HSE and Workplace Compliance for UK Retail and Logistics Businesses in 2026
Retail and logistics businesses face compliance obligations across health and safety, data protection, employment law and — for public-facing premises — the new requirements of Martyn's Law. In 2026, updated HSE enforcement, Day One employment rights and CCTV data protection requirements mean that many existing policies are already out of date.
The HSE's Top Priorities for Retail and Logistics in 2026
The Health and Safety Executive's inspection programme for retail and logistics businesses focuses consistently on a core set of high-risk activities. The most common causes of workplace injury in retail and logistics are:
Manual Handling — The Biggest Compliance Gap
Manual handling injuries account for more than a third of all workplace injuries reported to HSE from retail and logistics settings. Under the Manual Handling Operations Regulations 1992, employers must avoid hazardous manual handling where reasonably practicable, assess the risk where it cannot be avoided, and reduce the risk of injury. A generic manual handling policy that does not address the specific tasks carried out in your operation is not compliant.
For logistics operations specifically, HSE inspectors in 2026 are paying close attention to:
- Whether manual handling risk assessments exist for specific tasks — not just a general policy statement
- Evidence that staff have received manual handling training appropriate to the tasks they perform
- Whether mechanical aids are provided and used — trolleys, pallet trucks, conveyor systems
- How load weights are communicated to staff, particularly for goods received from external suppliers
CCTV and Data Protection — A Compliance Blind Spot
Most retail businesses operate CCTV, but many do not have a compliant CCTV and data retention policy. Under UK GDPR, CCTV footage constitutes personal data, and its collection and retention must be lawful, proportionate and transparent. The ICO's CCTV guidance requires:
- A clear lawful basis for processing — usually legitimate interests for retail security purposes
- A documented retention period — most retail businesses should not retain footage beyond 30 days without a specific reason
- Signage informing individuals that CCTV is in operation and who operates it
- A procedure for responding to Subject Access Requests for CCTV footage
- Secure storage and access controls — limiting who can access recorded footage
ICO enforcement data shows that CCTV-related complaints have increased year on year. A CCTV and Data Retention Policy is now a practical necessity for any retail business operating cameras — not an optional document.
Lone Working — Particularly in Retail
Lone working in retail settings — staff opening and closing premises, working in small shops or kiosks, or working late shifts — carries specific risks that must be risk assessed and documented. Under the Health and Safety at Work etc. Act 1974 and the Management of Health and Safety at Work Regulations 1999, employers must assess the specific risks lone workers face and implement appropriate controls.
A compliant lone working policy for retail should cover:
- A risk assessment of all lone working scenarios specific to your premises and hours of operation
- A check-in and check-out procedure — how you maintain contact with lone workers and what happens if contact is not made
- Emergency procedures — how a lone worker summons help in the event of a medical emergency, fire or aggression
- Personal safety training — what staff should do if threatened or attacked
Martyn's Law — New Obligations for Retail Premises
The Terrorism (Protection of Premises) Act 2025 introduces new obligations for public-facing venues. Most retail premises and logistics hubs will fall within scope. Requirements include a documented counter-terrorism procedure covering evacuation, invacuation (moving people to a place of safety within the building) and lockdown. For most retail businesses, this is a document that does not currently exist.
The Essential Documents for Retail and Logistics Compliance
- Health and Safety Policy — including psychosocial risk assessment updated for 2026 HSE requirements
- Manual Handling SOP — specific to the tasks carried out in your operation
- Lone Working Policy — covering all lone working scenarios in your premises
- CCTV and Data Retention Policy — UK GDPR compliant with documented retention periods
- Fire Safety Policy and evacuation procedure
- Cash Handling SOP — particularly relevant for customer-facing retail
- Delivery and Goods In SOP — covering receipt, storage and manual handling of deliveries
- Age Verification Policy — for retailers selling age-restricted products
- Martyn's Law counter-terrorism procedure
- Sickness Absence Policy — updated for Day One SSP rights
- Disciplinary and Grievance Procedure — updated for Day One unfair dismissal rights
HSE-Compliant Retail Documentation
Generate retail and logistics compliance policies in minutes
ProPolicyForge generates HSE-aligned manual handling SOPs, lone working policies, CCTV data retention policies, cash handling procedures and more — tailored to retail and logistics operations and aligned to current UK legislation.
Generate Your First Document FreeDisclaimer: This article provides general guidance only and does not constitute legal or regulatory advice. Retail and logistics businesses should refer directly to HSE and ICO guidance and seek specialist advice for their specific circumstances.
