A safety statement is one of the documents most Irish employers know they are supposed to have, but it is often misunderstood. Too many businesses treat it as a folder for an inspection or an insurance renewal. That misses the point. A safety statement should explain, in practical terms, how the employer manages workplace safety, what risks have been identified, what controls are in place, and who is responsible for making sure those controls actually happen.

In 2026, the legal position is still grounded in the Safety, Health and Welfare at Work Act 2005. Employers must identify workplace hazards, assess the risks, and prepare a written safety statement based on that assessment. The document must be specific to the workplace. A generic template with a company name inserted on the front page will not meet the intent of the law if it does not reflect the real work being done.

This guide explains what Irish employers need to know: when a safety statement is required, what it must contain, how it differs from a risk assessment, the limited small-employer Code of Practice route, how often it should be reviewed, and what HSA inspectors will expect to see.

What Is a Safety Statement?

A safety statement is the employer's written programme for securing the safety, health and welfare of employees and others affected by work activities. It brings the main parts of workplace safety management into one place: the safety policy, risk assessments, control measures, emergency arrangements, responsibilities, consultation arrangements, and the records needed to show that the system is being managed.

The Health and Safety Authority describes the safety statement as a document that should state how the employer will ensure safety and health and what resources are needed to maintain and review safety standards. That is a useful way to think about it. It should not simply describe the law. It should describe your workplace.

For a small shop, the document may be concise. For a nursing home, construction contractor, manufacturing site or multi-location business, it will be more detailed. The scale changes, but the principle does not: the safety statement must be based on the hazards and risks in the business, not copied from another organisation.

The Legal Requirement

The risk assessment duty is in Section 19 of the Safety, Health and Welfare at Work Act 2005. Every employer must identify hazards in the place of work, assess the risks presented by those hazards, and have a written risk assessment. The employer must also review the risk assessment where there has been a significant change or where there is another reason to believe it is no longer valid.

The safety statement duty is in Section 20. It requires every employer to prepare, or have prepared, a written safety statement based on the hazards identified and the risk assessment carried out under Section 19. The statement must explain how the safety, health and welfare of employees will be secured and managed.

There is an important nuance for very small employers. Section 20(8) allows an employer with three or fewer employees to comply with the safety statement requirement by observing a relevant HSA Code of Practice, where such a code exists for that type of work. This is not a general exemption from safety management. The risk assessment duty still applies, and the Code of Practice route only helps if there is a suitable code for the sector or activity.

What Must Be Included

Section 20 sets out the required content. A compliant safety statement must specify the hazards identified and the risks assessed. It must set out the protective and preventive measures taken, and the resources provided, to protect safety, health and welfare at the workplace. It must include emergency plans and procedures, employee duties, the names and job titles of people responsible for safety tasks, and the arrangements for safety representatives, consultation and employee participation.

That wording is broad, but the practical content is familiar. A good safety statement normally includes a signed health and safety policy, a description of the business, roles and responsibilities, risk assessments, control measures, training arrangements, first aid, fire and emergency procedures, accident reporting, contractor controls, welfare arrangements, consultation arrangements and an action list for improvements.

It should also connect with the regulations that apply to the work. For many workplaces this will include the Safety, Health and Welfare at Work (General Application) Regulations 2007, covering issues such as manual handling, display screen equipment, work equipment, electricity, work at height, first aid and welfare. A construction contractor, healthcare provider, food business or manufacturing employer may also need more sector-specific content.

The level of detail should follow the risk. A small office does not need pages of machinery procedures if there is no machinery. A workshop, care facility, warehouse or construction business will need more detail because the work presents more ways for people to be injured. The safety statement should be complete enough to be useful, but not padded with irrelevant material that makes the important controls harder to find.

Risk Assessment Comes First

A safety statement without a real risk assessment is weak. The risk assessment is where the employer examines the work and decides what could cause harm, who could be harmed, how serious the harm could be, how likely it is, and what controls are needed. The safety statement then records how those risks are managed across the business.

This matters because the risks are not always obvious from a desk. A template may mention slips, manual handling and fire, but it will not know that deliveries arrive through a narrow side entrance, that staff regularly lift stock above shoulder height, that a mezzanine has poor edge protection, or that a lone worker closes the premises at night. Those details come from looking at the work and speaking to the people who do it.

The HSA's BeSMART tool can be useful for smaller and lower-risk businesses where the relevant templates cover the work activity. It can help an employer structure risk assessments and build a basic safety statement. It still needs to be completed properly, with care. A tool is only as good as the information entered into it.

Who Should Prepare It?

Section 18 requires employers to appoint one or more competent persons to assist with the prevention of workplace risks. Competence depends on the task, the size of the undertaking and the hazards involved. In a simple low-risk business, the employer may be able to prepare the safety statement with HSA guidance. In a higher-risk workplace, external professional support is often the sensible option.

Using a consultant does not transfer the legal duty. The employer remains responsible for implementing the safety statement, providing resources, communicating it to employees and reviewing it when things change. The consultant can advise, assess, draft and support implementation, but the document must be owned by the business.

A competent preparer should ask about the work before writing. They should inspect the premises where needed, review existing records, speak to management and employees, and check whether the controls in the document match what actually happens. If the process starts and ends with an email questionnaire, the finished statement may not stand up well under inspection.

Bringing It to Employees' Attention

The safety statement must be brought to the attention of employees at least annually, when it is amended, and when a new employee starts work. It must also be brought to the attention of other people at the workplace who may be exposed to a specific risk covered by the statement. That can include contractors, temporary workers, delivery drivers or self-employed people working on site.

Employers do not always need to hand every person the full document. The more important duty is to make the relevant content available and understood. A cleaner needs to understand chemical storage, slips, lone working and emergency procedures. A forklift driver needs workplace transport arrangements, pedestrian routes, loading controls and reporting duties. A manager needs to understand their own responsibilities and the actions assigned to them.

The document should be in a form and language that people are reasonably likely to understand. If the workforce includes people whose first language is not English, the employer may need extra explanation, translated extracts, toolbox talks or supervisor briefings. A safety statement that nobody has read is not much use.

Reviewing and Updating the Safety Statement

The law requires review where there has been a significant change, where there is another reason to believe the statement is no longer valid, or where an HSA inspector directs an amendment. The HSA also advises that safety statements should be reviewed at least annually. Annual review is not just paperwork. It is the chance to check whether the document still matches the work.

Common triggers include new machinery, new premises, changes in layout, new chemicals, changes in staffing, new work activities, incidents, near misses, HSA inspection findings, insurance recommendations, or a change in legislation. A safety statement written three years ago may be outdated even if the business has not moved. Small operational changes add up.

Review should produce action. If the review identifies missing training, defective equipment, poor storage, weak supervision or unclear responsibilities, those issues should be assigned to named people with realistic dates. Leaving the same actions open year after year suggests that the safety statement is not being used as a management tool.

HSA Inspections and Penalties

HSA inspectors can ask to see the safety statement, risk assessments and related records during an inspection. They may also speak to employees to understand whether the arrangements in the document are known in practice. If the statement is missing, generic, out of date or not implemented, the employer may be directed to revise it. Inspectors can also issue improvement notices or prohibition notices where legal requirements are not being met or where there is a serious risk.

The penalty figures in this area are often quoted incorrectly. Under the current revised Section 78, relevant offences can carry, on summary conviction, a fine of up to EUR 5,000 or imprisonment for up to 12 months, or both. On conviction on indictment, the maximum fine is EUR 3,000,000 or imprisonment for up to two years, or both. In practice, the immediate business impact may also include stopped work, insurance difficulty, legal costs and reputational damage.

The better approach is to treat the safety statement as part of normal management rather than as a document prepared after something has gone wrong. It is much easier to update a live document than to reconstruct a safety system after an accident or enforcement visit.

Implementation Is the Test

A well-written safety statement still has to be implemented. If the document says that ladders are inspected, inspections should be happening. If it says that contractors sign in and receive site rules, there should be evidence of that process. If it says that employees receive induction training, the employer should be able to show the induction record and explain what was covered.

This is where many employers fall short. They have a document, but the controls are not visible in the workplace. The practical test is simple: could a manager, supervisor or employee explain the main risks in their area and the controls expected of them? If not, the safety statement has not been properly communicated or embedded.

Common Failings

The same problems appear repeatedly. The safety statement is generic, the risk assessments are missing or too vague, responsible people are not named, the emergency procedures do not match the premises, the document has not been reviewed, staff have never seen it, or actions from previous reviews have not been closed out. Sometimes the statement is well written but does not match the workplace. That is still a problem.

Another common failing is treating the safety statement as separate from training, maintenance and supervision. If the statement says that staff are trained in manual handling, there should be training records. If it says equipment is inspected, there should be inspection records. If it says fire drills are carried out, there should be drill records and follow-up actions. The document and the evidence should support each other.

Safety Statement and Safety Management System

A safety statement is the legal document required under Section 20. A safety management system, such as one aligned with ISO 45001, is a broader framework for planning, implementing, monitoring and improving health and safety across an organisation. Larger organisations may benefit from a formal system, but it does not remove the need for a safety statement.

For many small and medium-sized employers, a clear safety statement, proper risk assessments, good records and visible management follow-through will be enough. The document should be practical. It should help managers and staff understand what needs to happen, not sit unread because it is too long or too generic.

How Phoenix STS Can Help

Phoenix STS prepares bespoke safety statements for employers across Ireland. The process is based on workplace risk assessment, not generic templates. We review the business, identify hazards, assess risk, prepare the safety statement and support implementation where needed.

We also provide wider health and safety consultancy, including risk assessments, audits, policy development, training advice and ongoing competent person support. For healthcare providers, Phoenix STS can prepare healthcare-specific safety statements that align with the Safety, Health and Welfare at Work Act and the operational realities of care settings.

Frequently Asked Questions

Is a safety statement a legal requirement in Ireland?

Yes. Section 20 of the Safety, Health and Welfare at Work Act 2005 requires employers to prepare a written safety statement based on workplace hazard identification and risk assessment. A limited Code of Practice route may apply for employers with three or fewer employees where a relevant HSA Code of Practice exists.

What is the difference between a risk assessment and a safety statement?

The risk assessment identifies hazards, assesses the risks and records the controls needed. The safety statement is the wider management document that explains how the employer secures and manages safety, including responsibilities, emergency procedures, consultation and control measures.

Can I use a template safety statement?

A template can help with structure, but it must be adapted to the actual workplace. A generic document that does not reflect the employer's real activities, hazards, controls and responsible persons is unlikely to satisfy HSA expectations.

How often should a safety statement be reviewed?

It should be reviewed when there is a significant change, where there is reason to believe it is no longer valid, or where an HSA inspector directs an amendment. The HSA also advises annual review as normal good practice.

Do employees need a copy of the full safety statement?

The safety statement must be accessible, and the relevant parts must be brought to employees' attention in a form and language they understand. It is often better to communicate the relevant sections clearly than simply hand out a long document and assume it has been understood.

Can Phoenix STS prepare my safety statement?

Yes. Phoenix STS prepares workplace-specific safety statements and risk assessments for Irish employers. Call 043 334 9611 or use the contact page to discuss your requirements.

Contact Phoenix STS

For help preparing or reviewing your safety statement, contact Phoenix STS on 043 334 9611 or visit the Phoenix STS contact page.

This article is for general information only and is not legal advice. Employers should refer to current legislation, HSA guidance and competent health and safety advice for their own workplace.