Skip to content
Before Anybody Knows

All notes  /  Obligations

The Risk Assessment

The legal duty is to assess and control, not to buy equipment. What the assessment has to contain, and the part everyone skips.

Obligations · Procedure

General orientation, not legal advice; duties differ by jurisdiction.

When the risk assessment also depends on reliable work records, this implementation guide can support time, attendance and workload review without being treated as the emergency response itself. Compare any workflow with NIOSH worker-safety resources and keep alarm ownership, escalation and dispatch responsibilities explicit.

There is generally no law requiring a lone worker device. There is a duty to assess the risk and put controls in place, and equipment is one possible control.

What the duty usually is

Assess the risks to employees, including those working alone.

Put in place measures that are reasonably practicable.

Inform, train and supervise.

Review when things change.

Which means an organisation that bought devices and never assessed anything has not met the duty, and one that assessed properly and concluded devices were unnecessary may well have.

What the assessment covers

The hazards specific to working alone: no help at hand if something goes wrong, no witness, no second opinion, and no deterrent to aggression.

The work itself: heights, machinery, chemicals, driving, patient handling.

The environment: someone else's home, an unlit car park, a building with no signal.

The person: experience, health conditions, language, lone status by choice or by rota accident.

And the interaction between them, which is where the serious cases sit.

The part everyone skips

Can this work be done alone at all?

For some tasks the honest answer is no — confined spaces, live electrical work, certain patient handling, and any task where a foreseeable incident would incapacitate the person immediately.

Where the answer is no, a device is not a control. It summons help after the harm.

Writing that finding down is the most valuable thing an assessment produces, and it is the one no supplier will suggest.

Dynamic risk assessment

The judgement a worker makes on arrival: this house has a dog, that car park is dark, this person is agitated.

Which requires two things to be real: training in what to look for, and permission to leave.

Permission to leave is the whole of it. If withdrawing costs the worker a visit target, a fee or an argument, the dynamic assessment is decorative.

Keeping it current

Review after any incident or near miss.

Review when a rota change creates new lone shifts.

Review when a client or site changes.

Date it, and record who did it, because an undated assessment is treated as no assessment.

Working through it

Identify who is alone and when, which is the previous note and is the input to everything here.

For each situation, list what could go wrong: the task hazards, the environment, the people involved, the journey.

Ask what would happen if it did — specifically, how long before anyone knew, and what the delay would cost.

Then decide the controls, in the order the hierarchy requires: eliminate, substitute, engineer, organise, and only then protect.

Equipment sits at the bottom of that hierarchy, which is not an opinion but the structure the regulations use, and an assessment that jumps to it has skipped four steps.

The hierarchy applied to lone working

Eliminate: do not do the task alone. Schedule two people, or do it during staffed hours.

Substitute: change the task so the hazard is smaller — a remote inspection rather than a physical one, a phone assessment rather than a visit.

Engineer: better lighting, an accessible exit, a barrier, a machine guard that does not depend on a second person.

Organise: check-in arrangements, journey plans, address flags, permission to withdraw, shift design.

Protect: the device, the alarm, the personal equipment.

Most organisations start at the bottom of this list and work upward if at all, which produces the substitution that runs through this whole subject.

What a good assessment looks like on paper

Situation by situation, not a single document for the organisation.

Specific: "evening visits to clients with a recorded history of aggression" rather than "home visits".

With named controls and who is responsible for each.

With the residual risk stated — what remains after the controls, and whether that is acceptable.

Dated, signed, and with a review trigger, because an undated assessment is treated as no assessment by every inspector.

Involving the workers

They know things the assessment cannot otherwise contain: which address has a dog, which stairwell has no light, which client's son is usually there in the evening.

And an assessment they contributed to is one they follow, which is the practical argument alongside the legal one.

Safety representatives have consultation rights in many jurisdictions, which makes this a requirement rather than a courtesy in those places.

Reviewing it

After every incident and significant near miss, which is where the assessment gets its real information.

When a rota, a site, a client or a task changes.

Annually regardless, because things drift without any single change being noticeable.

And record what the review found even when it found nothing, because a series of dated reviews is evidence of a system and a gap is evidence of the opposite.

The sentence that matters

Somewhere in the assessment there should be a line saying what would make this work unacceptable to do alone.

It forces the question to be answered in advance rather than in the middle of a staffing crisis, when the pressure runs entirely one way.