Mental Health Risk Assessments: UK Employer Guide

Work-related stress, anxiety and depression account for over half of all working days lost to ill health in the UK. In 2023/24, the Health and Safety Executive (HSE) reported 16.4 million working days lost to these conditions — a figure that has been rising steadily for the past decade.

Yet many employers still treat mental health as a wellbeing initiative rather than a health and safety obligation. The reality is clear: assessing and managing psychosocial risks at work is not optional. It is a legal requirement under the same legislation that obliges you to assess physical hazards like working at height or manual handling.

This guide explains your legal obligations, introduces the HSE’s Management Standards framework, and sets out practical steps for conducting effective mental health risk assessments.

The Legal Framework

Health and Safety at Work etc. Act 1974

The Health and Safety at Work etc. Act 1974 (HSWA) is the primary piece of health and safety legislation in the UK. Section 2(1) places a general duty on every employer to ensure, so far as is reasonably practicable, the health, safety and welfare at work of all their employees.

Crucially, “health” includes mental health. The HSWA does not distinguish between physical and psychological harm. If work activities or conditions are causing or contributing to mental ill health, the employer has a duty to address them.

Management of Health and Safety at Work Regulations 1999

Regulation 3 of the Management of Health and Safety at Work Regulations 1999 requires every employer to carry out a suitable and sufficient assessment of the risks to the health and safety of their employees to which they are exposed while at work.

This regulation explicitly applies to all health risks — including psychosocial risks such as work-related stress. The risk assessment must:

• Identify the hazards (sources of stress)
• Assess who might be harmed and how
• Evaluate the risks and decide on precautions
• Record the significant findings
• Review and update the assessment regularly

HSE Enforcement

The HSE has made clear that it will inspect and enforce on work-related stress in the same way it does for physical hazards. In practice, this means:

• HSE inspectors may ask to see your stress risk assessment during a routine inspection
• If workers raise concerns about stress, the HSE may investigate
• Improvement notices can be issued requiring you to carry out or improve a stress risk assessment
• In serious cases, prosecution is possible — particularly where an employer has been warned and failed to act

The HSE’s approach is not to punish employers for having stressed employees. It is to ensure that employers have identified the risks, taken reasonable steps to control them, and can demonstrate that they are managing psychosocial hazards as part of their overall health and safety management system.

The HSE Management Standards

The HSE has developed a specific framework for managing work-related stress: the Management Standards for Work-Related Stress. This framework identifies six key areas of work that, if not properly managed, are associated with poor health, lower productivity and increased sickness absence.

The Six Key Stress Factors

1. Demands

This covers workload, work patterns and the work environment. Problems arise when employees:

• Cannot cope with the demands of their job
• Have unrealistic deadlines
• Are expected to work excessively long hours
• Face conflicting demands from different managers
• Work in environments that are physically uncomfortable or distracting

The standard states: Employees indicate that they are able to cope with the demands of their jobs, and systems are in place locally to respond to any individual concerns.

2. Control

This relates to how much say employees have in the way they do their work. Problems arise when employees:

• Have no input into how their work is organised
• Cannot influence their working hours or break times
• Are micromanaged with no autonomy
• Cannot vary the pace of their work

The standard states: Employees indicate that they are able to have a say about the way they do their work, and systems are in place locally to respond to any individual concerns.

3. Support

This covers the encouragement, sponsorship and resources provided by the organisation, line management and colleagues. Problems arise when employees:

• Do not receive adequate information or training to do their job
• Lack support from their line manager
• Feel isolated from colleagues
• Cannot access support services when they need them

The standard states: Employees indicate that they receive adequate information and support from their colleagues and superiors, and systems are in place locally to respond to any individual concerns.

4. Relationships

This covers promoting positive working relationships and dealing with unacceptable behaviour. Problems arise when:

• Bullying, harassment or discrimination occurs
• Conflict between colleagues is not addressed
• The organisational culture tolerates or normalises aggressive behaviour
• Employees feel unable to raise concerns about relationships

The standard states: Employees indicate that they are not subjected to unacceptable behaviours at work (e.g. bullying), and systems are in place locally to respond to any individual concerns.

5. Role

This covers whether people understand their role within the organisation and whether the organisation ensures they do not have conflicting roles. Problems arise when employees:

• Are unclear about what is expected of them
• Have conflicting responsibilities
• Do not understand how their role fits into the wider organisation
• Experience role overload or role ambiguity

The standard states: Employees indicate that they understand their role and responsibilities, and systems are in place locally to ensure that they do not experience conflicting demands.

6. Change

This relates to how organisational change (large or small) is managed and communicated. Problems arise when:

• Employees are not consulted about changes that affect them
• Change is poorly communicated or communicated too late
• Employees feel uncertain about their future
• The reasons for change are not explained

The standard states: Employees indicate that the organisation engages them frequently when undergoing an organisational change, and systems are in place locally to respond to any individual concerns.

How to Conduct a Mental Health Risk Assessment

Step 1: Identify the Hazards

Start by gathering information about the psychosocial hazards present in your workplace. Sources of information include:

• Employee surveys: Use the HSE’s Management Standards Indicator Tool — a free, validated 35-question survey that measures employee perceptions across all six management standard areas
• Absence data: Analyse patterns in sickness absence, particularly absences attributed to stress, anxiety or depression
• Existing data: Review employee turnover rates, grievances, complaints, exit interview themes and occupational health referrals
• Conversations: Talk to employees, managers and employee representatives about what they find stressful at work
• Observation: Look at working conditions, workloads, shift patterns and organisational changes

Step 2: Assess Who Might Be Harmed and How

Consider which groups of employees are particularly at risk. This might include:

• Employees in roles with high demands and low control (e.g. call centre workers, front-line healthcare staff)
• New employees who may lack support and understanding of their role
• Employees going through organisational change (redundancy programmes, restructures, mergers)
• Employees with caring responsibilities outside work
• Remote or lone workers who may feel isolated
• Managers who are managing others’ stress while dealing with their own pressures

Remember that individuals respond differently to the same working conditions. Your risk assessment should focus on the conditions and systems, not on individual resilience.

Step 3: Evaluate the Risks and Decide on Controls

For each hazard identified, assess the level of risk and decide what controls are needed. Controls should follow the hierarchy of control — eliminate the hazard where possible, then reduce the risk, then manage the residual risk.

Examples of controls for each management standard area:

Demands:

• Ensure workloads are realistic and regularly reviewed
• Provide adequate staffing levels
• Allow flexible working where possible
• Ensure the physical working environment is suitable

Control:

• Give employees autonomy over how they do their work
• Involve employees in decisions about shift patterns and scheduling
• Allow input into work processes and priorities
• Provide self-service access to rotas and schedules through an employee scheduling system

Support:

• Train managers to have supportive conversations
• Provide access to occupational health and employee assistance programmes
• Ensure adequate induction and ongoing training
• Enable regular one-to-one meetings between managers and their teams

Relationships:

• Implement and enforce anti-bullying and harassment policies
• Provide conflict resolution training for managers
• Create channels for reporting unacceptable behaviour
• Act promptly when issues are raised

Role:

• Provide clear job descriptions and objectives
• Ensure reporting lines and responsibilities are well-defined
• Regularly review and update role expectations
• Address conflicting demands when they arise

Change:

• Communicate early and openly about planned changes
• Consult employees and their representatives before making changes
• Provide support during transition periods
• Explain the reasons for change and what it means for individuals

Step 4: Record Your Findings

Under the Management of Health and Safety at Work Regulations 1999, you must record the significant findings of your risk assessment if you employ five or more people. Your record should include:

• The hazards identified
• Who is at risk
• What controls are already in place
• What additional controls are needed
• Who is responsible for implementing them
• Timescales for action
• The date of the assessment and when it will be reviewed

A digital risk assessment system allows you to maintain, update and share these records efficiently — and provides an audit trail that demonstrates compliance if the HSE inspects.

Step 5: Review and Update

Your mental health risk assessment is not a one-off exercise. You must review it:

• Regularly — at least annually as a minimum
• When significant changes occur — such as restructuring, new technology, changes in workload or staffing
• When issues arise — such as an increase in stress-related absence, a grievance, or feedback from employees
• After incidents — such as a stress-related breakdown or a referral to occupational health

Common Mistakes Employers Make

Treating Mental Health as Purely a Wellbeing Issue

Wellbeing initiatives (yoga classes, fruit bowls, mental health apps) are not substitutes for a proper risk assessment. The HSE is clear: employers must assess and control the work-related causes of stress, not just provide coping mechanisms for the effects.

Relying on Individual Resilience

A risk assessment that concludes “employees should build their resilience” misses the point entirely. The duty is on the employer to manage the conditions of work, not on the employee to tolerate harmful conditions.

Failing to Act on Findings

The most common failing the HSE identifies is employers who carry out a risk assessment but then do nothing with the results. A risk assessment without action is a piece of paper. What matters is whether you have identified the risks, implemented controls and can demonstrate ongoing management.

Ignoring Certain Groups

Risk assessments must cover all employees. It is common for organisations to focus on office-based workers while overlooking remote workers, shift workers, part-time workers or contractors. If they are exposed to psychosocial risks through your work activities, they must be included.

Not Involving Employees

A risk assessment conducted entirely by management, without employee input, is unlikely to capture the real picture. Employees know what stresses them — ask them. The HSE’s Management Standards approach is built on employee participation.

The Business Case for Getting This Right

Beyond legal compliance, there is a compelling business case for managing psychosocial risks:

• Reduced absence: Stress-related absence costs UK employers approximately £5 billion per year. Effective management of psychosocial risks can reduce this significantly
• Improved productivity: Employees who are not stressed or anxious perform better, make fewer errors and are more creative
• Better retention: Work-related stress is a major driver of employee turnover. Addressing the root causes improves retention
• Stronger employer brand: Organisations that take mental health seriously attract and retain better talent
• Reduced legal risk: Beyond HSE enforcement, employers face the risk of personal injury claims, constructive dismissal claims and discrimination claims related to mental health

Linking Mental Health to Wider Compliance

Mental health risk assessments do not exist in isolation. They should form part of your broader risk assessment and health and safety management framework. Connections to consider include:

• Working time: Excessive working hours are a major stress factor. Ensure compliance with the Working Time Regulations
• Absence management: Use absence data to identify stress trends and trigger risk assessment reviews. The Bradford Factor can help quantify absence patterns
• Training: Ensure managers are trained in mental health awareness and supportive management. A training management system can track completion and compliance
• Incident reporting: Stress-related incidents and near-misses should be recorded and investigated, just as physical incidents would be

Take Action on Psychosocial Risks

Managing mental health at work is not about grand gestures or expensive programmes. It is about systematically identifying what causes stress, taking practical steps to reduce those causes, and monitoring whether your actions are working.

Start with the HSE’s Management Standards framework, involve your employees, and build psychosocial risk management into your everyday operations. Our Risk Assessments feature provides a structured, auditable approach to managing all workplace risks — including mental health. Combined with our HR Management tools, you can build a comprehensive framework for protecting employee wellbeing and demonstrating compliance.