This is a question that came up in a recent training session. In fact, it’s a question that senior leaders, managers and stakeholders want to know every time I talk about risk and putting good workplace stress management into practice.
The ‘they’ in that question usually means the Health and Safety Executive (HSE), but it can also mean the courts, Employment Tribunals, and employees themselves through civil claims. The short answer to all of them is a big ol’ yes!
The longer answer is more nuanced and far more important to understand, because by the time fines or civil claims enter the picture, significant harm has usually already been done to real people in your organisation.
I want to talk you through the legal landscape surrounding workplace stress in the UK. Whether you are a line manager, an HR professional, or a senior leader, this is the information you need.
What the Law Requires
Workplace stress is not a ‘fluffy’ topic that sits outside health and safety law. It falls squarely within it and the idea of psychosocial harm being labelled as ‘fluff’ makes by blood boil.
The Health and Safety at Work Act 1974 places a duty on every employer to ensure, so far as is reasonably practicable, the health, safety, and welfare of employees. This explicitly includes psychological health. If your organisation treats health and safety as only being about hard hats and fire exits (very generic I know) but not about psychological demands on your workforce, you already have a compliance gap.
The Management of Health and Safety at Work Regulations 1999 (Regulation 3) requires employers to conduct a suitable and sufficient assessment of risks to health, including stress. A Stress Risk Assessment is the mechanism through which this duty is fulfilled.
Failing to conduct SRAs is not merely poor practice, it is a regulatory breach.
You should not wait for someone (or a team) to become unwell. The duty to assess the risk exists regardless of whether harm has yet occurred and If your organisation cannot produce evidence that workplace stress has been risk-assessed, you are already non-compliant.
What does enforcement look like?
The HSE can issue Improvement Notices compelling organisations to take corrective action within a set timeframe. These are legally binding, non-compliance is a criminal offence. They can also prosecute, particularly where systemic failures to manage psychosocial risks are evident.
Under the Sentencing Guidelines (2016), fines are calculated based on organisational turnover and culpability, not just the individual incident. For a large organisation with high culpability, fines can run into hundreds of thousands or even millions of pounds, uncapped in the Crown Court.
The practical question is……..if an HSE inspector asked “show me how you manage Demands, Control, Support, Relationships, Role, and Change for your workforce”, what evidence could you produce? The SRA would be your evidence.
Civil Claims
While HSE enforcement is significant, civil litigation often represents the greatest financial risk. Employees who suffer stress-related injury can bring personal injury claims by demonstrating two things:
- The employer knew, or ought to have known, about the risk
- The employer failed to take reasonable steps to prevent it
Four landmark cases shape how courts assess these claims:
Walker v Northumberland County Council (1995) — An employee experienced poor mental health, returned to work without adequate support, and their poor mental health recurred. The employer was liable for the second absence and impact on their mental health because the risk was known.
Once you know someone is at risk, your duty to act is acute.
Sutherland v Hatton (2002) — Established that employers can assume employees can handle normal job pressures unless they know of a particular vulnerability. But once they do know, the duty to act becomes significantly stronger.
You are not a mind reader, but you must respond to what you can see and what you are told.
Barber v Somerset County Council (2004) — Where signs of stress are evident, a reasonable employer must take positive steps. Doing nothing is not defensible.
Awareness without action is not enough.
Dickens v O2 (2008) — Even without a formal grievance, an employer may be liable if the signs were reasonably foreseeable through other means.
You cannot hide behind the absence of a formal complaint.
In financial terms, stress-related claims frequently settle in the range of £5,000 to £100,000+, with severe cases exceeding this. Even successfully defended claims can cost tens of thousands in legal fees alone and this doesn’t include public damage.
Foreseeability
I love the concept of doing a pre-mortem view of psychosocial hazards at work, looking at whether the harm is foreseeable. The only way to do this is by looking at what could fail, what could go wrong and what can we do to prevent it from happening. Coming from a forensic background, the risk management plans we developed came from rigorous data analysis, scenario planning and evidence based research. We need to do the same when we think about the hazards at work and the human and business cost of ignoring them.
Was the harm reasonably foreseeable?
- You look, you find risks, you act → Your SRA demonstrates due diligence. You identified hazards, documented mitigations, assigned owners, and followed through. This is strongly protective in any future claim or investigation.
- You look, you find risks, you fail to act → The SRA becomes evidence against you — proof that you knew about the risk and did nothing. This is significantly worse than having no SRA at all.
- You never look → You lose the defence of ignorance. The court will ask whether a reasonable employer would have looked. Given that the duty to assess has been in law since 1999, the answer is almost certainly yes.
This is where your SRA becomes both your greatest protection and your greatest risk — depending on what you do with it.
The SRA is both your early warning system and your legal safety net — but only if you follow through. An absolute bugbear of mine is people writing on a SRA “Monthly 1:1’s with team” and no one has spoken to their manager 1:1 in months.
Documentation
Your completed SRA may be requested by the HSE during an inspection, disclosed during civil litigation, or used as evidence in an Employment Tribunal claim. The quality of your documentation matters enormously.
The difference:
| Weak Documentation | Strong Documentation |
| “Provide more support to the team” | “Line manager to schedule weekly 1:1 check-ins with each team member beginning 3rd March to review workload allocation. To be reviewed end of Q1.” |
| “Monitor the situation” | “HR to review monthly absence data and flag patterns exceeding the trigger point. First review due 15th April.” |
| “Raise with senior management” | “Escalated to Operations Director via email on 12th February regarding additional resource for April–June peak. Response requested by 28th February. Copy attached to SRA file.” |
The first column reflects good intentions. The second tells a clear story of a responsible employer taking specific, traceable action. Write every SRA as if it will be read by a judge who knows nothing about your team but needs to decide whether you acted reasonably.
Working document
A single well-completed SRA shows one manager took the issue seriously. But under the Sentencing Guidelines, culpability is assessed on whether the organisation had systems in place, not just whether one individual acted well. When your SRAs connect to a documented Wellbeing Plan with clear escalation pathways and senior oversight, you demonstrate a systemic approach. That distinction matters in court.
Equally, an SRA completed once and never reviewed becomes a deteriorating legal asset. It shows you knew about risks at a point in time but may not have kept pace with change. The HSE expects reviews regularly and whenever there is a significant change — restructures, demand shifts, staff turnover, or critical incidents.
A good review asks three questions:
- Were the mitigations actually implemented?
- Did they work?
- What has changed since the last assessment?
When these reviews are documented and dated, they create a timeline of ongoing due diligence.
An up-to-date SRA says: we looked, we found risks, we acted, and we kept checking. That is the standard you will be measured against.
Courts can impose uncapped fines. Employees can bring civil claims costing tens or hundreds of thousands of pounds. But the legal consequences should be your secondary concern, by the time they arrive, real people have already been harmed!
A Stress Risk Assessment is not primarily a compliance exercise, although it fulfils that function. It is a structured way of looking at your workplace honestly, identifying pressure points, and taking documented action to protect the people who work there.
The law requires it. The evidence supports it. And the cost of not doing it (in human, operational, and legal terms) is one no organisation should be willing to pay.
What To Do Next
- Ask the question: “If someone asked me to show how we manage each of the six HSE Management Standards, what could I produce right now?”
- Check whether your risk assessments include psychosocial hazards. Many organisations assess physical risks thoroughly but have never formally assessed stress.
- Look at your data. Absence patterns, turnover rates, and exit interview themes are diagnostic inputs you already have, start looking at them through a stress risk lens.
If you would like support developing your organisation’s approach to Stress Risk Assessments, through training, consultancy, or direct guidance – get in touch amy@avwellbeing.co.uk