UK lone worker legislation explained: what employers actually need to have in place

What the law actually says

The UK Health and Safety at Work Act 1974, together with the Management of Health and Safety at Work Regulations 1999, places a legal duty on employers to ensure the health, safety and welfare of their employees. This duty applies to employees working alone just as it does to those working in teams. If anything, the risks associated with lone working require additional attention because the normal safety net of colleagues being present does not exist.

The Health and Safety Executive publishes specific guidance on lone working. It does not prescribe a single method of compliance, but it is clear that employers must assess the risks involved in lone working and put in place appropriate control measures. A monitoring system is one of those control measures in most circumstances.

Who counts as a lone worker?

A lone worker is anyone who works by themselves without direct or close supervision for any period. This is broader than many employers assume. It includes:

• Security guards on patrol, particularly during night shifts or in isolated areas
• Cleaning operatives working in buildings outside normal hours
• Maintenance engineers attending call-outs alone
• Hotel night staff working in large buildings
• Construction workers in isolated parts of a site
• Delivery drivers, field engineers and any mobile worker operating without a colleague present

The common thread is not the industry or the job title. It is the absence of someone nearby who would notice if something went wrong.

What the risk assessment needs to cover

The HSE guidance requires employers to carry out a suitable and sufficient risk assessment for lone working. The assessment should cover the nature of the work and the hazards involved, the experience and competence of the individual, the working environment and how remote it is, and what would happen in an emergency.

What a compliant monitoring system needs to include

A monitoring system for lone workers needs to do three things. It needs to give the worker a way to raise an alert if they need help. It needs to give the employer a way to know if something has gone wrong when the worker has not raised an alert themselves. And it needs to create a record that demonstrates the monitoring was taking place.

Panic alerts

The worker needs a way to raise an alert immediately if they feel threatened, injured or in danger. The alert needs to reach someone who can respond, not just create a record. A one-tap panic function that sends the worker's GPS location to the relevant supervisors is the standard approach in a mobile app-based system.

Timed check-ins

Panic alerts only work if the worker is conscious and able to activate them. Timed check-ins address the scenario where a worker is incapacitated and cannot raise an alert. At set intervals, the system expects a check-in from the worker. If it does not receive one, it escalates automatically to supervisors. The interval should reflect the risk level of the role.

Escalation chains

The system needs to know who to contact and in what order when an alert fires or a check-in is missed. This should be defined in advance, not worked out at the moment an alert arrives at 3am.

Incident records

Every alert, missed check-in and escalation should create a permanent record with a timestamp, the worker's identity and their GPS location. This record serves two purposes. It gives the employer evidence that the monitoring system was operating as required. And it provides a detailed account of events if an incident is later investigated.

Common mistakes employers make

The most common mistake is treating lone worker monitoring as a box-ticking exercise rather than a genuine risk control. A policy document that says employees should check in by text every hour is not the same as a system that escalates automatically if the check-in does not happen.

The second most common mistake is failing to test the system. An escalation chain that has never been tested is likely to fail at the moment it matters most.

The third is keeping the monitoring system separate from the rest of the team's operational tools. If lone worker protection requires a different device and a different app, the chances of it being used consistently are significantly lower.

What to do next

Start with the risk assessment. Work through the specific circumstances of each lone working role in your organisation and document what you conclude about the risks and the control measures required. If the assessment concludes that a monitoring system is needed, choose one that works in the actual conditions your workers operate in. Signal coverage, device battery life and ease of use all matter more than the features list.