Like all employers, GP practices have to fulfil their legal duty to ensure the health and safety at work of their staff, so far as is reasonably practicable. The law requires all employers to undertake a ‘suitable and sufficient risk assessment’ proportionate to the nature of the work. This is a legal obligation implemented in the last century and overrides any national guidance.

The UKHSA IPC guidance has previously acknowledged that it “does not supersede existing legislation or regulations across the UK”. Risk assessment should not be viewed as another imposition arising out of COVID-19 but as good practice to reduce risks of infections of staff or patients.

Current IPC guidance now states that ‘employers must ensure that COVID-19 is included in risk assessments for any health and care staff who come into contact with COVID-19 due to their work activity’. As set out in HSE guidance on risk assessments, this includes ‘health and social care workers caring for infected patients’.

The Government’s COVID-19 Response: Living with COVID-19 is inconsistent with this, as it states that “the health and safety requirement for every employer to explicitly consider COVID-19 in their risk assessments” was removed on 1 April 2022.

With this conflicting advice, a practice might be vulnerable if their risk assessment does not include COVID-19 whilst prevalence remains significant since the legal obligations under the Control of Substances Hazardous to Health Regulations persist and overrides any national guidance.

This guidance provides information about COVID-19 related risk assessment in general practice, including the professional and legal requirements. It is a step-by-step guide for GP employers and practice managers on how to undertake it.

A risk assessment must include consideration of the workplace, the worker and their tasks. It involves:

1. an assessment of the risk (an estimate of the product of the likelihood of an exposure/event and the severity of its consequences)
2. a determination of what is needed to mitigate the risk to an acceptable level
3. a gap analysis to identify what areas still need to be addressed
4. a conclusion of what must be done to reduce the risk to an acceptable level.

It may be necessary to also document:

1. what should be done but cannot be done at all, or has to be done in a pragmatic and less than ideal way (e.g. - because of reasons beyond the employer's control)
2. what residual actions are for the DHSC and others to do once employers are confident that they have done as much as they can.

We have produced separate guidance about what the risk assessment process for doctors involves. 

Assessing the risks in your practice

The HSE (Health and Safety Executive) provides guidance on assessing risks but doesn’t specify how to lay out your risk assessment. The scenarios we present below are intended for risk assessments specifically in GP practices:

Clinical workforce in a clinical contact

For example, clinicians consulting and examining patients, doing BPs, ECGs, phlebotomy, or vaccinating in clinics:

• high risk - face-to-face consultation in small poorly ventilated room
• medium risk - face to face consultation in a large, well-ventilated room with CO2 <800ppm, vaccination clinic outdoors in a gazebo.

Non-clinical workers in a patient-facing role

For example, receptionists:

• medium risk - screen partition separating patients and staff with good, well- maintained ventilation; vents on either side of the partition 
• high risk - no partition (or partition but without separate ventilation either side) and/or ventilation inadequate or uncertain.

Non-clinical workforce in a non-patient facing role

For example, secretaries: 

• high risk - small, poorly-spaced, at maximum occupancy CO2 >800ppm
• medium risk - large, well-spaced, even at maximum occupancy CO2 <800ppm.

Any workers interacting with each other

For example, staff room and staff meetings:

• high risk - small, poorly-spaced, at maximum occupancy CO2 >800ppm
• low to medium risk - large, well-spaced, even at maximum occupancy CO2 <800ppm.

Patients interacting with staff

• medium risk - face-to-face consultation in small poorly ventilated room
• low risk - vaccination clinic outdoors in well ventilated and well-spaced gazebo CO2 <600ppm.

Patients in waiting areas

• medium risk - small, poorly-spaced, at maximum occupancy CO2 >800ppm
• low risk - large, well-spaced, even at maximum occupancy CO2 <800ppm.

This example of risk assessment for practices does not consider the prevalence of COVID-19 in the community. When completing your assessment, you should adapt the risk levels above to your practice and community circumstances. As advised by HSE, failure to tailor generic example assessments to the specific environment will not provide protection for employees and is unlikely to satisfy the law.

How to mitigate the risks

Following the assessment of the level of risk, the next step is to identify measures that reduce the risk of transmission of COVID-19.

One practical approach is based on the framework used in occupational hygiene to assess and control risks from hazards in the workplace. In the context of COVID-19, the model works as follows:

1. source - the infected individual (patients and staff)
2. pathway - how the infection is transmitted
3. receptor - an individual at risk of becoming infected (patients and staff)

The aim is to move, as far as is reasonably practicable, from high-risk to medium/low-risk level.

If environmental measures are not sufficient to reduce the risk to an acceptable level, further options are:

• restrict individuals who are more susceptible from the higher risk areas where they are most vulnerable to exposure
• use RPE such as FFP3 for employees in high-risk scenarios, and at least FFP2 for those in medium-risk scenarios. 

It is accepted that risk cannot be eliminated, only reduced. You will need to review those mitigations that potentially reduce the standard of care, such as limiting face to face consultations, once the disease prevalence decreases.

* The proposed policy mandating NHS workers in England to be vaccinated against COVID-19 was dropped in January 2022 (this policy was never going to be applied to the other UK nations).

Completing your assessment

You should consult with your employees and their (safety) representatives, and clearly communicate your plans to them.

You should also be aware of other direct implications of the new working arrangements such as:

• the likelihood that risk mitigation arrangements combined with staff sickness absence may be causing lone working
• the psychosocial consequences of the pandemic on staff, like burnout. 

RPE (respiratory protective equipment)

There is overwhelming evidence of the exposure of healthcare workers to COVID-19 and the effectiveness of appropriate RPE in controlling this risk.

Different types of respirators relate to different levels of risk:

• FFP2 (filtering face piece 2)- high risk
• FFP3 (filtering face piece 3) - very high risk

They should be fit tested to ensure proper filtering. This is especially important for women and individuals of an ethic minority background who have been disproportionally affected by poorly fitting RPE. However, FFP3 respirators and fit testing are not readily available. HSE has carried out a review of FFP2 and FFP3 masks and confirmed that FFP2 respirators can be used in the absence of FFP3 respirators, once risks have been assessed.

If the risk in your practice is high or very high you should make, and document in writing, reasonable efforts to source FFPs with fit-testing. You can:

• ask your local commissioner using our template letter to CCGs
• contact your local hospital/NHS Trust/dentists
• contact commercial fit testing providers.

It is most unlikely that any degree of ventilation (even 12 Air Changes per Hour) or filtration will reduce the risk of face-to-face clinical interactions with an infectious patient to a degree as to cancel out the need for RPE. IPC guidance on PPE and RPE has changed throughout the pandemic and is often confusing and unhelpful. We recommend basing decisions about the appropriate level of RPE on local risk assessment as outlined in this guidance, in order to satisfy health and safety requirements and provide appropriate protection for staff and patients. Read the most recent government guidance on IPC (Infection Prevention and Control).

Note: Fluid resistant surgical masks (FRSM) or non-specific ‘face coverings’ have been shown to attenuate the risk of spreading COVID-19. However this reduction in risk is small when compared to respirators and they do not fulfil the standard or legal definition of 'Respiratory Protective Equipment'.