UK and EU Health and Safety Law: A Post-Brexit Comparison

Introduction

UK and EU health and safety law remain far more alike than different, but since Brexit they have started to drift apart in how rules are made, updated and enforced. Both systems share one core idea: employers must identify workplace risks and control them. They reach that idea by different legal routes, and the routes are now diverging.

For decades the two were effectively one system. Britain’s modern framework, set by the Health and Safety at Work etc. Act 1974 (HSWA), was built on the Robens Report of 1972. It was enacted in 1974, a year after the UK joined the European Economic Community, but it was a home-grown design. From 1992 onwards, much of its detailed regulation was written to implement EU directives. The famous “six pack” of 1992 regulations, and later rules on work at height, construction, asbestos and display screen equipment, all trace back to Brussels. The EU’s own foundation is the Framework Directive 89/391/EEC, which set common principles for all member states in 1989.

The UK left the EU on 31 January 2020, and the transition period ended on 31 December 2020. Since then Great Britain has been free to rewrite its rules, and Northern Ireland has followed a different path under the Windsor Framework. Meanwhile the EU has kept legislating, adding new rules on machinery, asbestos, chemicals, artificial intelligence and platform work. For a business, a consultant or a safety professional working across the Channel, the practical question is no longer “are the rules the same?” but “where do they still match, and where must I check twice?”

This article compares the two systems in five steps:

  1. The foundations: the UK’s goal-setting model and the EU’s directive model.
  2. What Brexit changed legally, including retained EU law and Northern Ireland.
  3. How regulators and enforcement differ.
  4. A topic-by-topic comparison of the main workplace regimes.
  5. Where the systems diverge, where they still align, and a closing summary.

A note on terms. UK” is used where the point applies across the whole country, and “Great Britain” (GB) or “Northern Ireland” (NI) where it does not, because health and safety is devolved in Northern Ireland and enforced by a separate regulator. “EU” means the Union-level rules, which member states must transpose into national law. Member states differ from one another, so any statement about “the EU” is necessarily a generalisation. This is general information, not legal advice, and the position was checked against public sources in October 2026.

UK and EU Health and Safety Law

Two foundations: goal-setting statute versus directive framework

The UK model rests on a single enabling statute, while the EU model rests on a treaty power and a set of directives that member states must turn into national law. That structural difference explains most of the other contrasts in this article.

The UK model: the 1974 Act

The Health and Safety at Work etc. Act 1974 is an “enabling” Act. It sets broad duties and then lets ministers make detailed regulations under it. Employers must ensure the health, safety and welfare of their employees (section 2) and of other people affected by their work (section 3). Duties also fall on the self-employed, on those who design, make or supply articles and substances (section 6), and on employees themselves (section 7).

Most of these duties are qualified by the phrase “so far as is reasonably practicable”. That wording lets a duty-holder weigh the size of a risk against the cost, time and trouble of removing it. It is the signature of the British approach: the law states the outcome and leaves the method to the duty-holder, with the burden of proving that more could not reasonably have been done resting on the defendant.

Beneath the Act sit regulations, then Approved Codes of Practice (ACOPs), then HSE guidance. An ACOP has a special legal status. A court can treat a breach of the relevant code as proof of a breach of the law unless the defendant shows it complied in some equally effective way. Guidance has no such status and is advisory.

Since 1 October 2013, section 69 of the Enterprise and Regulatory Reform Act 2013 has also removed civil liability for breach of most health and safety regulations. An injured worker must now generally prove negligence rather than rely on breach of a statutory duty alone. Criminal enforcement is untouched.

The EU model: Framework Directive and daughter directives

The EU has no single workplace safety statute. Instead, Article 153 of the Treaty on the Functioning of the European Union lets the Union adopt directives setting minimum requirements for the working environment. Member states can then go further, and many do.

The cornerstone is the Framework Directive 89/391/EEC. It requires employers to ensure the safety and health of workers in every aspect related to work. It also sets out general principles of prevention, which in outline are to avoid risks, evaluate those that cannot be avoided, combat risks at source, adapt work to the individual, and give collective protective measures priority over individual ones. Other core obligations are:

  • a documented risk assessment;
  • competent protective and preventive services;
  • information, consultation and participation of workers;
  • training; and
  • health surveillance.

More than twenty “individual” or daughter directives then deal with particular subjects such as workplaces, work equipment, manual handling, display screens, carcinogens, asbestos, noise, vibration and construction sites.

The key conceptual difference

The two models look alike in practice but differ in legal wording. The EU duty is expressed as an obligation to “ensure” safety, with only narrow exclusions available to member states for unforeseeable events and exceptional circumstances beyond the employer’s control. The British duty is qualified by reasonable practicability.

The European Commission challenged this gap in the Court of Justice. In Case C-127/05, Commission v United Kingdom (2007), the Court held that the UK had failed to transpose the Framework Directive correctly by qualifying the employer’s duty in this way. Britain never amended the 1974 Act in response, and since Brexit there is no longer any obligation to do so. The point remains the clearest example of a difference in legal design that has little to do with day-to-day outcomes but could matter in litigation.

A second difference is the status of detailed rules. In the EU, a directive binds member states, not individual businesses, until it is transposed. In Britain, regulations, codes and guidance form a layered system in which HSE can often adjust the lower layers without new primary legislation. That flexibility matters for the post-Brexit story that follows.

What Brexit changed, and what it did not

Brexit changed who can amend the rules far more than it changed the rules themselves. On 1 January 2021 almost every health and safety regulation in force on 31 December 2020 continued to apply word for word. The real shifts came later, as Great Britain began to use its new freedom, and in Northern Ireland, where a different arrangement applies.

Day one: retained EU law

The European Union (Withdrawal) Act 2018 preserved EU-derived law at the end of the transition period as “retained EU law”. It came in three forms:

Because the main workplace rules were already domestic regulations made under the 1974 Act, they were largely untouched. Chemicals were the exception. EU REACH became “UK REACH”, and EU CLP became “GB CLP”, with HSE and other agencies taking over tasks previously done in Helsinki by the European Chemicals Agency.

The “bonfire” threat and the 2023 Act

In 2022 the government introduced the Retained EU Law (Revocation and Reform) Bill. In its original form it would have revoked all EU-derived secondary legislation at the end of 2023 unless ministers saved it, with an extension available to 23 June 2026 for specified items. Safety bodies led by RoSPA warned that the Management Regulations, work at height rules and the “six pack” could be lost through an arbitrary deadline, and that better regulation is not deregulation. The 1974 Act itself was never at risk because it is domestic law.

The Act as passed in June 2023 dropped the blanket sunset. Instead it:

  • revoked a schedule of around 600 named instruments, which the government described as largely defunct and unnecessary now that the UK has left the EU;
  • ended the supremacy of EU law and renamed the remainder “assimilated law”, from 1 January 2024;
  • gave senior courts more freedom to depart from EU case law; and
  • gave ministers powers to amend assimilated law by regulations.

Those amending powers are the route to post-Brexit divergence. They have already been used. The Chemicals (Health and Safety) (Amendment, Consequential and Transitional Provision) Regulations 2026 (SI 2026/484) came into force on 21 May 2026. They abolished the duty to notify classification and labelling information to HSE and introduced a “fast-track” route under which HSE can adopt classification proposals from trusted overseas authorities, which can include the EU. They also removed the link requiring HSE to consider every opinion of the European Chemicals Agency’s risk committee. HSE says it is maintaining high standards, and the core classification criteria are unchanged. Some environmental groups and Scottish parliamentary committee members questioned the lack of detail and impact assessment.

Northern Ireland: a different regime

Northern Ireland remains inside part of the EU system. Under the Windsor Framework, more than 300 EU legal acts, mostly covering goods, continue to apply there, with the Court of Justice of the European Union as final arbiter of their meaning. The Stormont Brake lets the Northern Ireland Assembly challenge new or replacement EU rules that would significantly affect everyday life. The practical result is that product-safety law such as machinery, personal protective equipment and explosive-atmosphere equipment follows EU rules in Northern Ireland.

Workplace duties are different. Employers’ obligations in Northern Ireland come from domestic legislation, principally the Health and Safety at Work (Northern Ireland) Order 1978, enforced by the Health and Safety Executive for Northern Ireland (HSENI). So a business there lives under EU product rules but locally made workplace rules.

The trade agreement floor

The EU-UK Trade and Cooperation Agreement also matters. Its level playing field provisions include a commitment not to weaken labour and social protections in ways that affect trade or investment, which covers occupational health and safety standards. This is a non-regression promise, not a duty to follow EU changes. It limits how far the UK could cut standards, and it is backed by the agreement’s own consultation and rebalancing mechanisms rather than its main dispute-settlement route. It does not require Britain to copy new EU rules.

Regulators and enforcement

Britain enforces through one national regulator and a heavy criminal-penalty culture, while the EU leaves enforcement entirely to its 27 member states and coordinates them from the centre. This is one of the most visible practical differences between the two systems.

Great Britain and Northern Ireland

The Health and Safety Executive (HSE), created under the 1974 Act, is the national regulator for Great Britain. It shares enforcement with local authorities, which cover lower-hazard sectors such as offices, shops, hospitality and leisure, and with sector regulators such as the Office for Nuclear Regulation and the Office of Rail and Road. In Scotland, prosecutions are decided by the Crown Office and Procurator Fiscal Service rather than by HSE. Northern Ireland has its own regulator, HSENI.

Inspectors have strong administrative tools. They can serve improvement notices and prohibition notices without going to court, and since 2012 HSE has charged businesses a “fee for intervention” when it finds a material breach. HSE raised the hourly rates it charges under several cost-recovery schemes from 1 April 2026.

Criminal penalties are a defining feature. Fines in the Crown Court are unlimited, and the Sentencing Council’s guideline links the level of fine to the offender’s turnover as well as to culpability and the harm risked. Individuals, including directors and managers, can face up to two years in prison for most health and safety offences. Where a death results, organisations can also be prosecuted under the Corporate Manslaughter and Corporate Homicide Act 2007, and individuals for gross negligence manslaughter.

The European Union

There is no EU-level inspector. Article 4 of the Framework Directive requires member states to make sure there are adequate controls and supervision, but how they do it is left to national law. Models vary widely. In Germany, statutory accident insurance institutions (the Berufsgenossenschaften and similar bodies) write accident-prevention rules and inspect alongside the state labour authorities. In France, labour inspectors enforce the Labour Code. Nordic countries typically combine strong inspectorates with dedicated workers’ safety representatives.

The Union’s role is coordination and monitoring:

The UK was a full participant in these bodies before 2021. HSE is no longer part of the EU institutional network, so Britain no longer receives that structured peer review, though HSE still works with international bodies and individual regulators.

Penalties compared

The directives require that national systems be effective, but they do not set penalty levels. Sanctions in the member states therefore range from administrative fines to criminal prosecution of managers, and the amounts differ greatly. British courts’ turnover-linked fines for large companies are generally among the heaviest of any system, though comparisons are hard because many EU states impose liability through insurance and social security schemes as well as courts. A business operating in several countries should not assume that a low-penalty jurisdiction means a low expectation of compliance. Inspections, stop-work orders and civil liability can all carry substantial consequences.

Key regimes compared

On most core workplace topics, Great Britain’s regulations are still near-copies of the EU directives they came from, because they were written to implement them and have rarely been rewritten. The differences that matter sit in how duties are framed, in a few specific numbers, and in areas where only one side has legislated since 2020.

TopicGreat BritainEuropean UnionCurrent position
Risk assessmentManagement of Health and Safety at Work Regulations 1999; significant findings recorded for employers with five or more staffFramework Directive 89/391/EEC; documented assessment, with national rules allowed for the smallest firmsVery similar
Worker consultationSafety representatives (trade-union appointed) and consultation regulations of 1977 and 1996Framework Directive requires consultation and participation; many states mandate safety committees or elected representativesSimilar aims, different mechanics
Work equipment and liftingPUWER 1998 and LOLER 1998Work Equipment Directive 2009/104/ECVery similar
Manual handling and display screensRegulations of 1992Directives 90/269/EEC and 90/270/EECVery similar; EU review under way
Work at heightWork at height Regulations 2005Directive 2001/45/EC, amending the Work Equipment DirectiveVery similar
Noise and vibrationControl of Noise at Work Regulations 2005 and Control of Vibration at Work Regulations 2005Directives 2003/10/EC and 2002/44/ECVery similar
Hazardous substancesCOSHH 2002; workplace exposure limits in EH40Chemical Agents Directive 98/24/EC and Carcinogens Directive 2004/37/ECSimilar, with divergence in limit-setting
AsbestosControl of Asbestos Regulations 2012; control limit of 0.1 fibres per cmยณ over four hoursDirective 2009/148/EC, amended in 2023 to 0.01 fibres per cmยณ over eight hoursDiverging
ConstructionCDM 2015 with principal designer and principal contractorDirective 92/57/EEC with safety coordinatorsDifferent models
Working timeWorking Time Regulations 1998 with an individual opt-out from the 48-hour limitWorking Time Directive 2003/88/ECSimilar text, different case law
Accident reportingRIDDOR 2013, under reviewNational systems; common statistical definitions for reportingDifferent

Where the match is closest

Risk assessment, work equipment, manual handling, display screens, noise and work at height are the clearest cases. The British regulations and EU directives require the same steps in the same order: assess, control, inform, train and review. Even the numbers match. Both systems use the same lower and upper exposure action values for noise (80 and 85 dB(A)) and the same daily limit of 87 dB(A) allowing for hearing protection. A safety adviser trained in one system can move to the other with very little relearning on these subjects.

Where structure differs

Consultation shows how similar aims can reach different mechanics. Britain’s regime grew from trade-union appointed safety representatives, supplemented since 1996 by direct consultation or elected representatives where no union is recognised. Many EU states give statutory roles to works councils, elected safety delegates or joint committees, with stronger rights to time off and training, and in some cases rights to stop dangerous work.

Construction is the clearest structural contrast. CDM 2015 places named duties on clients, designers, principal designers, principal contractors and contractors, so responsibility follows the project hierarchy. The EU directive instead centres on safety and health coordinators, appointed for the design and execution stages, and national laws vary in how they apply it.

Working time also shows divergence in case law as much as text. The two systems share a 48-hour average weekly limit, minimum daily and weekly rest, and statutory paid leave. But the British law relies heavily on the individual opt-out the Directive permits, which many member states allow only in narrow circumstances. The EU Court of Justice also held in 2019 (Case C-55/18) that employers must have a reliable system for measuring each worker’s daily working time. That ruling binds EU states. Britain has no equivalent duty to record every worker’s daily hours, and since Brexit it is not bound by the ruling.

Chemicals and exposure limits

Chemicals show the biggest practical split. Both sides begin from the same hazard classification system, the UN’s Globally Harmonised System, and both retain a REACH-style registration regime. But UK REACH and EU REACH are now separate, with separate registration requirements, deadlines and databases. GB CLP also now follows a different amendment process from the EU’s CLP, as described earlier. Workplace exposure limits are set in separate processes too: the EU adopts binding and indicative limits at Union level, while Britain’s limits are published and revised through HSE’s EH40 list, advised by its own committees.

Asbestos illustrates the point. The 2023 EU amendment cut the binding limit tenfold, to 0.01 fibres per cmยณ, with transposition due by 21 December 2025 and a move to more sensitive electron-microscopy measurement by 2029. Great Britain’s control limit remains 0.1 fibres per cmยณ, but it is averaged over four hours rather than eight, which HSE regards as the more conservative measure. In 2026 HSE published a review concluding that there was no clear evidence that lowering the limit would improve health outcomes, and argued that competence, training and enforcement matter more than the number. HSE has separately consulted on changes to its asbestos regulations covering clearance, surveys and notifiable non-licensed work, with responses closing in January 2026. Where the EU has tightened a number and Britain has deliberately held its own, the two systems are no longer aligned by default.

Where the systems are diverging

Most divergence so far is “passive”: the EU has legislated and Great Britain has stood still, so gaps open without any British decision to differ. A smaller but growing share is “active”, where Britain has chosen its own route. Four areas matter most.

Product safety and conformity marking

Product rules are where the two systems touch most directly, because machinery, protective equipment and electrical goods carry workplace risks as well as consumer ones. Britain originally planned to replace the CE mark with its own UKCA mark. After industry pressure, the Product Safety and Metrology etc. (Amendment) Regulations 2024 made recognition of CE marking indefinite for 21 product regulations, covering machinery, personal protective equipment, electrical and radio equipment and toys. In Great Britain, a CE-marked product in those categories can generally be sold without UKCA marking. UKCA remains necessary for some categories outside that scheme, such as construction products. Northern Ireland follows EU rules, so there CE marking is required and a UKCA mark alone is not valid. Because indefinite recognition is a policy choice rather than a treaty guarantee, some manufacturers keep UKCA marking as insurance.

Machinery is the next test. Regulation (EU) 2023/1230 replaces the Machinery Directive from 20 January 2027. It adds requirements for artificial intelligence in safety functions, cybersecurity, autonomous machinery and digital instructions, and widens mandatory third-party assessment for certain high-risk categories. Northern Ireland must apply it, and a 2026 statutory instrument provides for its enforcement there. For Great Britain the position is open. The government has run a call for evidence on machinery legislation, and its own explanatory material warns of a possible cliff edge in January 2027 if products meeting the new EU rules are not accepted. A business exporting machinery to both markets should plan for the EU deadline and watch the GB decision.

Chemicals

Chemicals regulation has diverged more than any other area. UK REACH and EU REACH are separate systems. The EU has also revised its CLP Regulation, while Great Britain has used the 2023 Act’s powers to change its own, abolishing the classification and labelling notification and creating the fast-track route described earlier. HSE says its policy is to maintain high levels of protection. Critics argue that a divergent GB system may produce different labels for the same chemical on either side of the Channel, and that monitoring divergence is hard. Northern Ireland, by contrast, remains under EU CLP.

New EU initiatives with no British equivalent

The EU’s current Strategic Framework on Health and Safety at Work covers 2021 to 2027. Its main active threads are:

  • Psychosocial risks. No dedicated EU directive exists, although the European Parliament has repeatedly asked the Commission for one covering stress, burnout and work organisation, and trade unions are campaigning for it. Several member states, including Belgium, Denmark and Sweden, already have specific national rules.
  • Review of older directives. The Commission’s Quality Jobs Roadmap promised a mid-2026 report on how the Framework Directive and related directives work in practice, and a review of the Workplace and Display Screen Equipment directives. The European Parliament held a hearing on the post-2027 strategy on 2 June 2026.
  • Digital work. The Platform Work Directive, adopted in 2024, includes rules on algorithmic management and is due for national transposition around the end of 2026. The EU AI Act and the new Machinery Regulation also affect workplace technology.
  • Hazardous substances. The EU has tightened limits for carcinogens and other substances, including asbestos, and has more updates planned.

Great Britain has no matching legislative programme. Instead HSE works mainly through campaigns, guidance and enforcement priorities.

British reforms of its own

Britain is also making its own changes, partly in response to domestic pressures rather than Brexit. HSE has consulted on the first major overhaul of RIDDOR, the injury reporting regulations, since 2013, with responses closing on 30 June 2026. It has also consulted on revising its asbestos regulations. Work-related stress is a major focus, with the Working Minds campaign and inspections that treat stress as a risk to be assessed under the Management Regulations. Building safety has its own regime under the Building Safety Act 2022, and a new duty for venues and events under Martyn’s Law is due in spring 2027. None of these has an EU counterpart, which shows the UK system is evolving rather than frozen.

What still unites them, and what it means in practice

The shared core is large and durable. Both systems place the primary responsibility on the employer. Both expect a risk-based approach in which hazards are identified, removed where possible, and otherwise controlled by measures that protect groups before individuals. Both require information, instruction, training and some form of worker involvement, and both expect employers to have access to competent safety advice. These ideas come from the same intellectual tradition, including the Robens philosophy of self-regulation within a legal framework and international labour standards that both sides support.

Some technical infrastructure also remains common. British standards bodies stay full members of the European standards organisations CEN and CENELEC, so a large body of European harmonised standards for machinery and protective equipment continues to be used on both sides. Management-system standards such as ISO 45001 are international and used in both markets. Professional bodies and trainers move freely between the two systems, and the vocabulary of safety practice remains almost identical.

That shared base means that most compliance programmes for UK workplaces transfer to EU workplaces with adaptation rather than reinvention. But the differences above point to a short list of practical checks.

  • Treat Northern Ireland as its own case for products. EU product rules apply there, and workplace law follows local rules and HSENI.
  • Plan for 20 January 2027 if you make or import machinery. Compliance with the new EU Machinery Regulation is mandatory for EU and Northern Ireland sales from that date. For Great Britain, wait for the government’s decision before assuming that EU-compliant machinery will be accepted automatically.
  • Keep chemical compliance separate. Registrations, safety data sheets and classifications for UK REACH and GB CLP may differ from the EU’s. Do not assume that an EU registration covers Great Britain or the reverse.
  • Check national law in each EU state. A directive sets a minimum. A country may require more, such as formal safety committees, particular training hours or psychosocial risk rules. Using the British approach as a template is a reasonable start, but it does not replace a check of local requirements.
  • Use the strictest exposure limit when working across both. For asbestos in particular, the EU’s binding limit is 0.01 fibres per cmยณ over eight hours. The GB figure is not directly comparable because it uses a four-hour average, so plan to the EU rule when working in member states.
  • Watch for case-law differences. EU court rulings on matters such as working-time recording bind member states but no longer bind Britain.

For consultancies and in-house teams, the safest posture is to build one management system around the common principles and then add a short, maintained register of jurisdiction-specific rules.

Summary

UK and EU health and safety law share the same core and are slowly separating at the edges. The ideas are the same, the day-to-day rules are largely the same, and the gaps are growing mainly where the EU has legislated and Great Britain has not, or where Britain has chosen its own path.

Where they are similar

  • Both place primary responsibility on employers and require risk assessment, prevention, information, training and worker involvement.
  • Most British workplace regulations still mirror the EU directives they implemented, including work equipment, manual handling, display screens, noise and work at height.
  • Both use the same hazard-classification science and rely on shared technical standards.
  • Brexit did not repeal the main workplace regulations. The Retained EU Law Act of 2023 dropped the blanket sunset clause that had threatened them.

Where they differ

  • Legal design: Britain’s law is a goal-setting statute qualified by “reasonably practicable”, while the EU’s is a directive framework of minimum rules implemented by 27 states.
  • Enforcement: HSE and local authorities enforce in Great Britain with unlimited, turnover-linked fines. The EU has no central inspector, only coordination through the Commission, EU-OSHA and SLIC.
  • Chemicals: UK REACH and GB CLP now run separately from the EU’s regimes, and amendments in 2026 have made GB CLP diverge further.
  • Products: CE marking is accepted indefinitely in Great Britain for 21 regulations, but Northern Ireland follows EU rules, and the EU Machinery Regulation applies from 20 January 2027 with no GB decision yet.
  • Exposure limits and new topics: the EU has cut its asbestos limit tenfold and is considering psychosocial risk rules, platform work and a post-2027 strategy. Britain has kept its own asbestos control limit after an HSE review and relies mainly on guidance and its own consultations, such as those on RIDDOR and the asbestos regulations.
  • Northern Ireland: it sits between the two, applying EU product rules but local workplace law.

What to watch next

  1. The UK government’s decision on machinery rules before 20 January 2027.
  2. Any Commission proposal on psychosocial risks and the shape of the EU’s post-2027 strategy.
  3. The outcome of the RIDDOR and asbestos consultations in Great Britain.
  4. Further use of the 2023 Act’s powers to amend chemicals and other assimilated law.

The practical message for businesses is to build around the shared principles, and to keep a maintained register of the specific rules that now differ by jurisdiction. We can develop your legal register and maintain it. Contact one of our team now to see how we can help your business.

Does the Control of Asbestos Regulations apply to my business?

If your business owns, manages or is responsible for repairing a non-domestic building, or if your people could disturb the fabric of a building during their work, the Control of Asbestos Regulations 2012 (CAR 2012) almost certainly apply to you. Asbestos was not fully banned in the UK until 1999, so any building built or refurbished before 2000 may contain it. This guide explains who is covered, what you must do, and how to check your own position.

Who do the Control of Asbestos Regulations apply to?

CAR 2012 apply to almost every workplace in Great Britain, but the duties you hold depend on your role. Three groups are caught:

  • Owners and managers of non-domestic premises. Offices, shops, factories, warehouses, schools, farms, care homes and pubs all count, as do the shared areas of blocks of flats and other multi-occupancy homes.
  • Tenants with repair or maintenance responsibility. If your lease makes you responsible for the fabric of the building, you share the duty to manage asbestos, or hold it outright.
  • Employers whose staff may disturb asbestos. Electricians, plumbers, joiners, gas fitters, decorators, telecommunications engineers and facilities teams can all drill into, cut or damage asbestos-containing materials without knowing it.

Self-employed people are covered in the same way as employers. Homeowners living in their own private home are not dutyholders, but a tradesperson working in that home still is.

Does the Control of Asbestos Regulations Apply to You?

Do your business premises have asbestos? Do your employees come into contact with it?

The duty to manage asbestos (Regulation 4)

Regulation 4 is the part that catches most small and medium-sized businesses. If you have it, you must:

  1. Find out whether asbestos is present. Take reasonable steps to locate materials likely to contain it, and assume a material contains asbestos unless you have strong evidence it does not.
  2. Keep a written record of where it is, what condition it is in and how much there is. This is your asbestos register.
  3. Assess the risk that anyone could be exposed to fibres from those materials.
  4. Prepare a management plan that says how you will keep the risk under control, and put it into action.
  5. Review and monitor the plan and the register, especially after any change to the building or the condition of the materials.
  6. Pass the information on to anyone likely to disturb the materials, including contractors, before they start work.

The usual starting point is an asbestos management survey carried out by a competent surveyor, following HSE guidance in HSG264. Sampling and analysis should use a UKAS-accredited laboratory. Asbestos left in good condition and unlikely to be disturbed can often stay where it is, as long as it is managed.

Work that disturbs asbestos

Separately from the duty to manage, CAR 2012 sets rules for any work that could disturb asbestos. These depend on the type of material and the risk of releasing fibres.

  • Licensed work. Work on higher-risk materials such as sprayed coatings, lagging and most asbestos insulating board must be done by a contractor licensed by the HSE. The work must be notified to the enforcing authority, normally at least 14 days in advance.
  • Notifiable non-licensed work (NNLW). Some lower-risk work does not need a licence but must still be notified, and workers need health surveillance and records of the work must be kept.
  • Non-licensed work. Short, low-risk tasks, such as removing a few asbestos cement sheets or drilling into textured coating, still need proper controls, trained workers and a risk assessment.

If your employees do any of this work, you must also give them information, instruction and training at the right level for what they do. Even workers who never handle asbestos on purpose need asbestos awareness training if their work could disturb it.

Quick check: does it apply to my business?

Your situationDoes CAR 2012 apply?What it means for you
You own or manage a non-domestic building built before 2000YesYou hold the duty to manage: survey, register, risk assessment and management plan
You rent premises and your lease makes you responsible for repairsYesYou share or hold the duty to manage, so check your lease and agree responsibilities in writing
You rent premises, the landlord handles all repairs and maintenancePartlyThe landlord holds the duty, but you should ask to see the asbestos register and plan
You manage shared areas of flats or a multi-occupancy buildingYesCommon areas are covered by the duty to manage
You send staff into other people’s buildings (trades, maintenance, installers)YesStaff need asbestos awareness training and must check the register before starting work
Your premises were built after 2000 and have not been refurbished with older materialsUnlikelyKeep a record of how you decided, and check if the building has been altered
You work from your own private homeNoThe duty to manage does not cover private homes, but trades working in them are still covered

If you cannot say for certain which row you fall into, treat the regulations as applying until you have checked.

Northern Ireland, the Isle of Man and the Republic of Ireland

CAR 2012 itself applies in Great Britain. If you operate elsewhere, different legislation applies, although the principles are very similar.

If your business has premises in more than one jurisdiction, you need to manage each site against the law that applies there.

What happens if you ignore the regulations?

Breaches of CAR 2012 are prosecuted regularly. Penalties include unlimited fines and, in serious cases, prison sentences for individuals. Beyond the legal risk, unmanaged asbestos can lead to contractors, cleaners or staff being exposed, claims for illness that can take decades to appear, and delays or cost increases when a refurbishment or sale uncovers material you did not know about.

Frequently asked questions

Do I need an asbestos survey? If you hold the duty to manage and cannot show the building is asbestos-free, a survey is the normal way to meet it. A refurbishment and demolition survey is needed before any major building work.

Does it apply to a small office or shop? Yes. Size makes no difference. If the building is non-domestic and you own it, manage it or are responsible for repairs, the duty applies.

Does it apply if I only rent my premises? It depends on your lease. The duty falls on whoever has repair or maintenance responsibility, or on the person who controls the premises. Where there is no clear owner of the duty, the person in control of the building holds it.

How often should I review my asbestos register? There is no fixed interval. Review it when anything changes, such as damage, building work or a change in use, and carry out regular condition checks. Many businesses reinspect known materials once a year.

Do my staff need training? Anyone whose work could disturb asbestos needs asbestos awareness training. Those who carry out non-licensed or notifiable work need higher levels of training.

Next steps

  1. Establish when your premises were built and whether they have been altered.
  2. Check your lease, or ask your landlord, to confirm who holds the duty to manage.
  3. Ask for the asbestos register and management plan, or arrange a survey if there is none.
  4. Make sure anyone working on the building sees the register before they start.
  5. Arrange asbestos awareness training for staff who could disturb the fabric of the building.

We review your business premises and activities to determine which legislation applies to you as well as detailing the steps you need to take to comply. To discuss your needs further, please contact one of our team.

This article is general guidance and does not constitute legal advice or replace advice on your own premises.

EU vs UK Environmental Regulation After Brexit: A Business Guide

Position as at October 2026. Regulation in this area is moving quickly, so check the current status of individual measures before acting.

When the UK left the EU, the government’s stated aim was to keep environmental standards at least as high as before while gaining the freedom to regulate differently. Six years on, the picture is more complicated than either “race to the bottom” or “business as usual” suggests. The UK and EU have diverged in some areas, drifted passively apart in others, and are now deliberately re-aligning in a few of the most commercially important ones.

This article compares the two systems, explains where they differ and why, and sets out what the direction of travel means for businesses that operate in, or trade with, both markets.

EU UK environmental regulation post Brexit

EU vs UK Environmental Regulation, what has changed since Brexit?

Summary: the key points

  • Structure. The UK retained most EU-derived environmental law as “assimilated law” in 2021, but now amends it independently. The EU has kept legislating, so divergence is partly active (UK changes) and partly passive (the EU changes and the UK does not follow).
  • Governance. The UK replaced Commission and Court of Justice oversight with the Office for Environmental Protection (OEP), which has real powers but fewer than its EU counterparts.
  • Chemicals. UK REACH and EU REACH are now separate regimes, with separate registrations, deadlines and costs. Neither side is currently pursuing a full rewrite.
  • Climate and carbon. The UK runs its own Emissions Trading Scheme. Both sides are now moving towards linking them, alongside border carbon taxes (CBAMs).
  • Planning and nature. England has taken a distinctive route through the Planning and Infrastructure Act 2025, which the OEP and NGOs have criticised as weakening protections.
  • Simplification. Both sides are in a deregulatory mood. The EU’s “omnibus” programme and the UK’s planning reforms pursue similar goals by different means.
  • Northern Ireland. NI still applies a defined body of EU law under the Windsor Framework, creating a three-way compliance map across the EU, Great Britain and Northern Ireland.

1. The legal starting point

On 31 December 2020 the UK converted EU environmental law into domestic law through the European Union (Withdrawal) Act 2018. Directly applicable EU regulations became UK statutory instruments, and directives that had been implemented through UK legislation stayed in place. In 2023 the Retained EU Law (Revocation and Reform) Act renamed this body “assimilated law” and ended the special status it had held.

On day one the two systems were almost identical. The divergence since then comes from three sources:

  1. Active divergence: the UK changes or replaces a rule.
  2. Passive divergence: the EU adopts new legislation and the UK does not follow.
  3. Internal divergence: England, Scotland, Wales and Northern Ireland make different choices on devolved matters such as waste, water and nature.

The third source matters more than it is often given credit for. Because environmental policy is largely devolved, there is no single “UK” regime in many areas.

2. Governance and enforcement

Before Brexit, the European Commission could investigate member states and bring them before the Court of Justice, which could impose financial penalties. After Brexit, the UK’s Environment Act 2021 created the Office for Environmental Protection, which scrutinises government performance, investigates alleged failures and can bring enforcement proceedings.

Differences worth noting:

FeatureEUUK (England-focused)
Oversight bodyEuropean Commission, with Court of Justice backstopOffice for Environmental Protection
Sanctions on governmentCourt-imposed fines on member statesDeclarations and enforcement through the courts; no equivalent fines
Environmental principlesEmbedded in the TreatiesStatutory duty to have due regard to a policy statement on environmental principles
Target settingBinding EU-level targets (climate, nature restoration, waste)Statutory targets set domestically under the Environment Act 2021 and Climate Change Act 2008

The OEP has been willing to criticise the government, including on the planning reforms discussed below, but its powers are narrower than those of the Commission and Court, and the UK government’s response to its recommendations is advisory in practice.

3. Chemicals: two REACH regimes

Chemicals regulation is where divergence is most visible to businesses, because it creates direct, duplicated costs.

UK REACH took effect on 1 January 2021 and applies in Great Britain. It is administered by the Health and Safety Executive with policy led by Defra. It has its own registrations, its own substance evaluation and its own restrictions and authorisation lists. The government is developing an Alternative Transitional Registration model (ATRm) to reduce data requirements and cost, and, because the legislation could not be completed in time, it has extended the transitional registration deadlines to 27 October 2029, 2030 and 2031.

EU REACH continues to apply in the EU and, for most purposes, in Northern Ireland. The Commission spent years preparing a major revision, but it confirmed in April 2026 that it would not open the regulation. It is instead pursuing simplification through secondary legislation, plus stronger enforcement against non-compliant products at EU borders and in the market. A large PFAS restriction proposal is expected to progress by the end of 2026.

What this means in practice:

  • A business supplying both markets needs two sets of registrations, or access to two sets, and must manage two substance lists.
  • Neither side is currently converging, and neither is conducting a wholesale rewrite.
  • Enforcement is likely to be the main change in the EU, while cost and data requirements are the main uncertainty in GB.

4. Climate policy and carbon markets

Separate trading schemes, heading towards a link

The UK left the EU Emissions Trading System and launched the UK ETS in 2021. The UK scheme is smaller and has historically traded at a lower price. It is expanding, including a commitment to bring waste incineration in from 2028.

At the May 2025 UK-EU summit, both sides agreed in principle to link the two schemes. The EU Council approved a negotiating mandate in November 2025, and negotiations have been under way since early 2026. Linking would require the UK to track relevant EU rules “dynamically”, and would allow allowances to be traded across both markets. The intended scope includes power, industry, aviation and maritime.

Carbon border taxes

The more immediate pressure comes from carbon border adjustment mechanisms:

  • The EU CBAM entered its definitive phase on 1 January 2026. UK exporters of covered goods such as steel, aluminium, cement and fertiliser currently receive no exemption. Importers will declare 2026 emissions by September 2027.
  • The UK CBAM starts on 1 January 2027, covering aluminium, cement, fertiliser, hydrogen and iron and steel. Importers above a ยฃ50,000 registration threshold will be liable. Indirect emissions are excluded until 2029 at the earliest. Primary legislation is in the Finance Act 2026, with secondary legislation still being finalised.

A completed ETS link would create conditions for mutual CBAM exemptions, but only once the agreement is in force, so there is a real risk of paying both ways in the interim. Businesses in covered sectors should treat this as a live cost issue, not a distant policy debate.

5. Nature, planning and development

This is where UK and EU approaches have diverged most politically.

England has pursued a more flexible planning route. The Planning and Infrastructure Act 2025, which became law in December 2025, creates Environmental Delivery Plans prepared by Natural England and a Nature Restoration Fund. Developers can pay a Nature Restoration Levy instead of carrying out some site-specific assessment and mitigation. The government’s position is that this provides a different route to meet existing obligations, not a removal of protections. The OEP and several nature charities have argued it reduces the level of legal protection for specific habitats and species, and the Act’s amendments responded to part of that criticism. Secondary legislation on how the levy operates was consulted on over summer 2026.

Biodiversity net gain is also evolving. It is due to become mandatory for nationally significant infrastructure projects from 2 November 2026, while a separate consultation has examined exempting brownfield development.

The EU has taken a more target-led approach through measures such as the Nature Restoration Law, which sets binding restoration objectives for member states. At the same time, the Commission has said it will stress-test the Habitats and Birds Directives, so a softening of site-based protection is under discussion in Brussels too.

The honest comparison is that both sides are under pressure to speed up infrastructure and housing, and both are testing how far that can go before it undermines nature protection. The UK has moved first and in a more structural way in England.

6. Industrial regulation and simplification

The EU has set out a programme of “omnibus” simplification packages. The Environmental Omnibus, proposed in December 2025, targets industrial emissions, circular economy reporting, extended producer responsibility, environmental assessments and geospatial data. The Commission says it will save around โ‚ฌ1 billion a year for business. The Council agreed its position in June 2026, and EU leaders have set a goal of concluding all simplification packages by the end of 2027.

Changes proposed include allowing environmental management systems under the Industrial Emissions Directive to be prepared at company level instead of per installation, and simplifying reporting for livestock and aquaculture operators. The Council has retained a chemicals inventory requirement as a monitoring tool.

In Great Britain, industrial permitting remains based on the Environmental Permitting Regime derived from the previous EU framework. The UK has focused its reform energy on planning and infrastructure delivery rather than rewriting industrial emissions rules, so the more important divergence for permitted sites is likely to come from what the EU changes and the UK leaves alone.

7. Dynamic alignment: the reset

The most significant strategic shift is political. As part of the “reset” of UK-EU relations, the UK has agreed to pursue dynamic alignment with EU law in three areas: a sanitary and phytosanitary (SPS) agreement, ETS linking, and participation in the EU electricity market. UK participation in decision-shaping and a financial contribution to the EU’s work were also agreed. Electricity negotiations were formally launched in March 2026.

For environmental regulation, this has several consequences:

  • SPS alignment would reverse a number of post-Brexit divergences in areas such as pesticides, food and feed. Campaign groups argue that GB pesticide standards have fallen behind the EU’s, so alignment would raise the bar in some cases.
  • Reduced regulatory freedom. Critics, including some parliamentarians, argue that tracking EU rules limits the UK’s ability to set its own course. The House of Lords European Affairs Committee opened an inquiry into dynamic alignment in March 2026, including its implications for devolution.
  • Timing. The government has indicated it wants legislation by the end of 2026 so an SPS agreement can take effect around mid-2027, but the detail remains subject to negotiation.

8. Northern Ireland: a third regime

Under the Windsor Framework, Northern Ireland continues to apply EU law on goods, including much environmental product legislation. Examples include EU REACH and CLP, and much of the EU Packaging and Packaging Waste Regulation, while Great Britain follows domestic packaging and producer responsibility rules. The EU Deforestation Regulation is set to apply in NI in phases from 30 December 2026, and the UK government has indicated it will consult on a GB regime covering similar commodities.

This produces a three-way compliance map. A single product placed on the EU, NI and GB markets can face different packaging, chemicals and supply chain due diligence rules, and GB producers selling into NI may need to change practices to meet EU requirements.

9. Side-by-side comparison

AreaEUGreat Britain / UK
OversightCommission and Court of JusticeOffice for Environmental Protection
ChemicalsEU REACH; full revision shelved; simplification by secondary legislationUK REACH; ATRm in development; deadlines 2029 to 2031
Carbon pricingEU ETS; CBAM definitive phase from January 2026UK ETS; UK CBAM from January 2027; ETS linking under negotiation
Nature and planningBinding restoration targets; Habitats Directives under reviewEnvironmental Delivery Plans and Nature Restoration Fund in England
Industrial emissionsIED recast; omnibus simplification under negotiationEnvironmental Permitting Regime; less active reform
PackagingPPWRDomestic packaging and EPR rules (EU PPWR largely applies in NI)
DeforestationEUDR applying from December 2026 (phased in NI)GB regime proposed; consultation planned
Direction of travelSimplify and enforce, but keep objectivesDeregulate delivery, re-align selectively through the reset

What this means for businesses

  1. Treat the UK as at least two markets. GB and NI will continue to follow different rules for the foreseeable future, and the EU is a third.
  2. Plan for double chemicals compliance. Map which substances are registered under each REACH regime and monitor ATRm developments.
  3. Model carbon border exposure now. If you import or export steel, aluminium, cement, fertiliser or hydrogen, work out your CBAM liability on both sides and what an ETS link might change.
  4. Watch dynamic alignment. It may improve predictability for agri-food and energy-intensive trade, but it also means EU decisions will increasingly shape GB rules.
  5. Expect planning and permitting to change in England. If your projects affect protected sites, follow the Nature Restoration Levy regulations and Environmental Delivery Plan roll-out.
  6. Build a regulatory horizon scan. With both sides in reform mode, a quarterly review of legislative changes will prevent costly surprises.

Conclusion

The post-Brexit story in environmental law is neither a collapse in standards nor a frozen copy of EU rules. It is a gradual and uneven separation, now partially reversed by political choices to re-align in carbon, agri-food and energy. The most useful way for businesses to think about it is as a moving map: stable in some places, fast-changing in others, and increasingly shaped by trade as much as by environmental policy.

This article is for general information only and is not legal advice. Regulations and deadlines change, so confirm the current position with the relevant regulator or a qualified adviser.

What Businesses Need to Comply with UK REACH?

If your business makes, imports or uses chemicals in Great Britain, UK REACH almost certainly affects you. Since the end of the Brexit transition period, GB has operated its own chemicals regime, separate from EU REACH, and the rules, deadlines and costs have been shifting ever since.

This guide explains who UK REACH applies to, what you must do, and the practical steps to take now.

What is UK REACH?

UK REACH (Registration, Evaluation, Authorisation and Restriction of Chemicals) is the Great Britain chemicals regulation that took over from EU REACH on 1 January 2021. It is administered by the Health and Safety Executive (HSE) as the UK REACH agency, with policy led by Defra.

Its core principle is “no data, no market“: a substance on the GB market must be registered, and the information needed to use it safely must be available and passed down the supply chain.

Important: UK REACH applies in England, Scotland and Wales. Northern Ireland continues to follow EU REACH under the Windsor Framework, so businesses trading across the UK may need to comply with both systems.

UK REACH compliance

Does REACH apply to your business?

Who needs to comply?

Your obligations depend on your role in the supply chain.

RoleWhat it meansTypical obligations
ManufacturerYou make a substance in GBRegister substances at 1 tonne or more per year; classify and label; supply compliant safety data sheets
ImporterYou bring a substance, a mixture or an article into GB from outside GB, including from the EURegister substances at 1 tonne or more per year; meet transitional notification or registration requirements; communicate hazards downstream
Downstream userYou use chemicals in your business activities (formulators, manufacturers, industrial and professional users)Follow the safety data sheet and exposure scenarios; check that suppliers are registered; pass information up and down the chain
Distributor / retailerYou store and sell chemicals without changing themPass on safety information; check the supply chain is compliant
Article producer / importerYou make or import products such as equipment, furniture or textilesNotify and communicate on SVHCs in articles; check restrictions apply

Obligations apply per legal entity, so a group with several GB companies needs to assess each one.

The main UK REACH requirements

1. Registration

Manufacturers and importers of substances at 1 tonne or more per year must register them with HSE. Because most businesses could not complete full registrations on day one, the government introduced transitional arrangements:

  • Grandfathering: companies that held an EU REACH registration could carry it across to UK REACH.
  • Downstream User Import Notification (DUIN): downstream users who had been importing from the EU could notify HSE and keep trading while full registration deadlines run.
  • New Registration of Existing Substances (NRES): a route for substances that were not already registered under EU REACH but were on the GB market.
  • Inquiry and registration of new substances: substances not previously on the GB market need a full registration before supply.

2. Transitional registration deadlines

The deadlines have been pushed back twice. Defra has been developing an Alternative Transitional Registration model (ATRm) that is intended to reduce data requirements and costs. Because the ATRm could not be legislated before the original first deadline of October 2026, the government extended the submission dates. The revised deadlines are 27 October 2029, 27 October 2030 and 27 October 2031, phased by tonnage and hazard:

  • 27 October 2029: the highest tonnage and hazard band (broadly substances at 1,000 tonnes or more per year, and certain highly hazardous substances at lower tonnages)
  • 27 October 2030: substances at 100 tonnes or more per year
  • 27 October 2031: all other substances at 1 tonne or more per year

Even with extra time, you should not wait. The detailed ATRm information requirements are still being finalised, and data gathering, supplier agreements and cost-sharing take time.

3. Safety data sheets and communication in the supply chain

Suppliers must provide safety data sheets (SDS) that meet UK REACH requirements, and downstream users must apply the advice in them. Make sure your SDSs carry the correct GB details and that you have a process to update them when information changes. Where substances of very high concern (SVHCs) are present in articles above the threshold concentration, you must pass on information so the articles can be used safely.

4. Restrictions

Annex 17 of UK REACH lists substances and uses that are restricted or banned. If you manufacture, supply or use a restricted substance, you need to confirm that your use is permitted and that any conditions are met. Restrictions can apply to substances on their own, in mixtures and in articles.

5. Authorisation

Substances of very high concern can be added to the Authorisation List (Annex 14), after which they cannot be used or placed on the GB market without authorisation. Watch the UK REACH Candidate List and the Authorisation List and check whether any of your substances are listed.

6. Classification and labelling

UK REACH works alongside GB CLP, which governs the classification, labelling and packaging of hazardous chemicals. Suppliers must classify and label correctly, and use the GB mandatory classifications where they apply.

Practical steps to get compliant

  1. Map your chemicals. List every substance and mixture you make, import or use, with volumes and suppliers.
  2. Confirm your role. Identify whether you are a manufacturer, importer, downstream user, distributor or article producer for each substance.
  3. Check your supply chain. Ask suppliers whether they hold a UK REACH registration or notification, and get confirmation in writing.
  4. Review your transitional status. Establish whether you have a grandfathered registration, a DUIN, an NRES submission or nothing at all.
  5. Check tonnage bands and deadlines. Work out which deadline applies to each substance and plan backwards from it.
  6. Review safety data sheets. Check they are current and meet UK requirements.
  7. Screen for restrictions and SVHCs. Check your substances and products against Annex 17 and the Candidate and Authorisation Lists.
  8. Assign responsibility and keep records. Name an owner for UK REACH, and keep evidence of your assessments and supplier correspondence.
  9. Monitor developments. Follow HSE and Defra updates on the ATRm, fees and deadlines.

What happens if you do not comply?

Supplying or using chemicals in breach of UK REACH can lead to enforcement action by regulators, including notices and prosecution, as well as commercial risk. Non-compliant supply chains can lose market access, and customers increasingly require evidence of regulatory compliance.

Frequently asked questions

Does UK REACH apply if I only import from the EU? Yes. Since 1 January 2021, substances imported from the EU into GB are treated as imports and can carry registration or notification duties.

Does UK REACH apply in Northern Ireland? No. Northern Ireland follows EU REACH under the Windsor Framework, although businesses moving goods between NI and GB may face obligations under both regimes.

Do small businesses need to comply? Yes. There is no general exemption for small businesses, although the 1 tonne per year threshold means many smaller businesses fall into the downstream user category rather than registrant.

Have the deadlines changed? Yes. The transitional registration deadlines were extended to 27 October 2029, 2030 and 2031. Check the current position with HSE or Defra before making decisions.

How we can help

UK REACH sits alongside COSHH, GB CLP and your wider health, safety and environmental duties. We can help you map relevant legislation for your business and compile a legal register. The register will also include details of how your business must comply with each piece of legislation.

Contact us to discuss your legal register requirements.

This article is for general information only and is not legal advice. Regulations and deadlines change, so confirm the current position with HSE, Defra or a qualified adviser.

What Businesses Need an Environmental Permit?

If your business could pollute the air, water or land, there is a good chance it needs an environmental permit. Operating a regulated facility without one is a criminal offence, and the consequences can include unlimited fines, enforcement notices, prosecution and, in serious cases, imprisonment.

The tricky part is that “regulated facility” covers a far wider range of businesses than most people expect. It is not just chemical plants and landfill sites. Dry cleaners, vehicle dismantlers, farms, food manufacturers, concrete producers and even businesses running a standby generator can all fall within scope.

This guide explains which businesses need an environmental permit, who regulates them, and how to work out where you stand.

A note on jurisdiction: this article focuses on England and Wales, where environmental permitting is governed by the Environmental Permitting (England and Wales) Regulations 2016. Scotland, Northern Ireland and the Republic of Ireland each operate their own regimes, detailed in a summary at the end.

What is an environmental permit?

An environmental permit is a legal authorisation to carry out an activity that could harm the environment or human health. It sets out conditions the operator must meet, such as emission limits, monitoring requirements, waste handling rules and pollution-control measures.

Permits are issued to the operator of the facility, meaning the person or business that controls how it runs day to day, not necessarily the landowner.

An environmental permit is not the same as planning permission, an ISO 14001 certificate or a waste carrier registration. Each has a separate legal purpose, and holding one does not remove the need for the others.

What Businesses Need an Environmental Permit?

Does your business need an environmental permit?

Which businesses need an environmental permit?

Under the 2016 Regulations, you need a permit (or must register an exemption) if you operate a “regulated facility”. The main categories are below.

1. Industrial installations (Part A(1), Part A(2) and Part B)

Larger industrial processes are regulated as installations. They are split into three tiers based on environmental risk:

  • Part A(1) installations are regulated by the Environment Agency (or Natural Resources Wales). They cover the highest-impact activities such as large chemical manufacturing, refining, metals production, major energy and large-scale waste treatment.
  • Part A(2) installations are regulated by the local authority and cover emissions to air, water and land from medium-impact activities such as some glass, ceramics and surface treatment processes.
  • Part B installations are also regulated by the local authority, but focus on emissions to air only. Typical examples include petrol stations, dry cleaners, mobile crushing plant, concrete batching, coating and printing processes, wood processing and some food and animal feed manufacture.

2. Waste operations

If you treat, store, recycle, recover or dispose of waste, you will generally need a permit. This includes:

  • Landfill sites
  • Waste transfer stations
  • Metal recycling and vehicle dismantling sites
  • Anaerobic digestion and composting facilities
  • Waste incineration, gasification and pyrolysis plants
  • Hazardous waste treatment sites

Some lower-risk waste activities may qualify for an exemption, which still requires registration with the regulator and compliance with set limits on quantities and types of waste. Many businesses assume they are exempt without checking, which is a common route to enforcement action.

3. Combustion plants and generators

Businesses running boilers, engines, turbines or generators can fall within permitting requirements depending on their thermal input. Medium combustion plants (roughly 1 to 50 megawatts thermal input) and specified generators, including some standby and backup generators, may need a permit or registration. This surprises many hospitals, data centres, manufacturers and large commercial sites.

4. Discharges to water and groundwater

You may need a permit if you discharge anything to surface water or groundwater, including trade effluent that is not going to a public sewer, treated sewage effluent from a private system, or cooling water. Some activities that could affect groundwater, such as injecting substances into the ground, also require authorisation.

5. Flood risk activities

Work in, over, under or near a main river, flood defence or sea defence may need a flood risk activity permit. This is relevant to construction, civil engineering, landscaping and riverside development, not just industrial operators.

6. Radioactive substances

Businesses that keep, use or dispose of radioactive material or radioactive waste may need a permit or registration. This can include some hospitals, laboratories, industrial gauging operations and sites handling naturally occurring radioactive material.

7. Mining waste operations

Operators that manage waste from mineral extraction, such as tailings, overburden and waste rock, fall within the regime.

8. Solvent emissions and other specific activities

Processes using significant volumes of organic solvents (for example in printing, coating or cleaning), as well as some intensive farming operations (large pig and poultry units above set capacity thresholds), also require permits.

Who regulates environmental permits?

The regulator depends on the activity:

ActivityRegulator (England)
Part A(1) installationsEnvironment Agency
Part A(2) and Part B installationsLocal authority (environmental health or environmental protection team)
Waste operations and mining wasteEnvironment Agency
Water discharges, groundwater activities, flood risk activitiesEnvironment Agency

In Wales, Natural Resources Wales takes the Environment Agency’s role.

What happens if you operate without a permit?

Operating a regulated facility without a permit, or breaching permit conditions, is an offence. Possible consequences include:

  • Enforcement and stop notices requiring you to cease operating
  • Unlimited fines in the Crown Court
  • Prison sentences for individuals in serious cases
  • Prosecution of directors and senior managers where an offence is committed with their consent or neglect
  • Clean-up and remediation costs
  • Reputational damage and difficulties with insurers, lenders and customers

Regulators also publish enforcement outcomes, so a conviction is rarely a private matter.

How to check if your business needs a permit

  1. Identify every activity on site. Consider waste handling, combustion plant, solvent use, discharges and any work near watercourses, not just your core process.
  2. Use the official checker. GOV.UK provides a “check if you need an environmental permit” tool covering permits, exemptions and standard rules.
  3. Check for standard rules permits. Many common activities can be covered by pre-set standard rules, which are quicker and cheaper than a bespoke permit.
  4. Speak to the regulator early. The Environment Agency or your local authority can confirm whether an activity needs a permit and which type. Pre-application advice can save months and reduce wasted application documents and assessments.
  5. Keep records. If you conclude no permit is needed, document your reasoning in case a regulator challenges it.

What about Scotland, Northern Ireland and the Republic of Ireland?

The principles are similar, but the legal framework and regulator differ:

If you operate across more than one jurisdiction, you cannot assume a permit in one place covers another.

Frequently asked questions

Do small businesses need an environmental permit? Size does not determine whether you need one. What matters is the activity. A small dry cleaner or a small vehicle dismantler can need a permit just as a large manufacturer can.

Is an exemption the same as not needing a permit? No. An exemption usually has to be registered, and it only applies if you stay within strict conditions.

Can I apply for a permit myself? Yes, the operator can apply directly. For complex sites, many businesses use a consultant to prepare risk assessments, management systems and technical submissions, because errors cause delays and rejections.

How long does a permit take? It varies widely. Standard rules permits can be relatively quick and determined within 6-8 months, while bespoke permits for complex sites can take even longer. Regulators set statutory determination periods, and incomplete applications restart the clock.

Do permits cost money? Yes. There is typically an application charge and an annual subsistence charge, which vary by activity and risk rating. Check the current charging scheme with the relevant regulator.

Need help working out whether you need a permit?

Getting this wrong is expensive, whether that means operating illegally or paying for a permit you did not need. At Ashbrooke Management Consultants, we help businesses identify which legislation applies to business operations and sites. Once identified, we compile all the legislation into a register and include the steps required to be compliant.

If you need to identify the legislation applicable to your business, please contact one of our team.

Does My Business Need to Comply with the Waste Regulations?

Short answer: yes. If you run a business, charity or any other workplace, you produce waste, and if you produce waste, you have legal duties. The size of your business, the type of waste and where you operate change which duties apply, but there is no sector or headcount that switches them all off.

This guide explains the main waste obligations for businesses in England, what has changed recently, and how to check whether you are compliant. It also flags where Wales, Scotland and Northern Ireland differ.

What do we mean by “the Waste Regulations”?

There is no single set of regulations called “the Waste Regulations”. Businesses are usually caught by a combination of:

  • The waste duty of care (Section 34, Environmental Protection Act 1990), which applies to everyone who produces, keeps, carries, treats or disposes of business waste.
  • The Waste (England and Wales) Regulations 2011, which require businesses to take all reasonable steps to apply the waste hierarchy (prevent, reuse, recycle, recover, then dispose).
  • Workplace recycling rules (“Simpler Recycling”), which require businesses in England to separate certain waste streams.
  • Hazardous waste regulations, which apply if you produce waste that is harmful to people or the environment.
  • Producer responsibility rules, covering packaging, electrical and electronic equipment (WEEE) and batteries, which apply depending on what you place on the market.
  • Digital waste tracking, a new system that is rolling out in phases.

Which of these apply to you depends on your answers to a few simple questions, covered below.


1. The duty of care: it applies to every business

If your business produces waste of any kind, the duty of care applies to you. In practice it means you must:

  • Store waste safely and securely so it cannot escape, be stolen or cause pollution.
  • Only pass waste to an authorised person, such as a registered waste carrier or a permitted site. Check the carrier’s registration on the Environment Agency public register.
  • Describe the waste accurately and complete a waste transfer note (or hazardous waste consignment note) for each transfer. Waste transfer notes should be kept for at least two years; hazardous waste consignment notes for at least three years.
  • Take reasonable steps to make sure the waste is managed lawfully after it leaves your premises.

You remain responsible for your waste until it has been properly disposed of or recovered. If a “man with a van” takes it and tips it illegally, you can still be prosecuted. Penalties for duty of care offences can include unlimited fines, and serious cases can lead to imprisonment.


2. Workplace recycling: Simpler Recycling in England

England’s Simpler Recycling reforms require workplaces to separate their waste into core streams, working with their waste collector. In broad terms these are:

  • Dry recyclables (paper and card, plastic, metal and glass)
  • Food waste
  • Residual (general) waste

The key dates are:

DateWho is covered
31 March 2025Businesses and non-domestic premises with 10 or more full-time equivalent (FTE) employees
31 March 2027Micro-firms with fewer than 10 FTE employees

Points that catch people out:

  • Headcount is counted across the whole organisation, not per site. Three sites with five staff each is a 15-person business, not three micro-firms.
  • It is not just offices and shops. Charities, schools, care homes and other non-domestic premises are in scope.
  • Staff kitchens count. If your premises produce waste similar to household waste, the rules apply to it.
  • Plastic film and bags are due to be added to the plastic stream at a later date than originally planned. Check current guidance for the latest timetable.

If you do not comply, the Environment Agency can issue compliance notices.

If you are a micro-firm, the 2027 deadline is closer than it feels. Talk to your waste collector now about containers, collection frequency and contract changes.


3. Hazardous waste

Many businesses produce hazardous waste without realising it. Common examples include:

  • Fluorescent tubes and some other lighting
  • Batteries
  • Waste oils, solvents, paints and adhesives
  • Asbestos
  • Some electrical equipment and electronic screens
  • Clinical and healthcare waste
  • Certain chemical-contaminated materials

If you produce hazardous waste you must classify it correctly, keep it separate from non-hazardous waste, use a registered carrier, and complete consignment notes for each movement. Mixing hazardous waste with other waste is generally unlawful.


4. Digital waste tracking: what has just changed

Digital waste tracking is designed to replace much of the paper-based system with a single national digital service, to improve traceability and tackle waste crime.

  • From 1 October 2026, operators of permitted waste receiving sites in England and Wales must record the waste they receive through the government’s digital service. Scotland and Northern Ireland have their own timetables, so check the position there.
  • Waste collectors, carriers, brokers and dealers are expected to follow in a later phase, anticipated from October 2027.
  • Waste producers have no mandatory date yet.

For now, you must carry on completing waste transfer notes and consignment notes as normal. However, it is sensible to ask your waste contractor how they are preparing, because the data they will need from you is likely to increase.


Business waste bins separated for dry recycling, food waste and general waste

Do you know what waste your business produces?

5. Producer responsibility: packaging, WEEE and batteries

Separate from the day-to-day waste you throw away, you may have obligations because of what you supply:

  • Packaging: extended producer responsibility (EPR) rules require larger businesses that supply or handle packaging to report packaging data and pay fees. Thresholds are based on turnover and tonnage, so check whether you are in scope.
  • WEEE: businesses that sell electrical and electronic equipment have take-back and financing duties.
  • Batteries: businesses that supply batteries have their own registration and take-back duties.

If you manufacture, import or sell products, take specific advice on these.


6. Does it apply outside England?

Yes, although the detail differs.

  • Wales: workplace recycling regulations have applied since April 2024, requiring separate collection of core materials, including food waste.
  • Scotland: the Waste (Scotland) Regulations 2012 require businesses to present dry recyclables and, for many, food waste for separate collection.
  • Northern Ireland: separate legislation applies, including duties to segregate recyclables, with its own timetable for digital waste tracking.
  • Republic of Ireland and the Isle of Man: each has its own waste legislation, and the English rules above do not apply.

If you operate across more than one jurisdiction, you need to manage each site against the local rules.


A quick compliance checklist

Ask yourself:

  1. Do I know what types and volumes of waste my business produces?
  2. Is any of it hazardous, and is it classified and segregated correctly?
  3. Is my waste collector or carrier registered, and do I hold up-to-date transfer notes and consignment notes?
  4. Do I separate dry recyclables, food waste and general waste as required for my size and location?
  5. Have I recorded my headcount across the whole organisation to confirm which deadline applies?
  6. Do my staff know what goes where?
  7. If I supply packaging, electrical goods or batteries, have I checked my producer responsibility obligations?
  8. Do I know what my contractor needs from me for digital waste tracking?

If you cannot answer yes to all of these, a waste compliance review is a sensible next step.


What happens if you get it wrong?

Consequences can include compliance notices, fixed penalties, prosecution with unlimited fines, and reputational damage, particularly if your waste ends up fly-tipped or illegally dumped. Poor waste management is also frequently a health and safety issue, from fire risks in poorly stored waste to manual handling injuries and exposure to hazardous substances.


How we can help

Waste compliance sits alongside health, safety and environmental management, and many businesses find it easier to deal with them together. We can prepare a legal register detailing each piece of waste legislation that applies to your business and what you must do to comply with it. We can also maintain this register when new legislation is introduced or your sites or operations change.

Contact one of our team to find out how we can help you with your waste obligations.

This article is general guidance and not legal advice. Legislation and deadlines change; please contact us for advice on your specific circumstances.

When Does DSEAR Apply?

Short answer: DSEAR applies whenever your work involves a substance that could cause a fire, explosion or similar energetic event. The Dangerous Substances and Explosive Atmospheres Regulations 2002 (DSEAR) cover far more than heavy industry. Petrol, solvents, LPG, wood dust, flour and even the hydrogen given off by charging forklift batteries can bring a workplace within scope.

This guide explains when DSEAR applies, which activities are excluded and what employers need to do.

What is DSEAR?

DSEAR is the main piece of Great Britain’s health and safety law for protecting people from the fire and explosion risks of dangerous substances at work. It requires employers to assess those risks and then eliminate or reduce them, so far as is reasonably practicable. The regulations are enforced by the Health and Safety Executive (HSE) and, for some premises, local authorities.

What is a “dangerous substance” under DSEAR?

A substance counts as dangerous under DSEAR if it could cause harm through fire, explosion or a similar energetic reaction. This includes:

  • Flammable liquids, such as petrol, solvents, thinners, alcohols and some paints, varnishes and adhesives
  • Flammable gases, such as LPG, propane, acetylene, hydrogen and natural gas
  • Aerosols containing flammable propellants
  • Flammable solids, such as certain metal powders
  • Oxidising substances and organic peroxides, which can feed or intensify a fire
  • Self-reactive, self-heating and pyrophoric substances, which can ignite without an obvious ignition source
  • Substances that give off flammable gas on contact with water
  • Combustible dusts, such as flour, sugar, grain, wood, paper, plastics and some metal dusts, which can form explosive clouds when dispersed in air

Look at hazard pictograms and the supplier’s safety data sheets, these are a good first indicator of whether a substance is covered.

DSEAR

Does DSEAR apply to you?

What is an explosive atmosphere?

DSEAR is particularly concerned with explosive atmospheres. These are mixtures of air and flammable gases, vapours, mists or dusts in which, once ignited, burning spreads through the whole mixture. A small leak in a poorly ventilated room, a cloud of dust in a hopper or vapour from a spray booth can each create one. If there is also an ignition source (a spark, static electricity, a hot surface or an electrical fault), the result can be devastating.

When does DSEAR apply to my business?

DSEAR applies when dangerous substances are present at work, whether you:

  • Use them in a process, such as spraying, mixing, cleaning or welding
  • Store them, for example solvents, gas cylinders or fuel
  • Produce or handle them, intentionally or as a by-product (such as dust from sanding or cutting)
  • Transport them within or around your premises

It applies regardless of business size or sector. Typical examples include:

  • Vehicle repair, spraying and refinishing
  • Woodworking, joinery and furniture manufacture
  • Food and drink production, milling and bakeries
  • Warehousing, including battery charging areas
  • Engineering, welding and fabrication
  • Waste and recycling, where dust, gases and fire risks are common
  • Farms, including grain stores and fuel storage
  • Laboratories, schools and universities
  • Petrol stations and fuel depots

DSEAR protects employees, contractors, visitors and members of the public who could be affected by your work, and self-employed people have duties too. Small quantities can still bring DSEAR into play, although the controls needed should be proportionate to the risk.

When does DSEAR not apply?

DSEAR does not apply to some activities, which are covered by other specific legislation, including:

  • Areas used directly for the medical treatment of patients
  • Appliances burning gaseous fuel that are covered by gas appliance rules
  • The manufacture, handling, use, storage and transport of explosives and chemically unstable substances, which fall under explosives legislation
  • Mineral extraction industries, which have their own regulations
  • Certain forms of transport, such as use of vehicles on public roads, which have separate rules

If you are unsure whether an exclusion applies to your activity, take advice before relying on it – in some cases only parts of DSEAR are disapplied.

DSEAR or COSHH: what’s the difference?

The two sets of regulations are often confused, but they address different harms. COSHH deals with hazardous substances that damage health, such as through inhalation or skin contact. DSEAR deals with substances that can cause fire, explosion and similar events. Many substances fall under both. Solvents, for example, can harm health through exposure and also burn or explode, so you may need to assess the risks under each.

What do I need to do to comply with DSEAR?

DSEAR compliance usually follows these steps:

  1. Carry out a risk assessment. Identify the dangerous substances, how they might ignite or explode and who could be harmed. Consider the quantities, the processes, the possible ignition sources and what could go wrong.
  2. Eliminate or reduce the risk. Substitute with a less hazardous substance where you can, reduce quantities, improve ventilation and control leaks and spills.
  3. Control ignition sources. Use suitable equipment in hazardous areas, manage static, control hot work and keep unsuitable equipment out.
  4. Classify hazardous areas into zones. Where explosive atmospheres may occur, areas are classed by how often and for how long they are likely to be present (zones 0, 1 and 2 for gases and vapours; zones 20, 21 and 22 for dusts). This determines the equipment that can be used there.
  5. Mark hazardous areas where necessary. Display the explosive atmosphere warning sign at entry points.
  6. Mitigate the effects. Use measures such as explosion relief, suppression, isolation and separation, so that harm is limited if an incident occurs.
  7. Prepare for emergencies. Provide procedures, alarms, escape routes and equipment, and practise them.
  8. Inform, instruct and train. Everyone who works with or near dangerous substances must understand the risks and controls.
  9. Review regularly. Revisit your assessment when substances, processes, equipment or layouts change.

What happens if I don’t comply?

Fires and explosions involving dangerous substances can cause fatalities, life-changing injuries and major damage to property and business continuity. HSE can issue improvement and prohibition notices and prosecute, and serious breaches can bring unlimited fines or even imprisonment. Insurers may also challenge claims where a business has not assessed or controlled its risks.

Does DSEAR apply in Northern Ireland and the Republic of Ireland?

DSEAR applies in Great Britain. Northern Ireland has an equivalent set of regulations, the Dangerous Substances and Explosive Atmospheres Regulations (Northern Ireland) 2003, and the Republic of Ireland regulates explosive atmospheres and chemical agents under its own health and safety legislation. The principles are broadly the same, but the details differ, so check the rules that apply where you operate.

Not sure whether DSEAR applies to you?

If your business stores, uses or produces flammable liquids, gases, aerosols or dusts, assume DSEAR is relevant and start by listing the substances you have and where they are. The HSE provides additional guidance for businesses.


This article is general guidance and not legal advice. Requirements depend on your specific work activities and location.

Does COSHH Apply to My Business?

Short answer: almost certainly, yes. If anyone at your workplace uses, makes, handles or is exposed to substances that could harm their health, the Control of Substances Hazardous to Health Regulations 2002 (COSHH) apply to you. That covers far more businesses than most owners expect, from building sites and factories to salons, schools, care homes and offices.

This guide explains what COSHH covers, who must comply, what is excluded and what you need to do.

What is COSHH?

COSHH is the main piece of Great Britain’s health and safety law governing hazardous substances at work. It requires employers to prevent or adequately control exposure to substances that can cause ill health, whether through breathing them in, skin contact, swallowing or contact with the eyes.

The regulations are enforced by the Health and Safety Executive (HSE) and, for some sectors, local authorities.

Which substances does COSHH cover?

COSHH applies to a wide range of substances hazardous to health, including:

  • Chemicals and products containing them, such as cleaning products, paints, solvents, adhesives, de-greasers and disinfectants
  • Fumes, such as welding or soldering fumes
  • Dusts, such as wood dust, flour dust, silica dust from cutting stone or concrete, and cement
  • Vapours, gases and mists, such as spray mists and exhaust fumes
  • Biological agents, such as bacteria, viruses and fungi, including Legionella in water systems
  • Germs that cause diseases, such as leptospirosis (Weil’s disease) or hepatitis, where work brings people into contact with them
  • Nanotechnology materials, where hazardous
  • Asphyxiating gases, which displace oxygen

Many everyday products carry hazard warning pictograms on the label. These are a good first clue that COSHH is relevant. The supplier’s safety data sheet gives the detail you need for your assessment.

Who does COSHH apply to?

COSHH places duties on employers, but it also protects others affected by your work. You must consider:

  • Your employees and agency or temporary workers
  • Contractors working on your premises
  • Visitors, customers and members of the public who could be exposed
  • Self-employed people, who have duties for their own protection and that of others

Business size doesn’t matter. A sole trader with one employee has the same duties as a large organisation, although the paperwork and controls should be proportionate to the risk.

Does COSHH apply to offices and low-risk workplaces?

Yes, although the risks are usually lower. Offices use cleaning products, toner and printer consumables, and some have air conditioning or water systems that need managing for Legionella. You still need to consider whether any substances could cause harm. In many cases a short, sensible assessment will show that risks are low and existing controls are enough.

What does COSHH not cover?

Some hazards have their own specific regulations, so COSHH does not apply to them:

  • Asbestos, covered by the Control of Asbestos Regulations 2012
  • Lead, covered by the Control of Lead at Work Regulations 2002
  • Radioactive substances and ionising radiation, covered by the Ionising Radiations Regulations 2017
  • Substances hazardous only because they are explosive, flammable, or are at extreme temperature or pressure, which are covered by other legislation such as the Dangerous Substances and Explosive Atmospheres Regulations 2002 (DSEAR)

Even where COSHH doesn’t apply, you will normally still have duties under these other regulations and under the Health and Safety at Work etc. Act 1974.

COSHH bucket

Do you know what chemicals are used in your business?

What do I need to do to comply with COSHH?

In practice, COSHH compliance comes down to these steps:

  1. Assess the risks. Identify which hazardous substances are present, who could be exposed, how and how much. Record your significant findings if you employ five or more people.
  2. Prevent or control exposure. Where you can, eliminate the substance or substitute something safer. Otherwise use engineering controls such as enclosure or local exhaust ventilation, safe working systems, and personal protective equipment (PPE) only as the last line of defence.
  3. Make sure controls are used and maintained. Local exhaust ventilation must be thoroughly examined and tested at least every 14 months, and records kept.
  4. Monitor exposure where needed. Compare exposure against the workplace exposure limits in HSE’s EH40 guidance.
  5. Provide health surveillance where required. This applies where there is a risk of identifiable ill health, such as dermatitis or occupational asthma.
  6. Inform, instruct and train your people. Workers need to understand the risks, the controls and what to do if something goes wrong.
  7. Plan for emergencies. Have procedures for spills, accidents and incidents involving hazardous substances.
  8. Review regularly. Revisit your assessment whenever processes, substances or work methods change.

What happens if I don’t comply?

Poor COSHH compliance can lead to serious occupational illness, including occupational asthma, dermatitis, cancers and lung disease, often with effects that appear years later. The HSE can issue improvement or prohibition notices and prosecute, with unlimited fines for serious breaches. Beyond enforcement, you face the cost of civil claims, sickness absence and reputational damage.

Does COSHH apply in Northern Ireland and the Republic of Ireland?

COSHH itself applies in Great Britain. Northern Ireland has its own equivalent, the Control of Substances Hazardous to Health Regulations (Northern Ireland) 2003, and the Republic of Ireland regulates chemical and biological agents under separate legislation. The core principle is the same: assess, control and review. If you operate across more than one jurisdiction, check the requirements for each.

Not sure where you stand?

If your business uses any chemicals, dusts, fumes or biological agents, assume COSHH applies and start by listing the substances you use. If you’re unsure whether your assessments are adequate, our health and safety consultants can help you review your hazardous substances, carry out COSHH assessments and put practical controls in place.


This article is general guidance and not legal advice. Requirements depend on your specific work activities and location.

Does the Environmental Permitting Regulations apply to my business?

If your business handles waste, discharges to water or air, runs industrial plant, or stores certain materials, the answer may well be yes. The Environmental Permitting (England and Wales) Regulations 2016 (EPR) are among the most widely applicable environmental laws in the UK, and many businesses are caught by them without realising it. Operating a regulated activity without the right permit or exemption is a criminal offence, so it’s worth checking before the regulator asks.

What are the Environmental Permitting Regulations?

The environmental permitting regulations bring several previously separate regimes under a single permitting system. Rather than applying for different licences for waste, industrial emissions and water pollution, operators deal with one framework, overseen by the Environment Agency (EA) in England, Natural Resources Wales (NRW) in Wales, or the local authority for certain lower-risk activities.

The core rule is simple: if you carry out a “regulated facility” activity, you need an environmental permit, or you must qualify for an exemption or exclusion.

Do the Environmental Permitting Regulations Apply to You?

Does your business require an environmental permit?

Which activities are regulated?

The regulations cover a broad range of activities. The main categories are:

  • Installations: industrial processes with the potential to pollute air, water or land, such as chemical manufacture, metal processing, intensive farming, food and drink production above certain thresholds, and waste incineration.
  • Waste operations: treating, storing, recovering or disposing of waste, including scrap metal yards, skip hire, vehicle dismantlers, waste transfer stations and composting sites.
  • Mobile plant: equipment used to treat or recover waste on different sites, such as mobile crushers.
  • Water discharge activities: releasing trade effluent or other liquids to surface water, sewers in some circumstances, or groundwater.
  • Groundwater activities: discharges or activities that could pollute groundwater.
  • Medium combustion plants and specified generators: boilers, engines and generators within certain thermal-input ranges, including standby generators used for grid services.
  • Solvent emission activities: processes using organic solvents above set thresholds, such as printing, coating and dry cleaning.
  • Radioactive substances activities: keeping or using radioactive materials, or disposing of radioactive waste.
  • Mining waste operations: managing waste from mineral extraction.

Do I need a permit, an exemption, or nothing at all?

Being in a regulated sector doesn’t automatically mean a full permit. There are usually three outcomes.

1. A bespoke permit. Higher-risk or complex sites typically need a tailored permit with site-specific conditions, monitoring and reporting requirements.

2. A standard rules permit. For lower-risk, well-understood activities, the regulator publishes fixed sets of conditions. These are quicker and cheaper to obtain, but you must be able to meet every rule.

3. An exemption or exclusion. Some low-risk activities, such as certain types of waste storage, reuse or recovery, don’t need a permit but may need to be registered, and must stay within strict limits on waste type, quantity and how it’s handled. Exceeding those limits can take you out of the exemption and into unpermitted operation.

A common mistake is assuming an exemption applies without checking the conditions. Quantity limits, storage time limits and waste codes all matter.

Common situations where businesses get caught out

  • A manufacturer storing or treating waste on site beyond exemption limits
  • A builder or groundworks firm processing or crushing waste soil or rubble
  • A site with a large boiler or generator that reaches medium combustion plant thresholds
  • A business discharging site drainage or process water to a watercourse or soakaway
  • A company taking over a site and assuming the previous permit transfers automatically
  • Businesses that only use a waste carrier and assume permitting isn’t their concern, without checking the duty of care and whether the receiving site is permitted

What if I’m not in England or Wales?

Environmental permitting is devolved, so the rules differ:

If you operate across more than one jurisdiction, you can’t assume one approach fits every site.

What are the consequences of getting it wrong?

Operating a regulated facility without a permit, or breaching permit conditions, is a criminal offence. Penalties can include an unlimited fine and, in serious cases, imprisonment. The regulator can also issue enforcement or suspension notices, require remediation, and pursue cost recovery. Beyond the legal risk, non-compliance can affect insurance, contracts, funding and your reputation with customers who ask about environmental credentials.

How to check whether the EPR apply to you

  1. List your activities. Include not just your main process, but storage, treatment of waste, drainage, heating and power plant.
  2. Check the thresholds. Many activities only become regulated above a certain quantity, capacity or thermal input.
  3. Identify your waste streams. Know what you produce, how much, how long it’s kept, and where it goes.
  4. Check for existing permits or exemptions. Confirm they are current, cover what you actually do, and that you’re meeting every condition.
  5. Get an independent view. A competent adviser can spot gaps you may not see from the inside.

How we can help

Working out whether the EPR apply is rarely as simple as ticking a box. Our team can review your operations, identify regulated activities, advise on whether you need a permit or qualify for an exemption, and support you through applications and ongoing compliance. Get in touch for an initial conversation about your site.

This article is general guidance and not legal advice. Requirements depend on your activities, location and circumstances.

What an Auditor Looks for in an ISO 14001 Compliant Legal Register

Just as ISO 45001 places the legal register at the centre of an Occupational Health and Safety audit, ISO 14001 auditors treat the environmental legal register the same way. Clause 6.1.3 requires organisations to identify and have access to legal and other requirements related to their environmental aspects, and clause 9.1.2 requires ongoing evaluation of compliance against them. As an auditor with over 10 years experience, I am often asked what I look for when auditing a legal register. In this article I will explain what makes a compliant legal register. A weak legal register is often the first sign an auditor uses to question the rest of the environmental management system.

Here’s what they actually look for.

1. Coverage: Does It Match Your Environmental Aspects?

Auditors will cross-check your register against your aspects and impacts register, looking for gaps such as:

  • Legislation tied to specific activities โ€” waste production and disposal, trade effluent, emissions to air, water abstraction or discharge, storage of hazardous substances
  • Permits and licences (environmental permits, waste carrier licences, discharge consents) and the conditions attached to them
  • Jurisdiction-specific law where you operate across multiple regions โ€” for example, differences between Great Britain, Northern Ireland, the Isle of Man, and the Republic of Ireland
  • Producer responsibility obligations (packaging waste, WEEE, batteries) where relevant

If your register lists only headline legislation (Environmental Protection Act 1990, Environmental Permitting Regulations) without the specific conditions and secondary regulations that actually apply to your sites, auditors will flag it as incomplete.

2. Currency: Is It Actively Monitored?

This is the most common nonconformity raised against environmental legal registers. Auditors will ask:

  • What process identifies new, amended, or revoked environmental legislation?
  • How often is the register reviewed, and who is accountable for it?
  • Can you evidence the last review โ€” version history, revision log, sign-off dates?

A register that hasn’t changed in years, despite known regulatory activity in your sector, signals there’s no active horizon-scanning process. Subscribing to a legislation-update service or newsletter is strong, tangible evidence here.

ISO 14001 Legal Register: What Auditors Look For

Is your ISO 14001 legal register compliant?

3. Evaluation of Compliance: Beyond the List

ISO 14001 clause 9.1.2 requires evaluation of compliance, not just identification of requirements. Auditors will look for:

  • A compliance status against each requirement (compliant / partially compliant / non-compliant)
  • Evidence supporting that status โ€” permit conditions met, monitoring data, waste transfer notes, inspection records
  • A defined frequency for compliance evaluation, distinct from the general register review

Registers where every entry is simply marked “compliant” with no supporting evidence are a red flag, especially for permitted activities where conditions carry monitoring or reporting obligations.

4. Traceability Into Operational Control

Auditors will sample specific legal requirements and trace them through the system to confirm they’re operationally embedded, not just listed. Expect questions like:

  • Is this requirement reflected in an operational control procedure, permit condition tracker, or monitoring schedule?
  • Do the people responsible for the activity know the legal requirement applies to them?
  • Is evidence of compliance readily retrievable โ€” not just asserted?

A legal register that exists in isolation from operational procedures and permit management is a common weak point.

5. Ownership and Process

Auditors assess the process behind the register as much as the document itself:

  • Who is responsible for monitoring legislative and permit changes?
  • What’s the escalation route when a new requirement is identified, and how quickly is it actioned?
  • Is legal compliance status reviewed at management review, per clause 9.3?

A register maintained informally by one person, with no visibility at management review, suggests the requirement is being satisfied on paper rather than in practice.

6. Format Doesn’t Matter โ€” Function Does

ISO 14001 doesn’t specify a register format. Auditors care whether it functions as a live compliance tool, not what it’s built in. A well-structured register typically includes:

AspectPurpose
Legislation/permit referenceIdentification
JurisdictionApplicability
Summary of requirementInterpretation
Related environmental aspectRelevance
Compliance statusEvaluation
Evidence/referenceTraceability
Date reviewed / next reviewCurrency
OwnerAccountability

Getting Audit-Ready

To strengthen your environmental legal register ahead of an ISO 14001 audit or surveillance visit:

  1. Cross-check the register against your current aspects and impacts assessment
  2. Add or refine a compliance-status column with linked evidence
  3. Establish and evidence a documented review cycle
  4. Ensure the register connects visibly to permit management, monitoring schedules, and management review minutes

An environmental legal register that’s actively maintained, evidenced, and embedded in operational decisions is one of the clearest signs of a mature EMS โ€” and one of the fastest wins ahead of an audit.

If you need a bespoke legal register or you want your existing register reviewed, please contact one of our team.