Health & Safety compliance. Who is legally responsible?