Health and safety and environmental regulation across jurisdictions

Introduction

The regulation of health, safety, and the environment at work has never been a purely technical matter. It sits at the intersection of political economy, legal tradition, scientific knowledge, and institutional capacity. A chemical exposure limit in a European Union directive, an inspection protocol in a United States Occupational Safety and Health Administration (OSHA) field manual, a pollution permit condition in China, and a work health and safety duty in an Australian statute all reflect distinct histories of labour struggle, environmental mobilisation, administrative state-building, and, increasingly, economic strategy. To speak of “health and safety and environmental regulation across jurisdictions” is therefore to speak of a family of regimes that share common aspirations—the prevention of harm to workers, communities, and ecosystems—but which pursue those aspirations through markedly different architectures, enforcement cultures, and legal technologies.

The past several years have been a period of unusual turbulence for these regimes. The COVID-19 pandemic exposed the fragility of occupational health and safety (OSH) systems and accelerated debates about psychosocial risks, remote work, and the boundaries of employer responsibility. The intensification of the climate crisis has pushed environmental regulation from the periphery of corporate governance toward its centre, with mandatory climate disclosure, supply chain due diligence, and carbon border measures emerging as central instruments of public policy. At the same time, a powerful counter-movement has taken shape. In the United States, federal agencies have retreated from enforcement and from climate-related rule making, devolving significant regulatory energy to states.

Health and safety and environmental regulation across jurisdictions

In the European Union, the “Omnibus” simplification package has reduced the scope of flagship sustainability directives by dramatic margins, prompting accusations of backtracking on human rights and environmental protection. The result is a global regulatory landscape characterised less by convergence toward a single model than by a complex interplay of harmonisation and divergence, ambition and retrenchment, innovation and inertia.

This article examines that landscape across the principal industrialised and industrialising jurisdictions. It begins with occupational health and safety, comparing the foundational architectures of the United States, the European Union, the United Kingdom, Australia, China, India, and selected other systems. It then turns to environmental regulation, tracing the shift from command-and-control permitting toward market mechanisms, disclosure, and supply chain governance, while noting the unevenness of that shift. Finally, it identifies the cross-cutting trends that are reshaping health, safety, and environmental regulation globally—mandatory climate disclosure, due diligence, the integration of environmental, social, and governance (ESG) considerations with traditional environmental, health, and safety (EHS) functions, digitisation and artificial intelligence, the rise of psychosocial risk, and the politics of regulatory retreat—before concluding with the implications for multinational enterprises and for the future of regulatory governance itself.

Part I: The Architecture of Occupational Health and Safety Regulation

The United States: The General Duty and the Turn Toward Voluntarism

The foundation of federal occupational safety and health law in the United States remains the Occupational Safety and Health Act of 1970, a statute born of the great wave of social regulation of the late 1960s and early 1970s. The Act created OSHA within the Department of Labour and established a dual structure of regulation: a set of specific standards promulgated under the Act, codified principally in Title 29 of the Code of Federal Regulations, and a broad “General Duty Clause” requiring employers to furnish a workplace “free from recognised hazards that are causing or are likely to cause death or serious physical harm”. The Act covers most private-sector employers and, through federally approved state plans, many public-sector workers as well.

The American model has traditionally been characterised as enforcement-oriented and compliance-based. OSHA sets permissible exposure limits (PELs) for hazardous substances, issues detailed standards for particular industries and hazards, and relies on inspections, citations, and monetary penalties to secure adherence. Penalties are adjusted annually for inflation; by 2026, serious violations carried a maximum of approximately USD 16,131, while wilful or repeat violations could attract penalties exceeding USD 161,000, with criminal referral available for wilful violations causing an employee’s death. In practice, however, the reach of federal enforcement is limited by resources: OSHA has long had fewer inspectors than would be required to inspect every covered workplace with any frequency, a constraint that has shaped the agency’s reliance on voluntary programmes and targeted national emphasis programmes (NEPs).

The most significant development in recent American OSH policy has been the explicit shift away from enforcement-based compliance toward what the agency describes as proactive risk management and prevention. In early 2026, OSHA launched its “Safety Champions Program,” a voluntary, self-guided initiative designed to help employers of any size develop workplace safety and health programmes. The agency described the programme as representing a shift in emphasis, and it followed a December 2025 issuance of seven letters of interpretation addressing confined spaces, hazard communication, and related requirements.

This approach has not gone uncontested. Critics have pointed to the simultaneous weakening of the heat illness National Emphasis Program, which had been renewed in January 2025 but was subsequently amended away from enforcement metrics toward voluntary compliance. The practical consequence is a federal regime that retains a robust statutory framework and a General Duty Clause of broad potential application, but which increasingly relies on persuasion, partnership, and employer self-assessment rather than on the deterrent effect of frequent inspection and substantial penalty.

This federal retreat has been accompanied by a pronounced state-level counter-movement. California has moved forward with its own climate disclosure regime, while Colorado and New Jersey have proposed bills requiring Scope 1, 2, and 3 emissions reporting. Several states have advanced heat-illness prevention standards that outpace federal OSHA efforts. For employers operating across the United States, the result is not a single OSH regime but a fragmented compliance environment in which the applicable standard may depend as much on the state of operation as on the federal statute. This fragmentation is a recurring feature of American regulation, but it has become particularly salient in the current period of federal deregulatory energy.

The European Union: Prevention, Participation, and the Framework Directive

The European Union’s approach to occupational health and safety rests on a different foundation. The cornerstone is Council Directive 89/391/EEC of 1989, the OSH Framework Directive, which established the principle that employers must take appropriate preventive measures to make work safer and healthier, provide information and training to workers, and consult with workers and their representatives on matters of health and safety. The Framework Directive does not seek to harmonise every detail of national law; rather, it sets minimum requirements that Member States must transpose into their own legal orders, leaving room for more protective national provisions. This “minimum harmonisation” model has allowed the EU to accommodate diverse industrial relations traditions—from the corporatism systems of Germany and the Netherlands to the more centralised systems of France and southern Europe—while maintaining a common floor of protection.

The EU regime is often characterised as preventive and engineering-oriented, in contrast to the compliance-oriented American model. The Framework Directive requires employers to carry out a risk assessment as the starting point of OSH management, to eliminate risks at source, to adapt work to the individual, and to give priority to collective protective measures over individual protective equipment. This hierarchy of controls is a distinctive feature of European OSH law, reflecting a philosophical commitment to primary prevention rather than reliance on personal protective equipment or behavioural compliance. The EU also requires the appointment of competent health and safety services, the provision of health surveillance where risks warrant it, and the meaningful participation of workers in the design and implementation of preventive measures.

The EU’s substantive standards are updated through a stream of “daughter directives” addressing particular hazards and sectors. The Carcinogens, Mutagens and Reprotoxic Substances Directive has been revised repeatedly since its first adoption in 2004 and now addresses twenty-eight cancer-causing substances. In December 2025, the Council agreed its position on a sixth revision, which would introduce new or revised occupational exposure limits for a range of substances, including isoprene, with the expectation that the revised rules would prevent around 1,700 cases of lung cancer and 19,000 other illnesses over four decades. The directive was formally adopted in October 2026, with Member States given two years to transpose it into national law. Separate directives address asbestos, lead, noise, vibration, and the use of work equipment, among other hazards. The EU has also adopted legislation on the protection of pregnant workers, young workers, and workers on fixed-term or temporary agency contracts, reflecting a broader commitment to equality and to the protection of vulnerable groups.

Enforcement in the EU is a matter for Member States, and the styles and intensities of enforcement vary considerably. Some countries, such as Denmark and the Netherlands, have experimented with risk-based inspection targeting and with reduced monitoring for employers that participate in partnership or voluntary programmes, shifting scrutiny onto non-participating employers. Others, such as Germany, have developed elaborate systems of statutory accident insurance and prevention services that integrate inspection with rehabilitation and compensation. The common thread is not a single enforcement model but a shared legal framework that makes risk assessment, worker participation, and prevention obligatory across the Union.

The United Kingdom: The Health and Safety at Work Act and the Post-Brexit Trajectory

The United Kingdom’s Health and Safety at Work etc. Act 1974 is a landmark of OSH law, and its influence has extended far beyond the UK’s borders. The Act established a general duty on employers to ensure, so far as is reasonably practicable, the health, safety, and welfare of their employees and of others affected by their undertaking. The concept of “reasonably practicable” has been central to the UK regime: it requires employers to weigh the risk against the sacrifice, whether in money, time, or trouble, involved in averting it, and it has allowed the law to adapt to changing circumstances without constant legislative amendment. The Act also created the Health and Safety Executive (HSE) as the principal regulator and established a tripartite structure, involving government, employers, and workers, in the governance of health and safety.

The UK’s departure from the European Union has set in motion a process of divergence that is still unfolding. The HSE has taken on new responsibilities for chemicals regulation through UK REACH, building safety, and dangerous goods, but it has done so with substantially reduced resources. Between 2010 and 2020, the HSE’s organisation-wide budget fell by £122 million, or 43 percent, and by 2025 it employed nearly 3,000 staff and 900 inspectors, well below the more than 4,000 staff and 1,500 inspectors it had in the 2000s. The HSE has also lost access to the European Chemicals Agency’s database, the world’s most comprehensive chemical registration system, a loss that has been compounded by its diminished capacity to respond to new hazard classifications issued in the EU. The statutory obligation on the HSE to respond to all substances given hazard classifications in the EU within a legal time frame has been removed, raising concerns about the transparency and pace of future divergence.

The divergence is not merely a matter of resources, it is also a matter of regulatory philosophy. The UK government has introduced a “growth duty” on the HSE, requiring it to have regard to economic growth in the exercise of its functions, a development that critics argue compromises the regulator’s independence and its ability to prioritise health and environmental risks over economic considerations. The government has also signalled a preference for aligning with the United Nations’ Globally Harmonised System of Classification and Labelling of Chemicals rather than with the EU’s new hazard classes, a choice that the European Commission has stated is not reciprocated on the EU side. The practical effect is a gradual, perhaps accelerating, divergence between Great Britain and the EU in the classification and regulation of chemicals, with implications for trade, for the free movement of goods, and for the level of protection afforded to workers and the public.

Northern Ireland presents a special case. Under the Windsor Framework, Northern Ireland remains aligned with many EU rules, including those on chemicals and product safety, while Great Britain diverges. This creates a regulatory border within the United Kingdom, adding complexity for businesses that operate across the Irish Sea and raising questions about the long-term coherence of the UK’s internal market in regulated products.

Australia: Model Laws and the Persistent Challenge of Harmonisation

Australia’s approach to work health and safety (WHS) has been shaped by a distinctive federal structure and by a long-running effort to achieve national harmonisation. In 2008, the National Review into Model Occupational Health and Safety Laws recommended a set of model WHS laws to be adopted by the Commonwealth, states, and territories. The model WHS Act and Regulations were developed through Safe Work Australia, a national policy body that brings together representatives of the Commonwealth, states, and territories, as well as worker and employer interests. The model laws are based on a general duties framework, supplemented by specific obligations for particular hazards and industries, and they incorporate a hierarchy of controls and a requirement for consultation with workers.

The harmonisation project has achieved substantial but incomplete success. The model WHS laws have been adopted by the Commonwealth, all states, and both territories except Victoria, which maintains its own Occupational Health and Safety Act. Western Australia adopted the model laws through its Work Health and Safety Act 2020, which became operative in March 2022. Yet the persistence of jurisdictional variations has been a source of ongoing concern in the country.

A 2025–2026 best practice review of the model WHS laws, conducted by Safe Work Australia, found stakeholder dissatisfaction with the increasing disharmony between state and territory laws fifteen years after the model laws were introduced. The review’s discussion paper catalogued variations in the WHS duties framework, consultation and representation requirements, right of entry, compliance and enforcement, inspector powers, legal proceedings, offences and penalties, and codes of practice. It also identified a broader challenge: some jurisdictions regulate particular industries separately or outside their WHS frameworks, leading to a patchwork of safety regulation that can be difficult for multi-state employers to navigate.

The Australian experience illustrates a more general tension in federal systems: the desire for national consistency and the reality of regional political and administrative autonomy. The model laws have raised the floor of protection in some jurisdictions and have created a common vocabulary of duties and obligations, but they have not eliminated the differences that matter to employers and workers. The review process itself is an acknowledgement that harmonisation is not a one-off legislative event but a continuing project of maintenance and adjustment.

China: The Work Safety Responsibility System and the Party-State

China’s work safety regime has undergone a profound transformation over the past two decades, driven by a series of high-profile industrial disasters and by the leadership’s determination to project an image of effective governance. The basic law is the Work Safety Law of the People’s Republic of China, originally promulgated in 2002 and most recently amended in 2021. The law establishes an “all-staff work safety responsibility system,” requiring production and business entities to establish and improve rules and regulations, increase investment in work safety, provide education and training to workers, and provide protective equipment that meets national or industry standards. A distinctive feature of the Chinese approach is the “dual prevention mechanism” of graded safety risk management and control and hidden danger identification and rectification, which requires enterprises to identify and classify risks and to rectify hazards on a systematic basis.

The scope of Chinese work safety regulation has been expanding. In December 2025, the Standing Committee of the National People’s Congress promulgated the Hazardous Chemicals Safety Law, which came into effect on 1 May 2026 and imposes a comprehensive responsibility system on entities engaged in the production, storage, use, operation, or transportation of hazardous chemicals. The law requires such entities to meet prescribed safety conditions and to implement an all-employee responsibility system. This builds on a pre-existing architecture of registration, licensing, and safe-use permits for hazardous chemicals, which had been developed through a series of administrative measures issued by the State Administration of Work Safety.

Enforcement in China is intimately connected to the broader apparatus of Party-state governance. Work safety performance is integrated into the evaluation of local officials, and serious accidents can trigger administrative accountability, including the dismissal or prosecution of responsible officials. The use of social credit systems is also extending into the environmental and safety domains, with environmental credit ratings, differentiated regulatory treatment, and credit repair mechanisms being deployed to incentivise compliance. The Chinese model is thus not simply a system of rules and inspections; it is a system of political and administrative incentives in which work safety and environmental performance are treated as indicators of governmental competence and legitimacy.

India: Consolidation, Codes, and the Challenge of Implementation

India’s OSH landscape is in the midst of a significant transition. For decades, the principal statute was the Factories Act of 1948, supplemented by a maze of state-level rules and sector-specific legislation. The Factories Act prescribed measures relating to working conditions, hazard prevention, safety of machinery, ventilation, waste disposal, and the protection of workers, and it led to the creation of rules for hazardous waste handling, biomedical waste management, and chemical safety. Over time, however, the Act came to be seen as outdated and fragmented, and its coverage was limited to manufacturing establishments above a certain size threshold.

The Occupational Safety, Health and Working Conditions (OSH) Code, 2020, represents an attempt to consolidate and modernise this framework. The Code was brought into force on 21 November 2025, and it extends certain obligations under the Factories Act to establishments employing at least ten workers, including information technology and other service-sector establishments. It introduces new duties on employers, including ensuring that the workplace is free from hazards likely to cause injury or occupational disease, complying with OSH standards, providing free annual health examinations for specified classes of employees, ensuring safe disposal of hazardous and toxic waste including e-waste, and issuing letters of appointment to every employee. Employees gain the right to obtain information from the employer relating to their health and safety at work and to make representations about inadequate protection, with escalation to an Inspector-cum-Facilitator. Penalties for non-compliance have been increased, with a maximum fine of INR 500,000 for certain contraventions.

The implementation of the OSH Code has been uneven across India’s states and union territories. By late 2025, eighteen to twenty-five states had already incorporated many provisions of the labour codes into their own rules, and Gujarat had formalised the OSH Code in June 2025, awaiting the central government’s final nod to initiate implementation. Karnataka had enforced the Factories (Safety Audit) Rules, 2024, and other states such as Kerala and Andhra Pradesh had taken steps toward implementation. Bihar repealed its Shops and Establishments Act in light of the overlapping provisions in the OSH Code, a sign of the consolidating logic of the new framework. Yet significant gaps remain: several states, including West Bengal, Meghalaya, Nagaland, and Sikkim, had not completed harmonisation, and enforcement capacity at the state level remained a persistent concern. The Indian experience illustrates a broader challenge facing many emerging economies: the gap between legislative ambition and administrative reality, between the enactment of modern standards and the creation of the inspectorates, training systems, and technical expertise needed to give them effect.

Other Jurisdictions: Japan, Brazil, and South Africa

A comparative account of OSH regulation would be incomplete without attention to jurisdictions that have developed distinctive approaches outside the Anglo-American and European traditions. Japan’s Industrial Safety and Health Act, originally enacted in 1972, was amended in 2025 to address the needs of a diverse and ageing workforce. The amendments, which take effect in stages from 2025 through 2026, promote safety and health measures for solo self-employed workers, strengthen mental health measures in the workplace, improve the prevention of health disorders caused by chemical substances, and promote measures to prevent occupational accidents among older workers. The Japanese approach is notable for its integration of mental health into the statutory OSH framework and for its recognition that the boundaries of the employer’s responsibility are shifting as the nature of work changes.

Brazil’s regulatory framework for OSH is centred on the Consolidation of Labour Laws (CLT) and on a extensive body of regulatory standards (Normas Regulamentadoras) issued by the Ministry of Labour and Employment. These standards address everything from the use of personal protective equipment to the prevention of accidents in confined spaces, and they are enforced through a system of labour inspectors and prosecutors. Brazil’s environmental licensing system, by contrast, has been the subject of intense controversy. In 2025, the Chamber of Deputies and the Senate approved a General Environmental Licensing Bill that United Nations human rights experts warned would introduce “significant regressions” to Brazil’s environmental licensing system and threaten the rights to life, health, and a clean environment. President Lula da Silva subsequently vetoed sixty-three articles of the bill, a decision welcomed by the UN experts, but the episode illustrates the political disagreement of environmental regulation in a country with immense natural resources and powerful agricultural and industrial interests.

South Africa’s OSH regime is based on the Occupational Health and Safety Act of 1993, which imposes a general duty on employers to provide a safe and healthy working environment. The Act is supplemented by regulations on hazardous substances, noise, vibration, and other specific hazards. Environmental regulation is governed principally by the National Environmental Management Act of 1998 (NEMA), which imposes a general duty of care to prevent pollution and ecological degradation and requires environmental authorisation for listed activities. The two regimes overlap in important respects: both address the management of the environment to prevent hazards or risks to human health, and the mining sector, in particular, is subject to both OSH and environmental legislation.

In 2025, South Africa amended its OSH regulations to consolidate obligations previously contained in the Environmental Regulations for Workplaces, and it introduced new provisions on space, safety, and first-aid duties tied to explicit criminal penalties for non-compliance. The South African experience highlights the importance of regulatory integration: OSH and environmental regulation are not separate domains but overlapping systems of risk governance that must be coordinated if they are to be effective.

Part II: Environmental Regulation — From Permits to Markets to Disclosure

The United States: Deregulation, Federalism, and the Retreat from Climate Disclosure

The United States environmental regulatory system is built on a series of foundational statutes enacted in the 1970s: the Clean Air Act, the Clean Water Act, the Resource Conservation and Recovery Act, the Toxic Substances Control Act, and the Comprehensive Environmental Response, Compensation, and Liability Act (Superfund), among others. These statutes established a system of federal standard-setting, permitting, and enforcement, administered principally by the Environmental Protection Agency (EPA) and by state environmental agencies operating under federal delegation. The American model has traditionally been characterised by a combination of technology-based standards, health-based standards, and market-based mechanisms such as the acid rain trading programme established under the 1990 Clean Air Act Amendments.

The current period, however, has been marked by a pronounced deregulatory turn at the federal level. In March 2025, the EPA announced what it described as the “biggest deregulatory action in US history,” with potential implications for greenhouse gas reporting, particulate standards, and air toxics rules. The agency proposed to repeal Greenhouse Gas Reporting Program obligations for forty-six of forty-seven source categories and to suspend the remaining subpart. Separately, the Securities and Exchange Commission (SEC) proposed to rescind the climate-disclosure rules adopted in 2024 but never brought into effect, with the SEC Chair characterising the rules as a “serious overreach” of the agency’s authority. The EPA under Administrator Lee Zeldin has focused on weakening or eliminating regulations perceived as climate-friendly. The combined effect is a federal environmental policy that is retreating from climate-related regulation and from the expansion of disclosure obligations, even as the scientific case for action strengthens.

As with OSH, the retreat at the federal level has been accompanied by state-level activism. California’s climate disclosure regime, comprising Senate Bill 253 (Scope 1, 2, and 3 emissions reporting for entities with revenue over USD 1 billion) and Senate Bill 261 (climate-related financial risk disclosure for entities with revenue over USD 500 million), is now in force, with Scope 1 and 2 disclosures required in 2026. Colorado and New Jersey have proposed similar Scope 1, 2, and 3 reporting requirements, and several states are advancing heat-illness prevention standards that exceed federal requirements. The result is a fragmented environmental regulatory landscape in which the stringency of regulation depends heavily on the jurisdiction, and in which multinational firms must navigate a patchwork of federal, state, and local requirements.

The American experience thus illustrates a broader theme: in federal systems, the retreat of the central state does not necessarily mean the retreat of regulation altogether; it may instead mean its relocation to sub national jurisdictions with different political priorities.

The European Union: The Green Deal, the Omnibus, and the Politics of Simplification

The European Union has positioned itself as the global leader in environmental regulation through its European Green Deal, a comprehensive strategy adopted in 2019 with the goal of making Europe the first climate-neutral continent by 2050. The Green Deal has generated an extensive legislative programme, including the Corporate Sustainability Reporting Directive (CSRD), the Corporate Sustainability Due Diligence Directive (CSDDD), the EU Taxonomy Regulation, the Carbon Border Adjustment Mechanism (CBAM), the Industrial Emissions Directive (IED), the Batteries Regulation, the Deforestation Regulation (EUDR), and the Forced Labour Regulation. Together, these instruments represent an ambitious attempt to harness corporate governance, financial markets, and international trade in the service of environmental and social objectives.

The CSRD requires companies listed on an EU regulated market, as well as other large companies meeting specified thresholds, to report on sustainability matters in accordance with European Sustainability Reporting Standards (ESRS). The reporting obligations cover environmental matters, social matters and treatment of employees, respect for human rights, anti-corruption and bribery, and diversity on company boards, and they include a requirement to report Scope 1, 2, and 3 greenhouse gas emissions. The CSDDD goes further, requiring in-scope companies to conduct human rights and environmental due diligence across their value chains, identifying, preventing, mitigating, and accounting for adverse impacts. The EU Taxonomy provides a classification system for environmentally sustainable economic activities, intended to guide investment and to prevent green washing. The CBAM, which entered its transitional phase in 2023, imposes a carbon price on imports of certain carbon-intensive goods, aiming to prevent carbon leakage and to encourage decarbonisation in third countries. The Deforestation Regulation requires operators and traders to prove that relevant commodities and products placed on the EU market are deforestation-free and legally produced.

This ambitious programme, however, has encountered significant political resistance. In 2025, the European Commission presented its “Omnibus” simplification package, ostensibly to reduce administrative burdens on companies and to improve the coherence of the regulatory framework. The effect of the package, as approved by the European Parliament and Council, has been dramatic. The scope of the CSRD has been reduced by nearly 90 percent, and the scope of the CSDDD by 70 percent, leaving only a small fraction of the companies originally intended to be covered. The Omnibus agreement also deleted the requirement for companies to adopt climate transition plans under the CSDDD and reduced the depth of value chain assessment required, shifting from a comprehensive assessment of all suppliers to a focus on key risks and a more targeted approach to information requests from smaller partners. The EU Deforestation Regulation was delayed by one year, with large and medium-sized companies required to comply by 30 December 2025. The “Stop-the-Clock” Directive delayed reporting obligations by two years for wave 2 and wave 3 companies under the CSRD.

The Omnibus has been fiercely contested. Green and civil society groups, as well as some businesses, have argued that the backtracking puts environmental and human health at risk and undermines the EU’s credibility as a global leader. The European Economic and Social Committee has stressed that simplification measures should not bring about any direct or indirect impacts on the health and safety of workers, and it has called for greater harmonisation of reporting methodologies and interoperability of digital systems. The Omnibus thus encapsulates a central tension in contemporary environmental regulation: the tension between the ambition to regulate for long-term sustainability and the political pressure to reduce short-term compliance costs, particularly in a context of economic stagnation, geopolitical competition, and rising energy prices.

The United Kingdom: Divergence, Chemicals, and the Capacity Gap

The UK’s post-Brexit environmental regulatory trajectory has been shaped by two competing imperatives. On the one hand, the government has sought to demonstrate a commitment to environmental protection, legislating for net zero by 2050 and establishing the Office for Environmental Protection as a watchdog. On the other hand, it has pursued a deregulatory agenda in the name of growth and competitiveness, and it has struggled to replicate the institutional capacity that the UK previously derived from its membership of the EU.

The chemicals sector is the clearest illustration of the divergence. As noted above, the HSE, which serves as the regulator for UK REACH, has lost access to the European Chemicals Agency’s database and has seen its resources decline substantially. The UK government has reduced the fees that industry pays to the HSE for registering substances and applying for authorisations, a move that may ease costs for business but that also reduces the regulator’s revenue at a time when its capacity is already stretched. The statutory link with the EU has been removed, meaning that the HSE is no longer obliged to respond to all new EU hazard classifications within a legal time frame, and it will not need to explain any exclusions from the UK’s mandatory classification and labelling list. Divergence between the UK and the EU in mandatory hazard classifications has so far been minimal, but the institutional framework is now in place for divergence to accelerate, and the loss of data access and regulatory capacity raises questions about the UK’s ability to maintain standards independently.

The divergence extends beyond chemicals. The UK’s approach to environmental permitting, waste regulation, and air quality has evolved in ways that reflect domestic political priorities rather than EU obligations, and the absence of the EU’s infringement procedures and Court of Justice oversight means that the enforcement of environmental law depends more heavily on domestic judicial review and on the Office for Environmental Protection. The UK’s experience illustrates a broader point about the relationship between regulatory autonomy and regulatory capacity: the ability to diverge is not the same as the capacity to regulate well, and the loss of shared institutions and data infrastructure can impose substantial costs on both regulators and regulated entities.

Australia: EPBC Reform and the Quest for National Environmental Standards

Australia’s principal environmental statute is the Environment Protection and Biodiversity Conservation Act 1999 (EPBC Act), which establishes a federal approval process for actions that are likely to have a significant impact on matters of national environmental significance, such as World Heritage properties, Ramsar wetlands, threatened species and ecological communities, and migratory species. The EPBC Act has long been criticised for its complexity, delays, and lack of a coherent national standards framework, and a series of reviews—including a major independent review in 2020—recommended fundamental reform.

In 2025, the federal parliament passed a suite of EPBC Act reforms that represent the most significant overhaul of Australian environmental law in more than two decades. The key elements include the introduction of legally enforceable National Environmental Standards to guide decision-making and provide a consistent framework for assessing projects; the establishment of an independent National Environmental Protection Agency (NEPA) on 1 July 2026, responsible for compliance, enforcement, and oversight; reforms to Commonwealth-State bilateral agreements to ensure that accredited assessment and approval processes operate consistently with the National Environmental Standards; enhanced compliance and enforcement powers, including increased penalties for serious breaches, expanded investigative and audit powers, and new environment protection orders; the consolidation of three existing assessment pathways into a single streamlined framework, with expedited pathways for eligible projects; the introduction of bio regional plans to identify areas suitable for development and conservation; and the establishment of Environment Information Australia as an independent body responsible for collecting, managing, and reporting environmental data.

These reforms seek to reconcile two objectives that are often in tension: the desire for stronger environmental protection and the desire for faster, more certain approvals for economically significant projects. The introduction of National Environmental Standards is intended to provide a clear and consistent benchmark against which projects can be assessed, reducing the scope for ad hoc decision-making. The establishment of NEPA as an independent regulator is intended to strengthen enforcement and to depoliticise compliance. The retention of bilateral agreements with the states, however, means that the federal government will continue to rely on state-level assessment processes, and the effectiveness of the reforms will depend on the extent to which the National Environmental Standards are actually applied and enforced across jurisdictions. The Queensland Productivity Commission has been directed to conduct a public inquiry into the reforms, with a final report due by April 2027, a sign of the continuing disagreement over the balance between environmental protection and economic development.

China: Pollution Permits, Carbon Markets, and the Marketisation of Environmental Governance

China’s environmental regulatory system has evolved from a command-and-control model centred on emissions standards and administrative penalties toward a more hybrid system that incorporates market-based mechanisms, disclosure, and credit-based incentives. The Environmental Protection Law, revised in 2014 and effective from 1 January 2015, established the principle that governments at all levels must take effective measures to prevent and control pollution and public nuisances, and it introduced a system of pollution discharge permits, environmental impact assessment, and public interest litigation. The law also strengthened penalties for environmental violations, including the possibility of daily fines and the detention of responsible persons.

A distinctive feature of the Chinese approach is the use of five-year plans and central policy documents to set environmental targets and to coordinate action across ministries and levels of government. In May 2025, the Central Committee of the Communist Party and the State Council issued an opinion on improving the market-based allocation of resource and environmental factors, with the goal of establishing a basically complete carbon emissions trading system, a water rights trading system, and a pollution rights trading system by 2027. The opinion calls for more active trading markets, better price formation mechanisms, and more efficient allocation of resource and environmental factors, reflecting a strategic shift toward using market instruments to achieve environmental objectives. China’s national carbon market, which initially covered the power sector, is being expanded to include more industries, and the government is developing a system of environmental credit evaluation that will be used to differentiate regulatory treatment and to incentivise compliance.

The Chinese model is not without its tensions. The reliance on market mechanisms and credit systems coexists with a political system in which local officials are evaluated on both economic growth and environmental performance, and the balance between these objectives can shift over time. The central government’s commitment to environmental protection is articulated forcefully in policy documents, but implementation at the local level can be uneven, particularly in regions that are heavily dependent on carbon-intensive industries. Nevertheless, the direction of travel is clear: China is building a more sophisticated and diversified environmental regulatory system, one that combines traditional administrative controls with market instruments, information disclosure, and credit-based incentives.

India: Environmental Impact Assessment, Judicial Intervention, and the Struggle for Regulatory Coherence

India’s environmental regulatory framework rests on the Environment (Protection) Act of 1986, which provides the legal basis for a wide range of rules and notifications on air and water pollution, hazardous waste, biomedical waste, e-waste, plastic waste, and environmental impact assessment. The EIA Notification of 2006 requires certain categories of projects to obtain prior environmental clearance before construction, and it establishes a process of screening, scoping, public consultation, and appraisal. Projects are classified as Category A (appraised at the central level) or Category B (appraised at the state level), depending on their potential environmental impacts.

The Indian environmental regulatory system has been shaped to an unusual degree by judicial intervention. In February 2025, the Supreme Court stayed a notification that had exempted certain categories of projects from the requirements of the EIA Notification, and in May 2025, in the case of Vanashakti v Union of India, the Court struck down a 2017 notification and a 2021 standard operating procedure, holding that the EIA Notification of 2006 is intended to protect the environment and prevent pollution and that exemptions cannot be granted without adequate justification. The Court’s interventions reflect a broader pattern of judicial activism in Indian environmental law, in which the courts have often acted as a check on executive discretion and as a forum for public interest litigation. At the same time, the executive has continued to propose amendments to the EIA regime, including a 2025 draft notification to exempt Common Effluent Treatment Plants and Common Municipal Solid Waste Management Facilities from prior environmental clearance, and the Environment Audit Rules 2025, which create a cadre of certified third-party environmental auditors to undertake on-site verification and audit of projects.

The Indian experience illustrates the importance of institutional checks and balances in environmental regulation. The EIA process is not merely a technical exercise; it is a site of disagreement among developers, regulators, affected communities, and the judiciary. The Supreme Court’s willingness to strike down exemptions has reinforced the legal standing of environmental protection, but it has also highlighted the fragility of regulatory standards when they depend on executive discretion. The challenge for India is to build a system of environmental governance that is both efficient and accountable, and that can withstand the pressures of rapid industrialisation and urbanisation.

Brazil and South Africa: Licensing, Rights, and the Politics of Environmental Protection

Brazil’s environmental licensing system has been one of the most contested areas of environmental policy in Latin America. The country’s licensing regime, which originated in the 1980s and was consolidated by the National Environmental Policy Act of 1981 and subsequent regulations, requires environmental impact assessment and licensing for projects with significant environmental impacts. The system has been criticised by industry for being slow and unpredictable, and by environmentalists for being insufficiently protective. In 2025, the Brazilian Congress approved a General Environmental Licensing Bill that UN human rights experts warned would introduce significant regressions, including the expansion of exemptions and self-licensing, and would threaten the rights to life, health, an adequate standard of living, and a clean environment. President Lula da Silva vetoed sixty-three articles of the bill, a decision that the UN experts welcomed, but the episode demonstrates the intense political disagreement surrounding environmental regulation in a country with a large agricultural sector, extensive mineral resources, and a globally significant portion of the Amazon rain forest. Brazil’s Supreme Court has also been involved in adjudicating the constitutionality of the licensing law, and the outcome of that litigation will shape the future of environmental governance in the country.

South Africa’s environmental regulatory framework is anchored in NEMA, which establishes a general duty of care and a set of principles for environmental management, including sustainable development, the precautionary principle, and the polluter-pays principle. NEMA requires environmental authorisation for listed activities and provides for a range of compliance and enforcement mechanisms. The OSH Act and NEMA overlap in their concern for human health and environmental protection, and the mining sector is subject to a separate regime under the Mineral and Petroleum Resources Development Act. In 2025, South Africa amended its OSH regulations to consolidate environmental health obligations and to introduce new provisions on space, safety, and first aid, with explicit criminal penalties for non-compliance. The South African experience underscores the importance of regulatory integration across OSH and environmental domains, and it illustrates the challenges that developing economies face in building enforcement capacity and in balancing environmental protection with economic development.

Part III: The Convergence Agenda — Global Trends Reshaping HSE Regulation

Mandatory Climate Disclosure: From Voluntary Frameworks to Binding Law

One of the most significant trends in environmental regulation over the past decade has been the shift from voluntary climate disclosure to mandatory reporting. The Task Force on Climate-related Financial Disclosures (TCFD), established by the Financial Stability Board in 2015, provided a widely adopted framework for disclosing climate-related risks and opportunities, organised around governance, strategy, risk management, and metrics and targets. The International Sustainability Standards Board (ISSB), created in 2021, has built on the TCFD framework to develop global baseline standards—MFRS S1 and MFRS S2—for sustainability and climate-related disclosure. As of June 2025, thirty-six jurisdictions had adopted or otherwise used the ISSB standards or were in the process of finalising steps toward introducing them.

The adoption of mandatory climate disclosure is uneven but expanding. In the EU, the CSRD requires disclosure in accordance with ESRS, which are aligned with the ISSB standards. In Australia, mandatory climate-related financial disclosures commenced on 1 January 2025, with a phased approach for different categories of entities.

In New Zealand, climate-related disclosures are mandatory for certain large entities, and the government announced changes to the regime in October 2025. In Brazil, the Comissão de Valores Mobiliários (CUM) Resolution 193 requires publicly traded companies, securitisation companies, and investment funds to disclose climate-related risks following ISSB standards, with mandatory disclosure beginning on 1 January 2026.

In California, Senate Bills 253 and 261 impose Scope 1, 2, and 3 emissions reporting and climate-related financial risk disclosure on large entities doing business in the state. In China, the Ministry of Finance has issued draft Corporate Sustainability Disclosure Standards that largely follow the ISSB, with plans to finalise the standards by 2027 and to phase them in once adopted.

The United States is the notable exception to this trend at the federal level. The SEC’s climate-disclosure rule, adopted in 2024, was stayed and subsequently proposed for rescission, and the EPA has proposed to repeal its greenhouse gas reporting programme for most source categories. The American retreat from federal climate disclosure stands in contrast to the trajectory in most other major economies, and it reinforces the fragmented nature of the US regulatory landscape, where state-level regimes such as California’s continue to impose substantial disclosure obligations.

The trend toward mandatory climate disclosure has several implications. First, it increases the quantity and quality of information available to investors, regulators, and the public, potentially improving market discipline and accountability. Second, it imposes significant compliance costs on companies, particularly those with complex global supply chains, and it requires the development of new systems for data collection, verification, and assurance. Third, it creates pressure for international harmonisation, as companies seek to avoid duplicate reporting requirements across jurisdictions. The ISSB standards are intended to serve as a global baseline, but the EU’s ESRS are more extensive, and the coexistence of multiple frameworks creates the risk of fragmentation even as the broad direction of travel is toward mandatory disclosure.

Supply Chain Due Diligence: Extraterritorial Reach and the Governance of Global Value Chains

A second major trend is the rise of supply chain due diligence legislation, which requires companies to identify, prevent, and mitigate adverse human rights and environmental impacts in their value chains. The EU’s CSDDD is the most ambitious instrument of this kind, but it is part of a broader movement that includes the German Supply Chain Due Diligence Act (LkSG), the French Duty of Vigilance Law, the Dutch Supply Chain Due Diligence Law, the Norwegian Transparency Act, the Swiss Due Diligence Ordinance, and the UK Modern Slavery Act. The UK government has recently released new statutory guidance on the Modern Slavery Act that significantly raises the bar on what a good modern slavery statement looks like under section 54.

The CSDDD, as originally adopted, would have required in-scope companies to conduct due diligence across their entire value chain, to adopt climate transition plans, and to establish grievance mechanisms for affected stakeholders. The Omnibus amendments have reduced its scope and softened its requirements, but the directive nonetheless represents a significant expansion of corporate accountability. The German LkSG, which applies to companies with at least 3,000 employees (and, from 2024, 1,000 employees), requires companies to establish a risk management system, conduct regular risk analyses, adopt preventive and remedial measures, and report annually to the German federal supervisory authority. The French Duty of Vigilance Law imposes similar obligations on large French companies, and it has been used by NGOs and affected communities to bring lawsuits against companies for alleged failures to prevent human rights and environmental harms.

The extraterritorial reach of these laws is a defining feature. The EU Deforestation Regulation requires exporters to the EU to prove that their products are not linked to deforestation, regardless of where the deforestation occurred. The US Uyghur Forced Labor Prevention Act prohibits the importation of goods produced wholly or in part in the Xinjiang Uyghur Autonomous Region, and it places the burden on importers to demonstrate that their supply chains are free from forced labour. These measures extend the regulatory reach of importing jurisdictions into the production processes of exporting countries, creating a new form of trade-related environmental and social governance. For multinational enterprises, the challenge is to build due diligence systems that can operate across diverse legal, cultural, and institutional contexts, and to ensure that their supply chain governance is robust enough to withstand scrutiny from regulators, investors, civil society, and consumers.

The Integration of ESG and EHS

A third trend is the increasing integration of environmental, social, and governance (ESG) considerations with traditional environmental, health, and safety (EHS) functions. Historically, EHS has been concerned with compliance with OSH and environmental regulations, while ESG has been concerned with the broader sustainability performance of the enterprise and its relationships with investors, communities, and other stakeholders. The two domains have often been managed separately, with EHS reporting to the chief operating officer or the head of manufacturing, and ESG reporting to the chief financial officer or the head of corporate affairs.

This separation is breaking down. The ISSB’s sectoral standards, which are integrated into the MFRS system, include topics such as water management and workforce health and safety, recognising that these issues are material to investors and to long-term value creation. The CSRD’s ESRS include disclosure requirements on working conditions, health and safety, and respect for human rights, alongside environmental matters. The CSDDD requires companies to address both human rights and environmental impacts in their due diligence processes. Regulatory bodies are increasingly working to harmonise standards and improve corporate sustainability transparency, and the scope of ESG and EHS regulations continues to expand across regions and sectors.

The integration of ESG and EHS has practical implications for corporate governance. It requires the development of integrated data systems that can capture health, safety, environmental, and social performance across the value chain. It requires the alignment of risk management frameworks so that OSH and environmental risks are assessed alongside climate, human rights, and governance risks. And it requires a shift in organisational culture, from a compliance-oriented approach to OSH and environment to a more strategic approach that recognises these issues as integral to business resilience and long-term value creation.

Digitisation, Artificial Intelligence, and the Future of Regulatory Oversight

A fourth trend is the digitisation of regulatory oversight and the emergence of artificial intelligence as a regulated domain in its own right. Regulators are increasingly using digital tools for data collection, risk profiling, and enforcement targeting. The Chinese social credit system, for example, uses environmental and safety compliance data to rate enterprises and to differentiate regulatory treatment. The EU’s CSRD and the ISSB standards require digital, machine-readable reporting, which facilitates the automated analysis of corporate sustainability data. Environmental sensors, satellite monitoring, and remote sensing are being used to detect pollution and deforestation in near-real time, expanding the scope and precision of regulatory oversight.

At the same time, AI is itself becoming a subject of regulation, with significant implications for OSH and EHS. The EU Artificial Intelligence Act, which entered into force in August 2024, introduces a risk-based framework for AI systems, with prohibitions on “unacceptable risk” systems, AI literacy requirements from February 2025, full application of most provisions from August 2026, and an extended deadline for high-risk AI systems embedded in products from August 2027. Employers using AI in workplace decision-making must ensure staff AI literacy and compliance with strict governance rules for high-risk systems. In the United States, without a federal AI law, states are introducing targeted measures: Texas’s Responsible AI Governance Act prohibits discriminatory AI, and California’s Senate Bill 7 would ban reliance on AI for key employment decisions without human oversight and restrict predictive AI use. In Asia-Pacific, Japan has adopted its first AI law, establishing a national AI strategy centre and mandating cooperation with investigations and adherence to national principles, while Hong Kong has expanded its Building Energy Efficiency Ordinance to cover data centres.

The regulation of AI intersects with OSH and EHS in several ways. AI systems used in workplace monitoring, productivity management, and hiring can affect workers’ privacy, autonomy, and mental health, raising psychosocial risk concerns. AI systems used in industrial processes can enhance safety through predictive maintenance and early warning systems, but they can also introduce new risks if they are poorly designed or inadequately governed. The challenge for regulators is to develop frameworks that encourage innovation while ensuring that AI systems are safe, transparent, and accountable, and that they do not undermine the protections that OSH and environmental law are designed to provide.

Psychosocial Risks and the Right to Disconnect

A fifth trend is the growing recognition of psychosocial risks as a legitimate concern of OSH regulation. Psychosocial risks—including work-related stress, bullying, harassment, violence, and the blurring of boundaries between work and private life—have been identified as emerging risks in the EU, and the European Parliament has called on the Commission to propose a directive on psychosocial risks and well-being at work. The EU Framework Directive already covers all occupational risks, including psychological risks, but the implementation reports and the European Survey of Enterprises on New and Emerging Risks (ESENER) provide evidence that the existing framework has not been sufficient. The European Economic and Social Committee has urged the Commission to propose a directive that would establish binding obligations to identify psychosocial risks through appropriate risk assessments, with the participation of workers and trade unions.

The right to disconnect is one manifestation of this broader concern. France and Italy have introduced comprehensive legislative frameworks, while other countries, such as Romania and Japan, continue to rely primarily on working-time limits, and Canada is moving towards a mixed federal-provincial model. Australia’s new right to disconnect, effective since August 2024 for larger employers, allows employees to refuse to monitor, read, or respond to work-related communications outside working hours, subject to reasonableness considerations. At the EU level, the Commission launched a consultation in April 2024 on fair remote work and the right to disconnect.

The regulation of psychosocial risks represents a significant expansion of the OSH domain. It moves OSH beyond the traditional concern with physical hazards—chemicals, machinery, noise, and ergonomics—to encompass the organisation of work, the quality of working relationships, and the psychological contract between employer and employee. This expansion poses challenges for regulators, employers, and workers alike. It requires new forms of risk assessment that can capture the subjective experience of work, new forms of worker participation that can give voice to concerns that may be difficult to articulate, and new forms of enforcement that can address organisational failures that may not manifest in immediate physical harm. It also raises questions about the boundaries of employer responsibility, particularly in an era of remote work, digital communication, and fragmented employment relationships.

The Retreat from Regulation and the Politics of Retrenchment

A sixth trend, and one that cuts against the others, is the retreat from regulation in several major jurisdictions. In the United States, the federal government has moved decisively away from enforcement-based OSH regulation and from climate-related environmental regulation, devolving significant regulatory energy to states and to voluntary programmes. In the EU, the Omnibus package has reduced the scope of the CSRD and CSDDD by dramatic margins and has delayed the implementation of key sustainability obligations. In the UK, the HSE’s resources have declined substantially, and the government has introduced a growth duty that critics argue compromises the regulator’s independence. In Brazil, the environmental licensing reform was significantly rolled back by presidential vetoes, but the underlying political pressures for loosening environmental controls remain strong.

The retreat from regulation is driven by several factors. Economic stagnation, rising energy costs, and geopolitical competition have created pressure on governments to reduce regulatory burdens on business. The anti-ESG backlash, particularly in the United States, has politicised sustainability reporting and has made it a target for ideological opposition. The complexity and cost of compliance with overlapping reporting requirements have generated legitimate concerns about administrative burden, particularly for small and medium-sized enterprises. And the political cycle in democratic countries creates incentives for governments to prioritise short-term economic growth over long-term environmental and social objectives.

Yet the retreat is not uniform, and it is not uncontested. In the United States, state-level action on climate disclosure and heat-illness prevention has partially offset federal retreat. In the EU, the Omnibus has been criticised by civil society, trade unions, and some businesses, and the European Economic and Social Committee has insisted that simplification must not come at the expense of worker health and safety. In Australia, the EPBC reforms have strengthened environmental standards and created an independent regulator, even as they seek to streamline approvals. In China, the direction of travel remains toward stronger environmental and safety regulation, albeit through a different institutional logic than in liberal democracies. The global picture is therefore one of divergence and disagreement rather than a uniform retreat, with the balance of regulatory ambition depending on the specific jurisdiction, the political complexion of its government, and the strength of its civil society and social partners.

Conclusion: Implications for Multinational Enterprises and the Future of HSE Regulation

The comparative analysis presented in this article reveals a global regulatory landscape that is neither converging toward a single model nor fragmenting into incoherence. It is, rather, a landscape of overlapping regimes, shared principles, and persistent differences. The foundational principles of OSH regulation—the general duty of care, the hierarchy of controls, risk assessment, worker participation, and prevention—are widely shared across jurisdictions, even as they are implemented through different legal instruments and enforced through different institutional arrangements. The foundational principles of environmental regulation—pollution prevention, the polluter-pays principle, precaution, and sustainable development—are similarly widespread, even as the choice of policy instruments varies from command-and-control permitting to market-based trading to disclosure and due diligence.

For multinational enterprises, this landscape presents both challenges and opportunities. The challenges are obvious: regulatory fragmentation increases compliance costs, creates legal risk, and requires sophisticated systems for tracking and responding to developments across multiple jurisdictions. The extraterritorial reach of supply chain due diligence and deforestation regulations means that companies can no longer assume that compliance with local law is sufficient; they must also meet the standards imposed by their major markets. The retreat from regulation in some jurisdictions does not necessarily reduce compliance burdens, because state-level and sub national regulation, as well as investor and consumer expectations, may fill the gap. The rise of mandatory climate disclosure and the integration of ESG and EHS create new reporting obligations and new demands for data, assurance, and governance.

The opportunities are equally significant. Companies that invest in robust HSE management systems, that integrate OSH and environmental considerations into their core business strategy, and that build resilient supply chain due diligence processes are better positioned to manage regulatory risk, to attract investment, and to maintain their social licence to operate. The harmonisation of reporting standards through the ISSB and the development of digital, machine-readable reporting formats create opportunities for efficiency and comparability. The recognition of psychosocial risks and the right to disconnect create opportunities for employers to differentiate themselves as responsible employers in a competitive labour market. And the shift toward market-based environmental instruments, such as carbon trading and environmental credit systems, creates opportunities for companies that are able to innovate and to capture the value of environmental performance.

The future of HSE regulation will be shaped by several forces. The first is the trajectory of the climate crisis, which will continue to drive the development of disclosure requirements, carbon pricing mechanisms, and adaptation obligations. The second is the evolution of work, including remote work, platform work, and automation, which will require regulators to rethink the boundaries of the employment relationship and the scope of OSH protection. The third is the development of artificial intelligence, which will create new risks and new opportunities for regulatory oversight. The fourth is the politics of regulation itself, which will determine whether the current period of retrenchment in some jurisdictions is a temporary pause or a lasting shift in the balance between public protection and private autonomy.

What is clear is that the era of purely national regulation, in which companies could manage compliance jurisdiction by jurisdiction, is over. The most significant regulatory developments of the past decade—the CSRD, the CSDDD, the CBAM, the EUDR, the ISSB standards, and the various supply chain due diligence laws—are all extraterritorial in their reach and global in their ambition. They reflect a recognition that the most pressing health, safety, and environmental challenges are transnational in nature and cannot be addressed through national regulation alone. They also reflect a recognition that the private sector, and particularly large multinational enterprises, have the capacity and the responsibility to contribute to the solution. The challenge for the coming decade will be to build a global regulatory architecture that is coherent enough to be effective, flexible enough to accommodate legitimate jurisdictional differences, and robust enough to withstand the political and economic pressures that will inevitably arise. That is a challenge not only for regulators but for businesses, workers, civil society, and the international community as a whole.

What Businesses Need to Comply with the Workplace (Health, Safety and Welfare) Regulations?

The short answer

Almost every business that employs people, or controls premises where people work, must comply with the Workplace (Health, Safety and Welfare) Regulations 1992 (SI 1992/3004). The main exceptions are construction sites, ships and underground mineral extraction, with lighter requirements for temporary, farming and forestry sites.

The Regulations set the basics of a safe and healthy working environment: ventilation, temperature, lighting, cleanliness, space, workstations, floors, doors, windows and traffic routes, plus welfare facilities such as toilets, washing facilities, drinking water and rest areas. This guide explains who must comply, what counts as a workplace, and what each part of the Regulations asks of you.

The Regulations apply in Great Britain. Northern Ireland and the Republic of Ireland have their own equivalent rules, covered at the end of this article.

Who has to comply?

Regulation 4 puts the duty on two groups: employers, and anyone else who has control of a workplace.

  • Employers. Every employer must ensure that each workplace under their control, where any of their employees work, meets the Regulations.
  • Anyone with control, to any extent. This covers a person who controls a workplace in connection with a trade, business or other undertaking, whether or not it is run for profit. Landlords, building owners and managing agents are caught, but only for the matters within their control, such as shared toilets, stairs, lobbies and ventilation plant.
  • Tenants. A tenant employer is responsible for the workplace they control. Toilets and other facilities can be provided by a landlord or a neighbouring business, but the employer remains responsible for making sure they meet the standard.
  • Self-employed people. The “control” duty does not apply to a self-employed person in respect of their own work or the work of their partners. A sole trader who employs staff is still an employer and is covered.

If your employees work at premises you do not control, such as a client’s site, these Regulations do not place a duty on you for that site. HSE guidance says you should still take the steps needed under your general health and safety duties to make sure your people have access to toilets and washing facilities.

What counts as a workplace?

The Regulations apply to every workplace unless regulation 3 says otherwise. Under regulation 2, a workplace is any premises, or part of premises, that is not domestic premises and is made available to a person as a place of work. That includes any place within the premises the person can access while at work, and any room, lobby, corridor, staircase or other route used to reach it or where facilities are provided for it.

In practice that means:

  • “Premises” includes outdoor places, not just buildings.
  • Domestic premises are outside the Regulations. A private dwelling is not a workplace, so people working from home are not covered. Hotels, nursing homes and the kitchens of hostels or sheltered accommodation are covered.
  • Shared areas count. Common parts of shared buildings and private roads and paths on industrial estates and business parks are workplaces.
  • New work on an existing building must comply. A modification, extension or conversion must meet the relevant requirements as soon as it is in use, and regulation 4A requires any building used as a workplace to have stability and solidity appropriate to its use.

Exclusions and lighter requirements

SituationWhat applies
ShipsExcluded, except regulations 8(1) and (3) (lighting) and 12(1) and (3) (floors and traffic routes) for repair, refit and similar operations in shipyards and dock premises
Construction sites where the only activity is construction workExcluded, except regulations 18 (doors and gates) and 25A (disabled persons). Indoors, regulations 7(1A), 12, 14, 15, 16, 18, 19 and 26(1) also apply
Below ground at a mineExcluded, except regulation 20 (toilets), applied so far as reasonably practicable for “readily accessible”
QuarriesRegulation 12 applies only to floors and traffic routes inside buildings; regulation 20 as modified above
Aircraft, trains, trailers and licensed vehicles used for transportRegulations 5 to 12 and 14 to 25 do not apply. Regulation 13 applies only when stationary inside a workplace and not on a public road
Outdoor farming and forestry workplaces away from the main buildingsRegulations 5 to 19 and 23 to 25 do not apply. Regulations 20 to 22 (toilets, washing, drinking water) apply so far as reasonably practicable
Temporary work sitesRegulations 20 to 25 (welfare facilities) apply so far as reasonably practicable

If construction work is under way inside an otherwise normal workplace, HSE guidance treats it as a construction site, and so excluded, only if it is fenced off. Otherwise both these Regulations and the Construction (Design and Management) Regulations 2015 apply.

What the Regulations require

Regulations 4A to 25A set the standards. Many use words like “suitable”, “sufficient” or “reasonable”, and regulation 2(3) says these must be judged for everyone using the workplace, including disabled people.

RegTopicCore duty
4AStability and solidityA building used as a workplace must have stability and solidity appropriate to its use
5MaintenanceKeep the workplace, and equipment, devices and systems that prevent or reduce hazards, in efficient working order and good repair, with a suitable maintenance system where appropriate
6VentilationEnclosed workplaces need a sufficient supply of fresh or purified air, with a warning device if ventilation plant fails where this matters for health or safety
7TemperatureKeep indoor temperatures reasonable during working hours, insulate where necessary, avoid excessive sunlight effects, avoid harmful heating fumes and provide enough thermometers
8LightingSuitable and sufficient lighting, natural where reasonably practicable, plus emergency lighting where a lighting failure would expose people to danger
9Cleanliness and wasteKeep the workplace, furniture and fittings sufficiently clean, make surfaces cleanable and keep waste in suitable receptacles
10Room dimensions and spaceEvery workroom needs enough floor area, height and unoccupied space for health, safety and welfare
11Workstations and seatingWorkstations suitable for the person and the work, outdoor workstations protected where practicable, and a suitable seat where work can be done sitting
12Floors and traffic routesSuitable surfaces with no hazardous holes, slopes or uneven or slippery areas, effective drainage where needed, kept free of obstructions, handrails on staircases
13Falls or falling objectsTanks, pits and similar structures holding a dangerous substance must be securely covered or fenced where practicable. Work at height is covered by the Work at Height Regulations 2005
14Windows and glazed doors and wallsSafety material or protection against breakage where necessary, and marked so they are visible
15Windows, skylights and ventilatorsMust be possible to open, close and adjust safely, and not create a hazard when open
16Cleaning windowsWindows and skylights must be designed so they can be cleaned safely
17Traffic routesOrganise the workplace so people and vehicles can move safely, with suitable, sufficient routes, separation of pedestrians and vehicles and signs where necessary
18Doors and gatesSuitably constructed with safety devices, including anti-derailment, anti-fall-back and anti-trap features for sliding, upward-opening and powered doors
19Escalators and moving walkwaysMust function safely, have necessary safety devices and an easily accessible emergency stop
20Sanitary conveniencesSuitable and sufficient toilets at readily accessible places, adequately ventilated and lit, kept clean, with separate rooms for men and women unless each is a lockable single room
21Washing facilitiesSuitable and sufficient facilities near toilets and changing rooms, with hot and cold or warm running water, soap and drying means, and showers where the work or health reasons require
22Drinking waterAn adequate supply of wholesome drinking water, readily accessible, with cups unless it is a drinking jet
23Accommodation for clothingSuitable and sufficient space for clothing not worn at work and for special work clothing
24Changing facilitiesWhere special work clothing is worn and people cannot reasonably change elsewhere, provide suitable and sufficient changing facilities
25Rest and eating facilitiesSuitable and sufficient rest facilities, eating facilities where meals are regularly eaten, protection for non-smokers, seating, and rest facilities for pregnant women and nursing mothers
25ADisabled personsParts of the workplace used directly by disabled people, including doors, passageways, stairs, showers, washbasins, lavatories and workstations, must be organised to take account of them

The numbers: minimum figures in HSE’s Approved Code of Practice

The Regulations themselves rarely give figures. The Approved Code of Practice (ACOP) L24 does, and these are the benchmarks inspectors will expect you to meet or beat.

TopicACOP benchmark
Minimum workroom temperatureNormally at least 16°C. At least 13°C if the work involves rigorous physical effort
Space per personAt least 11 cubic metres, ignoring any ceiling height above 3 m
Floor area for 11 m³About 4.6 m² with a 2.4 m ceiling, or about 3.7 m² with a ceiling of 3 m or higher
Fresh air supplyShould not normally fall below 5 to 8 litres per second per occupant

The temperature and space figures are starting points, not guarantees of compliance. The ACOP says 11 m³ may be too little if furniture and equipment take up much of the room, and that 16°C may not give reasonable comfort in every setting. The 11 m³ figure does not apply to retail kiosks, attendants’ shelters, machine cabs or rooms used for meetings and lectures.

Toilets and washbasins

Where men and women both work, the ACOP’s minimum is:

People at workToiletsWashbasins
1 to 511
6 to 2522
26 to 5033
51 to 7544
76 to 10055

Add one toilet and one washbasin for every 25 people (or part of 25) above 100. Where toilets are used only by men, the ACOP gives an alternative table that includes urinals:

Men at workToiletsUrinals
1 to 1511
16 to 3021
31 to 4522
46 to 6032
61 to 7533
76 to 9043
91 to 10044

For men-only provision above 100, add one toilet per 50 men (or part of 50), with at least as many extra urinals.

If you separate groups, such as office and manual staff, calculate for each group. For dirty work that heavily soils the face, hands and forearms, the ACOP raises the washbasin figure to one per 10 people (or part of 10) up to 50 people, then one more per 20 people (or part of 20). If the public also uses your facilities, add more so workers are not kept waiting.

Special situations businesses often ask about

  • Visiting delivery drivers. HSE has said it is updating its guidance to make clear that drivers must have access to welfare facilities at the premises they visit for work, drawing on regulations 20 and 21. If you receive deliveries, check what your site offers.
  • Facilities that are not on your premises. Toilets and washing facilities do not have to be inside your own workplace, and you can use ones provided by a landlord or neighbour. They must still meet the standard and be available whenever your people are expected to be at work. Public facilities are acceptable only as a last resort.
  • Temporary and remote sites. For temporary work sites the welfare duties apply so far as reasonably practicable. For remote workplaces without running water or a nearby sewer, the ACOP expects enough water for washing and enough chemical toilets, emptied and recharged at suitable intervals.
  • Home workers. Private dwellings are not workplaces under these Regulations, so they do not cover people working from home. Your wider duties under the Health and Safety at Work etc. Act 1974 still apply.
  • Disabled workers. Facilities, workstations and routes must be suitable for disabled people who use them, and regulation 25A requires the relevant parts of the workplace to be organised with them in mind.
  • Pregnant women and nursing mothers. Regulation 25(4) requires suitable rest facilities, which the ACOP says should be conveniently placed for toilets and, where necessary, allow a person to lie down.
  • Smoking. Where smoking is permitted, non-smokers must be protected from discomfort from tobacco smoke in rest areas.

How compliance is judged

The ACOP has special legal status. Failure to follow the ACOP is not an offence in itself. But if you are prosecuted for breaching health and safety law and did not follow the relevant ACOP provisions, you must show you complied in some other way, or a court will find you at fault. Following the ACOP’s advice is enough to comply on the matters it covers.

Some duties are qualified. Several regulations apply only “so far as is reasonably practicable” or “where necessary for reasons of health or safety. Others, such as keeping workplaces sufficiently clean or providing suitable and sufficient toilets, are unqualified.

Risk assessment drives the detail. The Management of Health and Safety at Work Regulations 1999 require employers and the self-employed to assess risks. HSE expects you to review your arrangements as the workplace changes, and to consult employees in good time on health and safety matters.

Building Regulations set a baseline. The ACOP says the standards in the Building Regulations should be met when complying with the Workplace Regulations, unless a higher standard is needed to protect health, safety and welfare so far as is reasonably practicable.

Employer checking welfare facilities and workstations during a workplace inspection

Is your workplace compliant?

A practical compliance checklist

Use this as a starting point for a workplace walk-round. It is a prompt, not a substitute for a risk assessment of your own premises.

  • Confirm who controls each part of the premises (you, a landlord, a managing agent) and who is responsible for what
  • Check that no regulation 3 exclusion applies, and note any partial exclusions such as temporary sites
  • Put a maintenance system in place for ventilation, emergency lighting, powered doors, fencing, escalators and similar equipment, and keep records
  • Measure temperatures near workstations and provide thermometers, and plan for hot and cold spells
  • Check lighting, including emergency lighting, and keep windows, lights and fittings clean
  • Compare headcount against floor area and the 11 m³ per person benchmark
  • Inspect floors, stairs and handrails, and set up routines for spills, obstructions, snow and ice
  • Review pedestrian and vehicle routes, crossing points, signs and loading bays
  • Check glazing, doors and gates, and window opening and cleaning arrangements
  • Count toilets and washbasins against the ACOP tables and confirm they are clean, lit, ventilated and private
  • Provide drinking water, clothing storage, changing facilities and rest and eating areas where needed
  • Review access and facilities for disabled workers, and rest facilities for pregnant and nursing workers
  • Agree who cleans shared facilities, and consult employees on what works in practice
  • Review everything when the workplace, headcount or work activity changes

Frequently asked questions

Do the Workplace Regulations apply to small businesses and offices?

Yes. They apply to every workplace except those excluded by regulation 3, and there is no minimum size or number of employees. Shops, offices, schools, hospitals, hotels and places of entertainment are all covered.

Do they apply to people who work from home?

No. Domestic premises are outside the definition of a workplace, so homeworkers are not covered by these Regulations. Your general duties as an employer still apply.

What is the minimum temperature in a workplace?

The Regulations require a “reasonable” temperature indoors during working hours. The ACOP says it should normally be at least 16°C, or 13°C where the work involves rigorous physical effort. The Regulations do not set a fixed maximum, so the question is whether conditions are reasonable.

How many toilets must a workplace have?

The law requires “suitable and sufficient” toilets. The ACOP gives minimums, for example two toilets and two washbasins for 6 to 25 people, and five of each for 76 to 100, with one more of each for every 25 people above that.

Does the landlord or the tenant comply?

Both, for the parts they control. A tenant employer is responsible for the workplace it controls. A landlord or managing agent must make sure common parts and shared facilities within their control meet the standard.

Do the Regulations apply on construction sites?

Mostly not. Construction sites where the only activity is construction work are excluded, apart from regulations 18 and 25A, and some further regulations indoors. Welfare on construction sites is dealt with under the Construction (Design and Management) Regulations 2015.

Northern Ireland and the Republic of Ireland

The 1992 Regulations apply in England, Scotland and Wales. Northern Ireland has its own equivalent, the Workplace (Health, Safety and Welfare) Regulations (Northern Ireland) 1993, which follow a similar structure. In the Republic of Ireland, workplace requirements, including welfare facilities, sit in Part 2, Chapter 1 of the Safety, Health and Welfare at Work (General Application) Regulations 2007 (S.I. No. 299 of 2007). If you operate across several jurisdictions, check the rules for each site.

If you require help identifying legislation applicable to your workplace, please contact one of our team.

This article is general guidance, not legal advice. Check the current legislation and HSE guidance for your circumstances.

UK and EU Health and Safety Law: A Post-Brexit Comparison

Introduction

UK and EU health and safety law remain far more alike than different, but since Brexit they have started to drift apart in how rules are made, updated and enforced. Both systems share one core idea: employers must identify workplace risks and control them. They reach that idea by different legal routes, and the routes are now diverging.

For decades the two were effectively one system. Britain’s modern framework, set by the Health and Safety at Work etc. Act 1974 (HSWA), was built on the Robens Report of 1972. It was enacted in 1974, a year after the UK joined the European Economic Community, but it was a home-grown design. From 1992 onwards, much of its detailed regulation was written to implement EU directives. The famous “six pack” of 1992 regulations, and later rules on work at height, construction, asbestos and display screen equipment, all trace back to Brussels. The EU’s own foundation is the Framework Directive 89/391/EEC, which set common principles for all member states in 1989.

The UK left the EU on 31 January 2020, and the transition period ended on 31 December 2020. Since then Great Britain has been free to rewrite its rules, and Northern Ireland has followed a different path under the Windsor Framework. Meanwhile the EU has kept legislating, adding new rules on machinery, asbestos, chemicals, artificial intelligence and platform work. For a business, a consultant or a safety professional working across the Channel, the practical question is no longer “are the rules the same?” but “where do they still match, and where must I check twice?”

This article compares the two systems in five steps:

  1. The foundations: the UK’s goal-setting model and the EU’s directive model.
  2. What Brexit changed legally, including retained EU law and Northern Ireland.
  3. How regulators and enforcement differ.
  4. A topic-by-topic comparison of the main workplace regimes.
  5. Where the systems diverge, where they still align, and a closing summary.

A note on terms. UK” is used where the point applies across the whole country, and “Great Britain” (GB) or “Northern Ireland” (NI) where it does not, because health and safety is devolved in Northern Ireland and enforced by a separate regulator. “EU” means the Union-level rules, which member states must transpose into national law. Member states differ from one another, so any statement about “the EU” is necessarily a generalisation. This is general information, not legal advice, and the position was checked against public sources in October 2026.

UK and EU Health and Safety Law

Two foundations: goal-setting statute versus directive framework

The UK model rests on a single enabling statute, while the EU model rests on a treaty power and a set of directives that member states must turn into national law. That structural difference explains most of the other contrasts in this article.

The UK model: the 1974 Act

The Health and Safety at Work etc. Act 1974 is an “enabling” Act. It sets broad duties and then lets ministers make detailed regulations under it. Employers must ensure the health, safety and welfare of their employees (section 2) and of other people affected by their work (section 3). Duties also fall on the self-employed, on those who design, make or supply articles and substances (section 6), and on employees themselves (section 7).

Most of these duties are qualified by the phrase “so far as is reasonably practicable”. That wording lets a duty-holder weigh the size of a risk against the cost, time and trouble of removing it. It is the signature of the British approach: the law states the outcome and leaves the method to the duty-holder, with the burden of proving that more could not reasonably have been done resting on the defendant.

Beneath the Act sit regulations, then Approved Codes of Practice (ACOPs), then HSE guidance. An ACOP has a special legal status. A court can treat a breach of the relevant code as proof of a breach of the law unless the defendant shows it complied in some equally effective way. Guidance has no such status and is advisory.

Since 1 October 2013, section 69 of the Enterprise and Regulatory Reform Act 2013 has also removed civil liability for breach of most health and safety regulations. An injured worker must now generally prove negligence rather than rely on breach of a statutory duty alone. Criminal enforcement is untouched.

The EU model: Framework Directive and daughter directives

The EU has no single workplace safety statute. Instead, Article 153 of the Treaty on the Functioning of the European Union lets the Union adopt directives setting minimum requirements for the working environment. Member states can then go further, and many do.

The cornerstone is the Framework Directive 89/391/EEC. It requires employers to ensure the safety and health of workers in every aspect related to work. It also sets out general principles of prevention, which in outline are to avoid risks, evaluate those that cannot be avoided, combat risks at source, adapt work to the individual, and give collective protective measures priority over individual ones. Other core obligations are:

  • a documented risk assessment;
  • competent protective and preventive services;
  • information, consultation and participation of workers;
  • training; and
  • health surveillance.

More than twenty “individual” or daughter directives then deal with particular subjects such as workplaces, work equipment, manual handling, display screens, carcinogens, asbestos, noise, vibration and construction sites.

The key conceptual difference

The two models look alike in practice but differ in legal wording. The EU duty is expressed as an obligation to “ensure” safety, with only narrow exclusions available to member states for unforeseeable events and exceptional circumstances beyond the employer’s control. The British duty is qualified by reasonable practicability.

The European Commission challenged this gap in the Court of Justice. In Case C-127/05, Commission v United Kingdom (2007), the Court held that the UK had failed to transpose the Framework Directive correctly by qualifying the employer’s duty in this way. Britain never amended the 1974 Act in response, and since Brexit there is no longer any obligation to do so. The point remains the clearest example of a difference in legal design that has little to do with day-to-day outcomes but could matter in litigation.

A second difference is the status of detailed rules. In the EU, a directive binds member states, not individual businesses, until it is transposed. In Britain, regulations, codes and guidance form a layered system in which HSE can often adjust the lower layers without new primary legislation. That flexibility matters for the post-Brexit story that follows.

What Brexit changed, and what it did not

Brexit changed who can amend the rules far more than it changed the rules themselves. On 1 January 2021 almost every health and safety regulation in force on 31 December 2020 continued to apply word for word. The real shifts came later, as Great Britain began to use its new freedom, and in Northern Ireland, where a different arrangement applies.

Day one: retained EU law

The European Union (Withdrawal) Act 2018 preserved EU-derived law at the end of the transition period as “retained EU law”. It came in three forms:

Because the main workplace rules were already domestic regulations made under the 1974 Act, they were largely untouched. Chemicals were the exception. EU REACH became “UK REACH”, and EU CLP became “GB CLP”, with HSE and other agencies taking over tasks previously done in Helsinki by the European Chemicals Agency.

The “bonfire” threat and the 2023 Act

In 2022 the government introduced the Retained EU Law (Revocation and Reform) Bill. In its original form it would have revoked all EU-derived secondary legislation at the end of 2023 unless ministers saved it, with an extension available to 23 June 2026 for specified items. Safety bodies led by RoSPA warned that the Management Regulations, work at height rules and the “six pack” could be lost through an arbitrary deadline, and that better regulation is not deregulation. The 1974 Act itself was never at risk because it is domestic law.

The Act as passed in June 2023 dropped the blanket sunset. Instead it:

  • revoked a schedule of around 600 named instruments, which the government described as largely defunct and unnecessary now that the UK has left the EU;
  • ended the supremacy of EU law and renamed the remainder “assimilated law”, from 1 January 2024;
  • gave senior courts more freedom to depart from EU case law; and
  • gave ministers powers to amend assimilated law by regulations.

Those amending powers are the route to post-Brexit divergence. They have already been used. The Chemicals (Health and Safety) (Amendment, Consequential and Transitional Provision) Regulations 2026 (SI 2026/484) came into force on 21 May 2026. They abolished the duty to notify classification and labelling information to HSE and introduced a “fast-track” route under which HSE can adopt classification proposals from trusted overseas authorities, which can include the EU. They also removed the link requiring HSE to consider every opinion of the European Chemicals Agency’s risk committee. HSE says it is maintaining high standards, and the core classification criteria are unchanged. Some environmental groups and Scottish parliamentary committee members questioned the lack of detail and impact assessment.

Northern Ireland: a different regime

Northern Ireland remains inside part of the EU system. Under the Windsor Framework, more than 300 EU legal acts, mostly covering goods, continue to apply there, with the Court of Justice of the European Union as final arbiter of their meaning. The Stormont Brake lets the Northern Ireland Assembly challenge new or replacement EU rules that would significantly affect everyday life. The practical result is that product-safety law such as machinery, personal protective equipment and explosive-atmosphere equipment follows EU rules in Northern Ireland.

Workplace duties are different. Employers’ obligations in Northern Ireland come from domestic legislation, principally the Health and Safety at Work (Northern Ireland) Order 1978, enforced by the Health and Safety Executive for Northern Ireland (HSENI). So a business there lives under EU product rules but locally made workplace rules.

The trade agreement floor

The EU-UK Trade and Cooperation Agreement also matters. Its level playing field provisions include a commitment not to weaken labour and social protections in ways that affect trade or investment, which covers occupational health and safety standards. This is a non-regression promise, not a duty to follow EU changes. It limits how far the UK could cut standards, and it is backed by the agreement’s own consultation and rebalancing mechanisms rather than its main dispute-settlement route. It does not require Britain to copy new EU rules.

Regulators and enforcement

Britain enforces through one national regulator and a heavy criminal-penalty culture, while the EU leaves enforcement entirely to its 27 member states and coordinates them from the centre. This is one of the most visible practical differences between the two systems.

Great Britain and Northern Ireland

The Health and Safety Executive (HSE), created under the 1974 Act, is the national regulator for Great Britain. It shares enforcement with local authorities, which cover lower-hazard sectors such as offices, shops, hospitality and leisure, and with sector regulators such as the Office for Nuclear Regulation and the Office of Rail and Road. In Scotland, prosecutions are decided by the Crown Office and Procurator Fiscal Service rather than by HSE. Northern Ireland has its own regulator, HSENI.

Inspectors have strong administrative tools. They can serve improvement notices and prohibition notices without going to court, and since 2012 HSE has charged businesses a “fee for intervention” when it finds a material breach. HSE raised the hourly rates it charges under several cost-recovery schemes from 1 April 2026.

Criminal penalties are a defining feature. Fines in the Crown Court are unlimited, and the Sentencing Council’s guideline links the level of fine to the offender’s turnover as well as to culpability and the harm risked. Individuals, including directors and managers, can face up to two years in prison for most health and safety offences. Where a death results, organisations can also be prosecuted under the Corporate Manslaughter and Corporate Homicide Act 2007, and individuals for gross negligence manslaughter.

The European Union

There is no EU-level inspector. Article 4 of the Framework Directive requires member states to make sure there are adequate controls and supervision, but how they do it is left to national law. Models vary widely. In Germany, statutory accident insurance institutions (the Berufsgenossenschaften and similar bodies) write accident-prevention rules and inspect alongside the state labour authorities. In France, labour inspectors enforce the Labour Code. Nordic countries typically combine strong inspectorates with dedicated workers’ safety representatives.

The Union’s role is coordination and monitoring:

The UK was a full participant in these bodies before 2021. HSE is no longer part of the EU institutional network, so Britain no longer receives that structured peer review, though HSE still works with international bodies and individual regulators.

Penalties compared

The directives require that national systems be effective, but they do not set penalty levels. Sanctions in the member states therefore range from administrative fines to criminal prosecution of managers, and the amounts differ greatly. British courts’ turnover-linked fines for large companies are generally among the heaviest of any system, though comparisons are hard because many EU states impose liability through insurance and social security schemes as well as courts. A business operating in several countries should not assume that a low-penalty jurisdiction means a low expectation of compliance. Inspections, stop-work orders and civil liability can all carry substantial consequences.

Key regimes compared

On most core workplace topics, Great Britain’s regulations are still near-copies of the EU directives they came from, because they were written to implement them and have rarely been rewritten. The differences that matter sit in how duties are framed, in a few specific numbers, and in areas where only one side has legislated since 2020.

TopicGreat BritainEuropean UnionCurrent position
Risk assessmentManagement of Health and Safety at Work Regulations 1999; significant findings recorded for employers with five or more staffFramework Directive 89/391/EEC; documented assessment, with national rules allowed for the smallest firmsVery similar
Worker consultationSafety representatives (trade-union appointed) and consultation regulations of 1977 and 1996Framework Directive requires consultation and participation; many states mandate safety committees or elected representativesSimilar aims, different mechanics
Work equipment and liftingPUWER 1998 and LOLER 1998Work Equipment Directive 2009/104/ECVery similar
Manual handling and display screensRegulations of 1992Directives 90/269/EEC and 90/270/EECVery similar; EU review under way
Work at heightWork at height Regulations 2005Directive 2001/45/EC, amending the Work Equipment DirectiveVery similar
Noise and vibrationControl of Noise at Work Regulations 2005 and Control of Vibration at Work Regulations 2005Directives 2003/10/EC and 2002/44/ECVery similar
Hazardous substancesCOSHH 2002; workplace exposure limits in EH40Chemical Agents Directive 98/24/EC and Carcinogens Directive 2004/37/ECSimilar, with divergence in limit-setting
AsbestosControl of Asbestos Regulations 2012; control limit of 0.1 fibres per cm³ over four hoursDirective 2009/148/EC, amended in 2023 to 0.01 fibres per cm³ over eight hoursDiverging
ConstructionCDM 2015 with principal designer and principal contractorDirective 92/57/EEC with safety coordinatorsDifferent models
Working timeWorking Time Regulations 1998 with an individual opt-out from the 48-hour limitWorking Time Directive 2003/88/ECSimilar text, different case law
Accident reportingRIDDOR 2013, under reviewNational systems; common statistical definitions for reportingDifferent

Where the match is closest

Risk assessment, work equipment, manual handling, display screens, noise and work at height are the clearest cases. The British regulations and EU directives require the same steps in the same order: assess, control, inform, train and review. Even the numbers match. Both systems use the same lower and upper exposure action values for noise (80 and 85 dB(A)) and the same daily limit of 87 dB(A) allowing for hearing protection. A safety adviser trained in one system can move to the other with very little relearning on these subjects.

Where structure differs

Consultation shows how similar aims can reach different mechanics. Britain’s regime grew from trade-union appointed safety representatives, supplemented since 1996 by direct consultation or elected representatives where no union is recognised. Many EU states give statutory roles to works councils, elected safety delegates or joint committees, with stronger rights to time off and training, and in some cases rights to stop dangerous work.

Construction is the clearest structural contrast. CDM 2015 places named duties on clients, designers, principal designers, principal contractors and contractors, so responsibility follows the project hierarchy. The EU directive instead centres on safety and health coordinators, appointed for the design and execution stages, and national laws vary in how they apply it.

Working time also shows divergence in case law as much as text. The two systems share a 48-hour average weekly limit, minimum daily and weekly rest, and statutory paid leave. But the British law relies heavily on the individual opt-out the Directive permits, which many member states allow only in narrow circumstances. The EU Court of Justice also held in 2019 (Case C-55/18) that employers must have a reliable system for measuring each worker’s daily working time. That ruling binds EU states. Britain has no equivalent duty to record every worker’s daily hours, and since Brexit it is not bound by the ruling.

Chemicals and exposure limits

Chemicals show the biggest practical split. Both sides begin from the same hazard classification system, the UN’s Globally Harmonised System, and both retain a REACH-style registration regime. But UK REACH and EU REACH are now separate, with separate registration requirements, deadlines and databases. GB CLP also now follows a different amendment process from the EU’s CLP, as described earlier. Workplace exposure limits are set in separate processes too: the EU adopts binding and indicative limits at Union level, while Britain’s limits are published and revised through HSE’s EH40 list, advised by its own committees.

Asbestos illustrates the point. The 2023 EU amendment cut the binding limit tenfold, to 0.01 fibres per cm³, with transposition due by 21 December 2025 and a move to more sensitive electron-microscopy measurement by 2029. Great Britain’s control limit remains 0.1 fibres per cm³, but it is averaged over four hours rather than eight, which HSE regards as the more conservative measure. In 2026 HSE published a review concluding that there was no clear evidence that lowering the limit would improve health outcomes, and argued that competence, training and enforcement matter more than the number. HSE has separately consulted on changes to its asbestos regulations covering clearance, surveys and notifiable non-licensed work, with responses closing in January 2026. Where the EU has tightened a number and Britain has deliberately held its own, the two systems are no longer aligned by default.

Where the systems are diverging

Most divergence so far is “passive”: the EU has legislated and Great Britain has stood still, so gaps open without any British decision to differ. A smaller but growing share is “active”, where Britain has chosen its own route. Four areas matter most.

Product safety and conformity marking

Product rules are where the two systems touch most directly, because machinery, protective equipment and electrical goods carry workplace risks as well as consumer ones. Britain originally planned to replace the CE mark with its own UKCA mark. After industry pressure, the Product Safety and Metrology etc. (Amendment) Regulations 2024 made recognition of CE marking indefinite for 21 product regulations, covering machinery, personal protective equipment, electrical and radio equipment and toys. In Great Britain, a CE-marked product in those categories can generally be sold without UKCA marking. UKCA remains necessary for some categories outside that scheme, such as construction products. Northern Ireland follows EU rules, so there CE marking is required and a UKCA mark alone is not valid. Because indefinite recognition is a policy choice rather than a treaty guarantee, some manufacturers keep UKCA marking as insurance.

Machinery is the next test. Regulation (EU) 2023/1230 replaces the Machinery Directive from 20 January 2027. It adds requirements for artificial intelligence in safety functions, cybersecurity, autonomous machinery and digital instructions, and widens mandatory third-party assessment for certain high-risk categories. Northern Ireland must apply it, and a 2026 statutory instrument provides for its enforcement there. For Great Britain the position is open. The government has run a call for evidence on machinery legislation, and its own explanatory material warns of a possible cliff edge in January 2027 if products meeting the new EU rules are not accepted. A business exporting machinery to both markets should plan for the EU deadline and watch the GB decision.

Chemicals

Chemicals regulation has diverged more than any other area. UK REACH and EU REACH are separate systems. The EU has also revised its CLP Regulation, while Great Britain has used the 2023 Act’s powers to change its own, abolishing the classification and labelling notification and creating the fast-track route described earlier. HSE says its policy is to maintain high levels of protection. Critics argue that a divergent GB system may produce different labels for the same chemical on either side of the Channel, and that monitoring divergence is hard. Northern Ireland, by contrast, remains under EU CLP.

New EU initiatives with no British equivalent

The EU’s current Strategic Framework on Health and Safety at Work covers 2021 to 2027. Its main active threads are:

  • Psychosocial risks. No dedicated EU directive exists, although the European Parliament has repeatedly asked the Commission for one covering stress, burnout and work organisation, and trade unions are campaigning for it. Several member states, including Belgium, Denmark and Sweden, already have specific national rules.
  • Review of older directives. The Commission’s Quality Jobs Roadmap promised a mid-2026 report on how the Framework Directive and related directives work in practice, and a review of the Workplace and Display Screen Equipment directives. The European Parliament held a hearing on the post-2027 strategy on 2 June 2026.
  • Digital work. The Platform Work Directive, adopted in 2024, includes rules on algorithmic management and is due for national transposition around the end of 2026. The EU AI Act and the new Machinery Regulation also affect workplace technology.
  • Hazardous substances. The EU has tightened limits for carcinogens and other substances, including asbestos, and has more updates planned.

Great Britain has no matching legislative programme. Instead HSE works mainly through campaigns, guidance and enforcement priorities.

British reforms of its own

Britain is also making its own changes, partly in response to domestic pressures rather than Brexit. HSE has consulted on the first major overhaul of RIDDOR, the injury reporting regulations, since 2013, with responses closing on 30 June 2026. It has also consulted on revising its asbestos regulations. Work-related stress is a major focus, with the Working Minds campaign and inspections that treat stress as a risk to be assessed under the Management Regulations. Building safety has its own regime under the Building Safety Act 2022, and a new duty for venues and events under Martyn’s Law is due in spring 2027. None of these has an EU counterpart, which shows the UK system is evolving rather than frozen.

What still unites them, and what it means in practice

The shared core is large and durable. Both systems place the primary responsibility on the employer. Both expect a risk-based approach in which hazards are identified, removed where possible, and otherwise controlled by measures that protect groups before individuals. Both require information, instruction, training and some form of worker involvement, and both expect employers to have access to competent safety advice. These ideas come from the same intellectual tradition, including the Robens philosophy of self-regulation within a legal framework and international labour standards that both sides support.

Some technical infrastructure also remains common. British standards bodies stay full members of the European standards organisations CEN and CENELEC, so a large body of European harmonised standards for machinery and protective equipment continues to be used on both sides. Management-system standards such as ISO 45001 are international and used in both markets. Professional bodies and trainers move freely between the two systems, and the vocabulary of safety practice remains almost identical.

That shared base means that most compliance programmes for UK workplaces transfer to EU workplaces with adaptation rather than reinvention. But the differences above point to a short list of practical checks.

  • Treat Northern Ireland as its own case for products. EU product rules apply there, and workplace law follows local rules and HSENI.
  • Plan for 20 January 2027 if you make or import machinery. Compliance with the new EU Machinery Regulation is mandatory for EU and Northern Ireland sales from that date. For Great Britain, wait for the government’s decision before assuming that EU-compliant machinery will be accepted automatically.
  • Keep chemical compliance separate. Registrations, safety data sheets and classifications for UK REACH and GB CLP may differ from the EU’s. Do not assume that an EU registration covers Great Britain or the reverse.
  • Check national law in each EU state. A directive sets a minimum. A country may require more, such as formal safety committees, particular training hours or psychosocial risk rules. Using the British approach as a template is a reasonable start, but it does not replace a check of local requirements.
  • Use the strictest exposure limit when working across both. For asbestos in particular, the EU’s binding limit is 0.01 fibres per cm³ over eight hours. The GB figure is not directly comparable because it uses a four-hour average, so plan to the EU rule when working in member states.
  • Watch for case-law differences. EU court rulings on matters such as working-time recording bind member states but no longer bind Britain.

For consultancies and in-house teams, the safest posture is to build one management system around the common principles and then add a short, maintained register of jurisdiction-specific rules.

Summary

UK and EU health and safety law share the same core and are slowly separating at the edges. The ideas are the same, the day-to-day rules are largely the same, and the gaps are growing mainly where the EU has legislated and Great Britain has not, or where Britain has chosen its own path.

Where they are similar

  • Both place primary responsibility on employers and require risk assessment, prevention, information, training and worker involvement.
  • Most British workplace regulations still mirror the EU directives they implemented, including work equipment, manual handling, display screens, noise and work at height.
  • Both use the same hazard-classification science and rely on shared technical standards.
  • Brexit did not repeal the main workplace regulations. The Retained EU Law Act of 2023 dropped the blanket sunset clause that had threatened them.

Where they differ

  • Legal design: Britain’s law is a goal-setting statute qualified by “reasonably practicable”, while the EU’s is a directive framework of minimum rules implemented by 27 states.
  • Enforcement: HSE and local authorities enforce in Great Britain with unlimited, turnover-linked fines. The EU has no central inspector, only coordination through the Commission, EU-OSHA and SLIC.
  • Chemicals: UK REACH and GB CLP now run separately from the EU’s regimes, and amendments in 2026 have made GB CLP diverge further.
  • Products: CE marking is accepted indefinitely in Great Britain for 21 regulations, but Northern Ireland follows EU rules, and the EU Machinery Regulation applies from 20 January 2027 with no GB decision yet.
  • Exposure limits and new topics: the EU has cut its asbestos limit tenfold and is considering psychosocial risk rules, platform work and a post-2027 strategy. Britain has kept its own asbestos control limit after an HSE review and relies mainly on guidance and its own consultations, such as those on RIDDOR and the asbestos regulations.
  • Northern Ireland: it sits between the two, applying EU product rules but local workplace law.

What to watch next

  1. The UK government’s decision on machinery rules before 20 January 2027.
  2. Any Commission proposal on psychosocial risks and the shape of the EU’s post-2027 strategy.
  3. The outcome of the RIDDOR and asbestos consultations in Great Britain.
  4. Further use of the 2023 Act’s powers to amend chemicals and other assimilated law.

The practical message for businesses is to build around the shared principles, and to keep a maintained register of the specific rules that now differ by jurisdiction. We can develop your legal register and maintain it. Contact one of our team now to see how we can help your business.

Does the Control of Asbestos Regulations apply to my business?

If your business owns, manages or is responsible for repairing a non-domestic building, or if your people could disturb the fabric of a building during their work, the Control of Asbestos Regulations 2012 (CAR 2012) almost certainly apply to you. Asbestos was not fully banned in the UK until 1999, so any building built or refurbished before 2000 may contain it. This guide explains who is covered, what you must do, and how to check your own position.

Who do the Control of Asbestos Regulations apply to?

CAR 2012 apply to almost every workplace in Great Britain, but the duties you hold depend on your role. Three groups are caught:

  • Owners and managers of non-domestic premises. Offices, shops, factories, warehouses, schools, farms, care homes and pubs all count, as do the shared areas of blocks of flats and other multi-occupancy homes.
  • Tenants with repair or maintenance responsibility. If your lease makes you responsible for the fabric of the building, you share the duty to manage asbestos, or hold it outright.
  • Employers whose staff may disturb asbestos. Electricians, plumbers, joiners, gas fitters, decorators, telecommunications engineers and facilities teams can all drill into, cut or damage asbestos-containing materials without knowing it.

Self-employed people are covered in the same way as employers. Homeowners living in their own private home are not dutyholders, but a tradesperson working in that home still is.

Does the Control of Asbestos Regulations Apply to You?

Do your business premises have asbestos? Do your employees come into contact with it?

The duty to manage asbestos (Regulation 4)

Regulation 4 is the part that catches most small and medium-sized businesses. If you have it, you must:

  1. Find out whether asbestos is present. Take reasonable steps to locate materials likely to contain it, and assume a material contains asbestos unless you have strong evidence it does not.
  2. Keep a written record of where it is, what condition it is in and how much there is. This is your asbestos register.
  3. Assess the risk that anyone could be exposed to fibres from those materials.
  4. Prepare a management plan that says how you will keep the risk under control, and put it into action.
  5. Review and monitor the plan and the register, especially after any change to the building or the condition of the materials.
  6. Pass the information on to anyone likely to disturb the materials, including contractors, before they start work.

The usual starting point is an asbestos management survey carried out by a competent surveyor, following HSE guidance in HSG264. Sampling and analysis should use a UKAS-accredited laboratory. Asbestos left in good condition and unlikely to be disturbed can often stay where it is, as long as it is managed.

Work that disturbs asbestos

Separately from the duty to manage, CAR 2012 sets rules for any work that could disturb asbestos. These depend on the type of material and the risk of releasing fibres.

  • Licensed work. Work on higher-risk materials such as sprayed coatings, lagging and most asbestos insulating board must be done by a contractor licensed by the HSE. The work must be notified to the enforcing authority, normally at least 14 days in advance.
  • Notifiable non-licensed work (NNLW). Some lower-risk work does not need a licence but must still be notified, and workers need health surveillance and records of the work must be kept.
  • Non-licensed work. Short, low-risk tasks, such as removing a few asbestos cement sheets or drilling into textured coating, still need proper controls, trained workers and a risk assessment.

If your employees do any of this work, you must also give them information, instruction and training at the right level for what they do. Even workers who never handle asbestos on purpose need asbestos awareness training if their work could disturb it.

Quick check: does it apply to my business?

Your situationDoes CAR 2012 apply?What it means for you
You own or manage a non-domestic building built before 2000YesYou hold the duty to manage: survey, register, risk assessment and management plan
You rent premises and your lease makes you responsible for repairsYesYou share or hold the duty to manage, so check your lease and agree responsibilities in writing
You rent premises, the landlord handles all repairs and maintenancePartlyThe landlord holds the duty, but you should ask to see the asbestos register and plan
You manage shared areas of flats or a multi-occupancy buildingYesCommon areas are covered by the duty to manage
You send staff into other people’s buildings (trades, maintenance, installers)YesStaff need asbestos awareness training and must check the register before starting work
Your premises were built after 2000 and have not been refurbished with older materialsUnlikelyKeep a record of how you decided, and check if the building has been altered
You work from your own private homeNoThe duty to manage does not cover private homes, but trades working in them are still covered

If you cannot say for certain which row you fall into, treat the regulations as applying until you have checked.

Northern Ireland, the Isle of Man and the Republic of Ireland

CAR 2012 itself applies in Great Britain. If you operate elsewhere, different legislation applies, although the principles are very similar.

If your business has premises in more than one jurisdiction, you need to manage each site against the law that applies there.

What happens if you ignore the regulations?

Breaches of CAR 2012 are prosecuted regularly. Penalties include unlimited fines and, in serious cases, prison sentences for individuals. Beyond the legal risk, unmanaged asbestos can lead to contractors, cleaners or staff being exposed, claims for illness that can take decades to appear, and delays or cost increases when a refurbishment or sale uncovers material you did not know about.

Frequently asked questions

Do I need an asbestos survey? If you hold the duty to manage and cannot show the building is asbestos-free, a survey is the normal way to meet it. A refurbishment and demolition survey is needed before any major building work.

Does it apply to a small office or shop? Yes. Size makes no difference. If the building is non-domestic and you own it, manage it or are responsible for repairs, the duty applies.

Does it apply if I only rent my premises? It depends on your lease. The duty falls on whoever has repair or maintenance responsibility, or on the person who controls the premises. Where there is no clear owner of the duty, the person in control of the building holds it.

How often should I review my asbestos register? There is no fixed interval. Review it when anything changes, such as damage, building work or a change in use, and carry out regular condition checks. Many businesses reinspect known materials once a year.

Do my staff need training? Anyone whose work could disturb asbestos needs asbestos awareness training. Those who carry out non-licensed or notifiable work need higher levels of training.

Next steps

  1. Establish when your premises were built and whether they have been altered.
  2. Check your lease, or ask your landlord, to confirm who holds the duty to manage.
  3. Ask for the asbestos register and management plan, or arrange a survey if there is none.
  4. Make sure anyone working on the building sees the register before they start.
  5. Arrange asbestos awareness training for staff who could disturb the fabric of the building.

We review your business premises and activities to determine which legislation applies to you as well as detailing the steps you need to take to comply. To discuss your needs further, please contact one of our team.

This article is general guidance and does not constitute legal advice or replace advice on your own premises.

What Businesses Need to Comply with UK REACH?

If your business makes, imports or uses chemicals in Great Britain, UK REACH almost certainly affects you. Since the end of the Brexit transition period, GB has operated its own chemicals regime, separate from EU REACH, and the rules, deadlines and costs have been shifting ever since.

This guide explains who UK REACH applies to, what you must do, and the practical steps to take now.

What is UK REACH?

UK REACH (Registration, Evaluation, Authorisation and Restriction of Chemicals) is the Great Britain chemicals regulation that took over from EU REACH on 1 January 2021. It is administered by the Health and Safety Executive (HSE) as the UK REACH agency, with policy led by Defra.

Its core principle is “no data, no market“: a substance on the GB market must be registered, and the information needed to use it safely must be available and passed down the supply chain.

Important: UK REACH applies in England, Scotland and Wales. Northern Ireland continues to follow EU REACH under the Windsor Framework, so businesses trading across the UK may need to comply with both systems.

UK REACH compliance

Does REACH apply to your business?

Who needs to comply?

Your obligations depend on your role in the supply chain.

RoleWhat it meansTypical obligations
ManufacturerYou make a substance in GBRegister substances at 1 tonne or more per year; classify and label; supply compliant safety data sheets
ImporterYou bring a substance, a mixture or an article into GB from outside GB, including from the EURegister substances at 1 tonne or more per year; meet transitional notification or registration requirements; communicate hazards downstream
Downstream userYou use chemicals in your business activities (formulators, manufacturers, industrial and professional users)Follow the safety data sheet and exposure scenarios; check that suppliers are registered; pass information up and down the chain
Distributor / retailerYou store and sell chemicals without changing themPass on safety information; check the supply chain is compliant
Article producer / importerYou make or import products such as equipment, furniture or textilesNotify and communicate on SVHCs in articles; check restrictions apply

Obligations apply per legal entity, so a group with several GB companies needs to assess each one.

The main UK REACH requirements

1. Registration

Manufacturers and importers of substances at 1 tonne or more per year must register them with HSE. Because most businesses could not complete full registrations on day one, the government introduced transitional arrangements:

  • Grandfathering: companies that held an EU REACH registration could carry it across to UK REACH.
  • Downstream User Import Notification (DUIN): downstream users who had been importing from the EU could notify HSE and keep trading while full registration deadlines run.
  • New Registration of Existing Substances (NRES): a route for substances that were not already registered under EU REACH but were on the GB market.
  • Inquiry and registration of new substances: substances not previously on the GB market need a full registration before supply.

2. Transitional registration deadlines

The deadlines have been pushed back twice. Defra has been developing an Alternative Transitional Registration model (ATRm) that is intended to reduce data requirements and costs. Because the ATRm could not be legislated before the original first deadline of October 2026, the government extended the submission dates. The revised deadlines are 27 October 2029, 27 October 2030 and 27 October 2031, phased by tonnage and hazard:

  • 27 October 2029: the highest tonnage and hazard band (broadly substances at 1,000 tonnes or more per year, and certain highly hazardous substances at lower tonnages)
  • 27 October 2030: substances at 100 tonnes or more per year
  • 27 October 2031: all other substances at 1 tonne or more per year

Even with extra time, you should not wait. The detailed ATRm information requirements are still being finalised, and data gathering, supplier agreements and cost-sharing take time.

3. Safety data sheets and communication in the supply chain

Suppliers must provide safety data sheets (SDS) that meet UK REACH requirements, and downstream users must apply the advice in them. Make sure your SDSs carry the correct GB details and that you have a process to update them when information changes. Where substances of very high concern (SVHCs) are present in articles above the threshold concentration, you must pass on information so the articles can be used safely.

4. Restrictions

Annex 17 of UK REACH lists substances and uses that are restricted or banned. If you manufacture, supply or use a restricted substance, you need to confirm that your use is permitted and that any conditions are met. Restrictions can apply to substances on their own, in mixtures and in articles.

5. Authorisation

Substances of very high concern can be added to the Authorisation List (Annex 14), after which they cannot be used or placed on the GB market without authorisation. Watch the UK REACH Candidate List and the Authorisation List and check whether any of your substances are listed.

6. Classification and labelling

UK REACH works alongside GB CLP, which governs the classification, labelling and packaging of hazardous chemicals. Suppliers must classify and label correctly, and use the GB mandatory classifications where they apply.

Practical steps to get compliant

  1. Map your chemicals. List every substance and mixture you make, import or use, with volumes and suppliers.
  2. Confirm your role. Identify whether you are a manufacturer, importer, downstream user, distributor or article producer for each substance.
  3. Check your supply chain. Ask suppliers whether they hold a UK REACH registration or notification, and get confirmation in writing.
  4. Review your transitional status. Establish whether you have a grandfathered registration, a DUIN, an NRES submission or nothing at all.
  5. Check tonnage bands and deadlines. Work out which deadline applies to each substance and plan backwards from it.
  6. Review safety data sheets. Check they are current and meet UK requirements.
  7. Screen for restrictions and SVHCs. Check your substances and products against Annex 17 and the Candidate and Authorisation Lists.
  8. Assign responsibility and keep records. Name an owner for UK REACH, and keep evidence of your assessments and supplier correspondence.
  9. Monitor developments. Follow HSE and Defra updates on the ATRm, fees and deadlines.

What happens if you do not comply?

Supplying or using chemicals in breach of UK REACH can lead to enforcement action by regulators, including notices and prosecution, as well as commercial risk. Non-compliant supply chains can lose market access, and customers increasingly require evidence of regulatory compliance.

Frequently asked questions

Does UK REACH apply if I only import from the EU? Yes. Since 1 January 2021, substances imported from the EU into GB are treated as imports and can carry registration or notification duties.

Does UK REACH apply in Northern Ireland? No. Northern Ireland follows EU REACH under the Windsor Framework, although businesses moving goods between NI and GB may face obligations under both regimes.

Do small businesses need to comply? Yes. There is no general exemption for small businesses, although the 1 tonne per year threshold means many smaller businesses fall into the downstream user category rather than registrant.

Have the deadlines changed? Yes. The transitional registration deadlines were extended to 27 October 2029, 2030 and 2031. Check the current position with HSE or Defra before making decisions.

How we can help

UK REACH sits alongside COSHH, GB CLP and your wider health, safety and environmental duties. We can help you map relevant legislation for your business and compile a legal register. The register will also include details of how your business must comply with each piece of legislation.

Contact us to discuss your legal register requirements.

This article is for general information only and is not legal advice. Regulations and deadlines change, so confirm the current position with HSE, Defra or a qualified adviser.

When Does DSEAR Apply?

Short answer: DSEAR applies whenever your work involves a substance that could cause a fire, explosion or similar energetic event. The Dangerous Substances and Explosive Atmospheres Regulations 2002 (DSEAR) cover far more than heavy industry. Petrol, solvents, LPG, wood dust, flour and even the hydrogen given off by charging forklift batteries can bring a workplace within scope.

This guide explains when DSEAR applies, which activities are excluded and what employers need to do.

What is DSEAR?

DSEAR is the main piece of Great Britain’s health and safety law for protecting people from the fire and explosion risks of dangerous substances at work. It requires employers to assess those risks and then eliminate or reduce them, so far as is reasonably practicable. The regulations are enforced by the Health and Safety Executive (HSE) and, for some premises, local authorities.

What is a “dangerous substance” under DSEAR?

A substance counts as dangerous under DSEAR if it could cause harm through fire, explosion or a similar energetic reaction. This includes:

  • Flammable liquids, such as petrol, solvents, thinners, alcohols and some paints, varnishes and adhesives
  • Flammable gases, such as LPG, propane, acetylene, hydrogen and natural gas
  • Aerosols containing flammable propellants
  • Flammable solids, such as certain metal powders
  • Oxidising substances and organic peroxides, which can feed or intensify a fire
  • Self-reactive, self-heating and pyrophoric substances, which can ignite without an obvious ignition source
  • Substances that give off flammable gas on contact with water
  • Combustible dusts, such as flour, sugar, grain, wood, paper, plastics and some metal dusts, which can form explosive clouds when dispersed in air

Look at hazard pictograms and the supplier’s safety data sheets, these are a good first indicator of whether a substance is covered.

DSEAR

Does DSEAR apply to you?

What is an explosive atmosphere?

DSEAR is particularly concerned with explosive atmospheres. These are mixtures of air and flammable gases, vapours, mists or dusts in which, once ignited, burning spreads through the whole mixture. A small leak in a poorly ventilated room, a cloud of dust in a hopper or vapour from a spray booth can each create one. If there is also an ignition source (a spark, static electricity, a hot surface or an electrical fault), the result can be devastating.

When does DSEAR apply to my business?

DSEAR applies when dangerous substances are present at work, whether you:

  • Use them in a process, such as spraying, mixing, cleaning or welding
  • Store them, for example solvents, gas cylinders or fuel
  • Produce or handle them, intentionally or as a by-product (such as dust from sanding or cutting)
  • Transport them within or around your premises

It applies regardless of business size or sector. Typical examples include:

  • Vehicle repair, spraying and refinishing
  • Woodworking, joinery and furniture manufacture
  • Food and drink production, milling and bakeries
  • Warehousing, including battery charging areas
  • Engineering, welding and fabrication
  • Waste and recycling, where dust, gases and fire risks are common
  • Farms, including grain stores and fuel storage
  • Laboratories, schools and universities
  • Petrol stations and fuel depots

DSEAR protects employees, contractors, visitors and members of the public who could be affected by your work, and self-employed people have duties too. Small quantities can still bring DSEAR into play, although the controls needed should be proportionate to the risk.

When does DSEAR not apply?

DSEAR does not apply to some activities, which are covered by other specific legislation, including:

  • Areas used directly for the medical treatment of patients
  • Appliances burning gaseous fuel that are covered by gas appliance rules
  • The manufacture, handling, use, storage and transport of explosives and chemically unstable substances, which fall under explosives legislation
  • Mineral extraction industries, which have their own regulations
  • Certain forms of transport, such as use of vehicles on public roads, which have separate rules

If you are unsure whether an exclusion applies to your activity, take advice before relying on it – in some cases only parts of DSEAR are disapplied.

DSEAR or COSHH: what’s the difference?

The two sets of regulations are often confused, but they address different harms. COSHH deals with hazardous substances that damage health, such as through inhalation or skin contact. DSEAR deals with substances that can cause fire, explosion and similar events. Many substances fall under both. Solvents, for example, can harm health through exposure and also burn or explode, so you may need to assess the risks under each.

What do I need to do to comply with DSEAR?

DSEAR compliance usually follows these steps:

  1. Carry out a risk assessment. Identify the dangerous substances, how they might ignite or explode and who could be harmed. Consider the quantities, the processes, the possible ignition sources and what could go wrong.
  2. Eliminate or reduce the risk. Substitute with a less hazardous substance where you can, reduce quantities, improve ventilation and control leaks and spills.
  3. Control ignition sources. Use suitable equipment in hazardous areas, manage static, control hot work and keep unsuitable equipment out.
  4. Classify hazardous areas into zones. Where explosive atmospheres may occur, areas are classed by how often and for how long they are likely to be present (zones 0, 1 and 2 for gases and vapours; zones 20, 21 and 22 for dusts). This determines the equipment that can be used there.
  5. Mark hazardous areas where necessary. Display the explosive atmosphere warning sign at entry points.
  6. Mitigate the effects. Use measures such as explosion relief, suppression, isolation and separation, so that harm is limited if an incident occurs.
  7. Prepare for emergencies. Provide procedures, alarms, escape routes and equipment, and practise them.
  8. Inform, instruct and train. Everyone who works with or near dangerous substances must understand the risks and controls.
  9. Review regularly. Revisit your assessment when substances, processes, equipment or layouts change.

What happens if I don’t comply?

Fires and explosions involving dangerous substances can cause fatalities, life-changing injuries and major damage to property and business continuity. HSE can issue improvement and prohibition notices and prosecute, and serious breaches can bring unlimited fines or even imprisonment. Insurers may also challenge claims where a business has not assessed or controlled its risks.

Does DSEAR apply in Northern Ireland and the Republic of Ireland?

DSEAR applies in Great Britain. Northern Ireland has an equivalent set of regulations, the Dangerous Substances and Explosive Atmospheres Regulations (Northern Ireland) 2003, and the Republic of Ireland regulates explosive atmospheres and chemical agents under its own health and safety legislation. The principles are broadly the same, but the details differ, so check the rules that apply where you operate.

Not sure whether DSEAR applies to you?

If your business stores, uses or produces flammable liquids, gases, aerosols or dusts, assume DSEAR is relevant and start by listing the substances you have and where they are. The HSE provides additional guidance for businesses.


This article is general guidance and not legal advice. Requirements depend on your specific work activities and location.

Does COSHH Apply to My Business?

Short answer: almost certainly, yes. If anyone at your workplace uses, makes, handles or is exposed to substances that could harm their health, the Control of Substances Hazardous to Health Regulations 2002 (COSHH) apply to you. That covers far more businesses than most owners expect, from building sites and factories to salons, schools, care homes and offices.

This guide explains what COSHH covers, who must comply, what is excluded and what you need to do.

What is COSHH?

COSHH is the main piece of Great Britain’s health and safety law governing hazardous substances at work. It requires employers to prevent or adequately control exposure to substances that can cause ill health, whether through breathing them in, skin contact, swallowing or contact with the eyes.

The regulations are enforced by the Health and Safety Executive (HSE) and, for some sectors, local authorities.

Which substances does COSHH cover?

COSHH applies to a wide range of substances hazardous to health, including:

  • Chemicals and products containing them, such as cleaning products, paints, solvents, adhesives, de-greasers and disinfectants
  • Fumes, such as welding or soldering fumes
  • Dusts, such as wood dust, flour dust, silica dust from cutting stone or concrete, and cement
  • Vapours, gases and mists, such as spray mists and exhaust fumes
  • Biological agents, such as bacteria, viruses and fungi, including Legionella in water systems
  • Germs that cause diseases, such as leptospirosis (Weil’s disease) or hepatitis, where work brings people into contact with them
  • Nanotechnology materials, where hazardous
  • Asphyxiating gases, which displace oxygen

Many everyday products carry hazard warning pictograms on the label. These are a good first clue that COSHH is relevant. The supplier’s safety data sheet gives the detail you need for your assessment.

Who does COSHH apply to?

COSHH places duties on employers, but it also protects others affected by your work. You must consider:

  • Your employees and agency or temporary workers
  • Contractors working on your premises
  • Visitors, customers and members of the public who could be exposed
  • Self-employed people, who have duties for their own protection and that of others

Business size doesn’t matter. A sole trader with one employee has the same duties as a large organisation, although the paperwork and controls should be proportionate to the risk.

Does COSHH apply to offices and low-risk workplaces?

Yes, although the risks are usually lower. Offices use cleaning products, toner and printer consumables, and some have air conditioning or water systems that need managing for Legionella. You still need to consider whether any substances could cause harm. In many cases a short, sensible assessment will show that risks are low and existing controls are enough.

What does COSHH not cover?

Some hazards have their own specific regulations, so COSHH does not apply to them:

  • Asbestos, covered by the Control of Asbestos Regulations 2012
  • Lead, covered by the Control of Lead at Work Regulations 2002
  • Radioactive substances and ionising radiation, covered by the Ionising Radiations Regulations 2017
  • Substances hazardous only because they are explosive, flammable, or are at extreme temperature or pressure, which are covered by other legislation such as the Dangerous Substances and Explosive Atmospheres Regulations 2002 (DSEAR)

Even where COSHH doesn’t apply, you will normally still have duties under these other regulations and under the Health and Safety at Work etc. Act 1974.

COSHH bucket

Do you know what chemicals are used in your business?

What do I need to do to comply with COSHH?

In practice, COSHH compliance comes down to these steps:

  1. Assess the risks. Identify which hazardous substances are present, who could be exposed, how and how much. Record your significant findings if you employ five or more people.
  2. Prevent or control exposure. Where you can, eliminate the substance or substitute something safer. Otherwise use engineering controls such as enclosure or local exhaust ventilation, safe working systems, and personal protective equipment (PPE) only as the last line of defence.
  3. Make sure controls are used and maintained. Local exhaust ventilation must be thoroughly examined and tested at least every 14 months, and records kept.
  4. Monitor exposure where needed. Compare exposure against the workplace exposure limits in HSE’s EH40 guidance.
  5. Provide health surveillance where required. This applies where there is a risk of identifiable ill health, such as dermatitis or occupational asthma.
  6. Inform, instruct and train your people. Workers need to understand the risks, the controls and what to do if something goes wrong.
  7. Plan for emergencies. Have procedures for spills, accidents and incidents involving hazardous substances.
  8. Review regularly. Revisit your assessment whenever processes, substances or work methods change.

What happens if I don’t comply?

Poor COSHH compliance can lead to serious occupational illness, including occupational asthma, dermatitis, cancers and lung disease, often with effects that appear years later. The HSE can issue improvement or prohibition notices and prosecute, with unlimited fines for serious breaches. Beyond enforcement, you face the cost of civil claims, sickness absence and reputational damage.

Does COSHH apply in Northern Ireland and the Republic of Ireland?

COSHH itself applies in Great Britain. Northern Ireland has its own equivalent, the Control of Substances Hazardous to Health Regulations (Northern Ireland) 2003, and the Republic of Ireland regulates chemical and biological agents under separate legislation. The core principle is the same: assess, control and review. If you operate across more than one jurisdiction, check the requirements for each.

Not sure where you stand?

If your business uses any chemicals, dusts, fumes or biological agents, assume COSHH applies and start by listing the substances you use. If you’re unsure whether your assessments are adequate, our health and safety consultants can help you review your hazardous substances, carry out COSHH assessments and put practical controls in place.


This article is general guidance and not legal advice. Requirements depend on your specific work activities and location.

What an Auditor Looks for in an ISO 45001 Compliant Legal Register

As an auditor with over 10 years experience, I am often asked what do I look for in a legal register? Your legal register is one of the first documents an ISO 45001 auditor will ask to see — and one of the easiest places to lose points if it isn’t maintained properly. Clause 6.1.3 requires organisations to identify and have access to the legal and other requirements relevant to their occupational health and safety management system, and to keep this information up to date. In practice, auditors treat the legal register as a litmus test for the whole management system: if it’s weak, they’ll assume other processes are too.

Here’s what auditors actually check, and how to make sure your register holds up.

1. Coverage: Is It Actually Complete?

Auditors will cross-reference your register against your organisation’s activities, sites, and hazards. They’re looking for gaps such as:

  • Legislation relevant to specific plant, equipment, or processes (e.g. LOLER for lifting equipment, PUWER for work equipment, DSEAR if flammable substances are present)
  • Jurisdiction-specific law where you operate across multiple regions — for example, differences between Great Britain, Northern Ireland, the Isle of Man, and the Republic of Ireland
  • Sector-specific regulations, not just generic Health and Safety law
  • Environmental legislation where it overlaps with Occupational Health and Safety risk (waste, emissions, COMAH)

A register that only lists headline Acts (Health and Safety at Work etc. Act 1974, Management of Health and Safety at Work Regulations 1999) without the supporting regulations underneath will be flagged immediately.

ISO 45001 Legal Register

ISO 45001 Legal Register: What auditors look for

2. Currency: Is It Kept Up to Date?

This is the single most common nonconformity auditors raise. They will ask:

  • What is your process for identifying new, amended, or revoked legislation?
  • How often is the register reviewed, and who owns that review?
  • Can you show evidence of the last update (version control, revision log, sign-off)?

Auditors are wary of registers that look identical year to year — it signals no active monitoring process exists. A dated revision history, or a subscription to a legislation-update service, is strong evidence here.

3. Evaluation of Compliance: Not Just a List

ISO 45001 doesn’t just require you to identify legal requirements — clause 9.1.2 requires you to evaluate compliance against them. Auditors will look for:

  • A clear compliance status against each legal requirement (compliant / partially compliant / non-compliant)
  • Evidence linking each requirement to how compliance is demonstrated (a policy, procedure, permit, inspection record, or training log)
  • A defined frequency for compliance evaluation, separate from the register review itself

A register with no compliance column, or one where every line simply says “compliant” with no supporting evidence, will draw scrutiny.

4. Traceability and Accessibility

Auditors will trace a sample of legal requirements through your system to check they’re not just sitting in a spreadsheet nobody uses. Typical questions:

  • Is this requirement referenced in a risk assessment, procedure, or work instruction?
  • Do relevant staff know this requirement applies to their role?
  • Is the register accessible to those who need it — not locked away with one person?

This is where many organisations fall down: the register exists, but there’s no visible link between it and day-to-day operational control.

5. Ownership and Process

Beyond the document itself, auditors assess the process behind it. Expect questions such as:

  • Who is responsible for monitoring legislative change?
  • What’s the escalation route when a new legal requirement is identified — how does it get actioned, and by when?
  • Is legal compliance a standing item in management review, per clause 9.3?

A register maintained by one person with no documented process, and no visibility at management review, suggests the requirement is being met on paper only.

6. Format Doesn’t Matter — Function Does

ISO 45001 doesn’t mandate a specific format for the legal register. Auditors don’t care whether it’s a spreadsheet, database, or software module — they care whether it functions as a live compliance tool. That said, a well-structured register typically includes:

AspectPurpose
Legislation title & referenceIdentification
JurisdictionApplicability
Summary of requirementInterpretation
Applicability to the organisationRelevance
Compliance statusEvaluation
Evidence/referenceTraceability
Date reviewed / next reviewCurrency
OwnerAccountability

Getting Audit-Ready

If you’re preparing for an ISO 45001 audit (or surveillance visit), the fastest way to strengthen your legal register is to:

  1. Run a gap analysis against your current activities and sites
  2. Add a compliance-status column if you don’t already have one
  3. Establish a documented, evidenced review cycle
  4. Make sure the register is referenced in risk assessments and management review minutes

A legal register that’s actively maintained, evidenced, and embedded in operational decisions is one of the strongest signals of a mature management system — and one of the quickest wins in an audit.

If you need a bespoke legal register or you would like your existing register reviewed, please contact one of our team.

The Difference Between Generic and Bespoke Legal Registers

Why a one-size-fits-all approach to legal compliance leaves organisations exposed — and what a register built around your actual operations gives you instead.

If your organisation is subject to health, safety, or environmental law — and almost every organisation is — you need a legal register. It’s the document that tells you which legislation applies to your operations, what it requires of you, and whether you’re actually compliant. But not all legal registers are built the same way, and the difference between a generic template and a bespoke register isn’t cosmetic. It’s the difference between a document that looks like due diligence and one that actually protects your organisation.

What Is a Legal Register?

A legal register is a structured record of the laws, regulations, and codes of practice that apply to an organisation, typically covering health and safety, environmental, and related compliance obligations. It’s a cornerstone requirement of recognised management system standards, including ISO 9001, ISO 45001 and ISO 14001, and it’s usually the first document an auditor or regulator asks to see. On paper, every legal register looks similar: a list of legislation, a summary of requirements, a compliance status. In practice, how that list is built determines whether the register is a genuinely useful management tool or a box-ticking exercise.

The Trouble With Generic Legal Registers

Generic legal registers are typically off-the-shelf templates or subscription database exports, built to cover an entire sector or industry in one document. They’re inexpensive, quick to obtain, and easy to see the appeal of — but that convenience comes at a real cost:

  • They list legislation that may have nothing to do with your actual activities, sites, or risk profile, burying the requirements that genuinely matter under dozens that don’t.
  • They rarely reflect the specific jurisdictions, licences, or permits your organisation holds, particularly for organisations operating across Great Britain, Northern Ireland, the Isle of Man, or the Republic of Ireland, where legal frameworks diverge significantly.
  • They’re built for updating on a fixed schedule rather than in response to your organisation’s changes — a new site, a new process, a new piece of equipment — so they drift out of date the moment your operations move.
  • They describe legal duties in abstract terms, without translating them into what compliance actually looks like for your sites, your equipment, and your people.
  • They offer no meaningful gap analysis — you’re left to work out for yourself whether you actually comply with each requirement.

The result is a register that satisfies the letter of the audit requirement — “yes, we have a legal register” — without doing the job a legal register exists to do: giving your organisation a clear, current, accurate picture of its legal exposure.

Bespoke vs generic legal register, which is best?
Photo courtesy of Pixabay tumisu-audit

A bespoke legal register demonstrates to auditors that you actually know your legal obligations.

Why a Bespoke Legal Register Is the Only Register Worth Having

A bespoke legal register is built from the ground up around your organisation: your sites, your activities, your industry sector, your jurisdictions, and your risk profile. Rather than starting from a generic list and hoping it fits, it starts from your operations and identifies exactly which legislation applies — and, critically, what that legislation actually requires you to do about it. The advantages compound quickly:

  • Relevance: every entry has a direct line to something your organisation actually does, so nothing important gets lost in noise that doesn’t apply to you.
  • Accuracy across jurisdictions: legislation is mapped to the specific jurisdiction — GB, NI, Isle of Man, or ROI — that each site operates under, rather than treated as a single homogeneous “UK law” list.
  • A genuine compliance status: each requirement is assessed against evidence from your organisation, so you know — not guess — where you stand, and where the gaps are.
  • Built-in gap analysis and action planning: a bespoke register doesn’t just flag non-compliance, it gives you a prioritised route to closing it.
  • Living, current content: as legislation changes or your organisation changes — a new site, a new process, an amended regulation — the register is updated to reflect it, so it never becomes a snapshot of a moment that’s already passed.
  • Audit and due diligence confidence: a bespoke register demonstrates, to auditors, regulators, insurers, and clients, that your organisation understands and manages its legal obligations — not that it purchased a document that says it does.

In short: a generic register tells you what the law says. A bespoke register tells you what the law means for you — and whether you’re meeting it.

FEATURES

Generic Legal Register

Bespoke Legal Register


Identifies only relevant laws


Focused on the actual business


Relevant and easy to understand


A practical management tool


Includes sector specific requirements


Demonstrates that you understand your obligations

The Bottom Line

A legal register is only as valuable as its accuracy and relevance to your organisation. A generic template can create a false sense of security — the appearance of compliance without the substance of it — and that gap tends to surface at the worst possible moment: during an incident investigation, a regulatory visit, or a client’s due diligence review. A bespoke legal register, developed and maintained by health and safety professionals who understand your sector and your sites, is an investment in genuine legal certainty, not just a document for the audit file.

If your organisation is currently relying on a generic register — or doesn’t have one at all — talk to us about building a bespoke legal register tailored to your operations, sites, and jurisdictions. It’s the foundation every other part of your compliance management sits on, and it’s worth getting right.

Do Small Businesses Need a Health and Safety Legal Register?

A clear look at legal obligations, business size, and why proportionate compliance matters.

It is a question we hear often from small business owners: “Do I really need a health and safety legal register? Surely that’s something only for large companies with big compliance teams.” It’s an understandable assumption, but it is not correct. Legal obligations in health and safety law are not switched on by company size — they are triggered by what a business actually does, where it does it, and the risks that activity creates. A five-person joinery workshop and a five-hundred-person office may face entirely different legal duties, regardless of which one has more employees on the payroll.

In this article, we look at why the size of a business is the wrong starting point for thinking about legal compliance, and why a well-designed legal register — far from being a burden reserved for large organisations — can be one of the most practical and cost-effective tools a small business ever puts in place.

What Is a Health and Safety Legal Register?

A legal register is a structured record of the health and safety (and often environmental) legislation, regulations, and approved codes of practice that apply to a specific organisation. Rather than listing every law in existence, it identifies the ones that are actually relevant to that business’s operations, sites, and activities, and sets out what needs to be done to remain compliant with each one.

Done properly, a legal register becomes a single point of reference that tells a business owner or manager, at a glance: which laws apply to us, what each one requires, how we currently meet that requirement, and where any gaps exist.

Legal Obligations Depend on Circumstances, Not Company Size

This is the point worth dwelling on, because it is the one most often misunderstood. UK health and safety legislation is largely activity-based and risk-based rather than headcount-based. The Health and Safety at Work etc. Act 1974 and its supporting regulations apply to employers and the self-employed alike, and the specific duties that follow are shaped by factors such as:

  • The nature of the work being carried out (for example, construction, food handling, manual handling, or working with hazardous substances)
  • The premises involved and who else might be affected — employees, contractors, visitors, or members of the public
  • Whether specific hazards are present, such as asbestos, fire risk, electrical systems, or work at height
  • Sector-specific rules that apply regardless of business size, such as food safety, licensing, or environmental permitting requirements

A single self-employed trades person using a ladder has duties under the Work at Height Regulations. A two-person catering business has duties under food hygiene and allergen legislation. A small manufacturer using solvents has duties under COSHH. None of these obligations disappear because the business is small — in some cases, a smaller business with fewer resources to manage risk may need to pay closer attention, not less.

In other words, the question is never really “is my business big enough for this to matter?” The question is “what do we actually do, and what does the law say about doing it safely?” A legal register is simply the tool that answers that question clearly and keeps the answer up to date as legislation changes.

Why Small Businesses Benefit from a Concise, Proportionate Register

Recognising that legal duties apply regardless of size is only half the picture. The other half is that how a small business meets those duties can, and should, look very different from how a large organisation meets them. A 200-page legal register modelled on a multinational’s compliance framework is not only unnecessary for a small business — it is actively counterproductive. It gets opened once, filed away, and forgotten.

Do small businesses need a health and safety legal register?

A legal register should be proportionate to your business activities

A register that is built specifically for a small business, scaled to its real activities and risks, tends to work far better in practice. This is why:

1. It Stays Usable

A concise register lists only the legislation that genuinely applies to that business’s operations. Instead of an overwhelming, generic checklist, the owner or manager is left with a short, relevant list they can actually refer to — and act on — day to day.

2. It Reflects the Business as It Really Operates

A bespoke register is built around the specific sites, equipment, substances, and work activities involved, rather than a one-size-fits-all industry template. This means it captures the obligations that matter and does not waste time on ones that do not.

3. It Makes Gaps Visible

Because it is proportionate rather than padded out, a well-built register makes it far easier to spot where compliance is solid and where attention is needed — an outdated risk assessment, a missing policy, a licence due for renewal — without those gaps being buried in irrelevant detail.

4. It Demonstrates Due Diligence

In the event of an incident, an inspection, or a client or insurer asking about compliance arrangements, a maintained legal register is tangible evidence that the business has identified its obligations and is actively managing them. For a small business without a dedicated compliance function, this matters a great deal.

5. It Supports Growth Without Starting from Scratch

As a small business takes on new work, new premises, or new equipment, a legal register built with the right structure can be updated and expanded rather than rebuilt. This means compliance grows alongside the business instead of becoming a sudden, overwhelming project further down the line.

Building a Register That Fits Your Business

The most effective legal registers for small businesses share a few common features: they are reviewed and updated regularly to reflect legislative change, they are written in plain language rather than legal jargon, they link each legal requirement to a clear action or evidence of compliance, and they are proportionate — covering what applies, in appropriate detail, without unnecessary bulk.

This is where working with a health and safety consultancy adds real value. Rather than adapting a generic template, a consultancy can assess your specific activities and premises, identify the legislation that genuinely applies, and build a register that is both legally sound and genuinely usable by your team.

The Bottom Line

Health and safety law does not ask how many people are on your payroll before it applies to you — it asks what risks your work creates. That means every business, regardless of size, has legal obligations worth identifying and managing properly. For small businesses, the smart response is not to ignore this reality, nor to adopt a compliance framework built for a much larger organisation. It’s to build a legal register that is concise, proportionate, and tailored to how the business actually operates — one that gets used, kept current, and genuinely supports safer, more compliant day-to-day operations.

If you are unsure which legal requirements apply to your business, or you would like help building a legal register that is proportionate to your size and sector, our team can help you get a clear, practical picture of your obligations.

Would you like a free copy of our health and safety and environmental legal register checklist for UK operations?