Running a computer programming, consultancy or IT services business means employing people at desks, screens and in data centres. The workplace health and safety duties under the Health and Safety at Work etc. Act 1974 apply — with display screen equipment, mental health and lone working the particular risks in this sector. The Health and Safety Executive (HSE) regulates in Great Britain and HSENI in Northern Ireland.
You also carry data protection duties that bite harder than in most sectors, because you routinely process personal data on behalf of clients. And if you provide an online marketplace, online search engine or cloud computing service above the NIS threshold, you must comply with the Network and Information Systems Regulations 2018.
What you need to do
-
Set up a safe business and employ people
Start with the universal spine. Follow "Set up and run a safe IT and programming business" for your health and safety, fire safety, employers' liability insurance, equality, data protection and — if it applies — NIS digital service provider duties.
-
Confirm you have covered everything
Finish with the IT and programming business: compliance checklist to confirm your obligations are met.
Other rules that may apply to you
If you run an online service where users interact — a platform, app, marketplace, forum or search service — you may also have duties under the Online Safety Act 2023, regulated by Ofcom.
If you work through your own limited company (a personal service company), check the off-payroll working (IR35) rules, which decide whether you are taxed as an employee for a given engagement — see GOV.UK: understanding off-payroll working (IR35).
Legal basis
Primary legislation and key regulations
Read it on legislation.gov.uk (opens in a new tab) legislation.gov.uk