What business owners, directors and managers must know about regulatory enforcement, investigations and penalties

With regulations stricter than ever, the difference between an honest mistake and a criminal prosecution is closer than you might think. We sat down with Mike Hayward, Equity Partner and Head of Regulatory & Dispute Resolution at Woodfines, to find out how updates to enforcement law are catching well-meaning business owners out.

Beginning his career with the Crown Prosecution Service in 1990 and with decades of experience defending corporate clients, Mike has a rare 360-degree perspective on how regulators operate and how businesses can protect themselves.

Equality of Arms – Why Early Legal Advice is Essential 

The most common mistake that businesses make when they’re approached by enforcement agencies is thinking they can handle the initial conversations or interviews alone. A common misconception has taught us that seeking legal advice can be seen as an admission of guilt, but in fact, it’s a necessity. Going into an interview without guidance can put you at a huge disadvantage, and the evidence discussed at this early stage, and the strategic decisions taken, can prevent the likelihood of needing this to be untangled further down the line.

Enforcement agencies, whether the HSE, DVSA, Local Authority, Police or the Environment Agency, all have teams of legally trained investigators. Drawing on the principle of equality of arms, which underpins the fundamental rights of any suspect in a criminal investigation, appointing a solicitor at the earliest opportunity is the most sensible approach for any business owner facing a potential investigation.

For businesses in Milton Keynes, Bedford and Cambridge, particularly those in transport and haulage, the regulatory landscape is always shifting, hence the need for up to date legal knowledge, for instance:

• Road Risk and Licensing. New rules are emerging regarding HGV/van fleet compliance and driver licensing and testing.

• Regulators expect you to have bespoke policies. Many businesses buy off the shelf standard health & safety policies that don’t cover the specific processes and procedures that relate to their business. Ask yourself; does your policy cover your specific warehouse layout, the forklift training your drivers take, or your specific axle-loading procedures?

• Culture of Compliance. Robust policies aren’t just about avoiding fines, they aim to improve staff retention and support the wellbeing of your team.

Prosecutions aren’t necessarily the result of an isolated one-off mistake, but a huge shift in the justice system over the past few decades means that some regulators no longer work with businesses to correct errors and educate them in the way they used to. This increases the risk of reputable companies being investigated for policy failures, because they’re a visible entity, unlike rogue operators who simply disappear at the first sign of trouble.

Red Flags – How can I spot trouble before it arrives?

• Analytics. If your vehicle telematics or compliance reports show patterns of poor behaviour and you don’t act, you are effectively creating evidence of negligence. Mitigate the risk by taking action to change this behaviour.

• Communication. If a regulator contacts you to “speak about your compliance,” that is the trigger. This is the point at which you should seek legal advice.

• Staff Trauma. Following a workplace accident or road traffic incident, staff statements made under stress can be misleading. My advice to the business and its employees is “Pause, breathe, stop, think.”

Evidence and Public Interest

If the worst happens and a breach is found to have occurred, all authorities must comply with the Code for Crown Prosecutors, which involves two tests:

1. The Evidential Test – Is there enough evidence to provide a realistic prospect of conviction?
2. The Public Interest Test – Even if there is evidence, is it in the public’s interest to prosecute?

This is where early legal intervention is vital. A skilled legal team can argue that a prosecution isn’t in the public interest for a company with an exemplary record that has already taken remedial action.

Personal Liability – Could I go to court and prison?

One of the most important questions I ask when a client is asked to attend a formal interview  is whether the regulator is interviewing the corporate entity or the individual. It is essential to distinguish between speaking on behalf of the company or in your personal capacity, as without this distinction, you could find yourself personally liable for corporate failings. What’s the difference?

• The Company – Usually faces financial penalties.

• The Director – Can face personal criminal charges if there is evidence of a “blatant disregard” for regulations, for instance.

Looking Ahead – AI and the Fair Work Agency

There are two major developments on the horizon in 2026; the Fair Work Agency, which SMEs should be using as an opportunity to review employment contracts and agency work rights in order to stay ahead of labour market enforcements; and the risk of AI. We all know that the rapid growth of AI is seeing more businesses adopt it for increased efficiency and productivity, but relying too heavily on AI for compliance without human oversight is risky. If an AI-generated safety report is incorrect and someone gets hurt, “I relied on the software” is not a valid legal defence. 

What are you waiting for? Review your processes and procedures today

The investment of your time today to get your policies inline with the latest regulations is a tiny fraction of the emotional and financial costs you could face if you come under regulatory scrutiny tomorrow.

If you do find yourself in trouble, early legal advice is essential to ensuring you are treated fairly and your reputation remains intact.