Travel and tour operator compliance checklist

Work through every section that applies to your business. Tick off each item when you have confirmed it is in place.

Section 1 — Health and safety at work

• Have you identified your general duties as an employer (or self-employed person) under the Health and Safety at Work etc. Act 1974?
• Have you carried out a suitable and sufficient risk assessment covering display screen equipment, manual handling, lone working (home-based agents) and workplace stress?
• If you employ five or more people, is the risk assessment recorded in writing?
• Do you have a written health and safety policy (required if you employ five or more people)?
• Have you appointed a competent person to assist with health and safety?

Section 2 — Fire safety

• Have you carried out a fire risk assessment for your premises?
• Are escape routes clear, signed and adequately lit?
• Is fire detection and alarm equipment installed and regularly tested?
• Have all staff received fire safety training?

Section 3 — Employers' liability insurance

• If you employ anyone (including part-time, contract or agency workers under your direction), do you hold employers' liability insurance with at least £5 million cover?
• Is the certificate from your insurer displayed at your premises or accessible electronically?

Section 4 — Equality and data protection

• Are you aware of your duties under the Equality Act 2010 (or equivalent Northern Ireland legislation) not to discriminate in employment or service provision?
• Have you considered reasonable adjustments for disabled employees and customers — for example, accessible booking information and premises access?
• Have you registered with the Information Commissioner's Office (ICO) for data protection (unless exempt)?
• Have you identified the lawful basis for each type of personal data you process — customer names, passport and visa details, payment information, dietary and medical requirements, travel itineraries and employee records?
• Can you respond to a subject access request within one calendar month?
• Do you have appropriate security measures for special-category health data (medical and dietary requirements)?

Section 5 — ATOL licensing

• If you sell flight-inclusive package holidays or flight-only arrangements as a principal (or as an agent for an undisclosed principal), do you hold an ATOL from the CAA?
• Have you determined which ATOL licence type applies to your business — Standard, Small Business, Franchise or Trade?
• Are you paying the ATOL Protection Contribution (APC) of £2.50 per licensable passenger booked?
• Have you appointed an Accountable Person who has completed the CAA's online training course?
• Are you submitting APC returns and payments within the required deadlines?
• Do you provide ATOL certificates to customers for ATOL-protected bookings?

Section 6 — Package Travel Regulations

• If you organise packages (two or more travel services for the same trip), do you have insolvency protection in place — bonding, insurance or trust account?
• For flight-inclusive packages, does your ATOL satisfy the insolvency protection requirement?
• Are you providing the required pre-contract information to consumers before they book?
• Are you providing standard information (booking confirmations) after the contract is agreed?
• Do you accept liability for the proper performance of the package as organiser?
• If you facilitate linked travel arrangements, are you providing the required information and insolvency protection?

Section 7 — Consumer protection

• Are your marketing materials, website descriptions and pricing accurate and not misleading about destinations, itineraries, accommodation or included services?
• Are all prices clear and complete, including taxes, fees and any mandatory supplements?
• Are you avoiding aggressive sales practices — high-pressure upselling, false urgency about limited availability?
• Are your booking terms and conditions fair and transparent, with no terms that create a significant imbalance to the consumer's detriment?
• Do you have a complaints-handling procedure that meets consumer-rights requirements?