Lone Worker Policy (England & Wales)

A Lone Worker Policy in the United Kingdom sets out the standards, responsibilities, and procedures the organisation expects everyone to follow, as regulated by the Corporate Manslaughter and Corporate Homicide Act 2007.

The Health and Safety Executive (HSE) estimates that around 6 million people in the United Kingdom work alone for some or all of their working day. Lone workers are found across virtually every sector and include: community nurses, district nurses, and social workers visiting clients in their own homes; mobile maintenance technicians, field engineers, gas engineers, and utility repair workers; estate agents, letting agents, and property surveyors conducting viewings at vacant or unoccupied premises; security guards, night wardens, and caretakers working out of hours in commercial or residential premises; delivery drivers and couriers, including those making residential deliveries; environmental health officers and local authority enforcement officers; remote or home-based office workers who work alone outside normal business hours; and lone retail staff in small convenience stores or late-night petrol stations. The risks faced by these workers vary considerably, from physical violence and aggression, to accidents and medical emergencies without immediate access to first aid, to the psychological impact of prolonged isolation from colleagues.

The fundamental purpose of a Lone Worker Policy is to establish a structured framework within which the employer can discharge their non-delegable statutory duty of care to lone workers. Under section 2(1) of the HSWA 1974, every employer must confirm, so far as is reasonably practicable, the health, safety, and welfare at work of all their employees. This duty is not diminished by the fact that an employee works alone, at a remote location, or at premises not owned or controlled by the employer. The Management of Health and Safety at Work Regulations 1999 impose more specific obligations: under regulation 3, employers must carry out a suitable and sufficient risk assessment of risks to employees including those arising from lone working; under regulation 4, they must implement preventive and protective measures; and under regulation 13, they must provide information, training, and supervision proportionate to the risks.

The Corporate Manslaughter and Corporate Homicide Act 2007 adds a powerful accountability mechanism for organisations that fail to manage lone worker risks at a senior management level. Where a management failure amounts to a gross breach of the duty of care owed to an employee and that breach causes the employee's death, the organisation itself — not just individual managers — may be convicted of corporate manslaughter. Unlimited fines, remedial orders, and publicity orders are available as sanctions. This liability extends to failures in lone worker management systems just as much as to failures on a conventional workplace site.

A thorough and effective Lone Worker Policy must address, at minimum: a clear definition of lone working specific to the organisation; the categories of activities and roles covered; a summary of the lone worker risk assessment; communication systems and scheduled check-in procedures; emergency response arrangements and escalation procedures; activities that are prohibited for lone workers because the risk cannot be adequately controlled without a second person present; training requirements; and a clear allocation of responsibilities between the employer, managers, and individual lone workers. The policy must be reviewed at regular intervals and following any significant incident.

A Lone Worker Policy is required by any employer whose employees or workers carry out any form of lone working, regardless of the sector, the size of the organisation, or the apparent level of risk associated with the activities. The obligation to protect lone workers arises directly from section 2(1) of the Health and Safety at Work etc. Act 1974 and applies equally to small businesses with a single lone worker and large corporations with thousands of field-based employees. There is no minimum employee threshold below which the duty to manage lone worker safety is relaxed.

A Lone Worker Policy should be created or substantially updated in the following circumstances: when the employer first becomes aware that employees are or will be working alone as a regular or foreseeable feature of any role; when a new category of lone working activity is introduced into the organisation, for example when a customer-facing organisation introduces home visit assessments, or when an office-based workforce transitions to remote or hybrid working outside normal hours; when there has been an accident, violent incident, near miss, threatening behaviour incident, or report of psychological distress connected with lone working; when the results of an internal review, external audit, or HSE inspection indicate that existing lone worker arrangements are absent or inadequate; when there is a material change in the workforce — for instance, the employment of young workers aged under 18 (for whom additional risk assessment requirements apply under regulation 16 of the Management of Health and Safety at Work Regulations 1999), new or expectant mothers (regulation 16A), or workers with physical or mental health conditions that may increase vulnerability when working alone; when there is a change in the locations or operational environments in which lone working takes place, including the introduction of new client types, new geographic areas, or new premises; when there are changes to legislation, HSE guidance, or published industry best practice standards; or when the existing policy has reached its scheduled annual review date.

From a regulatory enforcement perspective, the Health and Safety Executive has issued Improvement Notices and brought prosecutions against employers in sectors as diverse as social care, construction, retail, and utilities for failures to adequately manage the risks of lone working. In some cases, employers have faced prosecution under the HSWA 1974 following the death of or serious injury to a lone worker where it was found that no lone worker risk assessment existed, or that existing risk assessments were superficial or had not been communicated to workers. The Corporate Manslaughter and Corporate Homicide Act 2007 has also been invoked in cases involving the death of employees working alone, where the prosecution has argued that the management failure was systemic and attributable to the way the organisation's activities were organised at a senior level.

A well-maintained Lone Worker Policy also serves important commercial purposes. Employers' liability insurance is compulsory under the Employers' Liability (Compulsory Insurance) Act 1969 for virtually all employers with one or more employees. Insurance underwriters for employers' liability and public liability cover increasingly require evidence of documented lone worker risk management as a condition of placing cover or may impose higher premiums, additional excess provisions, or exclusions for claims arising from lone worker incidents where adequate procedures were not in place. Many public sector and large corporate procurement frameworks also require tenderers to demonstrate compliance with health and safety obligations, including lone worker policies, as a condition of qualification.

A legally effective Lone Worker Policy for use in England and Wales must systematically address each of the principal risk management requirements established by the Health and Safety at Work etc. Act 1974, the Management of Health and Safety at Work Regulations 1999, and associated guidance. Each element of the policy serves a distinct purpose, and together they create a coherent framework for protecting lone workers from the foreseeable risks associated with unsupervised work.

The definition and scope section is foundational. It must clearly and specifically set out what constitutes lone working within the particular organisation, so that managers and employees in all relevant roles can readily identify when the policy applies to them. A broad definition is advisable — capturing fixed-location out-of-hours working, mobile and peripatetic working, home visits, remote site working, isolated on-site locations, and any other situation where an employee works without direct supervision or immediate access to assistance. An overly narrow definition that excludes some categories of lone working may leave the employer exposed to regulatory and civil liability if an excluded worker is injured.

The legal obligations section should identify the key legislative provisions applicable to lone workers in England and Wales. Setting out the legislative framework — including the HSWA 1974, the Management of Health and Safety at Work Regulations 1999 reg.3, the Corporate Manslaughter and Corporate Homicide Act 2007, and RIDDOR 2013 — establishes the seriousness of the employer's commitment to lone worker safety and provides the normative basis for the specific procedures that follow. It also confirms that managers responsible for implementing the policy understand that lone worker safety is a legal obligation, not merely an organisational preference.

The risk assessment section is the analytical core of the policy. Under regulation 3 of the Management of Health and Safety at Work Regulations 1999, the employer must carry out a suitable and sufficient risk assessment of all significant risks to employees, including those arising from lone working. The policy should summarise the principal risks identified — physical violence and aggression; accident or medical emergency without immediate access to first aid; vehicle accident whilst driving alone; slips, trips, and falls in unfamiliar environments; risks associated with confined spaces, work at height, or live electrical work; and the psychological impact of sustained isolation. For each risk, the existing controls must be described and the residual risk level assessed. High residual risks require either additional controls or a decision to prohibit that activity for lone workers entirely.

The communication and check-in section is the most operationally critical element. It must specify in sufficient practical detail the communication tools to be used (mobile phones, dedicated lone worker devices, GPS monitoring apps, radio systems), the frequency of scheduled check-ins during lone working periods, the identity and contact details of the person responsible for receiving check-ins, and the specific escalation procedure to be activated if a lone worker fails to check in at the agreed time. The escalation procedure must be capable of being implemented 24 hours a day, seven days a week, whenever lone working is taking place. Ambiguity in this section has been a recurring feature of enforcement cases involving lone worker deaths.

The prohibited activities section is a non-negotiable safety control. Certain activities — entry into confined spaces under the Confined Spaces Regulations 1997, work at height above specified thresholds under the Work at Height Regulations 2005, live electrical work under the Electricity at Work Regulations 1989, and high-risk contact with service users where violence is a foreseeable risk — must be categorically prohibited for lone workers and must always require a minimum of two workers.

The training section must specify pre-commencement training requirements, annual refresher obligations, record-keeping responsibilities, and the subject matter to be covered — including personal safety, conflict de-escalation, use of communication equipment, emergency response, and RIDDOR 2013 incident reporting.

Finally, the responsibilities section allocates clear, named accountabilities to the employer or senior management, line managers, and individual employees, providing the governance structure necessary to confirm the policy is implemented consistently across the organisation.

Under the Companies Act 2006, Companies House maintains the register of UK companies. Section 386 of the Companies Act 2006 sets accounting record obligations. The Competition and Markets Authority (CMA) enforces the Consumer Rights Act 2015. The Financial Conduct Authority (FCA) regulates financial services under the Financial Services and Markets Act 2000. The High Court of Justice has jurisdiction under the Senior Courts Act 1981. The forms-legal.com Lone Worker Policy (England & Wales) template covers the mandatory elements under Companies Act 2006.