Working at Height Regulations 2005: The Hierarchy of Controls Explained

Falls from height remain the single largest cause of workplace fatalities in the UK. Despite decades of guidance, codes of practice and well-publicised enforcement, people still fall through fragile roofs, off ladders that should never have been used, and out of mobile elevating work platforms that were never set up properly. The legal framework that governs all of this is the Work at Height Regulations 2005, and the working at height regulations apply to far more activities than many employers realise.

The core question most dutyholders ask is straightforward. What does the law actually require when planning work at height? In short, it requires you to think before you climb. The regulations set out a clear hierarchy: avoid the work at height where you can, prevent falls where you cannot avoid the work, and mitigate the consequences where prevention is not fully possible. That sequence is not optional. It is the legal test against which your decisions will be measured if something goes wrong.

This article unpacks how the working at height regulations 2005 work in practice. It covers who carries the duty, how the avoid prevent mitigate hierarchy applies to roof access, ladders and MEWPs, what good planning and supervision look like, and where employers most often fall short. The aim is to give responsible people a clear, defensible approach rather than a vague summary of the law.

What the working at height regulations 2005 Actually Require

The Work at Height Regulations 2005 apply to any work where a person could fall a distance liable to cause personal injury. There is no minimum height threshold. A fall from a low loading bay, a stillage or a mezzanine edge can be just as serious as a fall from a roof, and the regulations are written to capture all of it. The phrase that matters is the risk of injury, not the height of the drop.

The regulations place duties on employers, the self-employed and anyone who controls work at height, including managing agents, principal contractors and facilities managers who instruct or arrange the work. Those duties are practical rather than abstract. You must plan the work properly, use competent people, select suitable equipment, inspect that equipment, and supervise the activity in a way that matches the risk.

Five themes run through the regulations and tend to be where enforcement focuses:

• proper planning, including emergency and rescue arrangements
• competence of those organising and carrying out the work
• risk assessment that genuinely informs the method, not a generic template
• selection of work equipment that follows the avoid prevent mitigate hierarchy
• inspection of equipment and places of work at height before use

None of this is unusual ground for anyone familiar with general health and safety law. The Management of Health and Safety at Work Regulations 1999 already require suitable and sufficient risk assessment, and the Provision and Use of Work Equipment Regulations 1998 sit alongside the Work at Height Regulations when access equipment is involved. The 2005 regulations sharpen the duty by setting a strict order in which control measures must be considered, and by requiring that the chosen approach is justifiable on risk grounds rather than convenience or cost.

One detail often missed is that the duty extends to fragile surfaces and to falling objects. Regulation 9 deals specifically with fragile surfaces such as asbestos cement roofs, fibre cement panels and rooflights. Regulation 10 deals with the risk of objects falling onto people below. Both are common factors in serious injuries and prosecutions.

Who Counts as a Dutyholder and Where Responsibility Sits

Responsibility under the working at height regulations is not limited to the person standing on the ladder. It extends to everyone who organises, controls or arranges the work. That includes:

Further guidance can be found in the Control of Substances Hazardous to Health regulations.

• employers whose staff carry out work at height as part of their role
• self-employed contractors working on their own behalf
• those who control the work, including site managers, project managers and facilities managers who instruct contractors
• building owners and managing agents who arrange access for cleaning, maintenance, inspection or repair
• principal contractors and principal designers under the Construction (Design and Management) Regulations 2015 where construction work is involved

This matters because liability rarely sits with one party in isolation. A managing agent who books a contractor to clean gutters has duties around safe access. The contractor has duties around method, equipment and competence. The building owner may carry duties for the structural condition of the roof or the existence of fragile surfaces. When an incident is investigated, the HSE will look at the chain of decisions, not just the moment of the fall.

For in-house teams, the responsible person is usually the line manager or facilities lead who instructs the work. That person needs to understand enough about the activity to challenge a poor method statement, recognise an inadequate risk assessment, or refuse access where conditions are unsafe. Signing off a permit to work without that understanding is a common point of failure.

Where contractors are used, the duty to ensure competence is shared. The dutyholder commissioning the work cannot simply rely on the contractor’s word. Reasonable checks on training records, equipment certification, insurance and previous experience are part of the duty. A short pre-start meeting that confirms the method, the rescue arrangements and the supervision plan is often the difference between a controlled job and an avoidable incident.

The Avoid, Prevent, Mitigate Hierarchy in Plain Terms

The hierarchy of controls in the working at height regulations 2005 is simple to state and demanding to apply properly. It runs in this order, and each step must be exhausted before moving to the next.

Avoid. The first question is whether the work needs to be done at height at all. Can the task be redesigned, relocated or eliminated? Examples include moving plant items to ground level for servicing, using extendable poles for window cleaning, installing remote diagnostic sensors so engineers do not have to climb to inspect, or specifying ground-level fixings for signage. If the work can be avoided, that is the correct answer under the regulations. Cost or convenience is not a valid reason to skip this step.

Prevent. Where work at height cannot be avoided, the next duty is to prevent falls. This means using an existing place of work that is already safe, such as a permanent platform with edge protection, or providing collective fall prevention equipment such as scaffolding with handrails and toe boards, MEWPs with intact guardrails, or properly designed roof edge protection. Collective measures protect everyone in the area without relying on individual behaviour, which is why they sit above personal protective equipment in the hierarchy.

Mitigate. Only when avoidance and prevention are not reasonably practicable do you move to mitigation. This means accepting that a fall could happen and reducing the distance and consequences. Collective mitigation includes nets and soft-landing systems. Personal mitigation includes fall arrest harnesses with energy absorbing lanyards attached to suitable anchors. Personal fall protection is the lowest tier of the hierarchy because it depends on correct fitting, correct anchoring, regular inspection, user training, and rescue arrangements that work in real time.

The hierarchy is sometimes summarised as avoid prevent mitigate, and that shorthand is useful in conversation. The risk in shorthand is jumping straight to harnesses or nets because they are familiar, without genuinely testing whether the work could have been avoided or whether collective prevention was reasonably practicable. That gap is where most enforcement cases begin.

A useful test is to write down, in order, why each higher tier was rejected. If the only reason avoidance was rejected is that it was not considered, the working at height risk assessment is not defensible.

Applying the Hierarchy to Roof Access Work

Roof access is one of the highest-risk activities in routine building maintenance. It accounts for a disproportionate share of fatal falls, particularly on commercial and industrial buildings with older roof coverings. Applying the hierarchy properly to roof access safety means questioning a great deal of work that has historically been done with minimal control.

Start with avoidance. Many roof inspections can now be done with drones, fixed cameras or thermal imaging. Gutter cleaning can often be carried out from the ground using vacuum systems with carbon-fibre poles. Plant on the roof can be relocated, where the building permits, or fitted with remote monitoring so physical attendance becomes the exception rather than the routine.

Where someone must go onto the roof, prevention is the next test. The strongest control is a permanent walkway with handrails that takes operatives directly to the work area. Where that is not in place, options include:

• collective edge protection installed before access begins, such as scaffolding or temporary edge guardrails
• man-safe systems with horizontal anchor lines, used in restraint mode so the worker physically cannot reach an unprotected edge
• demarcation barriers set well back from the edge for low-risk inspection tasks where the worker never approaches the perimeter

Restraint, where the lanyard length is set so the worker cannot reach a fall hazard, is preferable to fall arrest because it prevents the fall entirely. Fall arrest should be the last resort on a roof, and it should never be used without a tested rescue plan that can recover a suspended worker within minutes. Suspension trauma is a real and time-critical risk.

Fragile surfaces deserve specific attention. Asbestos cement roofs, fibre cement sheets, plastic rooflights and older skylights can fail without warning under body weight. Walking on a translucent rooflight that has weathered for twenty years is one of the most common ways people die at work in the UK. Controls include staging boards that span the purlins, properly fitted rooflight covers, and clear marking of fragile areas. A roof should be assumed fragile until proven otherwise, particularly on older industrial units and agricultural buildings.

For higher-risk roof work, a permit to work system gives the dutyholder a structured way to confirm that the method, equipment, weather conditions, competence and rescue plan are all in place before access is granted. A permit is only as strong as the person issuing it, which brings the discussion back to competence.

Ladders, Stepladders and the Reality of Short-Duration Tasks

Ladders are not banned. The regulations allow ladders and stepladders to be used for work at height where the use of other, safer equipment is not justified because of the low risk and short duration of the task, or because of existing features on site that cannot be altered. The key words are low risk and short duration.

Short duration is generally understood as around 30 minutes at any one position, although this is guidance rather than a fixed legal limit. Low risk means that the task does not involve carrying heavy loads, applying significant side-loading force, or working in conditions where balance is compromised. Replacing a light bulb, taking a meter reading, or carrying out a brief visual inspection can fit this profile. Drilling overhead, fitting heavy fixings, or carrying tools and materials repeatedly up and down generally does not.

A proper ladder risk assessment should consider:

• the duration and nature of the task, and whether it can realistically be done in one short visit
• the surface the ladder will stand on, including stability, levelness and slip resistance
• the angle of the ladder, ideally one in four, and secure footing or fixing at the top
• the load to be carried, including tools, and whether three points of contact can be maintained
• environmental factors such as wind, rain, ice, traffic and pedestrians below
• the condition of the ladder, with documented pre-use checks and periodic detailed inspections
• the competence of the user, including training in safe ladder use

Stepladders carry their own risks. Side-on working on a stepladder is a frequent cause of falls because the stepladder is not designed for lateral loading. Overreaching, standing on the top step where the manufacturer prohibits it, and using a stepladder on an uneven floor are all common failures.

The honest test for any ladder use is whether you would defend the choice in front of an inspector after an incident. If a small podium step, a low-level scaffold tower or a simple work platform would have done the job with less risk, the ladder was probably the wrong choice. The cost of a podium is small compared to the cost of a serious fall, and inspectors know this.

MEWPs, Towers and Choosing the Right Access Equipment

Where work at height is genuinely needed and ladders are not appropriate, the choice typically falls between mobile elevating work platforms, mobile access towers and fixed scaffolding. Each has a place, and selecting the wrong one is a common driver of incidents.

MEWPs include scissor lifts, vertical mast lifts and articulating or telescopic boom lifts. They are powerful, flexible and capable of taking workers to height quickly. They also create their own risks. The most serious are entrapment between the platform and an overhead structure, overturning on uneven or sloping ground, ejection from the platform during sudden movement, and contact with overhead power lines. MEWP safety depends on:

• selecting a machine appropriate to the task, the ground conditions and the working envelope
• ensuring the operator holds a recognised qualification, typically IPAF, and has familiarisation on that specific machine
• carrying out a pre-use inspection of the machine and the working area
• using a harness with a short restraint lanyard inside boom-type platforms to prevent ejection
• planning a rescue method in case the operator becomes incapacitated at height
• controlling the area beneath and around the machine so other workers and members of the public are not exposed to falling objects or movement

Mobile access towers offer a stable working platform for tasks of longer duration. They must be erected by someone who has been trained, typically through PASMA, and they must be inspected before first use, after any alteration, after any event that could affect stability, and at intervals not exceeding seven days. Towers fail most often when they are erected without outriggers, used on uneven ground, moved with people or materials on the platform, or assembled with missing components.

Scaffolding is appropriate for larger, longer-duration jobs and for situations where a stable, permanent-feeling platform is needed across a wide area. It must be designed, erected and inspected by competent people, and the inspection record must be available on site. Tied scaffolds, edge protection, brick guards and proper access ladders are all part of a compliant set-up. Scaffolds that have been altered by following trades without authorisation are a frequent cause of incidents.

The selection question is rarely either/or. A facilities manager planning external repairs to a three-storey building will often combine a small scaffold for the main working face, a tower for an awkward return wall, and a MEWP for short tasks at high level on the roof edge. The hierarchy is the guide, but the practical decision depends on the duration, the access points, the loads and the surrounding environment.

Planning, Supervision and Competence Requirements

The working at height regulations make planning a specific legal duty. Every work activity at height must be properly planned, appropriately supervised and carried out in a manner that is, so far as is reasonably practicable, safe. Planning is not an administrative formality. It is the document trail that proves the hierarchy was applied.

Good planning produces a working at height risk assessment that is task-specific and a method statement that explains how the work will be done, in what sequence, by whom, with what equipment, under what supervision, and with what arrangements for emergencies. Generic templates copied from job to job are a recurring weakness in enforcement files. A risk assessment that does not reflect the actual building, the actual roof, the actual contractor and the actual day’s conditions is not suitable and sufficient.

Supervision must match the risk. Low-risk tasks done by an experienced operative may need only periodic checks. Higher-risk tasks, particularly those involving fall arrest, fragile surfaces, or work near unprotected edges, require closer and more active supervision, including someone with the authority to stop the work if conditions change.

Competence has three components. The person carrying out the work must have the training and experience to do it safely. The person planning the work must understand the activity well enough to specify suitable controls. The person supervising must have the authority and the knowledge to intervene. Certificates alone do not prove competence. They prove training, which is the starting point. Competence is demonstrated by applying that training appropriately in real conditions.

Rescue planning is the part of the duty that is most often missed. If a worker is suspended in a fall arrest harness, the response cannot be to call the fire and rescue service and wait. Suspension trauma can become serious within minutes. The plan must identify equipment, trained personnel and a method that will recover the casualty quickly. Where that cannot be assured, the choice of fall arrest as a control measure is not defensible.

Common Failures That Lead to Enforcement and Serious Injury

Patterns repeat across HSE prosecutions and serious incidents. The same failures appear year after year, and most are visible to anyone who looks for them.

• treating fall arrest as the default control rather than the last resort, often because harnesses are familiar and edge protection feels expensive
• using a ladder for a task that obviously needed a tower or platform, often because the ladder was already on the van
• working on fragile roofs without staging or rooflight covers, sometimes because the operative did not realise the surface was fragile
• missing or generic risk assessments that do not match the actual site or task
• contractors selected on price without checks on competence, training records or insurance
• permits to work signed off by people who do not understand the activity well enough to challenge it
• no documented rescue plan for fall arrest situations, or a plan that relies entirely on emergency services
• scaffolds altered by following trades without authorisation, removing ties or boards to suit other work
• MEWPs used on unsuitable ground, with outriggers missing or partially deployed
• no pre-use checks on ladders, towers or MEWPs, despite this being a basic legal requirement
• weather conditions ignored, particularly wind speed for MEWPs and towers and ice for any external roof work

The common thread is that none of these failures are technically complex. They are failures of planning, supervision and culture. That is also why they are amenable to a structured consultancy review rather than an expensive engineering fix.

You can find recent enforcement summaries and prosecutions on the health and safety news page, which tracks the kinds of incidents that result in fines and custodial sentences. The patterns are sobering, and they reinforce how important it is to apply the hierarchy properly the first time.

Practical Employer Checklists for Work at Height

Checklists are not a substitute for thinking, but they are a useful discipline for making sure thinking has actually happened. The lists below are designed for in-house responsible persons and managing agents who commission work at height.

Before the Work Is Planned

• can the task be eliminated, redesigned or done from ground level
• if not, what collective prevention measures are available on this site
• is there a permanent edge protection or walkway system already in place
• are there fragile surfaces, and have they been identified and marked
• are there overhead services, including power lines, that will affect access
• what is the working duration, and does it justify the chosen equipment
• who will plan, supervise and carry out the work, and is their competence documented

Before the Work Starts on Site

• has a site-specific risk assessment and method statement been produced and reviewed
• have weather conditions been checked, including wind speed for MEWPs and towers
• has the equipment been inspected and is the inspection record available
• are exclusion zones in place for falling objects and pedestrian or vehicle movement
• is a rescue plan in place, with trained people and appropriate equipment
• has a permit to work been issued where the risk profile justifies one
• has a pre-start briefing covered the method, the controls and the stop conditions

During the Work

• is supervision matching the level of risk in real time
• are the controls being used as planned, including harness attachment points
• have conditions changed, and does the assessment need to be reviewed
• is the work area still clear of unauthorised people
• are pre-use checks being carried out at each shift change or position change

After the Work

• has the equipment been removed, returned and inspected
• have any near misses been recorded and reviewed
• has the method statement been updated to reflect what was learned
• are inspection and maintenance records being retained for the required period
• have any RIDDOR-reportable events been notified appropriately

These checklists work as a defensible audit trail when an incident is investigated. They also tend to surface weaknesses in advance, which is the point of having them.

When to Bring in a Health and Safety Consultant

Most organisations can handle routine work at height in-house once they have a clear policy, a competent responsible person and a working set of procedures. Bringing in a consultant becomes useful in specific circumstances, and recognising those circumstances is part of managing the duty well.

Consultancy support is typically valuable where:

• a building has unusual or complex roof access requirements, including fragile surfaces, multiple levels or restricted access points
• an organisation manages a property portfolio and needs a consistent approach across sites
• existing risk assessments and method statements look generic and have not been challenged for some time
• contractor selection and oversight processes need a structured review
• there has been a near miss, an injury or an enforcement notice that requires independent root cause analysis
• permanent access solutions are being designed and the dutyholder wants to test the proposed approach against the hierarchy
• training and competence frameworks need to be benchmarked against industry practice

A good consultant will not produce a thicker pile of paperwork. They will challenge the chosen control measures against the avoid prevent mitigate hierarchy, identify where the dutyholder is exposed, and recommend changes that are proportionate to the risk. The end result should be a smaller, sharper system that is easier to maintain and easier to defend.

For dutyholders unfamiliar with the wider regulatory picture, our summary of health and safety legislation sets out how the Work at Height Regulations sit alongside the broader framework, including the Management of Health and Safety at Work Regulations 1999 and PUWER 1998.

Frequently Asked Questions About Working at Height

Is There a Minimum Height Below Which the Regulations Do Not Apply?

No. The Work at Height Regulations 2005 apply wherever a person could fall a distance liable to cause personal injury. There is no two-metre rule and no minimum height threshold. A fall from a low platform onto a hard floor or onto sharp equipment can cause serious injury, and the regulations capture that. The relevant test is the risk of injury, not the number of metres.

Can Employees Refuse to Work at Height if They Feel It Is Unsafe?

Yes. Under the Employment Rights Act 1996 and general health and safety duties, employees can refuse to carry out work where they reasonably believe there is a serious and imminent danger. Practically, this means the supervisor or responsible person should welcome a stop-work concern and review the activity rather than pressuring the employee to continue. A culture where workers feel able to raise concerns is one of the strongest indicators of a safe operation.

How Often Should Fall Protection Equipment Be Inspected?

Personal fall protection equipment, including harnesses and lanyards, must be inspected before each use by the user, and subjected to a detailed inspection by a competent person at intervals of no more than six months. Equipment used in particularly harsh conditions, such as on contaminated sites or in heavy industrial environments, may need more frequent detailed inspection. Records must be kept and made available on request.

Who Is Responsible When a Contractor Falls on a Client’s Site?

Responsibility is usually shared. The contractor’s employer carries duties for training, equipment and method. The client or occupier carries duties for the condition of the premises, the information provided about hazards such as fragile roofs, and the arrangements for coordination. Where construction work is involved, the principal contractor and principal designer carry specific duties under CDM 2015. An HSE investigation will typically look at all parties in the chain of decisions.

Does the Hierarchy Apply to Window Cleaning and Other Low-Risk Tasks?

Yes. The hierarchy applies to all work at height, regardless of perceived risk level. For window cleaning, that means asking whether the work can be done from the ground using extendable poles, whether interior cleaning can be done from a fixed platform, and only then considering ladders, towers or rope access. The fact that a task feels routine does not exempt it from the regulations or from the duty to apply the hierarchy.

If you are responsible for premises, contractors or staff who carry out work at height and want a clear, defensible approach to compliance with the working at height regulations, our consultants can review your current arrangements, test them against the hierarchy and identify practical improvements. Contact us to arrange a free, no-obligation discussion.