Skip to content

HSE inspections up 47% - HSE carried out over 13,200 workplace inspections in 2024/25.

Psychosocial Risk Compliance

Stress and Mental Health at Work:
The Compliance Framework UK Employers Often Miss

Compliance-led. Evidence-based. Chartered delivery.

Stress and mental health at work are not wellbeing topics. They are legally mandated psychosocial risk assessment categories under UK health and safety law, with specific employer duties under the Management of Health and Safety at Work Regulations 1999, the HSE Management Standards, the Equality Act 2010, ISO 45003:2021, and the Worker Protection Act 2023. Arinite delivers the compliance framework: psychosocial risk assessment, HSE Management Standards survey, mental health policies, line manager training, and ongoing compliance monitoring. One compliance partner. One integrated H&S system. Legal foundations, not wellbeing theatre.

Contact Us Today+44 (0)20 7947 9581
1,500+ Businesses Protected
50+ Countries
95%+ Retention
Chartered IOSH
ISO 45003
HSE Management Standards
Get in Touch

Contact Arinite Today

Fill out the form below and our team will get back to you within 24 hours.

By submitting, you agree to our Privacy Policy and consent to Arinite contacting you.

DEFINITION

What Is Psychosocial
Risk at Work?

Psychosocial risk is the hazard arising from how work is designed, organised, and managed, and from the social context of work. When psychosocial risks are poorly managed, workers experience stress, anxiety, burnout, and in serious cases diagnosable mental health conditions including depression and PTSD.

In UK law, psychosocial risk sits alongside physical, chemical, biological, and ergonomic hazards as one of the five categories that must be assessed under the Management of Health and Safety at Work Regulations 1999. The HSE Management Standards are the primary recognised framework for conducting the assessment. ISO 45003:2021 extends the framework as a global standard for psychosocial risk management within occupational health and safety management systems.

Most UK businesses treat stress and mental health as HR wellbeing initiatives: Employee Assistance Programmes (EAPs), mental health first aiders, wellbeing benefits, Mental Health Awareness Week. These are all valuable. None of them discharge the underlying compliance obligation. Risk assessment, documented controls, line manager capability, and governance of psychosocial factors are separate and specifically required regardless of what wellbeing benefits are offered.

HSE statistics consistently report work-related stress, depression, and anxiety as one of the largest categories of occupational ill health in Great Britain, with hundreds of thousands of cases reported annually and millions of working days lost.

Psychosocial risk also intersects with ergonomic factors such as repetitive strain injury (RSI) and DSE assessment for hybrid working environments. For international psychosocial risk frameworks, see our international health and safety service.

LEGAL FRAMEWORK

The Legal Framework for Stress and
Mental Health at Work

No single piece of UK legislation specifically addresses stress and mental health in the workplace. The duty is derived from multiple frameworks that apply in parallel: See our health and safety legislation guide.

1

The Health and Safety at Work Act 1974

Section 2 places a general duty on every employer to ensure, so far as is reasonably practicable, the health, safety, and welfare at work of all employees. "Health" has been consistently interpreted by the courts to include mental health. The general duty applies to psychosocial hazards the same way it applies to any other workplace risk.

2

The Management of Health and Safety at Work Regulations 1999

Regulation 3 requires employers to conduct a suitable and sufficient assessment of risks to employees. HSE guidance is explicit that this includes psychosocial risks. A risk assessment that does not address stress, workload, relationships, change, support, and role clarity is not suitable and sufficient.

3

The HSE Management Standards

HSE’s official framework for managing work-related stress. Sets out six primary stressor domains (demands, control, support, relationships, role, change) and provides the HSE Stress Indicator Tool for measurement. Widely cited as the practical standard for reasonable practicability under the general duty.

4

The Equality Act 2010

Mental health conditions that are long-term (lasting or likely to last 12 months or more) and have a substantial adverse effect on normal day-to-day activities meet the definition of disability. This triggers the duty to make reasonable adjustments (Section 20) and protection from discrimination, harassment, and victimisation.

5

The Worker Protection Act 2023

In force from 26 October 2024. Introduces a specific preventative duty on employers to take reasonable steps to prevent sexual harassment of their workers, including harassment by third parties. Requires proactive risk assessment, policy, training, and documented reasonable steps.

6

ISO 45003:2021

The international standard for psychological health and safety in the workplace. Part of the ISO 45001 family. Provides structured guidance on identifying psychosocial hazards, assessing risks, implementing controls, and integrating psychosocial health into the wider H&S management system. Not certifiable standalone but increasingly a procurement requirement.

7

Working Time Regulations 1998

Covers maximum working hours, rest breaks, night work, and annual leave. Excessive working time is a recognised psychosocial risk factor. Breaches of WTR limits contribute to psychosocial risk exposure.

8

Common Law Duty of Care

Employers owe a common law duty of care to employees. Where an employer knew or ought to have known that work was causing psychiatric injury and failed to act, civil claims can succeed. Leading cases: Hatton v Sutherland, Barber v Somerset County Council, Dickins v O2.

HSE MANAGEMENT STANDARDS

The HSE Management Standards:
Six Primary Stressors

The HSE Management Standards identify six domains that, if poorly managed, contribute to work-related stress. A compliant psychosocial risk assessment addresses each domain.

1

Demands

Workload, work patterns, and work environment. Excessive workload, unrealistic deadlines, long hours, and physically demanding conditions. The standard: demands are achievable in relation to agreed hours, job design matches skills, and employees are not subject to unreasonable time pressures.

2

Control

How much say the person has in the way they do their work. Low control over pace, methods, timing, and work organisation is strongly associated with stress. The standard: employees can influence how they work, are consulted, and have reasonable autonomy.

3

Support

The encouragement, sponsorship, and resources provided by the organisation, line managers, and colleagues. The standard: employees receive the information, resources, and management support they need.

4

Relationships

Promoting positive working to avoid conflict, and dealing with unacceptable behaviour. Covers bullying, harassment (intersecting with the Worker Protection Act 2023), and interpersonal conflict. The standard: unacceptable behaviour is not tolerated and systems exist for reporting.

5

Role

Whether people understand their role and whether the organisation prevents conflicting roles. Role ambiguity and role conflict are both psychosocial risk factors. The standard: employees understand their role and responsibilities.

6

Change

How organisational change is managed and communicated. Poorly managed change (restructures, system changes, leadership changes) is a significant stressor. The standard: employees are consulted, kept informed, and have access to support during change.

The HSE Stress Indicator Tool

HSE provides a standardised 35-question survey (the Stress Indicator Tool) that measures perceptions across the six Management Standards. Benchmark data exists for sector comparisons. The survey provides a defensible, quantitative foundation for the psychosocial risk assessment.

EMPLOYER DUTIES

Employer Duties for Stress
and Mental Health

Under the combined legal framework, every employer must:

1

Conduct a psychosocial risk assessment as part of the general workplace risk assessment under MHSWR Regulation 3, addressing the six HSE Management Standards domains.

2

Implement prevention and control measures proportionate to identified risks, following the hierarchy of control. Organisational-level interventions are more effective than individual-level ones.

3

Provide information and training to employees on psychosocial risks, controls in place, and how to raise concerns. Separate training for line managers on recognising, preventing, and responding to stress.

4

Establish effective consultation with employees on psychosocial matters through H&S committees, employee representatives, or direct engagement.

5

Make reasonable adjustments for employees with mental health conditions meeting the Equality Act disability threshold.

6

Manage mental-health-related sickness absence including supportive return-to-work processes and occupational health referral.

7

Prevent workplace harassment and bullying through policy, training, reporting channels, and investigation processes. Under the Worker Protection Act 2023, this includes preventative steps against sexual harassment.

8

Comply with Working Time Regulations on maximum working hours, rest breaks, and leave.

9

Monitor and review psychosocial risk management through sickness absence rates, survey results, complaint data, and turnover.

10

Document the psychosocial risk management system including risk assessment, policy, training records, and intervention outcomes.

11

Respond to individual concerns promptly. An employee raising a concern triggers both Equality Act and common-law duties. Delay is a significant factor in successful civil claims.

12

Comply with sector-specific additional duties from sector regulators beyond general H&S law.

Failure to comply exposes the business to HSE enforcement, employment tribunal claims (disability discrimination, harassment, constructive dismissal), civil claims for stress-related psychiatric injury, and personal liability for directors under Section 37 HSWA 1974.

RISK ASSESSMENT

Conducting a Psychosocial
Risk Assessment

A psychosocial risk assessment follows the standard HSE five-step methodology adapted for psychosocial factors. See our health and safety audit service.

1

Step 1: Identify the Hazards

Map work activities and organisational context to the HSE Management Standards six domains. Consider demand levels, control, support, interpersonal issues, role clarity, and change management. Also consider emerging hazards: planned restructures, technology changes, leadership transitions.

2

Step 2: Identify Who Is at Risk

All employees are potentially at risk, but specific groups warrant attention: high-demand/low-control roles, new starters, employees returning from absence, those with disclosed mental health conditions, lone workers, remote/hybrid workers, and customer-facing employees.

3

Step 3: Evaluate the Risks and Decide on Controls

Gather evidence (HSE Stress Indicator Tool, absence data, surveys, grievance data, turnover, exit interviews) to assess which domains carry highest risk. Apply the hierarchy: eliminate (redesign work), substitute, engineer (organisational structure), administrative (training, procedures), individual support (EAP).

4

Step 4: Record the Findings

Document the methodology, evidence reviewed, identified hazards by domain, affected groups, control measures, named owners, and review timescales. This is the primary evidence in any HSE enforcement or civil claim.

5

Step 5: Review and Update

Review at least annually and when significant changes occur. New data (rising absence, grievance patterns, survey findings) should trigger interim review.

Evidence Sources for Psychosocial Risk Assessment

  • •HSE Stress Indicator Tool (35-item survey, sector benchmarks)
  • •Sickness absence data by cause, department, role, and duration
  • •Employee engagement and wellbeing surveys
  • •Grievance and complaint data including bullying and harassment reports
  • •Exit interview themes
  • •Turnover rates by department, role, and tenure
  • •Return-to-work interview findings
  • •Occupational health referral data
  • •EAP usage data (typically anonymised)
  • •Line manager reports on team dynamics and workload pressure

A credible psychosocial risk assessment draws on multiple sources. Single-source assessments (relying only on an annual engagement survey) are unlikely to satisfy "suitable and sufficient" under MHSWR.

POLICY

Stress and Mental Health
Policy and Procedures

A compliant stress and mental health policy covers several distinct but related areas. This should integrate with your wider health and safety policy.

1

Scope and definitions. What the policy covers, how terms are defined, and which parts of the organisation are in scope.

2

Commitment statement. The organisation’s commitment to psychological health and safety as a compliance obligation, aligned with the general H&S policy and ISO 45003.

3

Responsibilities. Board-level ownership, line manager duties, individual employee duties, and HR/H&S function contributions.

4

Risk assessment arrangements. How psychosocial risks are assessed, frequency, methodology, and assessors.

5

Controls and interventions. Organisational-level controls (work design, workload management, change management, training, culture) and individual-level supports (EAP, occupational health, MHFAs, signposting).

6

Reasonable adjustments process. How employees request adjustments, how requests are assessed under the Equality Act.

7

Absence management for mental health. Manager contact during absence, return-to-work processes, phased return, and occupational health referral.

8

Harassment and bullying. Zero-tolerance approach, reporting channels, investigation process, and Worker Protection Act 2023 compliance on sexual harassment.

9

Training commitments. What training is provided to all employees, line managers, and MHFAs.

10

Monitoring and review. Indicators monitored, review frequency, and feedback into risk assessment.

A policy without implementation is worthless. The most common compliance failure is a well-written policy on file that is not operationalised in daily management practice.

BY SECTOR

Stress and Mental
Health by Sector

Psychosocial risk profiles vary significantly by sector. Arinite supports UK businesses across the sectors where these risks are most acute.

1

Tech and SaaS Companies

High demand, rapid change, fast-growth pressure, extensive hybrid and remote working, often weak formal governance. Common risks: always-on culture, unclear roles in growing teams, inadequate manager training, hybrid working isolation. ISO 45003 adoption accelerating in tech procurement.

2

Financial Services

High demand, high stakes, client-facing pressure, regulatory scrutiny, demanding working hours. Specific attention to trading floor culture, pre/post-market hours, high-performance pressure. The FCA has specifically referenced psychological safety in regulatory expectations.

3

Legal and Professional Services

Long hours cultures, billable hour pressures, client demands, isolation for associates working late or at client sites. High incidence of mental health issues documented in LawCare and Junior Lawyers Division research.

4

Healthcare and Care

Elevated risk from patient distress, trauma, and loss, combined with staffing and resource pressures. Specific risks: compassion fatigue, secondary traumatic stress, moral injury. Additional sector guidance from NHS England and care regulators.

5

Education

Student-facing pressure, parental expectations, Ofsted scrutiny, and heavy workload. Teacher mental health is well-documented with specific sector guidance.

6

Retail and Hospitality

Customer-facing stress, violence and aggression exposure, unsocial hours, shift work. Worker Protection Act 2023 sexual harassment duty particularly acute in customer-facing sectors.

7

Creative and Media

Freelance and project-based working, income insecurity, deadline pressure, subjective performance evaluation. High rates of mental health issues documented in creative industry research.

TRAINING

Training for Stress and
Mental Health at Work

Training is a specific legal requirement under MHSWR Regulation 10 and one of the most effective interventions available. See our health and safety training service.

1

All-Employee Mental Health Awareness

Baseline awareness training covering psychosocial risks, the organisation’s approach, recognising concerns, accessing support, and the boundaries of peer support vs professional help. Typically 60-90 minutes.

2

Line Manager Mental Health Training

Dedicated training on recognising signs of stress, supportive conversations, reasonable adjustments, absence management, and the manager’s role in prevention through work design. This is the single highest-impact intervention in psychosocial risk management.

3

Mental Health First Aid (MHFA)

MHFA England is the principal provider. Trained MHFAs provide initial support and signposting. Useful adjunct but not a substitute for organisational risk management. Common error: treating MHFA as "the mental health strategy."

4

Stress Management and Resilience

Individual-level training on stress recognition and coping. Useful but important to keep in proportion: individual training without organisational change shifts responsibility onto employees, which is backwards from the hierarchy of control.

5

Harassment Prevention Training (Worker Protection Act 2023)

Specific training for the "reasonable steps" obligation. Covers recognition, bystander intervention, reporting procedures, and organisational response. Initial training at induction plus periodic refresh.

6

Senior Leader Psychological Safety Training

For executive teams: setting cultural conditions for psychological safety, modelling healthy practices, and integrating psychological health into business decisions.

7

Specialist Role Training

Deeper training for occupational health teams, HR business partners, employee representatives, and trade union representatives on psychosocial risk and the legal framework.

Arinite delivers all categories through our Chartered consultants and specialist training partners. Training is documented in Arinite’s health and safety software platform with individual certificates and attendance records.

COMPLIANCE GAPS

Common Compliance Gaps
for UK Employers

UK businesses with even mature HR and wellbeing programmes routinely fail stress and mental health compliance in predictable ways.

1

No documented psychosocial risk assessment. Wellbeing initiatives exist but no risk assessment under MHSWR Regulation 3 specifically addresses psychosocial factors. The single most common failure.

2

Risk assessment not based on evidence. Assessment exists but based on assumption, not data. HSE Stress Indicator Tool, absence data, grievance patterns, and turnover data not reviewed.

3

HSE Management Standards not implemented. The six domains are not explicitly assessed. The practical standard for reasonable practicability is not met.

4

No mental health policy, or policy that doesn’t address compliance. "Wellbeing policy" describes benefits but not compliance obligations (risk assessment, reasonable adjustments, Worker Protection Act steps).

5

Line managers untrained. Generic people management training but no specific mental health training.

6

Reasonable adjustments process informal or absent. No documented process for Equality Act adjustments.

7

Return-to-work process for mental health absences inadequate. Often treated less favourably than physical health absence.

8

No Worker Protection Act 2023 compliance. The preventative duty on sexual harassment (in force October 2024) has not been operationalised.

9

EAP treated as the strategy. The Employee Assistance Programme is assumed to discharge all duties. EAPs provide individual support but do not substitute for organisational risk management.

10

Mental Health First Aiders deployed without supporting system. MHFAs appointed but without the wider compliance system, placing unreasonable burden on them.

11

No line manager escalation pathway. No clear pathway from concern identification to HR, occupational health, or specialist support.

12

Documentation absent or generic. Policy language exists without evidence of implementation.

13

No integration with ISO 45001 or H&S management system. Psychological health not integrated into existing management system. ISO 45003 provides the framework.

Arinite’s stress and mental health compliance programme identifies and resolves each of these gaps as part of standard onboarding.

HOW WE HELP

How Arinite Delivers Stress
and Mental Health Compliance

Arinite’s Chartered health and safety consultants deliver stress and mental health compliance as an integrated part of our wider H&S service. Delivered by Chartered consultants as part of our outsourced health and safety service.

1

Psychosocial risk assessment

Based on HSE Management Standards methodology, HSE Stress Indicator Tool deployment, review of existing evidence sources, and documented assessment covering all six domains.

2

Stress and mental health policy development

Written policy covering scope, responsibilities, risk assessment, controls, reasonable adjustments, absence management, harassment prevention, training, consultation, and review.

3

Worker Protection Act 2023 compliance

Specific risk assessment, policy, training, and documented reasonable steps against sexual harassment.

4

Line manager training

On-site or online, tailored to sector and team structure. Focus on recognition, supportive conversations, reasonable adjustments, absence management, and prevention through work design.

5

All-employee awareness training

Baseline training on psychosocial risks, organisational approach, and accessing support.

6

MHFA programme support

MHFA selection, training provision, and ongoing supervision. Positioned correctly within the wider compliance system.

7

ISO 45003 integration

Integration of ISO 45003 psychosocial guidance into organisations with ISO 45001 certification or pursuing it.

8

Reasonable adjustments support

Process design, template development, and case-by-case advisory on complex adjustments cases.

9

Individual case advisory

Support for HR on specific employee cases involving mental health (return to work, long-term sickness, complex adjustments, performance management).

10

Ongoing compliance monitoring

Integration into regular H&S audit cycle, review of indicators, and updates to risk assessment as circumstances change.

11

Harassment investigation support

Independent investigation capability for harassment and bullying complaints where internal capability or independence is a concern.

For businesses on Arinite’s Done For You or Done With You packages, stress and mental health compliance is included. All documentation maintained in Arinite’s health and safety software platform.

PRICING

How Much Does Stress and
Mental Health Compliance Cost?

Costs vary significantly based on several factors: workforce size, number of sites, current state of existing wellbeing provision, scope of training required, whether ISO 45003 integration is in scope, and whether ongoing maintenance is required.

Factors That Drive Cost

1

Workforce size. Training delivery and psychosocial risk assessment scale with employee count.

2

Number of sites and geographies. Multi-site assessments and training require additional time and coordination.

3

Current state of existing provision. Organisations starting from scratch require more foundational work than those needing compliance gap-filling.

4

Sector. Higher-risk sectors (healthcare, legal, financial services) typically require more intensive assessment and specialist training.

5

ISO 45003 integration scope. Alignment within an existing ISO 45001 system adds scope but amortises across the wider H&S programme.

6

Training depth. All-employee awareness vs line manager training vs senior leader training all stack.

Typical Engagement Types

1

Project-based: one-off psychosocial risk assessment, HSE Stress Indicator Tool deployment, policy development, and initial training rollout.

2

Ongoing retainer: stress and mental health compliance maintained as part of Done For You or Done With You monthly arrangements, including annual refresh, training, advisory, and incident response.

3

Hybrid: initial project establishment followed by ongoing light-touch maintenance, advisory, and case support.

Rather than publish generic rates, Arinite provides a tailored quote after a brief discovery call. A free gap analysis call with one of our Chartered consultants will give you a clear estimate for your specific situation.

Get Stress and Mental Health Compliance Right

Mental health is typically the compliance area where UK businesses have the biggest gap between what their HR function is doing (wellbeing benefits, EAP, possibly MHFAs) and what their health and safety obligations actually require (risk assessment under MHSWR, HSE Management Standards, reasonable adjustments under Equality Act, Worker Protection Act reasonable steps, ISO 45003 alignment where applicable).

Book a free gap analysis call. In 30 minutes, one of our Chartered consultants will review your current arrangements, identify the gaps that matter, and give you a clear recommendation and indicative cost.

Book My Free Gap Analysis Call+44 (0)20 7947 9581