Employers are legally responsible for identifying, assessing, and controlling psychosocial risks in the workplace under general health and safety law. This duty applies in the same way as managing physical hazards – psychosocial risks must be treated as legitimate occupational hazards, not personal problems. The sections below unpack exactly what that legal responsibility looks like in practice, from risk assessment obligations to documentation and accountability.
What counts as a psychosocial risk under employment law?
A psychosocial risk is any aspect of work design, organisation, management, or social environment that has the potential to cause psychological or physical harm to an employee. Under employment law, these risks are treated as occupational hazards and include factors such as excessive workload, lack of autonomy, poor management practices, workplace bullying, harassment, role ambiguity, and job insecurity.
The legal framework in most jurisdictions – including the UK’s Health and Safety at Work Act 1974 and the Management of Health and Safety at Work Regulations 1999 – does not distinguish between physical and psychological hazards. Both fall within an employer’s duty to ensure, so far as is reasonably practicable, the health, safety, and welfare of employees. Psychological wellbeing is explicitly included in this definition of “health.”
Common categories of psychosocial risk recognised across regulatory guidance include:
- Work demands: Unmanageable workloads, tight deadlines, and insufficient resources
- Control: Limited employee input into how their work is carried out
- Support: Inadequate managerial or peer support
- Relationships: Conflict, bullying, harassment, or discrimination
- Role clarity: Unclear responsibilities or conflicting expectations
- Change management: Poorly communicated or managed organisational change
What is an employer’s duty of care for psychosocial hazards?
An employer’s duty of care for psychosocial hazards requires them to take reasonable steps to prevent foreseeable psychological harm to employees. This means proactively identifying risks to psychological safety at work, implementing controls to reduce those risks, and supporting employees whose wellbeing has already been affected. Reactive responses – only acting after harm has occurred – do not satisfy this duty.
The duty of care is not limited to preventing clinical mental illness. Employers are expected to create working conditions that support psychological wellbeing broadly, including managing stress, preventing burnout, and fostering a culture of psychological safety. Courts and employment tribunals have consistently upheld that employers who ignore known stressors – such as chronic overwork or a toxic team environment – are in breach of their duty even when no formal complaint has been made.
Practically, this duty requires employers to:
- Monitor workloads and working conditions on an ongoing basis
- Train managers to recognise and respond to signs of psychological distress
- Establish clear processes for employees to raise concerns without fear of reprisal
- Make reasonable adjustments for employees experiencing psychological difficulties
- Provide access to occupational health or employee assistance programmes where appropriate
Are employers legally required to conduct a psychosocial risk assessment?
Yes. Employers are legally required to assess psychosocial risks as part of their general risk assessment obligations. Under the Management of Health and Safety at Work Regulations 1999, employers must conduct a suitable and sufficient assessment of all risks to health – and this explicitly includes risks to mental health and psychological wellbeing. Organisations with five or more employees must record the significant findings of that assessment.
A psychosocial risk assessment follows the same fundamental structure as any occupational risk assessment: identify hazards, determine who might be harmed and how, evaluate the level of risk, implement controls, and review regularly. The Health and Safety Executive (HSE) in the UK has developed the Management Standards framework specifically to help employers assess and address the most common sources of work-related stress and psychological risk.
Failing to conduct a psychosocial risk assessment is not a grey area. If an employee suffers harm and no assessment has been carried out, the absence of that assessment will be treated as evidence of negligence in any subsequent legal proceedings. Risk awareness is not optional – it is a baseline legal obligation.
What happens if an employer fails to manage psychosocial risks?
If an employer fails to manage psychosocial risks, they expose themselves to significant legal, financial, and reputational consequences. Employees who suffer psychological harm as a result of employer negligence can bring personal injury claims for work-related stress, anxiety, or burnout. Employment tribunals can also hear claims for constructive dismissal if working conditions become so harmful that an employee feels compelled to resign.
Regulatory enforcement is also a real possibility. The HSE has the authority to issue improvement notices and, in serious cases, prosecute employers who fail to meet their health and safety obligations – including those relating to psychological wellbeing. While prosecutions specifically targeting psychosocial risk management remain relatively rare, enforcement activity in this area is increasing as awareness grows.
Beyond legal liability, the organisational costs of poor psychosocial risk management are substantial. Elevated absenteeism, high staff turnover, reduced productivity, and reputational damage all represent tangible business consequences. Organisations that invest in effective risk management consistently report stronger employee engagement and lower people costs – reflecting a return on investment that extends well beyond legal compliance.
How should employers document and evidence psychosocial risk management?
Employers should document their psychosocial risk management through a combination of written risk assessments, records of control measures implemented, evidence of training delivered, and records of any individual cases managed. Documentation serves two purposes: it demonstrates legal compliance and creates an evidence base that enables organisations to evaluate whether their interventions are working.
Strong documentation practices include:
- Written risk assessments: Dated, signed records identifying psychosocial hazards, affected groups, risk levels, and control measures
- Policy records: Up-to-date stress, wellbeing, and dignity at work policies with evidence of communication to staff
- Training records: Logs of who has received mental health awareness, management, or wellbeing training and when
- Monitoring data: Anonymised records of sickness absence, staff survey results, and any reported concerns
- Review records: Evidence that risk assessments are reviewed periodically and following significant changes or incidents
Documentation should be proportionate to the size and complexity of the organisation, but the principle applies universally: if it is not written down, it is difficult to prove. Thorough records also support continuous improvement by making it easier to identify patterns and evaluate the effectiveness of interventions over time.
Who in an organisation is responsible for managing psychosocial risks?
Responsibility for managing psychosocial risks sits at every level of an organisation, but ultimate legal accountability rests with the employer – in practice, the board or senior leadership team. Directors and senior leaders are responsible for setting policy, allocating resources, and ensuring that psychosocial risk management is embedded in organisational governance. They cannot delegate away their legal liability, even if day-to-day management is assigned elsewhere.
Line managers carry the most direct operational responsibility. They are the primary point of contact for employees experiencing difficulties, and their behaviour is often the single most significant factor in either creating or mitigating psychosocial risk. Training managers to recognise the signs of poor psychological wellbeing, have supportive conversations, and escalate appropriately is therefore one of the highest-impact actions an organisation can take.
HR and People teams play a strategic and coordinating role – designing policies, overseeing risk assessment processes, managing individual cases, and ensuring the organisation has access to appropriate support resources. Health and safety leads are responsible for ensuring psychosocial risks are formally integrated into the organisation’s risk management framework.
Employees also have a role. Under health and safety law, employees are required to take reasonable care of their own health and that of others, and to report concerns to their employer. A culture of psychological safety at work makes it far more likely that employees will do so early, before risks escalate into harm.
How Wellity Global helps organisations manage psychosocial risks
Wellity Global supports organisations in meeting their legal and ethical responsibilities around psychosocial risk through evidence-based, accredited training programmes delivered by over 200 expert practitioners worldwide. Whether you are building risk awareness across your workforce, upskilling managers, or embedding a culture of psychological safety, Wellity provides the tools and expertise to make it happen. Key ways Wellity supports psychosocial risk management include:
- Accredited mental health and wellbeing training for managers and employees across all levels
- Stress, burnout, and resilience programmes aligned with HSE Management Standards
- Leadership development training focused on psychologically safe team cultures
- Awareness Day Training sessions that keep psychosocial risk on the organisational agenda throughout the year
- Bespoke programme design, project management, and outcome evaluation to demonstrate measurable ROI
With over 450 training titles available on-site, virtually, or via a blended approach, Wellity works with organisations of every size and sector to turn legal obligations into genuine cultural change. Contact Wellity Global to find out how our programmes can support your psychosocial risk management strategy.
