Health and Safety in Law Firms: The 5 Stages from Unowned to Assured
Law firms advise clients on statutory duties for a living. Applied internally, the same rigour tends to evaporate, and for a structural reason rather than a cultural one: in a partnership, almost nobody's time is unbillable, and health and safety is unbillable by definition.
The result is a predictable progression. Most firms sit somewhere on it without having chosen to, and can identify their position in about ninety seconds. What follows are the five stages, the specific thing that moves a firm up each one, and a structural question about partnerships that catches out even well-run practices.
First, the question partnerships get wrong
Before the ladder, the point that distinguishes a law firm from an ordinary corporate employer.
Where the practice operates as a limited liability partnership, the LLP is a separate legal entity and is the employer of its staff. Members are generally not employees of it. That matters because the duty in section 2 of the Health and Safety at Work etc. Act 1974 runs to employees, so it does not reach members in the same way it reaches associates and support staff.
It does not follow that members are outside the scheme. Section 3 imposes a duty in respect of persons who are not employees but who may be affected by the undertaking, and members plainly fall within it. So the firm owes duties to its own partners, arriving through a different route and frequently addressed by nobody, because arrangements written for employees do not obviously cover the people who own the business.
There is a second edge. An LLP is a body corporate, which engages section 37, the provision under which an offence attributable to the consent, connivance or neglect of a director, manager or similar officer exposes that individual personally. Members involved in management are not obviously outside that description. This is worth taking proper advice on rather than assuming the partnership structure provides insulation, because the general direction of the law has not been towards insulation.
Stage 1: Unowned
No named duty holder. No current risk assessment for any office. Fire drills happen because the landlord runs them. Health and safety appears on the management committee agenda only after something goes wrong, and then as an item to be resolved rather than a function to be established.
Firms sit here longer than they should because nothing visibly fails. The exposure is invisible right up until a claim, an insurer question or a client questionnaire makes it visible all at once.
What moves you up: naming somebody. Not a committee, a person.
Stage 2: Documented but static
Need Expert H&S Guidance?
Our qualified consultants can help you implement the right health & safety measures for your business.
A policy exists. A risk assessment was produced, competently, at some point, usually by an external adviser engaged once. Neither has been reviewed since, and the offices they describe have changed.
This stage is more dangerous than stage one in one specific respect. Documentation that is out of date is evidence that the firm identified a risk and did not act on it, which reads considerably worse than never having assessed it. A fire risk assessment that predates the last fit-out is the common example.
What moves you up: a review cycle with a date and an owner, not an intention to revisit.
Stage 3: One person, doing it well
A capable office manager, facilities lead or practice director genuinely runs health and safety. Assessments are current, training happens, incidents are recorded, contractors are managed. In day-to-day terms the firm is in good shape.
Two weaknesses are structural rather than personal. The arrangement is entirely person-dependent, with no documented succession, so it leaves when they leave. And it is invisible above a certain level: the partnership has no view of it, which means it competes for budget against things partners can see. Whether the person holds the competent person function formally, or simply does the work in practice, is usually undocumented.
Most mid-sized firms are here. It is a genuinely respectable position and it does not survive growth, acquisition or a resignation.
What moves you up: partner-level accountability, so the function survives the individual.
Stage 4: Governed
A named partner is accountable. Health and safety is a standing item with reported metrics rather than an occasional paper. Arrangements are consistent across offices instead of varying by whoever runs each one.
Firms at this stage have usually addressed the two exposures specific to legal practice. The first is people working somewhere else: solicitors on secondment into client in-house teams, staff attending client premises, and the shared duties that arise when your employee sits on someone else's floor for nine months. The second is the estate itself, which in law firms means storage. Deed rooms, archive racking and file-heavy operations produce manual handling exposure that office assessments routinely miss, and the manual handling duty applies to a box of files exactly as it applies to anything else. HSE's guidance on musculoskeletal disorders is the practical reference.
Long hours are the third item and the one most often left at stage three. Deal closings, trial preparation and quarter-end create foreseeable, predictable peaks. Stress is a hazard to be assessed, and the HSE Management Standards set out the six areas an assessment should cover. A wellbeing programme is not an assessment.
What moves you up: external verification, so the firm's own view of itself is tested.
Stage 5: Assured
Arrangements are verified independently rather than self-reported. The firm can evidence coverage across every office, produce incident data on request, and answer a client due diligence questionnaire or an insurer's enquiry the same day rather than assembling a response over a fortnight.
Firms reach this stage for commercial reasons more often than regulatory ones. Corporate and public sector panels ask for the documentation. Professional indemnity underwriters ask about governance. Certification to ISO 45001 is one route, though the substance matters more than the certificate, and regular health and safety audits are what keep the position honest between reviews.
What keeps you here: the discipline of testing, and a register that holds current status across every office rather than in several people's heads.
The ladder in one table
| Stage | How you would recognise it | Principal risk | |---|---|---| | 1. Unowned | No named holder, no current assessment | Discovering the gap through a claim or a client | | 2. Documented but static | Policy and assessment exist, both stale | Evidence you identified a risk and did not act | | 3. One person | Runs well, entirely person-dependent | It leaves when they leave | | 4. Governed | Partner accountable, consistent across offices | Self-assessed, never externally tested | | 5. Assured | Independently verified, evidence on demand | Complacency between review cycles |
Two observations from the pattern. Most firms overestimate by one stage, because the person at stage three is doing good work and the partnership assumes that constitutes governance. And the jump from three to four is the only one that requires a partner to accept an unbillable responsibility, which is precisely why it is the step most firms stall on.
For firms with more than one jurisdiction
International practices carry an additional complication that does not respect the ladder. Each office sits under its own national requirements, and being at stage four in London says nothing about Frankfurt or Paris.
A firm with German offices needs a documented Gefährdungsbeurteilung, a French office needs a DUERP in the prescribed format, and neither is satisfied by a translated English assessment however thorough. Our global health and safety consultants coordinate locally qualified practitioners so each office satisfies its own law, and our international health and safety consultants confirm what applies where. Holding current status for every office in one place, rather than in a series of local spreadsheets, is where health and safety consultants and software are worth more in combination than separately.
Where Arinite fits
Arinite works with law firms and professional partnerships that need arrangements which are defensible without being bureaucratic, which in a practice full of lawyers is a higher bar than usual. We support 1,500+ businesses across 50+ countries and protect 100,000+ employees, with 95%+ client retention over 15+ years. Our health and safety consultants work across the legal and professional services sectors, so the advice reflects how partnerships actually make decisions rather than assuming a conventional board.
If you recognised your firm above stage three and would like to know what stage four actually requires, a free gap analysis will tell you in a single call.
Related Articles
Written by
Arinite Health & Safety Consultants
Health & Safety Expert at Arinite
