Lone Working Policy: The 7 Sections Every Policy Needs, Annotated

More people work alone than most businesses realise. The engineer on a night call-out, the consultant at a client site, the employee working from home, the cleaner in an empty building, the researcher in a lab after hours: all lone workers, all owed the same duty of care as anyone else, and all harder to protect because no one is there when something goes wrong. A lone working policy is how a business turns that duty into something real, and the HSE's lone working guidance is clear that employers must think this through deliberately.

The problem is that most lone working policies are either downloaded boilerplate that names no real situations, or aspiration documents that no lone worker has ever read. This guide takes a different approach: an annotated anatomy. Here are the seven sections every effective lone working policy contains, in order, with what each must actually say and the mistake that most commonly hollows it out. Write yours against this skeleton and you will have a policy that protects people rather than shelf space.

Section 1: Purpose and scope, or who this actually covers

What it must say: why the policy exists, and precisely who counts as a lone worker in your business. Not the dictionary definition, your people: the roles, situations and times when someone works without direct supervision or nearby colleagues, including home workers, travelling staff, out-of-hours workers and anyone alone with members of the public.

The common mistake: defining lone working so narrowly that most of your actual lone workers fall outside it. If your definition would not capture the employee working from home or the account manager driving between client sites, the policy protects a smaller business than the one you run.

Section 2: The risk assessment behind it

What it must say: that lone working situations have been risk assessed, where those assessments live, and how the policy's rules follow from them. Lone working is not one risk but a multiplier of others: a medical emergency with no one to help, an aggressive visitor with no colleague nearby, a task that becomes dangerous without a second pair of hands. The HSE's employer guidance puts assessment at the centre, and some findings will be prohibitions: tasks your assessment says must never be done alone should be named here.

The common mistake: a policy with no assessment behind it, rules invented at a desk rather than derived from the actual risks. The policy is the visible tenth of the iceberg; the assessment is the mass underneath that gives it authority.

Section 3: Check-in and monitoring arrangements

What it must say: exactly how the business knows its lone workers are safe, in concrete operational detail. Scheduled check-ins and what happens when one is missed. Buddy systems and who the buddy is. Monitoring apps or devices if used, and who watches the alerts. The escalation clock: how many minutes after a missed check-in does someone act, and what do they do?

The common mistake: vagueness precisely where precision saves lives. "Staff should check in regularly" protects no one at 11pm; "call your designated contact by 22:00, and an unanswered follow-up call at 22:15 triggers the escalation procedure in section 5" does. This section should read like instructions, because that is what it is.

Section 4: Communication and equipment

What it must say: what lone workers carry and are provided: charged phone as a minimum, personal alarms or lone worker devices where the assessment demands them, first aid provision appropriate to working alone, and reliable signal or an alternative where coverage fails. It should also state whose job it is to ensure the equipment works, because a dead device is a promise broken.

The common mistake: equipment issued once and never checked, or provision designed for the office worker at home while the higher-risk night visit relies on a personal mobile and luck. Match the kit to the assessed risk, not to convenience.

Section 5: Emergency procedures

What it must say: what happens when things go wrong, written for the worst hour. What the lone worker does in an emergency if they can act. What the business does when a check-in is missed or an alarm triggers: who is called, in what order, with what information, including out-of-hours contacts that actually answer. Where relevant, it includes the practical details responders need, such as site access and location information.

The common mistake: procedures that assume the lone worker can raise the alarm themselves. The scenarios that make lone working dangerous are exactly the ones where they cannot, which is why sections 3 and 5 must interlock: the missed check-in is the alarm.

Section 6: Training, responsibilities and behaviour

What it must say: who owns the policy at leadership level, what managers must do (know who their lone workers are, ensure check-ins happen, act on escalations), and what lone workers themselves must do (follow the procedures, report incidents and near misses, never normalise working around the rules). It should also commit to training, because a policy nobody has been walked through is a document, not a system.

The common mistake: responsibilities written entirely for the worker, none for the organisation. A lone working policy that is all "employees must" and no "managers will" has quietly transferred the duty of care to the person least able to discharge it.

Section 7: Review, records and reach

What it must say: how often the policy is reviewed and what triggers an early review (an incident, a near miss, new roles, new locations), where records of check-ins, incidents and training live, and how the policy applies across every site, country and working pattern in the business. For international employers this last point carries weight, because lone working rules and expectations differ across jurisdictions, and one policy must hold its standard everywhere while respecting each country's specifics, which is exactly the work of international health and safety consultants.

The common mistake: a policy dated three years ago describing a business before hybrid work. Review is what keeps section 1's scope true, and regular health and safety audits are the honest test of whether the policy on paper matches practice at midnight.

From document to system

A policy with these seven sections is a strong document. What makes it a working system is the machinery around it: assessments that stay current, check-ins that actually happen, records that prove it, and visibility for leadership across every site and time zone. That is the territory where consultants and software together outperform any document alone, with qualified health and safety consultants getting the policy right and a platform making it live, in line with frameworks such as ISO 45001. For the wider picture of who your isolated workers are and what threatens them, our guides to lone worker safety and lone working risks in tech complete the set.

Where Arinite fits

Arinite has spent 15+ years writing lone working policies that hold up at the hour they are needed, for businesses in the UK and worldwide. We support 1,500+ businesses across 50+ countries and have helped protect 100,000+ employees, with a 95% client retention rate. As global health and safety consultants, we combine expert policy work with software that keeps check-ins, records and reviews visible across every location, one world-class standard wherever your people work alone.

If your current policy would not pass the seven sections above, the fastest way to fix it is a free gap analysis. Our specialists review your arrangements, lone working included, and tell you plainly what stands and what is missing. Book your free gap analysis and make your policy worth the paper.