RIDDOR) 2013 — what must be reported to the HSE and when.
• Workplace (Health, Safety and Welfare) Regulations 1992 — temperature, lighting, ventilation, welfare facilities and traffic routes.
• Provision and Use of Work Equipment Regulations 1998 — DT machinery, kitchen and grounds equipment, and inspection regimes.
• Construction (Design and Management) Regulations 2015 — the school's duties as client on building and refurbishment projects.

Sector-specific expectations layer on top. The HSE's education sector guidance and the Department for Education's health and safety advice for schools explain how the law applies in an education setting. Independent schools must also meet the Independent School Standards; early years providers must meet the safeguarding and welfare requirements of the EYFS statutory framework. Academy trusts additionally answer to the Academy Trust Handbook, which expects the board to have assurance that statutory duties are being met.

Who is responsible for health and safety in a school?

The employer holds primary legal responsibility. Who that is depends on the type of school: the local authority for community and voluntary-controlled schools, the trust board for academies, the proprietor or governing body for independent schools, and the governing body for voluntary-aided and foundation schools. Legal responsibility cannot be delegated away — but the practical work of discharging it is shared:

• Governors and trustees — oversight, assurance, constructive challenge and policy approval. They should be receiving evidence, not reassurance.
• Headteacher — the day-to-day accountable person, ensuring policies are followed and resources are available.
• Business manager / operations lead — budget, contracts, insurance, and the interface with external providers.
• Site or estates lead — statutory testing, contractor control, premises condition, the asbestos register and water safety.
• Subject leads and class teachers — activity risk assessment for PE, science, DT, art and educational visits.
• All staff — take reasonable care, follow safe systems of work, and report hazards and near misses.

Competent assistance is a legal requirement, not an optional extra. Regulation 7 of the Management Regulations requires every employer to appoint one or more competent people to help them comply. Some schools meet this internally, some buy it from the local authority or trust, and some use an independent adviser. What matters is that the person has the training, knowledge and experience to advise on the risks the school actually has.

For a fuller breakdown of each role, see Who is responsible for health and safety in schools? and, for boards specifically, compliance assurance for governors and trustees.

The health and safety policy

Any employer with five or more employees must have a written health and safety policy. A school policy has three conventional parts:

1. Statement of intent — a short, signed, dated commitment from the employer.
2. Organisation — who does what, from the board down to individual staff.
3. Arrangements — how each risk is actually managed: fire, asbestos, water, first aid, trips, contractors, PE, lone working, and so on.

The arrangements section is where most policies fail. It is often generic, inherited from a template, and describes a school that does not exist — referring to postholders who have left, or systems that were replaced two years ago. A policy that does not match reality is worse than no policy at all, because it sets a standard the school is demonstrably not meeting.

Review at least annually and whenever something significant changes. Multi-academy trusts have an extra design decision to make: how much is set centrally and how much is left to each school. See what an academy trust health and safety policy should include.

Risk assessment — the engine of the whole system

Risk assessment is the mechanism that connects the law to daily practice. The standard is "suitable and sufficient", not exhaustive: identify what could cause harm, decide who might be harmed and how, evaluate the existing controls, decide whether more is reasonably practicable, record the significant findings, and review.

A school typically maintains several families of assessment:

• Premises and general — buildings, grounds, traffic management, slips and trips, working at height, lone and late working.
• Curriculum — science, DT, art, food technology, PE and sport, often underpinned by CLEAPSS or AfPE model assessments.
• Activity and event — educational visits, residentials, sports fixtures, productions, open evenings, fetes and lettings.
• Individual — pupils with medical or SEND needs, expectant mothers, new and young workers, staff with health conditions, and personal emergency evacuation plans.
• Specialist — fire, asbestos, legionella, COSHH, display screen equipment and manual handling.

Two failure modes dominate. The first is the copy-forward: the same assessment reissued each September with a new date and no fresh look. The second is the orphan: an assessment with no named owner, so nobody notices when the control it relies on stops happening. Both are visible instantly to an experienced reviewer, and both are straightforward to fix once you have a live register with owners and review dates.

Deeper reading: school risk assessment support and educational visits risk assessments.

Fire safety

Fire is the highest-consequence risk most schools manage. The Fire Safety Order requires a suitable and sufficient fire risk assessment, a named responsible person, and arrangements kept under review. In practice that means:

• A current fire risk assessment, with every action tracked to closure with evidence
• Weekly alarm testing, monthly emergency lighting checks and annual servicing
• A fire door inspection programme covering condition, gaps, seals and closers
• Termly drills, varied by time of day and escape route, with lessons recorded
• Personal emergency evacuation plans for pupils and staff who need them
• Compartmentation maintained — including after every contractor cable run
• Trained fire wardens and a workable roll-call and reunification arrangement

The single most common finding I see is not a missing fire risk assessment — it is a good fire risk assessment whose actions were never closed out. Start there.

Two questions come up in almost every school: who is responsible for fire safety in a school? and how often should the fire risk assessment be reviewed?

Deeper reading: the school fire safety hub, fire safety in schools, fire doors in schools and fire risk assessments for schools.

Asbestos, water and premises compliance

A large proportion of the UK school estate was built between 1945 and 1980, so asbestos containing materials remain common. The duty to manage requires a survey, a register, a written management plan, annual reinspection of known materials, and a process for sharing the register with anyone who might disturb the fabric — including every contractor, before work starts. The failure mode is almost always the same: the register exists, but the caretaker cannot produce it, and the electrician drilling the ceiling was never shown it.

Legionella control follows a similar pattern: a written water risk assessment, a monitoring regime (temperature checks, flushing of little-used outlets, showerhead descaling, tank inspection), and named responsibility. Holiday periods are the pinch point — long shutdowns leave water standing in pipework, so a documented flushing routine before reopening matters more in a school than in almost any other workplace.

Around these sit the statutory testing regimes that keep a building lawful: fixed wiring inspection, portable appliance testing, gas safety, lifting equipment (including stage and PE equipment, hoists and vehicle lifts), local exhaust ventilation in DT, kitchen equipment, playground equipment inspection and tree surveys. Each needs a named owner, a frequency, and a certificate someone has actually read.

Deeper reading: the statutory compliance checklist for schools.

Contractors and construction work

Contractors present a distinctive school risk because two duties collide: health and safety, and safeguarding. Every contractor engagement needs competence and insurance checks before appointment, DBS arrangements or supervision appropriate to the level of contact with children, a signing-in and identification process, method statements and risk assessments reviewed rather than filed, permits for hot works, roof access, isolation and confined spaces, and a segregation plan that stands up when the site is full of children.

On larger projects the school is the client under CDM 2015 — a legal role with real duties, including appointing a principal designer and principal contractor in writing, providing pre-construction information (asbestos register included), and satisfying yourself that welfare arrangements are in place. Schools often assume the contractor or the trust holds this role. Make it explicit in writing.

DBS is the question schools ask most often here, and the answer is not "always". An enhanced check with a barred list check is required where the work is regulated activity; where the contractor is genuinely supervised or on site outside pupil hours, supervision and identity verification can be the correct arrangement. See do contractors need DBS checks when working in schools?

Deeper reading: contractor management in schools.

Pupils, curriculum and off-site activity

The curriculum generates its own risks. Science and DT rely on model risk assessments from CLEAPSS, machine guarding, local exhaust ventilation and technician competence. PE depends on equipment inspection, safe practice guidance and appropriate supervision ratios. Food technology brings COSHH, allergens and kitchen equipment into a room full of teenagers.

Off-site, educational visits need a proportionate planning process: a competent educational visits coordinator, provider assurance for adventurous activities, a considered assessment rather than a recycled form, emergency contact arrangements and a plan for pupils with medical or SEND needs. Residentials add night-time supervision and fire arrangements in unfamiliar buildings.

Trips abroad raise the bar again. Overseas visits normally need employer approval well in advance — most local authorities and trusts set their own notice period and use a system such as EVOLVE — plus provider assurance where a tour operator is used, insurance that actually covers the activities planned, passports, visas and parental consent, and a named 24-hour emergency contact in the UK who has the plan in front of them. The details schools most often miss are medication abroad (quantities, storage, documentation for controlled drugs) and a considered answer to what happens if one pupil or member of staff cannot travel home with the group.

Medical needs and allergies sit at the intersection of safeguarding and health and safety. Individual healthcare plans need to be visible where they are needed — the kitchen, the sports field, the trip leader's bag — not filed centrally. Adrenaline auto-injector arrangements, asthma inhaler policies and trained first aiders (including paediatric first aid in early years) should be part of the same live picture.

Staff health, wellbeing and training

Health and safety law covers staff health as well as physical safety. Stress is a foreseeable workplace risk and the HSE Management Standards are the recognised framework for assessing it. Alongside that sit display screen equipment assessments, manual handling, voice care, lone working and violence and aggression at the school gate.

Training is the mechanism that turns policy into behaviour. A school needs induction for every new starter, role-specific training for fire wardens, first aiders, DT and science technicians, caretaking staff, minibus drivers and visit leaders, plus refresher cycles with visible expiry dates. A training matrix that a governor can read in one page is worth more than a folder of certificates.

Incidents, accidents and RIDDOR

Every school needs a single route for recording accidents, incidents and near misses, and a person who reviews them for patterns. Reporting duties under RIDDOR cover deaths, specified injuries, over-seven-day incapacity for employees, certain diseases and dangerous occurrences. Pupil injuries are reportable where the accident arose out of or in connection with a work activity and the pupil goes directly to hospital for treatment.

The value of incident data is not the reporting — it is the trend. Three trips on the same corridor threshold in a term is a maintenance job, not three unlucky pupils. Near miss reporting is the cheapest safety intelligence a school can buy, and it only works if staff can report in under a minute and see something happen as a result.

Monitoring, assurance and inspection readiness

Compliance is not a state you reach; it is a cycle you run. A workable annual rhythm looks something like this:

• Weekly / monthly — alarm tests, emergency lighting, water flushing, site inspections by the premises team.
• Termly — a leadership walk-round, fire drill, health and safety committee meeting, and a review of open actions.
• Annually — policy review, fire risk assessment review, asbestos reinspection, training matrix refresh and an independent audit or compliance review.
• Each board cycle — a one-page compliance report to governors or trustees with status, exceptions and overdue actions.

The distinction that matters to governors is between assurance and reassurance. Reassurance is a leader saying things are fine. Assurance is evidence: a dated certificate, a closed action with a photograph, an independent review with findings the school did not write itself.

Deeper reading: how health and safety is monitored in schools, health and safety committees in schools and school health and safety audits.

Health and safety, compliance, and "a compliance system"

Schools use three words fairly loosely, and it is worth separating them because they lead to different work. Health and safety is the duty: keep people from foreseeable harm. Compliance is the evidence that the duty is being discharged — the current fire risk assessment, the in-date certificate, the closed action. A compliance system is simply the place that evidence lives, with an owner and a due date against every line.

There is no legal requirement to buy software. What the law effectively requires is that somebody can answer, within a few minutes, three questions about each statutory duty: who owns it, when was it last done, and what is outstanding. A well-run spreadsheet can do that. The failure mode is not the format — it is that the register lives in one person's head, and half of it leaves with them.

For most schools the practical test is this: if your site manager were unavailable for a fortnight and a fire and rescue service auditor arrived, could someone else produce the evidence? If the honest answer is no, the gap is a system gap rather than a safety gap — and it is usually a few days' work to close, not a project. See school compliance management for how to build that register, and school compliance services for the supported version.

How health and safety differs by setting

The law is the same everywhere; the practicalities are not.

• Maintained schools — the local authority is the employer and usually provides a traded health and safety service. The risk is assuming the LA service covers everything; check the scope.
• Academies and trusts — the board is the employer across multiple sites, so consistency and central assurance become the challenge. See compliance support for academy trusts.
• Independent schools — inspected against the Independent School Standards, often with boarding, estates of significant age and extensive lettings. See independent schools health and safety support.
• Early years — the EYFS statutory framework adds specific requirements on premises, ratios, paediatric first aid and risk assessment. See early years health and safety consultancy.
• Special schools — moving and handling, hoists, medical procedures, behaviour that challenges and bespoke evacuation planning all raise the bar. See special schools health and safety support.

What good looks like — day to day

The most effective schools I work with share a handful of habits rather than a bigger filing cabinet:

• A single, live compliance action log that senior leaders actually look at
• Themed reviews across the year — fire, allergies, trips, contractors, training — instead of one exhausting annual push
• Fire risk assessment actions tracked to closure, with evidence attached
• Contractor sign-in and permit-to-work arrangements that staff genuinely use
• Clear escalation routes so staff can raise concerns without fuss
• A one-page compliance report that goes to every board meeting
• Independent oversight at least once a year to catch drift

Common pitfalls

• Fire risk assessments completed but the actions never closed out
• Contractors on site without checks, insurance or supervision
• Trip risk assessments copied year to year without a fresh look
• Asbestos register out of date, or unknown to the people who need it
• Allergy plans held centrally but not visible where meals are served
• No clear owner for statutory testing — fire alarm, emergency lighting, PAT, gas
• Policies referring to staff who left two years ago
• Governors receiving reassurance rather than evidence
• Everything living in one person's head, with no handover if they leave

A practical 90-day plan

If you have inherited a school's health and safety and do not know where to start, this sequence works:

1. Days 1–30 — locate the fire risk assessment, asbestos register and water risk assessment. Confirm who owns statutory testing and pull the last twelve months of certificates.
2. Days 31–60 — build one action log from every existing source (fire, insurance, audit, incident). Give every action an owner and a date. Close the quick wins.
3. Days 61–90 — refresh the policy so it describes what actually happens, agree the monitoring rhythm, and take a one-page compliance report to the board with the honest position.

After that, an independent review once a year is what stops the picture drifting back.

Why it matters

Beyond compliance, effective health and safety keeps children and staff safe, protects the school from legal and reputational risk, and gives leaders the assurance they need to focus on education. Poor arrangements lead to serious incidents, HSE enforcement, fire authority notices, insurance disputes and inspection judgements that unsettle parents and governors alike. Good arrangements are quieter, cheaper and take less time than the alternative.

Every guide in this hub

• Who is responsible for fire safety in a school?
• How often should a school fire risk assessment be reviewed?
• Do contractors need DBS checks when working in schools?
• Who is responsible for health and safety in schools?
• How is health and safety monitored in schools?
• Health and safety committees in schools
• Fire safety in schools
• Fire doors in schools
• Contractor management in schools
• Statutory compliance checklist for schools
• School compliance management
• School educational visits risk assessments
• EYFS health and safety requirements
• Academy trust health and safety policy
• School compliance services — ongoing compliance management, beyond the annual audit

How SchoolSafe Systems helps

SchoolSafe Systems helps schools and trusts build practical, sustainable health and safety arrangements through audits, policy reviews, the SchoolSafe Independent Compliance Review, the Compliance Dashboard and ongoing Compliance Partner support. Every engagement is delivered personally by Paul Shehean, backed by 25+ years of health and safety experience and more than 15 years working directly with schools. Based in the South West, working with schools across the UK.