Risk Assessment Template for Tradesmen UK (Free Copy)

What a Risk Assessment Actually Is (and What It Is Not)

A risk assessment is a structured, written record of the hazards present on a job, who could be harmed, how likely that harm is, and what controls you have put in place to reduce it. It is not a generic form you print once and carry forever. It is job-specific. A risk assessment for fitting a boiler in a first-floor plant room is a different document from one for replacing a consumer unit in a domestic kitchen, even if both jobs take a similar amount of time.

The distinction matters because the Health and Safety Executive can and does ask to see site-specific documentation when investigating an incident. A generic template that does not reference the actual hazards present at that specific address, on that specific date, offers you almost no legal protection. Courts have consistently treated generic, undated, or clearly recycled risk assessments as evidence of poor safety management rather than evidence of compliance.

For sole traders, the risk assessment also doubles as your method statement when clients, main contractors, or local authorities ask for a RAMS pack. Getting into the habit of completing one properly for every job means you already have the documentation ready when a contract requires it, rather than scrambling to backdate something.

The Legal Requirement: Which Regulations Apply to You

Under the Management of Health and Safety at Work Regulations 1999 (Regulation 3), every employer and self-employed person must carry out a suitable and sufficient risk assessment for activities that could harm employees or members of the public. As a sole trader, you are classed as self-employed, which means this duty applies to you personally. 'Suitable and sufficient' is the legal standard, not 'perfect' or 'exhaustive', but it must genuinely reflect the real hazards of the job.

The Health and Safety at Work etc. Act 1974 (section 2 and section 3) sits above the 1999 Regulations and imposes a general duty to ensure, so far as is reasonably practicable, that persons not in your employment are not exposed to health and safety risks from the way you carry out your work. Section 3 is the one that catches sole traders most often because it covers risk to members of the public, occupants, and bystanders, not just your own safety.

If your work involves working at height, the Work at Height Regulations 2005 layer additional requirements on top. Regulation 4 requires that all work at height is properly planned, appropriately supervised, and carried out in a manner that is safe so far as is reasonably practicable. Regulation 12 specifically requires that equipment such as ladders, scaffolding, and mobile elevated work platforms is subject to inspection by a competent person. Your risk assessment should reference any work-at-height controls, and your inspection record for that equipment should sit alongside it.

The Building Safety Act 2022 extended competence and documentation duties across all contractors and sole traders carrying out building work in England and Wales. From 27 January 2026, the Building Safety Regulator became an independent statutory body with the power to investigate and enforce competence standards at every level of a supply chain. If you are working on a higher-risk building (generally residential buildings of 18 metres or more), your risk assessment and method statement will be scrutinised as part of the broader safety case documentation.

• •Management of Health and Safety at Work Regulations 1999, Regulation 3: suitable and sufficient risk assessment for every relevant activity.
• •Health and Safety at Work etc. Act 1974, sections 2 and 3: general duty of care to employees and to the public.
• •Work at Height Regulations 2005, Regulations 4 and 12: planning, supervision, and inspection of work-at-height activities and equipment.
• •Building Safety Act 2022: competence and documentation requirements for all contractors and sole traders on building work.

Who Needs to Write a Risk Assessment

If you are a sole trader carrying out any work that could injure you, a client, or a member of the public, you need a risk assessment. That includes plumbers, electricians, gas engineers, roofers, plasterers, joiners, tilers, painters, decorators, and groundworkers. The obligation is not limited to large contractors or those working on commercial sites. A sole-trader carpenter fitting a staircase in a domestic house is just as legally obliged to carry out a risk assessment as a principal contractor managing a 50-person site.

There is a common misconception that working alone exempts you. It does not. Working alone, if anything, increases the duty to assess risks properly because there is no colleague present to raise the alarm if something goes wrong. Your risk assessment for lone working should specifically address how you will deal with an emergency, how you will communicate your location, and what the check-in arrangement is.

If you take on a labourer, apprentice, or mate, even on a casual or day-rate basis, you become an employer for the purposes of health and safety law. That triggers a wider set of duties, but the starting point is still the same: a written, job-specific risk assessment.

How to Identify Hazards and Rate Risk: The Five-Step Process

The HSE publishes a five-step approach to risk assessment that is widely recognised as the standard methodology for tradespeople. Step one is to identify the hazards. Walk the job before you start, look at what could cause harm, and think about both the obvious risks and the less obvious ones. A leaking pipe behind a wall is an obvious hazard when you open the ceiling. Asbestos-containing materials in a pre-2000 property are a less obvious one, but no less serious.

Step two is to identify who could be harmed and how. This is not just about you. It includes the householder, their children, a neighbour who might wander through, or another tradesperson working nearby. Step three is to evaluate the risk and decide on controls. The standard approach is to rate likelihood (low, medium, high) and severity (low, medium, high) and then combine them to produce a risk rating. Controls reduce that rating. Step four is to record your findings, which is the risk assessment itself. Step five is to review and update.

The rating system does not need to be complicated. A simple 3x3 grid (likelihood against severity) gives you nine possible scores, which is enough granularity for most trade jobs. The key is that your controls must be proportionate to the rating. A high-high score with a control of 'be careful' is not good enough. A high-high score with a control of 'scaffold erected and inspected in accordance with Work at Height Regulations 2005, Reg 12' is the kind of specific response that demonstrates genuine thought.

Step five, reviewing the assessment, is the one most sole traders skip. If a job changes scope, if you discover something unexpected (asbestos, structural defect, unplanned excavation near services), the risk assessment must be updated on the day. An out-of-date assessment is treated by the HSE as no assessment at all.

• •Step 1: Identify hazards by walking the site before work begins.
• •Step 2: Identify who could be harmed, including occupants, bystanders, and other workers.
• •Step 3: Rate likelihood and severity, then decide on proportionate controls.
• •Step 4: Record findings in writing, with date and signature.
• •Step 5: Review and update the assessment if the scope or conditions change.

Common Hazards by Trade (and How to Address Them)

For plumbers, the most commonly cited hazards are scalding from hot water systems, exposure to legionella in stored water systems, manual handling of heavy plant and pipe runs, working in confined spaces (particularly plant rooms and under-floor voids), and cutting or penetrating structural elements without confirming the presence of services. Each of these needs a specific control listed against it, not a blanket statement like 'take care'.

For electricians, the primary hazards are electric shock from live circuits, arc flash, working at height when installing lighting or running cables in roof spaces, and fire risk from incorrect terminations. The risk assessment should specify that circuits are isolated and tested dead before work begins, that appropriate personal protective equipment is used, and that isolation procedures are documented. The Electricity at Work Regulations 1989 (Regulation 4(2)) require that electrical equipment is maintained in a safe condition so far as is reasonably practicable, and your risk assessment should reference this where in-service testing or inspection is part of the scope.

For gas engineers, in addition to the standard site hazards, you must address gas escape risk, combustion product exposure, and the risk of fire or explosion during work on live systems. The Gas Safety (Installation and Use) Regulations 1998 (Regulation 36) set out specific duties around safe working on gas installations. Your risk assessment should note that you hold a current Gas Safe registration and that the relevant appliances have been isolated and purged before any pipe work commences.

For roofers and those working at height, the Work at Height Regulations 2005 require that collective protective measures (edge protection, scaffolding) take precedence over personal protective measures (harnesses, lanyards). Your risk assessment must show the hierarchy of controls, not just that a harness was provided. Common mistakes include listing PPE as the only control for a high-severity fall hazard, which will not satisfy an inspector.

Penalties for Non-Compliance: What You Actually Risk

The HSE enforces health and safety law through a graduated response. At the lighter end, an inspector can issue an Improvement Notice requiring you to address a specific deficiency within a set timeframe. Failure to comply with an Improvement Notice is a criminal offence carrying an unlimited fine in the Crown Court and up to two years imprisonment. A Prohibition Notice stops the work immediately and can be served on the spot.

For prosecution under the Health and Safety at Work etc. Act 1974, magistrates courts can impose fines of up to £20,000 for certain offences, but the more serious cases go to the Crown Court where there is no upper limit on fines. Sole traders have been personally fined in excess of £10,000 for incidents arising from inadequate risk assessment, and those fines are not insurable in the way that public liability claims sometimes are.

Beyond fines, there is the civil liability exposure. If a member of the public or a client is injured on your job and you cannot produce a suitable and sufficient risk assessment, your public liability insurer may decline to cover the claim on the grounds that you were in breach of a statutory duty. That leaves you personally liable for any damages award, which in serious injury cases can run to six figures.

The HSE also operates a Fee for Intervention (FFI) scheme, under which if an inspector visits your site and finds a material breach of health and safety law, including a missing or inadequate risk assessment, you are charged for the inspector's time at the current rate of £166 per hour. A single site visit can generate an FFI bill of several hundred pounds even where no formal prosecution follows.

How to Fill In Each Field: A Field-by-Field Guide

The job reference or number should match whatever you use on your invoice or job sheet. This creates a paper trail that links the risk assessment to the actual work carried out. If an incident occurs three months later and your insurer or solicitor needs to locate the relevant documents, this reference number is what ties them together.

The site address should be the full address where the work is being carried out, not the client's billing address if those differ. The date should be the date the assessment is completed, which should be before work starts, not after. Backdating risk assessments is common practice and it is also fraud. If the assessment is updated mid-job, the update should carry the revised date with a note explaining what changed and why.

The hazard description should be specific enough that someone unfamiliar with the job could understand what the risk is. 'Working at height' is not a hazard description. 'Working from a 3.0m podium ladder to replace a kitchen extractor fan fitting in a room with a concrete floor below' is a hazard description. The more specific you are, the more clearly you demonstrate that you actually walked the site and thought about the risk.

The likelihood and severity ratings should be filled in before controls are listed, because they represent the inherent risk. The residual risk should be filled in after controls are listed, showing that the controls actually reduce the risk to an acceptable level. If the residual risk is still rated high after your proposed controls, you need better controls. Signing off a high residual risk without escalating it is a significant compliance failure.

• •Job reference: match your invoice or job sheet number.
• •Site address: the full address where work takes place, not the billing address.
• •Date: the date the assessment is completed, before work starts.
• •Hazard description: specific to this job, not generic.
• •Who is at risk: list all persons, including occupants and bystanders.
• •Inherent likelihood and severity: rated before controls are listed.
• •Controls: specific, proportionate, and referenced to any relevant regulations.
• •Residual risk: rated after controls, must be acceptable before work proceeds.
• •Signature and name: the person completing the assessment, with date.

Full Risk Assessment Template: Ready to Copy

Below is a complete, worked example of a risk assessment for a sole-trader electrician replacing a consumer unit in a domestic property. It follows the standard five-step format and includes all the fields an inspector or main contractor would expect to see. Adapt the hazard rows for your own trade and job type.

This template is deliberately written in plain language. You do not need technical jargon to produce a legally compliant document. You need specific detail about the actual job.

Copy the template structure below and complete each field before work begins on every job. Store a signed copy somewhere you can retrieve it. Cloud storage, a job-management app, or even a printed file in your van is acceptable, provided you can produce it on request.

• •RISK ASSESSMENT
• •---
• •Business name: J. Barker Electrical
• •Assessor name: James Barker
• •Assessor trade/qualification: Electrician, NICEIC Approved Contractor, City and Guilds 2382-22
• •Date of assessment: 14 July 2025
• •Review date: End of job or if scope changes
• •---
• •JOB DETAILS
• •Job reference: JB-2025-047
• •Client name: Mr and Mrs Patel
• •Site address: 14 Acacia Avenue, Sheffield, S6 3XQ
• •Description of work: Remove existing 12-way fuseboard and replace with new 18-way dual-RCD consumer unit in the same location. Test and certify circuits on completion. Estimated duration: 1 day.
• •---
• •HAZARD 1
• •Hazard description: Electric shock from existing live circuits during isolation and disconnection of existing consumer unit.
• •Who is at risk: Electrician (sole trader). Occupants if they attempt to access the meter cupboard during work.
• •Inherent likelihood: High. Inherent severity: High. Inherent risk rating: High.
• •Controls: (1) Inform occupants that work is in progress and the area is out of bounds. Tape or barrier across meter cupboard door. (2) Confirm supply isolation with DNO or by means of approved voltage indicator (tested before and after use against a known supply). (3) Use insulated tools throughout. (4) Wear Class 0 insulated gloves when working within 300mm of exposed live parts. (5) Circuits tested dead with approved voltage indicator before any connections disturbed. Electricity at Work Regulations 1989, Regulation 4(2) observed throughout.
• •Residual likelihood: Low. Residual severity: High. Residual risk rating: Medium. (Residual severity remains high because the consequence of contact with a live conductor is always potentially fatal. Controls reduce the likelihood to low.)
• •---
• •HAZARD 2
• •Hazard description: Manual handling injury when lifting and positioning new consumer unit (estimated weight 4.2 kg in packaging). Risk of back strain or dropped load on foot.
• •Who is at risk: Electrician.
• •Inherent likelihood: Low. Inherent severity: Low. Inherent risk rating: Low.
• •Controls: (1) Carry unit close to body. (2) Wear steel-toecap boots throughout. (3) If packaging is unwieldy, remove unit from packaging in van before carrying into property.
• •Residual likelihood: Low. Residual severity: Low. Residual risk rating: Low.
• •---
• •HAZARD 3
• •Hazard description: Fire risk from incorrect termination or loose connection in new consumer unit causing overheating.
• •Who is at risk: Occupants (post-completion). Electrician during testing.
• •Inherent likelihood: Medium. Inherent severity: High. Inherent risk rating: High.
• •Controls: (1) All terminations made to manufacturer specifications and tightened to correct torque where stated. (2) Insulation resistance testing carried out on all circuits before energising. (3) Consumer unit installation to comply with BS 7671:2018 Amendment 4:2026 and relevant manufacturer instructions. (4) Electrical Installation Certificate to be issued on completion. (5) Notified to Local Building Control under Part P of the Building Regulations 2010 via NICEIC scheme.
• •Residual likelihood: Low. Residual severity: High. Residual risk rating: Medium.
• •---
• •HAZARD 4
• •Hazard description: Dust and debris from drilling fixing points for new consumer unit backplate, creating respiratory hazard and eye risk.
• •Who is at risk: Electrician. Occupants if present in room.
• •Inherent likelihood: Medium. Inherent severity: Low. Inherent risk rating: Low.
• •Controls: (1) Occupants asked to leave the room during drilling. (2) FFP2 dust mask worn by electrician. (3) Safety glasses worn during drilling. (4) Dust sheeting over nearby surfaces. Hoover debris on completion.
• •Residual likelihood: Low. Residual severity: Low. Residual risk rating: Low.
• •---
• •HAZARD 5
• •Hazard description: Discovery of pre-existing defect (e.g. damaged insulation, improper installation) when investigating existing wiring. Risk of shock or fire if defect is not addressed before energising new board.
• •Who is at risk: Electrician. Occupants (post-completion if defect is re-energised).
• •Inherent likelihood: Medium. Inherent severity: High. Inherent risk rating: High.
• •Controls: (1) Thorough visual inspection of all accessible wiring before disturbing any connections. (2) Insulation resistance testing of all circuits prior to energising. (3) Any defect found to be reported to client in writing before work continues. (4) Do not re-energise any circuit with a known defect until it is repaired or the circuit is isolated and labelled. Assessment to be reviewed and updated if defect is found.
• •Residual likelihood: Low. Residual severity: Medium. Residual risk rating: Low.
• •---
• •EMERGENCY PROCEDURES
• •Nearest A&E: Northern General Hospital, Herries Road, Sheffield, S5 7AU (2.1 miles, approx. 8 minutes by road).
• •In the event of electric shock: Do not touch the casualty. Isolate the supply at the main switch. Call 999. Commence CPR if trained and if safe to do so.
• •In the event of fire: Evacuate the property. Call 999. Do not attempt to fight an electrical fire with water.
• •Contact for lone worker check-in: Sarah Barker (partner), mobile: 07700 900123. Check-in time agreed: 17:00 on 14 July 2025. If no contact by 17:30, she will call the site address and then 999 if no answer.
• •---
• •ASSESSMENT SIGN-OFF
• •Assessor signature: J. Barker
• •Date signed: 14 July 2025
• •Client/site representative informed of assessment: Yes. Mr Patel verbally informed of isolation period and out-of-bounds areas at 08:45.
• •---
• •REVIEW LOG (complete if assessment is updated mid-job)
• •Date of review | Reason for review | Changes made | Revised signature
• •14 July 2025 | Discovery of damaged TRS cable on ring circuit | Hazard 5 controls activated. Circuit isolated, client informed in writing (text message 11:22). Work paused on ring circuit pending client decision. | J. Barker

Common Mistakes That Will Invalidate Your Assessment

The most common mistake is using the same risk assessment for every job. If your risk assessment has a printed date from six months ago and no job-specific details, it will not satisfy an inspector and it will not protect you in a civil claim. The HSE expects the assessment to reflect the actual conditions at the actual site on the actual date.

The second most common mistake is listing PPE as the primary control rather than the last resort. The hierarchy of controls under UK health and safety law places elimination of the hazard first, then substitution, then engineering controls, then administrative controls, and PPE last. A risk assessment that lists 'wear gloves' as the only control for a chemical handling hazard, or 'wear a harness' as the only control for a fall from height, will be treated as inadequate.

Failing to identify all persons at risk is the third major failure. Many tradespeople only list themselves. If a client's child wanders into the work area and is injured, and your risk assessment did not identify children as persons at risk, you have demonstrated that you did not carry out a suitable and sufficient assessment as required by Management of Health and Safety at Work Regulations 1999, Regulation 3.

Not updating the assessment when scope changes is also widely misunderstood. If you open a wall and find asbestos-containing artex, the original risk assessment no longer reflects the hazards present. Work must stop, the assessment must be updated, and in the case of asbestos, a licensed contractor must be engaged before any further disturbance of the material.

• •Using a generic or recycled risk assessment without job-specific details.
• •Listing PPE as the primary or only control measure.
• •Failing to identify occupants, bystanders, or children as persons at risk.
• •Not updating the assessment when scope, conditions, or discovered hazards change.
• •No signature, or a signature with no date.
• •Inherent and residual risk ratings the same, suggesting controls have not been thought through.
• •No emergency procedure or lone worker check-in arrangement.

How Long You Must Keep Risk Assessments and Where to Store Them

There is no specific statutory retention period for risk assessments in most trade situations. However, the Limitation Act 1980 sets a six-year window for contract claims, and personal injury claims can run longer in some circumstances. The practical advice from most insurers is to keep risk assessments for at least six years from the completion of the job, or longer if the job involved any significant risk of latent injury such as asbestos or harmful chemicals.

Storage does not need to be complicated. A folder in Google Drive or Dropbox, organised by job reference number, is entirely adequate. The important thing is that you can locate the document quickly if you receive a letter from a solicitor or an HSE inspector. A signed paper copy in a filing cabinet is also fine, but paper is vulnerable to flood, fire, and the general chaos of a working van.

If you take on an apprentice or sub-contractor, the risk assessment for any job they work on should be shared with them before work starts, and you should be able to demonstrate that they received and understood it. A simple way to do this is to have them sign a copy. Their signature does not transfer your liability as the responsible person, but it does demonstrate that you communicated the hazards.

Generate a Compliant Risk Assessment in Two Minutes with TradeDoc AI

TradeDoc AI generates a compliant risk assessment in about two minutes, covering all four UK trades, plumbing, gas, electrical, and general building, in one place. It is free for your first 100 documents a month, no card required at sign-up. If you want your logo on the PDF and one-tap email send to the customer, Pro is £15 per month. Visit tradedoc.co.uk to get started.