Crime and Policing Act 2026: Corporate liability and UK health and safety compliance for duty holders

Crime and Policing Act 2026: what UK health and safety law changes mean for duty holders and business compliance

What has changed

The Crime and Policing Act 2026 introduces new provisions that extend criminal liability to bodies in certain circumstances and broadens powers for policing, public order and related offences. This has implications for organisations in UK health and safety law and regulatory compliance by emphasising ongoing governance and accountability for organisational conduct and risk controls.

Why it matters for businesses

The new framework affects how legal duties, risk management and HSE requirements are demonstrated. For organisations, the risk is not only about on the day of an incident but about governance, decision making and the ability to show competent oversight and control. Where bodies can be held criminally liable, board level governance, duty holder engagement and control of management systems become central to regulatory compliance.

Who is affected

While the Act is national, the areas most touched include organisations responsible for public spaces, events, workplaces and those involved in safety, security and public order. Any business with duties under UK health and safety law or related regulatory regimes should consider the broader implications for governance and policy setting.

Key duties for employers

Review and strengthen governance structures to ensure that senior leaders and responsible persons understand and manage the legal duties that could extend to corporate liability. Update risk assessments to reflect potential criminal liability scenarios and ensure proportionate control measures are in place. Ensure competent advice and oversight across health and safety management systems including ISO 45001 alignment. Competent Person support can help align governance with new requirements.

Enforcement and sanctions

The Act signals tougher enforcement where organisational failings contribute to harm or non compliance. Organisations should expect HSE or equivalent enforcement actions to consider corporate liability and management oversight in determining penalties and corrective actions.

Steps to achieve compliance

1) Appoint or affirm competent oversight for health and safety governance. 2) Review and refresh policies and procedures to reflect broader liability risks. 3) Update risk assessments and control measures to address governance related scenarios. 4) Engage workers in risk assessments and decision making. 5) Align management systems such as ISO 45001 with new duties. 6) Plan training and awareness for managers on corporate liability risk. For ongoing support see health and safety training and support packages and services.

Final note: Proactive planning now helps organisations demonstrate compliance and protect people and assets under UK health and safety law.