Why Generic Legal Templates Fail and What Your Business Needs Instead
When setting up a health, safety, and environmental compliance framework, it can be tempting to download an off-the-shelf legal template. On paper, standard templates seem quick and cost-effective. In practice, however, generic legal registers often create a false sense of security while failing to protect your business during audits or legal inspections.
Here is why relying on generic legal templates puts your organisation at risk — and why a bespoke approach is essential.
1. They Create “Regulatory Noise”
Understanding which health, safety, and environmental laws apply is foundational to effective compliance. However, off-the-shelf legal registers often list hundreds of pieces of legislation, many of which have little or no direct relevance to your specific business. Sorting through irrelevant statutes covering niche industrial processes or permitting creates unnecessary confusion, making it difficult to determine which legal duties actually apply to your day-to-day operations.
2. They Ignore Your Operational Realities
No two organisations share the exact same legal obligations. Your specific legal duties are dictated by your unique workplace activities, physical premises, operational processes, equipment, and geographical locationsacross jurisdictions such as the United Kingdom, Isle of Man, and the Republic of Ireland. A standard template forces your business to adapt to a rigid document, rather than having a compliance tool developed around what your business actually does.
3. They Provide Only “Snapshot” Compliance
Legislation changes constantly—new statutory instruments are introduced, existing requirements are amended, and older regulations are revoked or replaced. A static, downloaded template is accurate only on the day it is created. Relying on an off-the-shelf register leaves your internal team with the heavy burden of monitoring legislative developments manually, exposing you to compliance gaps when laws change.
4. They Fail ISO Management Audits
For organisations operating or seeking certification to standards like ISO 9001 (Quality Management)ISO 14001 (Environmental Management) or ISO 45001 (Occupational Health & Safety Management), identifying applicable legal duties is a core requirement. Auditors expect clear, documented evidence that applicable legislation has been systematically identified and is actively kept under review. A bloated, generic list fails to provide a meaningful basis for reviewing compliance or identifying required corrective actions.
A well-designed legal register should serve as a practical compliance management tool. By focusing strictly on the health, safety, and environmental laws relevant to your operations and backing them with quarterly legislative updates, you ensure your records remain focused, accurate, and audit-ready year-round.
You can only improve health and safety performance if you measure it consistently, and the same handful of formulas underpins almost every serious safety dashboard. This guide walks through the 37 calculations and explains what each one tells you, and shows what it is used for.
The formulas fall into ten groups: injury rates, workforce exposure, audit and compliance, risk, emergency readiness, behavioural observations, contractors, leading and lagging indicators, additional rates, and the mindset that ties them together. Numbers do not make a workplace safe by themselves. Used well, they show where the gaps are, whether controls are working, and where to spend time and money next.
Before you calculate: pick your basis and definitions
Two companies can report very different accident rates for the same performance simply because they use different multipliers or definitions. Settle three things before you compare any number.
The multiplier. Rates are scaled so that small and large organisations can be compared fairly.
The definition of each case type. What counts as a lost time injury, a recordable case or a restricted work case varies between organisations, clients and regulators.
The denominator. Hours worked is the most accurate exposure measure. Headcount or estimated hours are weaker substitutes.
LTIFR, frequency rate, near-miss rate, and many international client and industry reports
One million hours of exposure
100,000 workers
UK HSE national statistics, which are expressed per 100,000 employees rather than per hours
A standardised workforce size
Always follow the basis your client, industry body or reporting system specifies, and state the basis next to every figure you publish.
1. Safety performance: injury and incident rates
These eight rates turn raw injury counts into comparable figures. They are the core of most client and board safety reports.
Frequency Rate (FR) shows how often lost time injuries (LTIs) occur per million hours worked. Use it to track whether injuries are becoming more or less common over time.
FR = LTIs x 1,000,000 / Man-hours worked
Severity Rate (SR) shows how many working days are lost per million hours. It tells you how serious injuries are, not just how many there are. Divide SR by FR (on the same basis) to get the average days lost per lost time injury.
SR = Lost workdays x 1,000,000 / Man-hours worked
Lost Time Injury Frequency Rate (LTIFR) is the most widely quoted headline measure in contractor pre-qualification and tender questionnaires.
LTIFR = LTIs x 1,000,000 / Hours worked
Total Recordable Incident Rate (TRIR) counts every recordable case, not only those that cost working days. It gives a fuller picture of injury performance than LTIFR and is standard in US-linked and oil and gas supply chains.
TRIR = Recordable cases x 200,000 / Hours worked
DART Rate covers cases involving days away from work, restricted work or job transfer. It highlights injuries serious enough to change what a person can do at work.
DART = DART cases x 200,000 / Hours worked
Lost Workday Case Rate (LWDC) counts only cases where the person was away from work, which makes it a narrower, stricter measure than TRIR.
LWDC = LWDC x 200,000 / Hours worked
Incident Rate applies the same approach to all incidents, so it can include damage-only events and other non-injury incidents depending on how you define an incident.
Incident Rate = Number of incidents x 200,000 / Hours worked
Near-Miss Rate measures how many near misses are reported per million hours. Unlike the other rates, a higher figure here is often a good sign, because it suggests people are reporting events that could have caused harm.
Near-miss Rate = Near misses x 1,000,000 / Man hours worked
Health and safety calculations and formulas
2. Man-hours and workforce: measuring exposure
Every rate in the previous section depends on one number: hours worked. Get this wrong and every other figure is wrong with it.
Man-hours worked is the total exposure for a period. Use actual hours, including overtime and agency or temporary labour, and exclude leave and sickness.
Man-hours = Workers x Working hours x Working days
Average workforce converts total hours back into an equivalent number of full-time people. It is useful when headcount changes during the year, for example on a project that ramps up and down.
Average workforce = Total man-hours worked in the period / Standard working hours per person in the period
Safe man-hours % shows the proportion of hours worked without a recordable or lost time injury. It is a positive, easy-to-communicate measure for site boards. Many organisations instead report a running total of safe man-hours since the last lost time injury, so check which version your audience expects.
Safe man-hours % = Safe man-hours / Total man-hours x 100
Absenteeism % measures the share of available working days lost to absence. It is a workforce health indicator rather than a pure safety measure, but a sustained rise can point to fatigue, stress, poor welfare or underlying health problems worth investigating.
Absenteeism % = Absent man-days / Available man-days x 100
3. Audit and compliance: are the controls actually in place?
Six compliance percentages share one structure: what was found compliant, divided by what was checked, multiplied by 100. They show whether your management system is working in practice, not just on paper.
Overall conformity with the audit protocol or standard
PPE compliance %
Compliant workers ÷ workers checked × 100
Whether PPE rules are followed in the field
Permit to work (PTW) compliance %
Compliant permits ÷ permits audited × 100
Quality and discipline of high-risk work control
CAPA closure %
Closed actions ÷ total actions × 100
Whether corrective and preventive actions are actually completed
Training compliance %
Trained employees ÷ applicable employees × 100
Coverage of mandatory and role-specific training
Inspection compliance %
Completed inspections ÷ planned inspections × 100
Whether the inspection programme is being delivered
Three habits make these figures more trustworthy:
Define “applicable”. Exclude items that genuinely do not apply, and record why.
Report sample size. A PPE result based on 8 workers is not the same as one based on 80.
Track overdue actions separately. A high CAPA closure rate can hide a handful of serious actions that have been open for months.
4. Risk management: scoring and comparing risk
Risk calculations let you rank hazards, justify the controls you choose and show that those controls made a measurable difference.
Risk score multiplies the likelihood of harm by its severity, usually on a 5 × 5 matrix. It lets you prioritise: a score of 20 needs attention before a score of 6.
Risk score = Likelihood x Severity
Residual risk is the risk that remains after controls are in place. It is scored the same way, using the likelihood and severity you expect with the controls working. If residual risk is still high, you need further controls, or you need to stop the activity.
Risk reduction % shows how much the controls achieved compared with the starting position. It is useful evidence in risk assessments, management reviews and client reports.
Worked example. A manual handling task is scored at likelihood 4 and severity 4, giving an initial risk of 16. After introducing a mechanical aid and training, likelihood falls to 2 while severity stays at 4, so residual risk is 8. Risk reduction is (16 − 8) ÷ 16 × 100 = 50%.
Remember that a risk score is a judgement made visible, not a measurement. Use the same scoring criteria every time, and have more than one competent person agree the scores for significant risks.
5. Emergency and fire safety: how ready are you?
Three measures test whether your emergency arrangements work when it matters. They are most useful when taken from real drills and real events, not estimated.
Emergency response time is the gap between notification of an emergency and the start of an effective response. Shorter is better, and trends across drills show whether response is improving.
Response time = T effective response – T notification
Evacuation time is how long it takes for everyone to reach the assembly point after the alarm sounds. Compare it with the target in your fire risk assessment and emergency plan, and look at what slowed people down: blocked routes, unclear signage, people with mobility needs, visitors or contractors who are unfamiliar with the site.
Evacuation time = T assembly complete – T alarm
Fire extinguisher coverage compares the extinguishers you need with those you actually have in place and in working order.
Extinguisher coverage % = Available and compliant extinguishers / Required extinguishers x 100
The number required should come from your fire risk assessment, using recognised guidance on selecting and siting portable extinguishers. Anything below 100% is a gap to close, and “compliant” should include being in the right place, correctly signed, and in date for servicing.
6. Safety observations and behaviour: what the front line is telling you
Observation programmes generate a lot of data. Four simple percentages turn it into something you can act on.
Metric
Formula
What it tells you
Observation closure %
Closed observations ÷ total observations × 100
Whether issues raised are being fixed, which drives trust in the programme
Unsafe act %
Unsafe acts ÷ total observations × 100
How often people are seen working in an unsafe way
Unsafe condition %
Unsafe conditions ÷ total observations × 100
How often the workplace itself is found to be unsafe
Repeat observation %
Repeat observations ÷ total observations × 100
Whether the same problems keep coming back
Read them together rather than in isolation:
A high unsafe act % with a low unsafe condition % points towards supervision, training, workload or culture.
A high unsafe condition % points towards maintenance, housekeeping, equipment and design.
A high repeat observation % is a warning that actions are closing on paper without fixing the root cause.
A low closure rate suggests workers will stop reporting, because nothing seems to happen.
Be careful not to treat a falling unsafe act percentage as proof of improvement. It can also mean observers are less thorough, or that people behave differently when they know they are being watched. Check the trend against near-miss reports and inspection findings.
7. Contractor safety: holding the supply chain to the same standard
Contractors often carry a large share of the risk on a site, and clients increasingly ask for contractor-specific figures. Three measures cover the basics.
Contractor incident rate applies the TRIR approach to contractor workers only, using their own recordable cases and their own hours. Keeping it separate stops good employee performance from masking contractor problems, or the reverse.
Contractor incident rate = Contractor recordable cases x 200,000 / Contractor hours worked
Contractor compliance % shows how many of your site requirements contractors are meeting, such as method statements, competence evidence, permits, insurance and inspection of work equipment.
Induction compliance % checks that everyone on site has been inducted before starting work. Anything below 100% means someone is working without knowing the site rules, emergency arrangements or hazards.
Induction compliance % = Inducted workers / Total mobilised workers x 100
On construction projects, the Construction (Design and Management) Regulations 2015 place duties on clients, principal designers and principal contractors that relate directly to these measures, including site inductions and checking contractor competence. Contractor figures are also a practical way to evidence that duty-holders are managing the people they bring onto site.
8. Leading and lagging indicators: look ahead as well as back
Safety performance is the combination of leading indicators, which measure the effort you put into preventing harm, and lagging indicators, which measure the harm that has already happened. Relying on lagging indicators alone is like driving by looking only in the rear-view mirror.
Leading indicators (proactive)
Safety inspections completed
Training hours delivered
Safety observations made
Toolbox talks held
Audits completed
Mock drills carried out
Near-miss reports submitted
CAPA closure
Lagging indicators (reactive)
Fatalities
Lost time injuries
Recordable injuries
Lost workdays
Occupational illnesses
Lagging indicators matter because they are the outcomes you are ultimately trying to prevent, and many are legally reportable. Their weakness is that they are often too few to be statistically meaningful, especially in a small or medium-sized business. A year with zero injuries may reflect good control or simply good luck.
Leading indicators fill that gap by showing, month by month, whether the activities that prevent harm are actually happening. Most of the percentages in sections 3, 6 and 7 are leading indicators. A good dashboard pairs each lagging result with the leading measures most likely to influence it.
9. Additional formulas: recordable rates and environmental performance
Four environmental measures that matter for sustainability reporting and ISO 14001-style environmental management can also be considered.
Total Recordable Incident Rate (TRIR), expanded. This is defined as fatalities plus lost time injuries plus restricted work cases. Be aware that the full OSHA definition of a recordable case also includes medical treatment beyond first aid, so confirm which cases your client counts.
TRIR = (Fatalities + LTIs + Restricted work cases) x 200,000 / Hours worked
Days Away, Restricted or Transferred (DART). This adds up cases where someone was away from work, on restricted duties or moved to a different job. Count cases, not days.
DART = (Days-away + Restricted + Transferred cases) x 200,000 / Hours worked
Environmental incident rate tracks spills, uncontrolled releases, permit breaches and similar events against hours worked, so you can see whether environmental control is improving as the workload changes.
Environmental incident rate = Environmental incidents x 200,000 / Hours worked
The last three are intensity measures. They divide resource use by output, which shows efficiency rather than just total consumption. If production doubles and energy use rises by 50%, intensity has improved even though the total went up.
Metric
Formula
Example unit
Energy consumption rate
Energy used ÷ output
kWh per unit produced
Water consumption rate
Water used ÷ output
m³ per unit produced
Waste generation rate
Waste generated ÷ output
kg per unit produced
Choose an output measure that suits your business, such as units produced, tonnes processed, turnover, or hours of service delivered, and keep it the same from year to year so trends are meaningful.
10. The HSE mindset: from numbers to decisions
The formulas only matter if they feed a cycle of improvement which has six steps:
Identify hazards and risks.
Assess and prioritise them.
Control them by putting safeguards in place.
Measure performance with the formulas in this guide.
Analyse gaps and trends.
Improve controls and build a stronger safety culture, then go round again.
Five practical points keep the numbers honest:
Fix your definitions. Write down what counts as an LTI, a recordable case, a near miss and an incident, and apply it consistently.
State your basis. Say whether a rate is per 200,000 or 1,000,000 hours, and which period it covers.
Protect data quality. Late reporting, missing hours and inconsistent classification distort every rate.
Use numbers to decide, not just to report. Each metric should prompt a question about what to do next.
Combine data with walking the site. Numbers show where to look, and conversations with the workforce explain why.
Turning the numbers into better safety
Good safety measurement is consistent, clearly defined and tied to action. Start with the few metrics that match your risks, such as hours worked, a recordable injury rate, near-miss reporting, action closure and training compliance, and build from there.
The regulation of health, safety, and the environment at work has never been a purely technical matter. It sits at the intersection of political economy, legal tradition, scientific knowledge, and institutional capacity. A chemical exposure limit in a European Union directive, an inspection protocol in a United States Occupational Safety and Health Administration (OSHA) field manual, a pollution permit condition in China, and a work health and safety duty in an Australian statute all reflect distinct histories of labour struggle, environmental mobilisation, administrative state-building, and, increasingly, economic strategy. To speak of “health and safety and environmental regulation across jurisdictions” is therefore to speak of a family of regimes that share common aspirations—the prevention of harm to workers, communities, and ecosystems—but which pursue those aspirations through markedly different architectures, enforcement cultures, and legal technologies.
The past several years have been a period of unusual turbulence for these regimes. The COVID-19 pandemic exposed the fragility of occupational health and safety (OSH) systems and accelerated debates about psychosocial risks, remote work, and the boundaries of employer responsibility. The intensification of the climate crisis has pushed environmental regulation from the periphery of corporate governance toward its centre, with mandatory climate disclosure, supply chain due diligence, and carbon border measures emerging as central instruments of public policy. At the same time, a powerful counter-movement has taken shape. In the United States, federal agencies have retreated from enforcement and from climate-related rule making, devolving significant regulatory energy to states.
In the European Union, the “Omnibus” simplification package has reduced the scope of flagship sustainability directives by dramatic margins, prompting accusations of backtracking on human rights and environmental protection. The result is a global regulatory landscape characterised less by convergence toward a single model than by a complex interplay of harmonisation and divergence, ambition and retrenchment, innovation and inertia.
This article examines that landscape across the principal industrialised and industrialising jurisdictions. It begins with occupational health and safety, comparing the foundational architectures of the United States, the European Union, the United Kingdom, Australia, China, India, and selected other systems. It then turns to environmental regulation, tracing the shift from command-and-control permitting toward market mechanisms, disclosure, and supply chain governance, while noting the unevenness of that shift. Finally, it identifies the cross-cutting trends that are reshaping health, safety, and environmental regulation globally—mandatory climate disclosure, due diligence, the integration of environmental, social, and governance (ESG) considerations with traditional environmental, health, and safety (EHS) functions, digitisation and artificial intelligence, the rise of psychosocial risk, and the politics of regulatory retreat—before concluding with the implications for multinational enterprises and for the future of regulatory governance itself.
Part I: The Architecture of Occupational Health and Safety Regulation
The United States: The General Duty and the Turn Toward Voluntarism
The foundation of federal occupational safety and health law in the United States remains the Occupational Safety and Health Act of 1970, a statute born of the great wave of social regulation of the late 1960s and early 1970s. The Act created OSHA within the Department of Labour and established a dual structure of regulation: a set of specific standards promulgated under the Act, codified principally in Title 29 of the Code of Federal Regulations, and a broad “General Duty Clause” requiring employers to furnish a workplace “free from recognised hazards that are causing or are likely to cause death or serious physical harm”. The Act covers most private-sector employers and, through federally approved state plans, many public-sector workers as well.
The American model has traditionally been characterised as enforcement-oriented and compliance-based. OSHA sets permissible exposure limits (PELs) for hazardous substances, issues detailed standards for particular industries and hazards, and relies on inspections, citations, and monetary penalties to secure adherence. Penalties are adjusted annually for inflation; by 2026, serious violations carried a maximum of approximately USD 16,131, while wilful or repeat violations could attract penalties exceeding USD 161,000, with criminal referral available for wilful violations causing an employee’s death. In practice, however, the reach of federal enforcement is limited by resources: OSHA has long had fewer inspectors than would be required to inspect every covered workplace with any frequency, a constraint that has shaped the agency’s reliance on voluntary programmes and targeted national emphasis programmes (NEPs).
The most significant development in recent American OSH policy has been the explicit shift away from enforcement-based compliance toward what the agency describes as proactive risk management and prevention. In early 2026, OSHA launched its “Safety Champions Program,” a voluntary, self-guided initiative designed to help employers of any size develop workplace safety and health programmes. The agency described the programme as representing a shift in emphasis, and it followed a December 2025 issuance of seven letters of interpretation addressing confined spaces, hazard communication, and related requirements.
This approach has not gone uncontested. Critics have pointed to the simultaneous weakening of the heat illness National Emphasis Program, which had been renewed in January 2025 but was subsequently amended away from enforcement metrics toward voluntary compliance. The practical consequence is a federal regime that retains a robust statutory framework and a General Duty Clause of broad potential application, but which increasingly relies on persuasion, partnership, and employer self-assessment rather than on the deterrent effect of frequent inspection and substantial penalty.
This federal retreat has been accompanied by a pronounced state-level counter-movement. California has moved forward with its own climate disclosure regime, while Colorado and New Jersey have proposed bills requiring Scope 1, 2, and 3 emissions reporting. Several states have advanced heat-illness prevention standards that outpace federal OSHA efforts. For employers operating across the United States, the result is not a single OSH regime but a fragmented compliance environment in which the applicable standard may depend as much on the state of operation as on the federal statute. This fragmentation is a recurring feature of American regulation, but it has become particularly salient in the current period of federal deregulatory energy.
The European Union: Prevention, Participation, and the Framework Directive
The European Union’s approach to occupational health and safety rests on a different foundation. The cornerstone is Council Directive 89/391/EEC of 1989, the OSH Framework Directive, which established the principle that employers must take appropriate preventive measures to make work safer and healthier, provide information and training to workers, and consult with workers and their representatives on matters of health and safety. The Framework Directive does not seek to harmonise every detail of national law; rather, it sets minimum requirements that Member States must transpose into their own legal orders, leaving room for more protective national provisions. This “minimum harmonisation” model has allowed the EU to accommodate diverse industrial relations traditions—from the corporatism systems of Germany and the Netherlands to the more centralised systems of France and southern Europe—while maintaining a common floor of protection.
The EU regime is often characterised as preventive and engineering-oriented, in contrast to the compliance-oriented American model. The Framework Directive requires employers to carry out a risk assessment as the starting point of OSH management, to eliminate risks at source, to adapt work to the individual, and to give priority to collective protective measures over individual protective equipment. This hierarchy of controls is a distinctive feature of European OSH law, reflecting a philosophical commitment to primary prevention rather than reliance on personal protective equipment or behavioural compliance. The EU also requires the appointment of competent health and safety services, the provision of health surveillance where risks warrant it, and the meaningful participation of workers in the design and implementation of preventive measures.
The EU’s substantive standards are updated through a stream of “daughter directives” addressing particular hazards and sectors. The Carcinogens, Mutagens and Reprotoxic Substances Directive has been revised repeatedly since its first adoption in 2004 and now addresses twenty-eight cancer-causing substances. In December 2025, the Council agreed its position on a sixth revision, which would introduce new or revised occupational exposure limits for a range of substances, including isoprene, with the expectation that the revised rules would prevent around 1,700 cases of lung cancer and 19,000 other illnesses over four decades. The directive was formally adopted in October 2026, with Member States given two years to transpose it into national law. Separate directives address asbestos, lead, noise, vibration, and the use of work equipment, among other hazards. The EU has also adopted legislation on the protection of pregnant workers, young workers, and workers on fixed-term or temporary agency contracts, reflecting a broader commitment to equality and to the protection of vulnerable groups.
Enforcement in the EU is a matter for Member States, and the styles and intensities of enforcement vary considerably. Some countries, such as Denmark and the Netherlands, have experimented with risk-based inspection targeting and with reduced monitoring for employers that participate in partnership or voluntary programmes, shifting scrutiny onto non-participating employers. Others, such as Germany, have developed elaborate systems of statutory accident insurance and prevention services that integrate inspection with rehabilitation and compensation. The common thread is not a single enforcement model but a shared legal framework that makes risk assessment, worker participation, and prevention obligatory across the Union.
The United Kingdom: The Health and Safety at Work Act and the Post-Brexit Trajectory
The United Kingdom’s Health and Safety at Work etc. Act 1974 is a landmark of OSH law, and its influence has extended far beyond the UK’s borders. The Act established a general duty on employers to ensure, so far as is reasonably practicable, the health, safety, and welfare of their employees and of others affected by their undertaking. The concept of “reasonably practicable” has been central to the UK regime: it requires employers to weigh the risk against the sacrifice, whether in money, time, or trouble, involved in averting it, and it has allowed the law to adapt to changing circumstances without constant legislative amendment. The Act also created the Health and Safety Executive (HSE) as the principal regulator and established a tripartite structure, involving government, employers, and workers, in the governance of health and safety.
The UK’s departure from the European Union has set in motion a process of divergence that is still unfolding. The HSE has taken on new responsibilities for chemicals regulation through UK REACH, building safety, and dangerous goods, but it has done so with substantially reduced resources. Between 2010 and 2020, the HSE’s organisation-wide budget fell by £122 million, or 43 percent, and by 2025 it employed nearly 3,000 staff and 900 inspectors, well below the more than 4,000 staff and 1,500 inspectors it had in the 2000s. The HSE has also lost access to the European Chemicals Agency’s database, the world’s most comprehensive chemical registration system, a loss that has been compounded by its diminished capacity to respond to new hazard classifications issued in the EU. The statutory obligation on the HSE to respond to all substances given hazard classifications in the EU within a legal time frame has been removed, raising concerns about the transparency and pace of future divergence.
The divergence is not merely a matter of resources, it is also a matter of regulatory philosophy. The UK government has introduced a “growth duty” on the HSE, requiring it to have regard to economic growth in the exercise of its functions, a development that critics argue compromises the regulator’s independence and its ability to prioritise health and environmental risks over economic considerations. The government has also signalled a preference for aligning with the United Nations’ Globally Harmonised System of Classification and Labelling of Chemicals rather than with the EU’s new hazard classes, a choice that the European Commission has stated is not reciprocated on the EU side. The practical effect is a gradual, perhaps accelerating, divergence between Great Britain and the EU in the classification and regulation of chemicals, with implications for trade, for the free movement of goods, and for the level of protection afforded to workers and the public.
Northern Ireland presents a special case. Under the Windsor Framework, Northern Ireland remains aligned with many EU rules, including those on chemicals and product safety, while Great Britain diverges. This creates a regulatory border within the United Kingdom, adding complexity for businesses that operate across the Irish Sea and raising questions about the long-term coherence of the UK’s internal market in regulated products.
Australia: Model Laws and the Persistent Challenge of Harmonisation
Australia’s approach to work health and safety (WHS) has been shaped by a distinctive federal structure and by a long-running effort to achieve national harmonisation. In 2008, the National Review into Model Occupational Health and Safety Laws recommended a set of model WHS laws to be adopted by the Commonwealth, states, and territories. The model WHS Act and Regulations were developed through Safe Work Australia, a national policy body that brings together representatives of the Commonwealth, states, and territories, as well as worker and employer interests. The model laws are based on a general duties framework, supplemented by specific obligations for particular hazards and industries, and they incorporate a hierarchy of controls and a requirement for consultation with workers.
The harmonisation project has achieved substantial but incomplete success. The model WHS laws have been adopted by the Commonwealth, all states, and both territories except Victoria, which maintains its own Occupational Health and Safety Act. Western Australia adopted the model laws through its Work Health and Safety Act 2020, which became operative in March 2022. Yet the persistence of jurisdictional variations has been a source of ongoing concern in the country.
A 2025–2026 best practice review of the model WHS laws, conducted by Safe Work Australia, found stakeholder dissatisfaction with the increasing disharmony between state and territory laws fifteen years after the model laws were introduced. The review’s discussion paper catalogued variations in the WHS duties framework, consultation and representation requirements, right of entry, compliance and enforcement, inspector powers, legal proceedings, offences and penalties, and codes of practice. It also identified a broader challenge: some jurisdictions regulate particular industries separately or outside their WHS frameworks, leading to a patchwork of safety regulation that can be difficult for multi-state employers to navigate.
The Australian experience illustrates a more general tension in federal systems: the desire for national consistency and the reality of regional political and administrative autonomy. The model laws have raised the floor of protection in some jurisdictions and have created a common vocabulary of duties and obligations, but they have not eliminated the differences that matter to employers and workers. The review process itself is an acknowledgement that harmonisation is not a one-off legislative event but a continuing project of maintenance and adjustment.
China: The Work Safety Responsibility System and the Party-State
China’s work safety regime has undergone a profound transformation over the past two decades, driven by a series of high-profile industrial disasters and by the leadership’s determination to project an image of effective governance. The basic law is the Work Safety Law of the People’s Republic of China, originally promulgated in 2002 and most recently amended in 2021. The law establishes an “all-staff work safety responsibility system,” requiring production and business entities to establish and improve rules and regulations, increase investment in work safety, provide education and training to workers, and provide protective equipment that meets national or industry standards. A distinctive feature of the Chinese approach is the “dual prevention mechanism” of graded safety risk management and control and hidden danger identification and rectification, which requires enterprises to identify and classify risks and to rectify hazards on a systematic basis.
The scope of Chinese work safety regulation has been expanding. In December 2025, the Standing Committee of the National People’s Congress promulgated the Hazardous Chemicals Safety Law, which came into effect on 1 May 2026 and imposes a comprehensive responsibility system on entities engaged in the production, storage, use, operation, or transportation of hazardous chemicals. The law requires such entities to meet prescribed safety conditions and to implement an all-employee responsibility system. This builds on a pre-existing architecture of registration, licensing, and safe-use permits for hazardous chemicals, which had been developed through a series of administrative measures issued by the State Administration of Work Safety.
Enforcement in China is intimately connected to the broader apparatus of Party-state governance. Work safety performance is integrated into the evaluation of local officials, and serious accidents can trigger administrative accountability, including the dismissal or prosecution of responsible officials. The use of social credit systems is also extending into the environmental and safety domains, with environmental credit ratings, differentiated regulatory treatment, and credit repair mechanisms being deployed to incentivise compliance. The Chinese model is thus not simply a system of rules and inspections; it is a system of political and administrative incentives in which work safety and environmental performance are treated as indicators of governmental competence and legitimacy.
India: Consolidation, Codes, and the Challenge of Implementation
India’s OSH landscape is in the midst of a significant transition. For decades, the principal statute was the Factories Act of 1948, supplemented by a maze of state-level rules and sector-specific legislation. The Factories Act prescribed measures relating to working conditions, hazard prevention, safety of machinery, ventilation, waste disposal, and the protection of workers, and it led to the creation of rules for hazardous waste handling, biomedical waste management, and chemical safety. Over time, however, the Act came to be seen as outdated and fragmented, and its coverage was limited to manufacturing establishments above a certain size threshold.
The Occupational Safety, Health and Working Conditions (OSH) Code, 2020, represents an attempt to consolidate and modernise this framework. The Code was brought into force on 21 November 2025, and it extends certain obligations under the Factories Act to establishments employing at least ten workers, including information technology and other service-sector establishments. It introduces new duties on employers, including ensuring that the workplace is free from hazards likely to cause injury or occupational disease, complying with OSH standards, providing free annual health examinations for specified classes of employees, ensuring safe disposal of hazardous and toxic waste including e-waste, and issuing letters of appointment to every employee. Employees gain the right to obtain information from the employer relating to their health and safety at work and to make representations about inadequate protection, with escalation to an Inspector-cum-Facilitator. Penalties for non-compliance have been increased, with a maximum fine of INR 500,000 for certain contraventions.
The implementation of the OSH Code has been uneven across India’s states and union territories. By late 2025, eighteen to twenty-five states had already incorporated many provisions of the labour codes into their own rules, and Gujarat had formalised the OSH Code in June 2025, awaiting the central government’s final nod to initiate implementation. Karnataka had enforced the Factories (Safety Audit) Rules, 2024, and other states such as Kerala and Andhra Pradesh had taken steps toward implementation. Bihar repealed its Shops and Establishments Act in light of the overlapping provisions in the OSH Code, a sign of the consolidating logic of the new framework. Yet significant gaps remain: several states, including West Bengal, Meghalaya, Nagaland, and Sikkim, had not completed harmonisation, and enforcement capacity at the state level remained a persistent concern. The Indian experience illustrates a broader challenge facing many emerging economies: the gap between legislative ambition and administrative reality, between the enactment of modern standards and the creation of the inspectorates, training systems, and technical expertise needed to give them effect.
Other Jurisdictions: Japan, Brazil, and South Africa
A comparative account of OSH regulation would be incomplete without attention to jurisdictions that have developed distinctive approaches outside the Anglo-American and European traditions. Japan’s Industrial Safety and Health Act, originally enacted in 1972, was amended in 2025 to address the needs of a diverse and ageing workforce. The amendments, which take effect in stages from 2025 through 2026, promote safety and health measures for solo self-employed workers, strengthen mental health measures in the workplace, improve the prevention of health disorders caused by chemical substances, and promote measures to prevent occupational accidents among older workers. The Japanese approach is notable for its integration of mental health into the statutory OSH framework and for its recognition that the boundaries of the employer’s responsibility are shifting as the nature of work changes.
Brazil’s regulatory framework for OSH is centred on the Consolidation of Labour Laws (CLT) and on a extensive body of regulatory standards (Normas Regulamentadoras) issued by the Ministry of Labour and Employment. These standards address everything from the use of personal protective equipment to the prevention of accidents in confined spaces, and they are enforced through a system of labour inspectors and prosecutors. Brazil’s environmental licensing system, by contrast, has been the subject of intense controversy. In 2025, the Chamber of Deputies and the Senate approved a General Environmental Licensing Bill that United Nations human rights experts warned would introduce “significant regressions” to Brazil’s environmental licensing system and threaten the rights to life, health, and a clean environment. President Lula da Silva subsequently vetoed sixty-three articles of the bill, a decision welcomed by the UN experts, but the episode illustrates the political disagreement of environmental regulation in a country with immense natural resources and powerful agricultural and industrial interests.
South Africa’s OSH regime is based on the Occupational Health and Safety Act of 1993, which imposes a general duty on employers to provide a safe and healthy working environment. The Act is supplemented by regulations on hazardous substances, noise, vibration, and other specific hazards. Environmental regulation is governed principally by the National Environmental Management Act of 1998 (NEMA), which imposes a general duty of care to prevent pollution and ecological degradation and requires environmental authorisation for listed activities. The two regimes overlap in important respects: both address the management of the environment to prevent hazards or risks to human health, and the mining sector, in particular, is subject to both OSH and environmental legislation.
In 2025, South Africa amended its OSH regulations to consolidate obligations previously contained in the Environmental Regulations for Workplaces, and it introduced new provisions on space, safety, and first-aid duties tied to explicit criminal penalties for non-compliance. The South African experience highlights the importance of regulatory integration: OSH and environmental regulation are not separate domains but overlapping systems of risk governance that must be coordinated if they are to be effective.
Part II: Environmental Regulation — From Permits to Markets to Disclosure
The United States: Deregulation, Federalism, and the Retreat from Climate Disclosure
The United States environmental regulatory system is built on a series of foundational statutes enacted in the 1970s: the Clean Air Act, the Clean Water Act, the Resource Conservation and Recovery Act, the Toxic Substances Control Act, and the Comprehensive Environmental Response, Compensation, and Liability Act (Superfund), among others. These statutes established a system of federal standard-setting, permitting, and enforcement, administered principally by the Environmental Protection Agency (EPA) and by state environmental agencies operating under federal delegation. The American model has traditionally been characterised by a combination of technology-based standards, health-based standards, and market-based mechanisms such as the acid rain trading programme established under the 1990 Clean Air Act Amendments.
The current period, however, has been marked by a pronounced deregulatory turn at the federal level. In March 2025, the EPA announced what it described as the “biggest deregulatory action in US history,” with potential implications for greenhouse gas reporting, particulate standards, and air toxics rules. The agency proposed to repeal Greenhouse Gas Reporting Program obligations for forty-six of forty-seven source categories and to suspend the remaining subpart. Separately, the Securities and Exchange Commission (SEC) proposed to rescind the climate-disclosure rules adopted in 2024 but never brought into effect, with the SEC Chair characterising the rules as a “serious overreach” of the agency’s authority. The EPA under Administrator Lee Zeldin has focused on weakening or eliminating regulations perceived as climate-friendly. The combined effect is a federal environmental policy that is retreating from climate-related regulation and from the expansion of disclosure obligations, even as the scientific case for action strengthens.
As with OSH, the retreat at the federal level has been accompanied by state-level activism. California’s climate disclosure regime, comprising Senate Bill 253 (Scope 1, 2, and 3 emissions reporting for entities with revenue over USD 1 billion) and Senate Bill 261 (climate-related financial risk disclosure for entities with revenue over USD 500 million), is now in force, with Scope 1 and 2 disclosures required in 2026. Colorado and New Jersey have proposed similar Scope 1, 2, and 3 reporting requirements, and several states are advancing heat-illness prevention standards that exceed federal requirements. The result is a fragmented environmental regulatory landscape in which the stringency of regulation depends heavily on the jurisdiction, and in which multinational firms must navigate a patchwork of federal, state, and local requirements.
The American experience thus illustrates a broader theme: in federal systems, the retreat of the central state does not necessarily mean the retreat of regulation altogether; it may instead mean its relocation to sub national jurisdictions with different political priorities.
The European Union: The Green Deal, the Omnibus, and the Politics of Simplification
The European Union has positioned itself as the global leader in environmental regulation through its European Green Deal, a comprehensive strategy adopted in 2019 with the goal of making Europe the first climate-neutral continent by 2050. The Green Deal has generated an extensive legislative programme, including the Corporate Sustainability Reporting Directive (CSRD), the Corporate Sustainability Due Diligence Directive (CSDDD), the EU Taxonomy Regulation, the Carbon Border Adjustment Mechanism (CBAM), the Industrial Emissions Directive (IED), the Batteries Regulation, the Deforestation Regulation (EUDR), and the Forced Labour Regulation. Together, these instruments represent an ambitious attempt to harness corporate governance, financial markets, and international trade in the service of environmental and social objectives.
The CSRD requires companies listed on an EU regulated market, as well as other large companies meeting specified thresholds, to report on sustainability matters in accordance with European Sustainability Reporting Standards (ESRS). The reporting obligations cover environmental matters, social matters and treatment of employees, respect for human rights, anti-corruption and bribery, and diversity on company boards, and they include a requirement to report Scope 1, 2, and 3 greenhouse gas emissions. The CSDDD goes further, requiring in-scope companies to conduct human rights and environmental due diligence across their value chains, identifying, preventing, mitigating, and accounting for adverse impacts. The EU Taxonomy provides a classification system for environmentally sustainable economic activities, intended to guide investment and to prevent green washing. The CBAM, which entered its transitional phase in 2023, imposes a carbon price on imports of certain carbon-intensive goods, aiming to prevent carbon leakage and to encourage decarbonisation in third countries. The Deforestation Regulation requires operators and traders to prove that relevant commodities and products placed on the EU market are deforestation-free and legally produced.
This ambitious programme, however, has encountered significant political resistance. In 2025, the European Commission presented its “Omnibus” simplification package, ostensibly to reduce administrative burdens on companies and to improve the coherence of the regulatory framework. The effect of the package, as approved by the European Parliament and Council, has been dramatic. The scope of the CSRD has been reduced by nearly 90 percent, and the scope of the CSDDD by 70 percent, leaving only a small fraction of the companies originally intended to be covered. The Omnibus agreement also deleted the requirement for companies to adopt climate transition plans under the CSDDD and reduced the depth of value chain assessment required, shifting from a comprehensive assessment of all suppliers to a focus on key risks and a more targeted approach to information requests from smaller partners. The EU Deforestation Regulation was delayed by one year, with large and medium-sized companies required to comply by 30 December 2025. The “Stop-the-Clock” Directive delayed reporting obligations by two years for wave 2 and wave 3 companies under the CSRD.
The Omnibus has been fiercely contested. Green and civil society groups, as well as some businesses, have argued that the backtracking puts environmental and human health at risk and undermines the EU’s credibility as a global leader. The European Economic and Social Committee has stressed that simplification measures should not bring about any direct or indirect impacts on the health and safety of workers, and it has called for greater harmonisation of reporting methodologies and interoperability of digital systems. The Omnibus thus encapsulates a central tension in contemporary environmental regulation: the tension between the ambition to regulate for long-term sustainability and the political pressure to reduce short-term compliance costs, particularly in a context of economic stagnation, geopolitical competition, and rising energy prices.
The United Kingdom: Divergence, Chemicals, and the Capacity Gap
The UK’s post-Brexit environmental regulatory trajectory has been shaped by two competing imperatives. On the one hand, the government has sought to demonstrate a commitment to environmental protection, legislating for net zero by 2050 and establishing the Office for Environmental Protection as a watchdog. On the other hand, it has pursued a deregulatory agenda in the name of growth and competitiveness, and it has struggled to replicate the institutional capacity that the UK previously derived from its membership of the EU.
The chemicals sector is the clearest illustration of the divergence. As noted above, the HSE, which serves as the regulator for UK REACH, has lost access to the European Chemicals Agency’s database and has seen its resources decline substantially. The UK government has reduced the fees that industry pays to the HSE for registering substances and applying for authorisations, a move that may ease costs for business but that also reduces the regulator’s revenue at a time when its capacity is already stretched. The statutory link with the EU has been removed, meaning that the HSE is no longer obliged to respond to all new EU hazard classifications within a legal time frame, and it will not need to explain any exclusions from the UK’s mandatory classification and labelling list. Divergence between the UK and the EU in mandatory hazard classifications has so far been minimal, but the institutional framework is now in place for divergence to accelerate, and the loss of data access and regulatory capacity raises questions about the UK’s ability to maintain standards independently.
The divergence extends beyond chemicals. The UK’s approach to environmental permitting, waste regulation, and air quality has evolved in ways that reflect domestic political priorities rather than EU obligations, and the absence of the EU’s infringement procedures and Court of Justice oversight means that the enforcement of environmental law depends more heavily on domestic judicial review and on the Office for Environmental Protection. The UK’s experience illustrates a broader point about the relationship between regulatory autonomy and regulatory capacity: the ability to diverge is not the same as the capacity to regulate well, and the loss of shared institutions and data infrastructure can impose substantial costs on both regulators and regulated entities.
Australia: EPBC Reform and the Quest for National Environmental Standards
Australia’s principal environmental statute is the Environment Protection and Biodiversity Conservation Act 1999 (EPBC Act), which establishes a federal approval process for actions that are likely to have a significant impact on matters of national environmental significance, such as World Heritage properties, Ramsar wetlands, threatened species and ecological communities, and migratory species. The EPBC Act has long been criticised for its complexity, delays, and lack of a coherent national standards framework, and a series of reviews—including a major independent review in 2020—recommended fundamental reform.
In 2025, the federal parliament passed a suite of EPBC Act reforms that represent the most significant overhaul of Australian environmental law in more than two decades. The key elements include the introduction of legally enforceable National Environmental Standards to guide decision-making and provide a consistent framework for assessing projects; the establishment of an independent National Environmental Protection Agency (NEPA) on 1 July 2026, responsible for compliance, enforcement, and oversight; reforms to Commonwealth-State bilateral agreements to ensure that accredited assessment and approval processes operate consistently with the National Environmental Standards; enhanced compliance and enforcement powers, including increased penalties for serious breaches, expanded investigative and audit powers, and new environment protection orders; the consolidation of three existing assessment pathways into a single streamlined framework, with expedited pathways for eligible projects; the introduction of bio regional plans to identify areas suitable for development and conservation; and the establishment of Environment Information Australia as an independent body responsible for collecting, managing, and reporting environmental data.
These reforms seek to reconcile two objectives that are often in tension: the desire for stronger environmental protection and the desire for faster, more certain approvals for economically significant projects. The introduction of National Environmental Standards is intended to provide a clear and consistent benchmark against which projects can be assessed, reducing the scope for ad hoc decision-making. The establishment of NEPA as an independent regulator is intended to strengthen enforcement and to depoliticise compliance. The retention of bilateral agreements with the states, however, means that the federal government will continue to rely on state-level assessment processes, and the effectiveness of the reforms will depend on the extent to which the National Environmental Standards are actually applied and enforced across jurisdictions. The Queensland Productivity Commission has been directed to conduct a public inquiry into the reforms, with a final report due by April 2027, a sign of the continuing disagreement over the balance between environmental protection and economic development.
China: Pollution Permits, Carbon Markets, and the Marketisation of Environmental Governance
China’s environmental regulatory system has evolved from a command-and-control model centred on emissions standards and administrative penalties toward a more hybrid system that incorporates market-based mechanisms, disclosure, and credit-based incentives. The Environmental Protection Law, revised in 2014 and effective from 1 January 2015, established the principle that governments at all levels must take effective measures to prevent and control pollution and public nuisances, and it introduced a system of pollution discharge permits, environmental impact assessment, and public interest litigation. The law also strengthened penalties for environmental violations, including the possibility of daily fines and the detention of responsible persons.
A distinctive feature of the Chinese approach is the use of five-year plans and central policy documents to set environmental targets and to coordinate action across ministries and levels of government. In May 2025, the Central Committee of the Communist Party and the State Council issued an opinion on improving the market-based allocation of resource and environmental factors, with the goal of establishing a basically complete carbon emissions trading system, a water rights trading system, and a pollution rights trading system by 2027. The opinion calls for more active trading markets, better price formation mechanisms, and more efficient allocation of resource and environmental factors, reflecting a strategic shift toward using market instruments to achieve environmental objectives. China’s national carbon market, which initially covered the power sector, is being expanded to include more industries, and the government is developing a system of environmental credit evaluation that will be used to differentiate regulatory treatment and to incentivise compliance.
The Chinese model is not without its tensions. The reliance on market mechanisms and credit systems coexists with a political system in which local officials are evaluated on both economic growth and environmental performance, and the balance between these objectives can shift over time. The central government’s commitment to environmental protection is articulated forcefully in policy documents, but implementation at the local level can be uneven, particularly in regions that are heavily dependent on carbon-intensive industries. Nevertheless, the direction of travel is clear: China is building a more sophisticated and diversified environmental regulatory system, one that combines traditional administrative controls with market instruments, information disclosure, and credit-based incentives.
India: Environmental Impact Assessment, Judicial Intervention, and the Struggle for Regulatory Coherence
India’s environmental regulatory framework rests on the Environment (Protection) Act of 1986, which provides the legal basis for a wide range of rules and notifications on air and water pollution, hazardous waste, biomedical waste, e-waste, plastic waste, and environmental impact assessment. The EIA Notification of 2006 requires certain categories of projects to obtain prior environmental clearance before construction, and it establishes a process of screening, scoping, public consultation, and appraisal. Projects are classified as Category A (appraised at the central level) or Category B (appraised at the state level), depending on their potential environmental impacts.
The Indian environmental regulatory system has been shaped to an unusual degree by judicial intervention. In February 2025, the Supreme Court stayed a notification that had exempted certain categories of projects from the requirements of the EIA Notification, and in May 2025, in the case of Vanashakti v Union of India, the Court struck down a 2017 notification and a 2021 standard operating procedure, holding that the EIA Notification of 2006 is intended to protect the environment and prevent pollution and that exemptions cannot be granted without adequate justification. The Court’s interventions reflect a broader pattern of judicial activism in Indian environmental law, in which the courts have often acted as a check on executive discretion and as a forum for public interest litigation. At the same time, the executive has continued to propose amendments to the EIA regime, including a 2025 draft notification to exempt Common Effluent Treatment Plants and Common Municipal Solid Waste Management Facilities from prior environmental clearance, and the Environment Audit Rules 2025, which create a cadre of certified third-party environmental auditors to undertake on-site verification and audit of projects.
The Indian experience illustrates the importance of institutional checks and balances in environmental regulation. The EIA process is not merely a technical exercise; it is a site of disagreement among developers, regulators, affected communities, and the judiciary. The Supreme Court’s willingness to strike down exemptions has reinforced the legal standing of environmental protection, but it has also highlighted the fragility of regulatory standards when they depend on executive discretion. The challenge for India is to build a system of environmental governance that is both efficient and accountable, and that can withstand the pressures of rapid industrialisation and urbanisation.
Brazil and South Africa: Licensing, Rights, and the Politics of Environmental Protection
Brazil’s environmental licensing system has been one of the most contested areas of environmental policy in Latin America. The country’s licensing regime, which originated in the 1980s and was consolidated by the National Environmental Policy Act of 1981 and subsequent regulations, requires environmental impact assessment and licensing for projects with significant environmental impacts. The system has been criticised by industry for being slow and unpredictable, and by environmentalists for being insufficiently protective. In 2025, the Brazilian Congress approved a General Environmental Licensing Bill that UN human rights experts warned would introduce significant regressions, including the expansion of exemptions and self-licensing, and would threaten the rights to life, health, an adequate standard of living, and a clean environment. President Lula da Silva vetoed sixty-three articles of the bill, a decision that the UN experts welcomed, but the episode demonstrates the intense political disagreement surrounding environmental regulation in a country with a large agricultural sector, extensive mineral resources, and a globally significant portion of the Amazon rain forest. Brazil’s Supreme Court has also been involved in adjudicating the constitutionality of the licensing law, and the outcome of that litigation will shape the future of environmental governance in the country.
South Africa’s environmental regulatory framework is anchored in NEMA, which establishes a general duty of care and a set of principles for environmental management, including sustainable development, the precautionary principle, and the polluter-pays principle. NEMA requires environmental authorisation for listed activities and provides for a range of compliance and enforcement mechanisms. The OSH Act and NEMA overlap in their concern for human health and environmental protection, and the mining sector is subject to a separate regime under the Mineral and Petroleum Resources Development Act. In 2025, South Africa amended its OSH regulations to consolidate environmental health obligations and to introduce new provisions on space, safety, and first aid, with explicit criminal penalties for non-compliance. The South African experience underscores the importance of regulatory integration across OSH and environmental domains, and it illustrates the challenges that developing economies face in building enforcement capacity and in balancing environmental protection with economic development.
Part III: The Convergence Agenda — Global Trends Reshaping HSE Regulation
Mandatory Climate Disclosure: From Voluntary Frameworks to Binding Law
One of the most significant trends in environmental regulation over the past decade has been the shift from voluntary climate disclosure to mandatory reporting. The Task Force on Climate-related Financial Disclosures (TCFD), established by the Financial Stability Board in 2015, provided a widely adopted framework for disclosing climate-related risks and opportunities, organised around governance, strategy, risk management, and metrics and targets. The International Sustainability Standards Board (ISSB), created in 2021, has built on the TCFD framework to develop global baseline standards—MFRS S1 and MFRS S2—for sustainability and climate-related disclosure. As of June 2025, thirty-six jurisdictions had adopted or otherwise used the ISSB standards or were in the process of finalising steps toward introducing them.
The adoption of mandatory climate disclosure is uneven but expanding. In the EU, the CSRD requires disclosure in accordance with ESRS, which are aligned with the ISSB standards. In Australia, mandatory climate-related financial disclosures commenced on 1 January 2025, with a phased approach for different categories of entities.
In New Zealand, climate-related disclosures are mandatory for certain large entities, and the government announced changes to the regime in October 2025. In Brazil, the Comissão de Valores Mobiliários (CUM) Resolution 193 requires publicly traded companies, securitisation companies, and investment funds to disclose climate-related risks following ISSB standards, with mandatory disclosure beginning on 1 January 2026.
In California, Senate Bills 253 and 261 impose Scope 1, 2, and 3 emissions reporting and climate-related financial risk disclosure on large entities doing business in the state. In China, the Ministry of Finance has issued draft Corporate Sustainability Disclosure Standards that largely follow the ISSB, with plans to finalise the standards by 2027 and to phase them in once adopted.
The United States is the notable exception to this trend at the federal level. The SEC’s climate-disclosure rule, adopted in 2024, was stayed and subsequently proposed for rescission, and the EPA has proposed to repeal its greenhouse gas reporting programme for most source categories. The American retreat from federal climate disclosure stands in contrast to the trajectory in most other major economies, and it reinforces the fragmented nature of the US regulatory landscape, where state-level regimes such as California’s continue to impose substantial disclosure obligations.
The trend toward mandatory climate disclosure has several implications. First, it increases the quantity and quality of information available to investors, regulators, and the public, potentially improving market discipline and accountability. Second, it imposes significant compliance costs on companies, particularly those with complex global supply chains, and it requires the development of new systems for data collection, verification, and assurance. Third, it creates pressure for international harmonisation, as companies seek to avoid duplicate reporting requirements across jurisdictions. The ISSB standards are intended to serve as a global baseline, but the EU’s ESRS are more extensive, and the coexistence of multiple frameworks creates the risk of fragmentation even as the broad direction of travel is toward mandatory disclosure.
Supply Chain Due Diligence: Extraterritorial Reach and the Governance of Global Value Chains
A second major trend is the rise of supply chain due diligence legislation, which requires companies to identify, prevent, and mitigate adverse human rights and environmental impacts in their value chains. The EU’s CSDDD is the most ambitious instrument of this kind, but it is part of a broader movement that includes the German Supply Chain Due Diligence Act (LkSG), the French Duty of Vigilance Law, the Dutch Supply Chain Due Diligence Law, the Norwegian Transparency Act, the Swiss Due Diligence Ordinance, and the UK Modern Slavery Act. The UK government has recently released new statutory guidance on the Modern Slavery Act that significantly raises the bar on what a good modern slavery statement looks like under section 54.
The CSDDD, as originally adopted, would have required in-scope companies to conduct due diligence across their entire value chain, to adopt climate transition plans, and to establish grievance mechanisms for affected stakeholders. The Omnibus amendments have reduced its scope and softened its requirements, but the directive nonetheless represents a significant expansion of corporate accountability. The German LkSG, which applies to companies with at least 3,000 employees (and, from 2024, 1,000 employees), requires companies to establish a risk management system, conduct regular risk analyses, adopt preventive and remedial measures, and report annually to the German federal supervisory authority. The French Duty of Vigilance Law imposes similar obligations on large French companies, and it has been used by NGOs and affected communities to bring lawsuits against companies for alleged failures to prevent human rights and environmental harms.
The extraterritorial reach of these laws is a defining feature. The EU Deforestation Regulation requires exporters to the EU to prove that their products are not linked to deforestation, regardless of where the deforestation occurred. The US Uyghur Forced Labor Prevention Act prohibits the importation of goods produced wholly or in part in the Xinjiang Uyghur Autonomous Region, and it places the burden on importers to demonstrate that their supply chains are free from forced labour. These measures extend the regulatory reach of importing jurisdictions into the production processes of exporting countries, creating a new form of trade-related environmental and social governance. For multinational enterprises, the challenge is to build due diligence systems that can operate across diverse legal, cultural, and institutional contexts, and to ensure that their supply chain governance is robust enough to withstand scrutiny from regulators, investors, civil society, and consumers.
The Integration of ESG and EHS
A third trend is the increasing integration of environmental, social, and governance (ESG) considerations with traditional environmental, health, and safety (EHS) functions. Historically, EHS has been concerned with compliance with OSH and environmental regulations, while ESG has been concerned with the broader sustainability performance of the enterprise and its relationships with investors, communities, and other stakeholders. The two domains have often been managed separately, with EHS reporting to the chief operating officer or the head of manufacturing, and ESG reporting to the chief financial officer or the head of corporate affairs.
This separation is breaking down. The ISSB’s sectoral standards, which are integrated into the MFRS system, include topics such as water management and workforce health and safety, recognising that these issues are material to investors and to long-term value creation. The CSRD’s ESRS include disclosure requirements on working conditions, health and safety, and respect for human rights, alongside environmental matters. The CSDDD requires companies to address both human rights and environmental impacts in their due diligence processes. Regulatory bodies are increasingly working to harmonise standards and improve corporate sustainability transparency, and the scope of ESG and EHS regulations continues to expand across regions and sectors.
The integration of ESG and EHS has practical implications for corporate governance. It requires the development of integrated data systems that can capture health, safety, environmental, and social performance across the value chain. It requires the alignment of risk management frameworks so that OSH and environmental risks are assessed alongside climate, human rights, and governance risks. And it requires a shift in organisational culture, from a compliance-oriented approach to OSH and environment to a more strategic approach that recognises these issues as integral to business resilience and long-term value creation.
Digitisation, Artificial Intelligence, and the Future of Regulatory Oversight
A fourth trend is the digitisation of regulatory oversight and the emergence of artificial intelligence as a regulated domain in its own right. Regulators are increasingly using digital tools for data collection, risk profiling, and enforcement targeting. The Chinese social credit system, for example, uses environmental and safety compliance data to rate enterprises and to differentiate regulatory treatment. The EU’s CSRD and the ISSB standards require digital, machine-readable reporting, which facilitates the automated analysis of corporate sustainability data. Environmental sensors, satellite monitoring, and remote sensing are being used to detect pollution and deforestation in near-real time, expanding the scope and precision of regulatory oversight.
At the same time, AI is itself becoming a subject of regulation, with significant implications for OSH and EHS. The EU Artificial Intelligence Act, which entered into force in August 2024, introduces a risk-based framework for AI systems, with prohibitions on “unacceptable risk” systems, AI literacy requirements from February 2025, full application of most provisions from August 2026, and an extended deadline for high-risk AI systems embedded in products from August 2027. Employers using AI in workplace decision-making must ensure staff AI literacy and compliance with strict governance rules for high-risk systems. In the United States, without a federal AI law, states are introducing targeted measures: Texas’s Responsible AI Governance Act prohibits discriminatory AI, and California’s Senate Bill 7 would ban reliance on AI for key employment decisions without human oversight and restrict predictive AI use. In Asia-Pacific, Japan has adopted its first AI law, establishing a national AI strategy centre and mandating cooperation with investigations and adherence to national principles, while Hong Kong has expanded its Building Energy Efficiency Ordinance to cover data centres.
The regulation of AI intersects with OSH and EHS in several ways. AI systems used in workplace monitoring, productivity management, and hiring can affect workers’ privacy, autonomy, and mental health, raising psychosocial risk concerns. AI systems used in industrial processes can enhance safety through predictive maintenance and early warning systems, but they can also introduce new risks if they are poorly designed or inadequately governed. The challenge for regulators is to develop frameworks that encourage innovation while ensuring that AI systems are safe, transparent, and accountable, and that they do not undermine the protections that OSH and environmental law are designed to provide.
Psychosocial Risks and the Right to Disconnect
A fifth trend is the growing recognition of psychosocial risks as a legitimate concern of OSH regulation. Psychosocial risks—including work-related stress, bullying, harassment, violence, and the blurring of boundaries between work and private life—have been identified as emerging risks in the EU, and the European Parliament has called on the Commission to propose a directive on psychosocial risks and well-being at work. The EU Framework Directive already covers all occupational risks, including psychological risks, but the implementation reports and the European Survey of Enterprises on New and Emerging Risks (ESENER) provide evidence that the existing framework has not been sufficient. The European Economic and Social Committee has urged the Commission to propose a directive that would establish binding obligations to identify psychosocial risks through appropriate risk assessments, with the participation of workers and trade unions.
The right to disconnect is one manifestation of this broader concern. France and Italy have introduced comprehensive legislative frameworks, while other countries, such as Romania and Japan, continue to rely primarily on working-time limits, and Canada is moving towards a mixed federal-provincial model. Australia’s new right to disconnect, effective since August 2024 for larger employers, allows employees to refuse to monitor, read, or respond to work-related communications outside working hours, subject to reasonableness considerations. At the EU level, the Commission launched a consultation in April 2024 on fair remote work and the right to disconnect.
The regulation of psychosocial risks represents a significant expansion of the OSH domain. It moves OSH beyond the traditional concern with physical hazards—chemicals, machinery, noise, and ergonomics—to encompass the organisation of work, the quality of working relationships, and the psychological contract between employer and employee. This expansion poses challenges for regulators, employers, and workers alike. It requires new forms of risk assessment that can capture the subjective experience of work, new forms of worker participation that can give voice to concerns that may be difficult to articulate, and new forms of enforcement that can address organisational failures that may not manifest in immediate physical harm. It also raises questions about the boundaries of employer responsibility, particularly in an era of remote work, digital communication, and fragmented employment relationships.
The Retreat from Regulation and the Politics of Retrenchment
A sixth trend, and one that cuts against the others, is the retreat from regulation in several major jurisdictions. In the United States, the federal government has moved decisively away from enforcement-based OSH regulation and from climate-related environmental regulation, devolving significant regulatory energy to states and to voluntary programmes. In the EU, the Omnibus package has reduced the scope of the CSRD and CSDDD by dramatic margins and has delayed the implementation of key sustainability obligations. In the UK, the HSE’s resources have declined substantially, and the government has introduced a growth duty that critics argue compromises the regulator’s independence. In Brazil, the environmental licensing reform was significantly rolled back by presidential vetoes, but the underlying political pressures for loosening environmental controls remain strong.
The retreat from regulation is driven by several factors. Economic stagnation, rising energy costs, and geopolitical competition have created pressure on governments to reduce regulatory burdens on business. The anti-ESG backlash, particularly in the United States, has politicised sustainability reporting and has made it a target for ideological opposition. The complexity and cost of compliance with overlapping reporting requirements have generated legitimate concerns about administrative burden, particularly for small and medium-sized enterprises. And the political cycle in democratic countries creates incentives for governments to prioritise short-term economic growth over long-term environmental and social objectives.
Yet the retreat is not uniform, and it is not uncontested. In the United States, state-level action on climate disclosure and heat-illness prevention has partially offset federal retreat. In the EU, the Omnibus has been criticised by civil society, trade unions, and some businesses, and the European Economic and Social Committee has insisted that simplification must not come at the expense of worker health and safety. In Australia, the EPBC reforms have strengthened environmental standards and created an independent regulator, even as they seek to streamline approvals. In China, the direction of travel remains toward stronger environmental and safety regulation, albeit through a different institutional logic than in liberal democracies. The global picture is therefore one of divergence and disagreement rather than a uniform retreat, with the balance of regulatory ambition depending on the specific jurisdiction, the political complexion of its government, and the strength of its civil society and social partners.
Conclusion: Implications for Multinational Enterprises and the Future of HSE Regulation
The comparative analysis presented in this article reveals a global regulatory landscape that is neither converging toward a single model nor fragmenting into incoherence. It is, rather, a landscape of overlapping regimes, shared principles, and persistent differences. The foundational principles of OSH regulation—the general duty of care, the hierarchy of controls, risk assessment, worker participation, and prevention—are widely shared across jurisdictions, even as they are implemented through different legal instruments and enforced through different institutional arrangements. The foundational principles of environmental regulation—pollution prevention, the polluter-pays principle, precaution, and sustainable development—are similarly widespread, even as the choice of policy instruments varies from command-and-control permitting to market-based trading to disclosure and due diligence.
For multinational enterprises, this landscape presents both challenges and opportunities. The challenges are obvious: regulatory fragmentation increases compliance costs, creates legal risk, and requires sophisticated systems for tracking and responding to developments across multiple jurisdictions. The extraterritorial reach of supply chain due diligence and deforestation regulations means that companies can no longer assume that compliance with local law is sufficient; they must also meet the standards imposed by their major markets. The retreat from regulation in some jurisdictions does not necessarily reduce compliance burdens, because state-level and sub national regulation, as well as investor and consumer expectations, may fill the gap. The rise of mandatory climate disclosure and the integration of ESG and EHS create new reporting obligations and new demands for data, assurance, and governance.
The opportunities are equally significant. Companies that invest in robust HSE management systems, that integrate OSH and environmental considerations into their core business strategy, and that build resilient supply chain due diligence processes are better positioned to manage regulatory risk, to attract investment, and to maintain their social licence to operate. The harmonisation of reporting standards through the ISSB and the development of digital, machine-readable reporting formats create opportunities for efficiency and comparability. The recognition of psychosocial risks and the right to disconnect create opportunities for employers to differentiate themselves as responsible employers in a competitive labour market. And the shift toward market-based environmental instruments, such as carbon trading and environmental credit systems, creates opportunities for companies that are able to innovate and to capture the value of environmental performance.
The future of HSE regulation will be shaped by several forces. The first is the trajectory of the climate crisis, which will continue to drive the development of disclosure requirements, carbon pricing mechanisms, and adaptation obligations. The second is the evolution of work, including remote work, platform work, and automation, which will require regulators to rethink the boundaries of the employment relationship and the scope of OSH protection. The third is the development of artificial intelligence, which will create new risks and new opportunities for regulatory oversight. The fourth is the politics of regulation itself, which will determine whether the current period of retrenchment in some jurisdictions is a temporary pause or a lasting shift in the balance between public protection and private autonomy.
What is clear is that the era of purely national regulation, in which companies could manage compliance jurisdiction by jurisdiction, is over. The most significant regulatory developments of the past decade—the CSRD, the CSDDD, the CBAM, the EUDR, the ISSB standards, and the various supply chain due diligence laws—are all extraterritorial in their reach and global in their ambition. They reflect a recognition that the most pressing health, safety, and environmental challenges are transnational in nature and cannot be addressed through national regulation alone. They also reflect a recognition that the private sector, and particularly large multinational enterprises, have the capacity and the responsibility to contribute to the solution. The challenge for the coming decade will be to build a global regulatory architecture that is coherent enough to be effective, flexible enough to accommodate legitimate jurisdictional differences, and robust enough to withstand the political and economic pressures that will inevitably arise. That is a challenge not only for regulators but for businesses, workers, civil society, and the international community as a whole.
Position as at October 2026. Regulation in this area is moving quickly, so check the current status of individual measures before acting.
When the UK left the EU, the government’s stated aim was to keep environmental standards at least as high as before while gaining the freedom to regulate differently. Six years on, the picture is more complicated than either “race to the bottom” or “business as usual” suggests. The UK and EU have diverged in some areas, drifted passively apart in others, and are now deliberately re-aligning in a few of the most commercially important ones.
This article compares the two systems, explains where they differ and why, and sets out what the direction of travel means for businesses that operate in, or trade with, both markets.
Structure. The UK retained most EU-derived environmental law as “assimilated law” in 2021, but now amends it independently. The EU has kept legislating, so divergence is partly active (UK changes) and partly passive (the EU changes and the UK does not follow).
Chemicals.UK REACH and EU REACH are now separate regimes, with separate registrations, deadlines and costs. Neither side is currently pursuing a full rewrite.
Climate and carbon. The UK runs its own Emissions Trading Scheme. Both sides are now moving towards linking them, alongside border carbon taxes (CBAMs).
Planning and nature. England has taken a distinctive route through the Planning and Infrastructure Act 2025, which the OEP and NGOs have criticised as weakening protections.
Simplification. Both sides are in a deregulatory mood. The EU’s “omnibus” programme and the UK’s planning reforms pursue similar goals by different means.
Northern Ireland. NI still applies a defined body of EU law under the Windsor Framework, creating a three-way compliance map across the EU, Great Britain and Northern Ireland.
1. The legal starting point
On 31 December 2020 the UK converted EU environmental law into domestic law through the European Union (Withdrawal) Act 2018. Directly applicable EU regulations became UK statutory instruments, and directives that had been implemented through UK legislation stayed in place. In 2023 the Retained EU Law (Revocation and Reform) Act renamed this body “assimilated law” and ended the special status it had held.
On day one the two systems were almost identical. The divergence since then comes from three sources:
Active divergence: the UK changes or replaces a rule.
Passive divergence: the EU adopts new legislation and the UK does not follow.
Internal divergence: England, Scotland, Wales and Northern Ireland make different choices on devolved matters such as waste, water and nature.
The third source matters more than it is often given credit for. Because environmental policy is largely devolved, there is no single “UK” regime in many areas.
2. Governance and enforcement
Before Brexit, the European Commission could investigate member states and bring them before the Court of Justice, which could impose financial penalties. After Brexit, the UK’s Environment Act 2021 created the Office for Environmental Protection, which scrutinises government performance, investigates alleged failures and can bring enforcement proceedings.
Differences worth noting:
Feature
EU
UK (England-focused)
Oversight body
European Commission, with Court of Justice backstop
Office for Environmental Protection
Sanctions on government
Court-imposed fines on member states
Declarations and enforcement through the courts; no equivalent fines
Environmental principles
Embedded in the Treaties
Statutory duty to have due regard to a policy statement on environmental principles
Statutory targets set domestically under the Environment Act 2021 and Climate Change Act 2008
The OEP has been willing to criticise the government, including on the planning reforms discussed below, but its powers are narrower than those of the Commission and Court, and the UK government’s response to its recommendations is advisory in practice.
3. Chemicals: two REACH regimes
Chemicals regulation is where divergence is most visible to businesses, because it creates direct, duplicated costs.
UK REACH took effect on 1 January 2021 and applies in Great Britain. It is administered by the Health and Safety Executive with policy led by Defra. It has its own registrations, its own substance evaluation and its own restrictions and authorisation lists. The government is developing an Alternative Transitional Registration model (ATRm) to reduce data requirements and cost, and, because the legislation could not be completed in time, it has extended the transitional registration deadlines to 27 October 2029, 2030 and 2031.
EU REACH continues to apply in the EU and, for most purposes, in Northern Ireland. The Commission spent years preparing a major revision, but it confirmed in April 2026 that it would not open the regulation. It is instead pursuing simplification through secondary legislation, plus stronger enforcement against non-compliant products at EU borders and in the market. A large PFAS restriction proposal is expected to progress by the end of 2026.
Neither side is currently converging, and neither is conducting a wholesale rewrite.
Enforcement is likely to be the main change in the EU, while cost and data requirements are the main uncertainty in GB.
4. Climate policy and carbon markets
Separate trading schemes, heading towards a link
The UK left the EU Emissions Trading System and launched the UK ETS in 2021. The UK scheme is smaller and has historically traded at a lower price. It is expanding, including a commitment to bring waste incineration in from 2028.
At the May 2025 UK-EU summit, both sides agreed in principle to link the two schemes. The EU Council approved a negotiating mandate in November 2025, and negotiations have been under way since early 2026. Linking would require the UK to track relevant EU rules “dynamically”, and would allow allowances to be traded across both markets. The intended scope includes power, industry, aviation and maritime.
Carbon border taxes
The more immediate pressure comes from carbon border adjustment mechanisms:
The EU CBAM entered its definitive phase on 1 January 2026. UK exporters of covered goods such as steel, aluminium, cement and fertiliser currently receive no exemption. Importers will declare 2026 emissions by September 2027.
The UK CBAM starts on 1 January 2027, covering aluminium, cement, fertiliser, hydrogen and iron and steel. Importers above a £50,000 registration threshold will be liable. Indirect emissions are excluded until 2029 at the earliest. Primary legislation is in the Finance Act 2026, with secondary legislation still being finalised.
A completed ETS link would create conditions for mutual CBAM exemptions, but only once the agreement is in force, so there is a real risk of paying both ways in the interim. Businesses in covered sectors should treat this as a live cost issue, not a distant policy debate.
5. Nature, planning and development
This is where UK and EU approaches have diverged most politically.
England has pursued a more flexible planning route. The Planning and Infrastructure Act 2025, which became law in December 2025, creates Environmental Delivery Plansprepared by Natural England and a Nature Restoration Fund. Developers can pay a Nature Restoration Levy instead of carrying out some site-specific assessment and mitigation. The government’s position is that this provides a different route to meet existing obligations, not a removal of protections. The OEP and several nature charities have argued it reduces the level of legal protection for specific habitats and species, and the Act’s amendments responded to part of that criticism. Secondary legislation on how the levy operates was consulted on over summer 2026.
Biodiversity net gain is also evolving. It is due to become mandatory for nationally significant infrastructure projects from 2 November 2026, while a separate consultation has examined exempting brownfield development.
The EU has taken a more target-led approach through measures such as the Nature Restoration Law, which sets binding restoration objectives for member states. At the same time, the Commission has said it will stress-test the Habitats and Birds Directives, so a softening of site-based protection is under discussion in Brussels too.
The honest comparison is that both sides are under pressure to speed up infrastructure and housing, and both are testing how far that can go before it undermines nature protection. The UK has moved first and in a more structural way in England.
6. Industrial regulation and simplification
The EU has set out a programme of “omnibus” simplification packages. The Environmental Omnibus, proposed in December 2025, targets industrial emissions, circular economy reporting, extended producer responsibility, environmental assessments and geospatial data. The Commission says it will save around €1 billion a year for business. The Council agreed its position in June 2026, and EU leaders have set a goal of concluding all simplification packages by the end of 2027.
Changes proposed include allowing environmental management systems under the Industrial Emissions Directive to be prepared at company level instead of per installation, and simplifying reporting for livestock and aquaculture operators. The Council has retained a chemicals inventory requirement as a monitoring tool.
In Great Britain, industrial permitting remains based on the Environmental Permitting Regime derived from the previous EU framework. The UK has focused its reform energy on planning and infrastructure delivery rather than rewriting industrial emissions rules, so the more important divergence for permitted sites is likely to come from what the EU changes and the UK leaves alone.
7. Dynamic alignment: the reset
The most significant strategic shift is political. As part of the “reset” of UK-EU relations, the UK has agreed to pursue dynamic alignment with EU law in three areas: a sanitary and phytosanitary (SPS) agreement, ETS linking, and participation in the EU electricity market. UK participation in decision-shaping and a financial contribution to the EU’s work were also agreed. Electricity negotiations were formally launched in March 2026.
For environmental regulation, this has several consequences:
SPS alignment would reverse a number of post-Brexit divergences in areas such as pesticides, food and feed. Campaign groups argue that GB pesticide standards have fallen behind the EU’s, so alignment would raise the bar in some cases.
Reduced regulatory freedom. Critics, including some parliamentarians, argue that tracking EU rules limits the UK’s ability to set its own course. The House of Lords European Affairs Committee opened an inquiry into dynamic alignment in March 2026, including its implications for devolution.
Timing. The government has indicated it wants legislation by the end of 2026 so an SPS agreement can take effect around mid-2027, but the detail remains subject to negotiation.
8. Northern Ireland: a third regime
Under the Windsor Framework, Northern Ireland continues to apply EU law on goods, including much environmental product legislation. Examples include EU REACH and CLP, and much of the EU Packaging and Packaging Waste Regulation, while Great Britain follows domestic packaging and producer responsibility rules. The EU Deforestation Regulation is set to apply in NI in phases from 30 December 2026, and the UK government has indicated it will consult on a GB regime covering similar commodities.
This produces a three-way compliance map. A single product placed on the EU, NI and GB markets can face different packaging, chemicals and supply chain due diligence rules, and GB producers selling into NI may need to change practices to meet EU requirements.
9. Side-by-side comparison
Area
EU
Great Britain / UK
Oversight
Commission and Court of Justice
Office for Environmental Protection
Chemicals
EU REACH; full revision shelved; simplification by secondary legislation
UK REACH; ATRm in development; deadlines 2029 to 2031
Carbon pricing
EU ETS; CBAM definitive phase from January 2026
UK ETS; UK CBAM from January 2027; ETS linking under negotiation
Nature and planning
Binding restoration targets; Habitats Directives under review
Environmental Delivery Plans and Nature Restoration Fund in England
Industrial emissions
IED recast; omnibus simplification under negotiation
Domestic packaging and EPR rules (EU PPWR largely applies in NI)
Deforestation
EUDR applying from December 2026 (phased in NI)
GB regime proposed; consultation planned
Direction of travel
Simplify and enforce, but keep objectives
Deregulate delivery, re-align selectively through the reset
What this means for businesses
Treat the UK as at least two markets. GB and NI will continue to follow different rules for the foreseeable future, and the EU is a third.
Plan for double chemicals compliance. Map which substances are registered under each REACH regime and monitor ATRm developments.
Model carbon border exposure now. If you import or export steel, aluminium, cement, fertiliser or hydrogen, work out your CBAM liability on both sides and what an ETS link might change.
Watch dynamic alignment. It may improve predictability for agri-food and energy-intensive trade, but it also means EU decisions will increasingly shape GB rules.
Expect planning and permitting to change in England. If your projects affect protected sites, follow the Nature Restoration Levy regulations and Environmental Delivery Plan roll-out.
Build a regulatory horizon scan. With both sides in reform mode, a quarterly review of legislative changes will prevent costly surprises.
Conclusion
The post-Brexit story in environmental law is neither a collapse in standards nor a frozen copy of EU rules. It is a gradual and uneven separation, now partially reversed by political choices to re-align in carbon, agri-food and energy. The most useful way for businesses to think about it is as a moving map: stable in some places, fast-changing in others, and increasingly shaped by trade as much as by environmental policy.
This article is for general information only and is not legal advice. Regulations and deadlines change, so confirm the current position with the relevant regulator or a qualified adviser.
If your business could pollute the air, water or land, there is a good chance it needs an environmental permit. Operating a regulated facility without one is a criminal offence, and the consequences can include unlimited fines, enforcement notices, prosecution and, in serious cases, imprisonment.
The tricky part is that “regulated facility” covers a far wider range of businesses than most people expect. It is not just chemical plants and landfill sites. Dry cleaners, vehicle dismantlers, farms, food manufacturers, concrete producers and even businesses running a standby generator can all fall within scope.
This guide explains which businesses need an environmental permit, who regulates them, and how to work out where you stand.
A note on jurisdiction: this article focuses on England and Wales, where environmental permitting is governed by the Environmental Permitting (England and Wales) Regulations 2016. Scotland, Northern Ireland and the Republic of Ireland each operate their own regimes, detailed in a summary at the end.
What is an environmental permit?
An environmental permit is a legal authorisation to carry out an activity that could harm the environment or human health. It sets out conditions the operator must meet, such as emission limits, monitoring requirements, waste handling rules and pollution-control measures.
Permits are issued to the operator of the facility, meaning the person or business that controls how it runs day to day, not necessarily the landowner.
An environmental permit is not the same as planning permission, an ISO 14001 certificate or a waste carrier registration. Each has a separate legal purpose, and holding one does not remove the need for the others.
Does your business need an environmental permit?
Which businesses need an environmental permit?
Under the 2016 Regulations, you need a permit (or must register an exemption) if you operate a “regulated facility”. The main categories are below.
1. Industrial installations (Part A(1), Part A(2) and Part B)
Larger industrial processes are regulated as installations. They are split into three tiers based on environmental risk:
Part A(1) installations are regulated by the Environment Agency (or Natural Resources Wales). They cover the highest-impact activities such as large chemical manufacturing, refining, metals production, major energy and large-scale waste treatment.
Part A(2) installations are regulated by the local authority and cover emissions to air, water and land from medium-impact activities such as some glass, ceramics and surface treatment processes.
Part B installations are also regulated by the local authority, but focus on emissions to air only. Typical examples include petrol stations, dry cleaners, mobile crushing plant, concrete batching, coating and printing processes, wood processing and some food and animal feed manufacture.
2. Waste operations
If you treat, store, recycle, recover or dispose of waste, you will generally need a permit. This includes:
Landfill sites
Waste transfer stations
Metal recycling and vehicle dismantling sites
Anaerobic digestion and composting facilities
Waste incineration, gasification and pyrolysis plants
Hazardous waste treatment sites
Some lower-risk waste activities may qualify for an exemption, which still requires registration with the regulator and compliance with set limits on quantities and types of waste. Many businesses assume they are exempt without checking, which is a common route to enforcement action.
3. Combustion plants and generators
Businesses running boilers, engines, turbines or generators can fall within permitting requirements depending on their thermal input. Medium combustion plants (roughly 1 to 50 megawatts thermal input) and specified generators, including some standby and backup generators, may need a permit or registration. This surprises many hospitals, data centres, manufacturers and large commercial sites.
4. Discharges to water and groundwater
You may need a permit if you discharge anything to surface water or groundwater, including trade effluent that is not going to a public sewer, treated sewage effluent from a private system, or cooling water. Some activities that could affect groundwater, such as injecting substances into the ground, also require authorisation.
5. Flood risk activities
Work in, over, under or near a main river, flood defence or sea defence may need a flood risk activity permit. This is relevant to construction, civil engineering, landscaping and riverside development, not just industrial operators.
6. Radioactive substances
Businesses that keep, use or dispose of radioactive material or radioactive waste may need a permit or registration. This can include some hospitals, laboratories, industrial gauging operations and sites handling naturally occurring radioactive material.
7. Mining waste operations
Operators that manage waste from mineral extraction, such as tailings, overburden and waste rock, fall within the regime.
8. Solvent emissions and other specific activities
Processes using significant volumes of organic solvents (for example in printing, coating or cleaning), as well as some intensive farming operations (large pig and poultry units above set capacity thresholds), also require permits.
Local authority (environmental health or environmental protection team)
Waste operations and mining waste
Environment Agency
Water discharges, groundwater activities, flood risk activities
Environment Agency
In Wales, Natural Resources Wales takes the Environment Agency’s role.
What happens if you operate without a permit?
Operating a regulated facility without a permit, or breaching permit conditions, is an offence. Possible consequences include:
Enforcement and stop notices requiring you to cease operating
Unlimited fines in the Crown Court
Prison sentences for individuals in serious cases
Prosecution of directors and senior managers where an offence is committed with their consent or neglect
Clean-up and remediation costs
Reputational damage and difficulties with insurers, lenders and customers
Regulators also publish enforcement outcomes, so a conviction is rarely a private matter.
How to check if your business needs a permit
Identify every activity on site. Consider waste handling, combustion plant, solvent use, discharges and any work near watercourses, not just your core process.
Check for standard rules permits. Many common activities can be covered by pre-set standard rules, which are quicker and cheaper than a bespoke permit.
Speak to the regulator early. The Environment Agency or your local authority can confirm whether an activity needs a permit and which type. Pre-application advice can save months and reduce wasted application documents and assessments.
Keep records. If you conclude no permit is needed, document your reasoning in case a regulator challenges it.
What about Scotland, Northern Ireland and the Republic of Ireland?
The principles are similar, but the legal framework and regulator differ:
Republic of Ireland: regulated by the Environmental Protection Agency (EPA) and local authorities, through industrial emissions licences, waste licences and waste permits.
If you operate across more than one jurisdiction, you cannot assume a permit in one place covers another.
Frequently asked questions
Do small businesses need an environmental permit? Size does not determine whether you need one. What matters is the activity. A small dry cleaner or a small vehicle dismantler can need a permit just as a large manufacturer can.
Is an exemption the same as not needing a permit? No. An exemption usually has to be registered, and it only applies if you stay within strict conditions.
Can I apply for a permit myself? Yes, the operator can apply directly. For complex sites, many businesses use a consultant to prepare risk assessments, management systems and technical submissions, because errors cause delays and rejections.
How long does a permit take? It varies widely. Standard rules permits can be relatively quick and determined within 6-8 months, while bespoke permits for complex sites can take even longer. Regulators set statutory determination periods, and incomplete applications restart the clock.
Getting this wrong is expensive, whether that means operating illegally or paying for a permit you did not need. At Ashbrooke Management Consultants, we help businesses identify which legislation applies to business operations and sites. Once identified, we compile all the legislation into a register and include the steps required to be compliant.
If you need to identify the legislation applicable to your business, please contact one of our team.
Short answer: yes. If you run a business, charity or any other workplace, you produce waste, and if you produce waste, you have legal duties. The size of your business, the type of waste and where you operate change which duties apply, but there is no sector or headcount that switches them all off.
This guide explains the main waste obligations for businesses in England, what has changed recently, and how to check whether you are compliant. It also flags where Wales, Scotland and Northern Ireland differ.
What do we mean by “the Waste Regulations”?
There is no single set of regulations called “the Waste Regulations”. Businesses are usually caught by a combination of:
The waste duty of care (Section 34, Environmental Protection Act 1990), which applies to everyone who produces, keeps, carries, treats or disposes of business waste.
The Waste (England and Wales) Regulations 2011, which require businesses to take all reasonable steps to apply the waste hierarchy (prevent, reuse, recycle, recover, then dispose).
Workplace recycling rules (“Simpler Recycling”), which require businesses in England to separate certain waste streams.
Hazardous waste regulations, which apply if you produce waste that is harmful to people or the environment.
Producer responsibility rules, covering packaging, electrical and electronic equipment (WEEE) and batteries, which apply depending on what you place on the market.
Digital waste tracking, a new system that is rolling out in phases.
Which of these apply to you depends on your answers to a few simple questions, covered below.
1. The duty of care: it applies to every business
If your business produces waste of any kind, the duty of care applies to you. In practice it means you must:
Store waste safely and securely so it cannot escape, be stolen or cause pollution.
Only pass waste to an authorised person, such as a registered waste carrier or a permitted site. Check the carrier’s registration on the Environment Agency public register.
Describe the waste accurately and complete a waste transfer note (or hazardous waste consignment note) for each transfer. Waste transfer notes should be kept for at least two years; hazardous waste consignment notes for at least three years.
Take reasonable steps to make sure the waste is managed lawfully after it leaves your premises.
You remain responsible for your waste until it has been properly disposed of or recovered. If a “man with a van” takes it and tips it illegally, you can still be prosecuted. Penalties for duty of care offences can include unlimited fines, and serious cases can lead to imprisonment.
2. Workplace recycling: Simpler Recycling in England
England’s Simpler Recycling reforms require workplaces to separate their waste into core streams, working with their waste collector. In broad terms these are:
Dry recyclables (paper and card, plastic, metal and glass)
Food waste
Residual (general) waste
The key dates are:
Date
Who is covered
31 March 2025
Businesses and non-domestic premises with 10 or more full-time equivalent (FTE) employees
31 March 2027
Micro-firms with fewer than 10 FTE employees
Points that catch people out:
Headcount is counted across the whole organisation, not per site. Three sites with five staff each is a 15-person business, not three micro-firms.
It is not just offices and shops. Charities, schools, care homes and other non-domestic premises are in scope.
Staff kitchens count. If your premises produce waste similar to household waste, the rules apply to it.
Plastic film and bags are due to be added to the plastic stream at a later date than originally planned. Check current guidance for the latest timetable.
If you do not comply, the Environment Agency can issue compliance notices.
If you are a micro-firm, the 2027 deadline is closer than it feels. Talk to your waste collector now about containers, collection frequency and contract changes.
3. Hazardous waste
Many businesses produce hazardous waste without realising it. Common examples include:
Fluorescent tubes and some other lighting
Batteries
Waste oils, solvents, paints and adhesives
Asbestos
Some electrical equipment and electronic screens
Clinical and healthcare waste
Certain chemical-contaminated materials
If you produce hazardous waste you must classify it correctly, keep it separate from non-hazardous waste, use a registered carrier, and complete consignment notes for each movement. Mixing hazardous waste with other waste is generally unlawful.
4. Digital waste tracking: what has just changed
Digital waste tracking is designed to replace much of the paper-based system with a single national digital service, to improve traceability and tackle waste crime.
From 1 October 2026, operators of permitted waste receiving sites in England and Wales must record the waste they receive through the government’s digital service. Scotland and Northern Ireland have their own timetables, so check the position there.
Waste collectors, carriers, brokers and dealers are expected to follow in a later phase, anticipated from October 2027.
Waste producers have no mandatory date yet.
For now, you must carry on completing waste transfer notes and consignment notes as normal. However, it is sensible to ask your waste contractor how they are preparing, because the data they will need from you is likely to increase.
Do you know what waste your business produces?
5. Producer responsibility: packaging, WEEE and batteries
Separate from the day-to-day waste you throw away, you may have obligations because of what you supply:
Packaging: extended producer responsibility (EPR) rules require larger businesses that supply or handle packaging to report packaging data and pay fees. Thresholds are based on turnover and tonnage, so check whether you are in scope.
WEEE: businesses that sell electrical and electronic equipment have take-back and financing duties.
Batteries: businesses that supply batteries have their own registration and take-back duties.
If you manufacture, import or sell products, take specific advice on these.
6. Does it apply outside England?
Yes, although the detail differs.
Wales: workplace recycling regulations have applied since April 2024, requiring separate collection of core materials, including food waste.
Scotland: the Waste (Scotland) Regulations 2012 require businesses to present dry recyclables and, for many, food waste for separate collection.
Northern Ireland: separate legislation applies, including duties to segregate recyclables, with its own timetable for digital waste tracking.
Republic of Ireland and the Isle of Man: each has its own waste legislation, and the English rules above do not apply.
If you operate across more than one jurisdiction, you need to manage each site against the local rules.
A quick compliance checklist
Ask yourself:
Do I know what types and volumes of waste my business produces?
Is any of it hazardous, and is it classified and segregated correctly?
Is my waste collector or carrier registered, and do I hold up-to-date transfer notes and consignment notes?
Do I separate dry recyclables, food waste and general waste as required for my size and location?
Have I recorded my headcount across the whole organisation to confirm which deadline applies?
Do my staff know what goes where?
If I supply packaging, electrical goods or batteries, have I checked my producer responsibility obligations?
Do I know what my contractor needs from me for digital waste tracking?
If you cannot answer yes to all of these, a waste compliance review is a sensible next step.
What happens if you get it wrong?
Consequences can include compliance notices, fixed penalties, prosecution with unlimited fines, and reputational damage, particularly if your waste ends up fly-tipped or illegally dumped. Poor waste management is also frequently a health and safety issue, from fire risks in poorly stored waste to manual handling injuries and exposure to hazardous substances.
How we can help
Waste compliance sits alongside health, safety and environmental management, and many businesses find it easier to deal with them together. We can prepare a legal register detailing each piece of waste legislation that applies to your business and what you must do to comply with it. We can also maintain this register when new legislation is introduced or your sites or operations change.
If your business handles waste, discharges to water or air, runs industrial plant, or stores certain materials, the answer may well be yes. The Environmental Permitting (England and Wales) Regulations 2016 (EPR) are among the most widely applicable environmental laws in the UK, and many businesses are caught by them without realising it. Operating a regulated activity without the right permit or exemption is a criminal offence, so it’s worth checking before the regulator asks.
What are the Environmental Permitting Regulations?
The environmental permitting regulations bring several previously separate regimes under a single permitting system. Rather than applying for different licences for waste, industrial emissions and water pollution, operators deal with one framework, overseen by the Environment Agency (EA) in England, Natural Resources Wales (NRW) in Wales, or the local authority for certain lower-risk activities.
The core rule is simple: if you carry out a “regulated facility” activity, you need an environmental permit, or you must qualify for an exemption or exclusion.
Does your business require an environmental permit?
Which activities are regulated?
The regulations cover a broad range of activities. The main categories are:
Installations: industrial processes with the potential to pollute air, water or land, such as chemical manufacture, metal processing, intensive farming, food and drink production above certain thresholds, and waste incineration.
Waste operations: treating, storing, recovering or disposing of waste, including scrap metal yards, skip hire, vehicle dismantlers, waste transfer stations and composting sites.
Mobile plant: equipment used to treat or recover waste on different sites, such as mobile crushers.
Water discharge activities: releasing trade effluent or other liquids to surface water, sewers in some circumstances, or groundwater.
Groundwater activities: discharges or activities that could pollute groundwater.
Medium combustion plants and specified generators: boilers, engines and generators within certain thermal-input ranges, including standby generators used for grid services.
Solvent emission activities: processes using organic solvents above set thresholds, such as printing, coating and dry cleaning.
Radioactive substances activities: keeping or using radioactive materials, or disposing of radioactive waste.
Mining waste operations: managing waste from mineral extraction.
Do I need a permit, an exemption, or nothing at all?
Being in a regulated sector doesn’t automatically mean a full permit. There are usually three outcomes.
1. A bespoke permit. Higher-risk or complex sites typically need a tailored permit with site-specific conditions, monitoring and reporting requirements.
2. A standard rules permit. For lower-risk, well-understood activities, the regulator publishes fixed sets of conditions. These are quicker and cheaper to obtain, but you must be able to meet every rule.
3. An exemption or exclusion. Some low-risk activities, such as certain types of waste storage, reuse or recovery, don’t need a permit but may need to be registered, and must stay within strict limits on waste type, quantity and how it’s handled. Exceeding those limits can take you out of the exemption and into unpermitted operation.
A common mistake is assuming an exemption applies without checking the conditions. Quantity limits, storage time limits and waste codes all matter.
Common situations where businesses get caught out
A manufacturer storing or treating waste on site beyond exemption limits
A builder or groundworks firm processing or crushing waste soil or rubble
A site with a large boiler or generator that reaches medium combustion plant thresholds
A business discharging site drainage or process water to a watercourse or soakaway
A company taking over a site and assuming the previous permit transfers automatically
Businesses that only use a waste carrier and assume permitting isn’t their concern, without checking the duty of care and whether the receiving site is permitted
What if I’m not in England or Wales?
Environmental permitting is devolved, so the rules differ:
Republic of Ireland: a separate system of licences and permits, mainly overseen by the EPA and local authorities.
If you operate across more than one jurisdiction, you can’t assume one approach fits every site.
What are the consequences of getting it wrong?
Operating a regulated facility without a permit, or breaching permit conditions, is a criminal offence. Penalties can include an unlimited fine and, in serious cases, imprisonment. The regulator can also issue enforcement or suspension notices, require remediation, and pursue cost recovery. Beyond the legal risk, non-compliance can affect insurance, contracts, funding and your reputation with customers who ask about environmental credentials.
How to check whether the EPR apply to you
List your activities. Include not just your main process, but storage, treatment of waste, drainage, heating and power plant.
Check the thresholds. Many activities only become regulated above a certain quantity, capacity or thermal input.
Identify your waste streams. Know what you produce, how much, how long it’s kept, and where it goes.
Check for existing permits or exemptions. Confirm they are current, cover what you actually do, and that you’re meeting every condition.
Get an independent view. A competent adviser can spot gaps you may not see from the inside.
How we can help
Working out whether the EPR apply is rarely as simple as ticking a box. Our team can review your operations, identify regulated activities, advise on whether you need a permit or qualify for an exemption, and support you through applications and ongoing compliance. Get in touch for an initial conversation about your site.
This article is general guidance and not legal advice. Requirements depend on your activities, location and circumstances.
Just as ISO 45001 places the legal register at the centre of an Occupational Health and Safety audit, ISO 14001 auditors treat the environmental legal register the same way. Clause 6.1.3 requires organisations to identify and have access to legal and other requirements related to their environmental aspects, and clause 9.1.2 requires ongoing evaluation of compliance against them. As an auditor with over 10 years experience, I am often asked what I look for when auditing a legal register. In this article I will explain what makes a compliant legal register. A weak legal register is often the first sign an auditor uses to question the rest of the environmental management system.
Here’s what they actually look for.
1. Coverage: Does It Match Your Environmental Aspects?
Auditors will cross-check your register against your aspects and impacts register, looking for gaps such as:
Legislation tied to specific activities — waste production and disposal, trade effluent, emissions to air, water abstraction or discharge, storage of hazardous substances
Permits and licences (environmental permits, waste carrier licences, discharge consents) and the conditions attached to them
Jurisdiction-specific law where you operate across multiple regions — for example, differences between Great Britain, Northern Ireland, the Isle of Man, and the Republic of Ireland
Producer responsibility obligations (packaging waste, WEEE, batteries) where relevant
If your register lists only headline legislation (Environmental Protection Act 1990, Environmental Permitting Regulations) without the specific conditions and secondary regulations that actually apply to your sites, auditors will flag it as incomplete.
2. Currency: Is It Actively Monitored?
This is the most common nonconformity raised against environmental legal registers. Auditors will ask:
What process identifies new, amended, or revoked environmental legislation?
How often is the register reviewed, and who is accountable for it?
Can you evidence the last review — version history, revision log, sign-off dates?
A register that hasn’t changed in years, despite known regulatory activity in your sector, signals there’s no active horizon-scanning process. Subscribing to a legislation-update service or newsletter is strong, tangible evidence here.
ISO 14001 clause 9.1.2 requires evaluation of compliance, not just identification of requirements. Auditors will look for:
A compliance status against each requirement (compliant / partially compliant / non-compliant)
Evidence supporting that status — permit conditions met, monitoring data, waste transfer notes, inspection records
A defined frequency for compliance evaluation, distinct from the general register review
Registers where every entry is simply marked “compliant” with no supporting evidence are a red flag, especially for permitted activities where conditions carry monitoring or reporting obligations.
4. Traceability Into Operational Control
Auditors will sample specific legal requirements and trace them through the system to confirm they’re operationally embedded, not just listed. Expect questions like:
Is this requirement reflected in an operational control procedure, permit condition tracker, or monitoring schedule?
Do the people responsible for the activity know the legal requirement applies to them?
Is evidence of compliance readily retrievable — not just asserted?
A legal register that exists in isolation from operational procedures and permit management is a common weak point.
5. Ownership and Process
Auditors assess the process behind the register as much as the document itself:
Who is responsible for monitoring legislative and permit changes?
What’s the escalation route when a new requirement is identified, and how quickly is it actioned?
Is legal compliance status reviewed at management review, per clause 9.3?
A register maintained informally by one person, with no visibility at management review, suggests the requirement is being satisfied on paper rather than in practice.
6. Format Doesn’t Matter — Function Does
ISO 14001 doesn’t specify a register format. Auditors care whether it functions as a live compliance tool, not what it’s built in. A well-structured register typically includes:
Aspect
Purpose
Legislation/permit reference
Identification
Jurisdiction
Applicability
Summary of requirement
Interpretation
Related environmental aspect
Relevance
Compliance status
Evaluation
Evidence/reference
Traceability
Date reviewed / next review
Currency
Owner
Accountability
Getting Audit-Ready
To strengthen your environmental legal register ahead of an ISO 14001 audit or surveillance visit:
Cross-check the register against your current aspects and impacts assessment
Add or refine a compliance-status column with linked evidence
Establish and evidence a documented review cycle
Ensure the register connects visibly to permit management, monitoring schedules, and management review minutes
An environmental legal register that’s actively maintained, evidenced, and embedded in operational decisions is one of the clearest signs of a mature EMS — and one of the fastest wins ahead of an audit.
If you run a small business in the UK, you might assume that waste regulations are something only large industrial operators need to worry about. That assumption is both common and costly. Recent enforcement data suggests that 90% of organisations currently breaking waste law are SMEs with 0 to 50 employees. Whether you are a sole trader, a home-based business, or a limited company with a handful of staff, the legal duty of care for waste applies to you from the moment your business produces its first bag of rubbish.
This article breaks down the core UK waste laws that apply to small businesses, explains what has changed recently, and outlines the practical steps you need to take to stay compliant.
The Foundation: Duty of Care Under the Environmental Protection Act 1990
The cornerstone of UK waste law is Section 34 of the Environmental Protection Act 1990, which imposes a legal “duty of care” on anyone who produces, imports, keeps, stores, transports, treats, or disposes of controlled waste. This duty is not limited to large corporations. It extends explicitly to landlords, home-based businesses, sole traders, and small and medium-sized enterprises.
In practical terms, the duty of care requires you to take all reasonable steps to ensure your waste is stored safely and securely and is only transferred to an authorised person or business. You must not dump trade waste at household recycling centres or in domestic bins. You must use a licensed waste carrier, and you must complete and retain a Waste Transfer Note (WTN) for every transfer of non-hazardous waste. These records must be kept for a minimum of two years and can be inspected by council or Environment Agency officers at any time.
Failure to comply is not a minor administrative matter. Councils across the UK are actively issuing Fixed Penalty Notices and Section 34 enforcement notices. In one recent four-month campaign in Northamptonshire, 55 formal warning notices and 16 Fixed Penalty Notices were issued for offences including duty of care breaches.
Simpler Recycling: New Separation Requirements
From 31 March 2025, new rules under the Separation of Waste (England) Regulations 2025 require businesses in England to separate recyclable materials into distinct waste streams. The core materials that must be segregated are paper and card, metal, plastic, and glass. Food waste must also be collected separately.
There is some flexibility built into the system. Metal, glass, and plastic may be collected together in a combined stream if your waste contractor offers that option, and food waste can be collected alongside garden waste.
Crucially, micro-firms with fewer than 10 full-time equivalent employees are temporarily exempt from these separation requirements until 31 March 2027. If your business has 10 or more employees, however, you should already be compliant. The Environment Agency has also introduced a cost-recovery charging scheme of £118 per hour for regulatory work connected to non-compliance, meaning that an inspection finding you in breach could result in a direct bill for the time the regulator spends investigating you.
Hazardous Waste: Stricter Rules, Even for Tiny Quantities
If your business produces any hazardous waste, the regulatory burden increases significantly. Hazardous waste includes items such as waste chemicals, fluorescent light tubes, used solvents, asbestos, waste oils, batteries, and certain electrical equipment.
Even a couple of batteries or a single tube of adhesive falls within the scope of strict legal requirements. You must keep hazardous waste separate from non-hazardous waste and must not mix different types of hazardous waste together. You must complete a hazardous waste consignment note when the waste is removed from your premises, and you must keep consignment notes for three years.
If your business produces, holds, or removes 500kg or more of hazardous waste in any 12-month period, you must register your premises with the Environment Agency (or the relevant devolved regulator). Some premises are exempt if they produce less than 200kg in a year. Fines for producing or holding hazardous waste from unregistered premises can reach £5,000.
Packaging Waste: The Extended Producer Responsibility Regime
Under the previous regime, only businesses with a turnover above £2 million that handled more than 50 tonnes of packaging were caught. Under pEPR, the threshold has dropped. Small businesses with an annual turnover of over £1 million that imported or supplied over 25 tonnes of packaging in the last calendar year are now classified as “small producers” and must register with the relevant regulator and submit annual data on their packaging volumes.
Businesses with a turnover below £1 million and packaging tonnage below 25 tonnes are exempt from data collection and reporting obligations. Those with a turnover between £1 million and £2 million and packaging tonnage between 25 and 50 tonnes must register and report, but they are currently exempt from paying waste disposal fees and buying Packaging Recovery Notes (PRNs).
If your business sells packaged goods online, distributes empty packaging, or imports packaged products, you should check whether you meet the “producer” definition under pEPR.
Digital Waste Tracking: What Is Changing
The UK is moving away from paper-based duty of care records towards a mandatory Digital Waste Tracking (DWT) service. The mandatory roll out was originally scheduled for April 2027 but has been delayed by six months to October 2027 to give operators, particularly SMEs, more time to prepare.
Phase One of the service, which applies to waste received at permitted facilities, began in October 2026. Phase Two will extend the system to waste carriers, brokers, and dealers who arrange or transport waste movements. In the interim, you must continue to maintain robust paper or digital duty of care records. These remain legally required until DWT becomes mandatory.
Devolved Differences: Scotland, Wales, and Northern Ireland
Waste policy is devolved, which means the rules vary depending on where your business operates.
Scotland: The Waste (Scotland) Regulations 2012 require all businesses to separate glass, metal, plastics, paper, and cardboard for recycling. Food businesses producing more than 5kg of food waste per week must present it for separate collection, and disposing of food waste into the sewer via a macerator is illegal in most areas.
Wales: Since 6 April 2024, all workplaces in Wales have been required to separate paper and card, glass, metal, plastic, cartons, food waste (where 5kg or more is produced per week), small waste electrical and electronic equipment (sWEEE), and unsold textiles for collection. The Welsh regulations apply regardless of business size, with no micro-firm exemption.
Northern Ireland: Businesses in Northern Ireland are subject to the duty of care under the Environmental Protection Act 1990 and must use registered waste carriers. Digital Waste Tracking will also apply across Northern Ireland as part of the UK-wide roll out.
Practical Steps for Compliance
If you run a small business, the following checklist will help you stay on the right side of the law:
1. Confirm you have a licensed waste carrier. Ask to see their waste carrier registration number and verify it with the Environment Agency or SEPA.
2. Retain Waste Transfer Notes. Keep them for at least two years for non-hazardous waste and three years for hazardous waste consignment notes.
3. Separate your recyclables. If you have 10 or more employees, you must already be segregating paper, card, metal, plastic, glass, and food waste.
4. Check your packaging obligations. If your turnover exceeds £1 million and you handle more than 25 tonnes of packaging annually, register as a small producer under pEPR.
5. Store waste securely. Prevent waste from escaping, causing litter, or attracting pests.
6. Never use household waste services for business waste. This is a common breach that councils are actively enforcing.
Waste compliance is not static. The regulatory landscape is shifting rapidly, with Simpler Recycling, pEPR, and Digital Waste Tracking all phasing in over the coming years. For small businesses without a dedicated compliance team, keeping track of these changes can feel overwhelming.
A specialist consultancy can help you audit your current waste arrangements, identify gaps in your duty of care documentation, advise on separation requirements, and prepare your business for the transition to digital tracking. The cost of getting it wrong—whether through Fixed Penalty Notices, Environment Agency cost-recovery charges, or reputational damage—far outweighs the cost of getting it right.
Why a one-size-fits-all approach to legal compliance leaves organisations exposed — and what a register built around your actual operations gives you instead.
If your organisation is subject to health, safety, or environmental law — and almost every organisation is — you need a legal register. It’s the document that tells you which legislation applies to your operations, what it requires of you, and whether you’re actually compliant. But not all legal registers are built the same way, and the difference between a generic template and a bespoke register isn’t cosmetic. It’s the difference between a document that looks like due diligence and one that actually protects your organisation.
What Is a Legal Register?
A legal register is a structured record of the laws, regulations, and codes of practice that apply to an organisation, typically covering health and safety, environmental, and related compliance obligations. It’s a cornerstone requirement of recognised management system standards, including ISO 9001, ISO 45001 and ISO 14001, and it’s usually the first document an auditor or regulator asks to see. On paper, every legal register looks similar: a list of legislation, a summary of requirements, a compliance status. In practice, how that list is built determines whether the register is a genuinely useful management tool or a box-ticking exercise.
The Trouble With Generic Legal Registers
Generic legal registers are typically off-the-shelf templates or subscription database exports, built to cover an entire sector or industry in one document. They’re inexpensive, quick to obtain, and easy to see the appeal of — but that convenience comes at a real cost:
They list legislation that may have nothing to do with your actual activities, sites, or risk profile, burying the requirements that genuinely matter under dozens that don’t.
They rarely reflect the specific jurisdictions, licences, or permits your organisation holds, particularly for organisations operating across Great Britain, Northern Ireland, the Isle of Man, or the Republic of Ireland, where legal frameworks diverge significantly.
They’re built for updating on a fixed schedule rather than in response to your organisation’s changes — a new site, a new process, a new piece of equipment — so they drift out of date the moment your operations move.
They describe legal duties in abstract terms, without translating them into what compliance actually looks like for your sites, your equipment, and your people.
They offer no meaningful gap analysis — you’re left to work out for yourself whether you actually comply with each requirement.
The result is a register that satisfies the letter of the audit requirement — “yes, we have a legal register” — without doing the job a legal register exists to do: giving your organisation a clear, current, accurate picture of its legal exposure.
A bespoke legal register demonstrates to auditors that you actually know your legal obligations.
Why a Bespoke Legal Register Is the Only Register Worth Having
A bespoke legal register is built from the ground up around your organisation: your sites, your activities, your industry sector, your jurisdictions, and your risk profile. Rather than starting from a generic list and hoping it fits, it starts from your operations and identifies exactly which legislation applies — and, critically, what that legislation actually requires you to do about it. The advantages compound quickly:
Relevance: every entry has a direct line to something your organisation actually does, so nothing important gets lost in noise that doesn’t apply to you.
Accuracy across jurisdictions: legislation is mapped to the specific jurisdiction — GB, NI, Isle of Man, or ROI — that each site operates under, rather than treated as a single homogeneous “UK law” list.
A genuine compliance status: each requirement is assessed against evidence from your organisation, so you know — not guess — where you stand, and where the gaps are.
Built-in gap analysis and action planning: a bespoke register doesn’t just flag non-compliance, it gives you a prioritised route to closing it.
Living, current content: as legislation changes or your organisation changes — a new site, a new process, an amended regulation — the register is updated to reflect it, so it never becomes a snapshot of a moment that’s already passed.
Audit and due diligence confidence: a bespoke register demonstrates, to auditors, regulators, insurers, and clients, that your organisation understands and manages its legal obligations — not that it purchased a document that says it does.
In short: a generic register tells you what the law says. A bespoke register tells you what the law means for you — and whether you’re meeting it.
FEATURES
Generic Legal Register
Bespoke Legal Register
Identifies only relevant laws
Focused on the actual business
Relevant and easy to understand
A practical management tool
Includes sector specific requirements
Demonstrates that you understand your obligations
The Bottom Line
A legal register is only as valuable as its accuracy and relevance to your organisation. A generic template can create a false sense of security — the appearance of compliance without the substance of it — and that gap tends to surface at the worst possible moment: during an incident investigation, a regulatory visit, or a client’s due diligence review. A bespoke legal register, developed and maintained by health and safety professionals who understand your sector and your sites, is an investment in genuine legal certainty, not just a document for the audit file.
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.