Employers risk breaking the law as they respond to UK government guidance about policing staff vaccination.