Table of Contents

• What is health and safety compliance?
• Key methodologies for achieving compliance
• Compliance in construction: CDM, documents, and edge cases
• Compliance in manufacturing: machinery, hazardous substances, and equipment
• Why compliance means more than paperwork: a fresh perspective
• Empower compliance with smart solutions
• Frequently asked questions

Key Takeaways

What is health and safety compliance?

At its core, health and safety compliance in the UK means fulfilling legal duties under the Health and Safety at Work etc. Act 1974 (HSWA) and its supporting regulations to secure the health, safety, and welfare of employees and anyone else affected by work activities. It is not simply about producing documents. It is about demonstrating, in practice, that you have identified risks and taken reasonable steps to control them.

The legal standard the HSWA sets is ‘so far as is reasonably practicable’, often abbreviated as SFRP. This principle, also known as ALARP (As Low As Reasonably Practicable), requires employers to weigh the level of risk against the cost, time, and effort of reducing it. If a risk is significant and control is achievable, you must act. This is not a vague suggestion; it is an enforceable duty.

‘Failure to comply can cost lives and millions annually in fines and lost time.’

Responsibility falls primarily on employers, but also on the self-employed, those in control of premises, designers, and principal contractors. Anyone with authority over how work is done carries a share of the duty. Key obligations under HSWA include:

• Providing a safe place of work and safe systems of work
• Ensuring plant and equipment are maintained to a safe standard
• Providing information, instruction, supervision, and training
• Consulting with workers on health and safety matters
• Preparing and keeping current a written safety policy for organisations with five or more employees

For a practical starting point, our construction site safety tips and compliance management features offer sector-specific guidance tailored to UK workplaces.

Key methodologies for achieving compliance

Understanding the law sets the foundation, but effective compliance is built through hands-on processes. The most important of these is the risk assessment. A risk assessment must be ‘suitable and sufficient’, which means it identifies real hazards, evaluates who is at risk, determines appropriate controls, and is reviewed regularly. It is not a template exercise. An assessment that does not reflect actual site conditions or task specifics will not satisfy HSE inspectors and, more critically, will not protect your workers.

The hierarchy of controls is the structured approach professionals use to select those controls. In order of priority:

1. Eliminate the hazard entirely where possible
2. Substitute the hazardous process or material with a safer alternative
3. Engineer physical controls such as guarding, ventilation, or edge protection
4. Administer safe systems of work, permits, and training programmes
5. PPE as the last line of defence, never the primary strategy

Moving down this list means accepting weaker protection. Your goal is always to eliminate or substitute first.

Worker consultation is another non-negotiable element. Employees doing the work often identify hazards that management overlooks. Engaging them formally, through safety representatives or direct consultation, strengthens your assessment quality and your legal position. Competence matters equally. Ensuring that personnel have relevant qualifications, inductions, and refresher training is part of demonstrating diligence.

Record-keeping is essential but must remain purposeful. Maintain current risk assessments, training records, inspection logs, and incident reports. These are evidence of your control system, not the control system itself.

Compliance in construction: CDM, documents, and edge cases

Construction operates under one of the most detailed regulatory frameworks in UK industry. The Construction (Design and Management) Regulations 2015, known as CDM 2015, assign specific duties to three key parties: the client, the principal designer, and the principal contractor. The client must appoint these roles in writing before significant design work begins. The principal designer manages pre-construction health and safety. The principal contractor manages the construction phase plan and site safety.

One of the most misunderstood distinctions in CDM is whether a project is notifiable. Here is a simple comparison:

Essential documents for any construction project include the CDM construction phase plan, pre-construction health and safety information, risk assessments, and the health and safety file. For notifiable projects, the F10 notification must be submitted to the HSE before work begins.

Edge cases deserve particular attention. Demolition and shared multi-employer sites carry heightened risk because responsibility is often split across parties. Method statements for demolition must be precise, and clear agreements on who controls what must be documented from day one.

‘In construction, compliance failures can escalate quickly to criminal proceedings.’

Common pitfalls to avoid include:

• Appointing principal designer or principal contractor too late in the project lifecycle
• Failing to submit the F10 for notifiable works before breaking ground
• Insufficient high-risk controls for work at height or near excavations
• Poor information-sharing between contractors on shared sites

Construction compliance also increasingly intersects with wider building governance. On higher-risk buildings, dutyholders should ensure their CDM arrangements align with the expectations of the Building Safety Act, especially where design changes, competence, and the golden thread of information are concerned. While CDM and the Building Safety Act are distinct regimes, poor coordination between them can create avoidable gaps in accountability and evidence.

Managing these responsibilities across complex projects is where digital tools add real value. Our managing CDM responsibilities module is built specifically for this challenge.

Compliance in manufacturing: machinery, hazardous substances, and equipment

Manufacturing brings a distinct set of regulatory demands, shaped by the nature of the equipment and substances involved. Four regulations define most of the compliance landscape:

• Supply of Machinery Regulations: govern the safe design and placing on the market of machinery
• PUWER (Provision and Use of Work Equipment Regulations): require equipment to be suitable, maintained, and used by trained personnel
• LOLER (Lifting Operations and Lifting Equipment Regulations): cover safe planning, supervision, and inspection of lifting operations
• COSHH (Control of Substances Hazardous to Health): require assessment and control of exposure to hazardous substances

The manufacturing compliance picture is also shaped by sobering data. The non-fatal injury rate in manufacturing stands at 1,936 per 100,000 workers in 2024/25, above the all-industry average. This underlines that even without fatalities, poor controls carry a significant human and financial cost.

Consider a practical example. A manufacturer introduces a new cleaning solvent without completing a COSHH assessment. Workers develop respiratory symptoms within weeks. The resulting HSE investigation finds no assessment, no controls, and no training records. The regulatory response includes improvement notices, potential prosecution, and reputational damage, all of which were entirely preventable.

Why compliance means more than paperwork: a fresh perspective

We have worked alongside compliance teams in construction and manufacturing long enough to recognise a pattern. Organisations that struggle most with safety outcomes are often those generating the most paperwork. This sounds counter-intuitive, but it reflects a real dynamic: document production can become a substitute for action rather than evidence of it.

The most effective compliance officers we encounter invest their energy in dynamic risk control. They prioritise edge protection before work at height begins, lock-off systems before maintenance, and clear task briefings before any hot work. They integrate principal designer input early, challenge weak RAMS, and make sure supervisors understand not just what the paperwork says, but what good control looks like on the ground.

This is where many organisations go wrong. They treat compliance as a retrospective exercise, something to tidy up after the work has already started. In reality, compliance is strongest when it is embedded into planning, procurement, supervision, and review. A construction phase plan that sits unread in a site cabin is not compliance. A COSHH assessment that never changes when substances change is not compliance. A training matrix that shows attendance but not competence is not compliance.

There is also a cultural dimension. Workers quickly recognise whether management is serious about safety or simply serious about appearing compliant. If near misses are ignored, if supervisors bypass controls to save time, or if consultation is tokenistic, the paperwork loses credibility. By contrast, when leaders act on findings, stop unsafe work, and review controls after change, compliance becomes visible and trusted.

For UK dutyholders, this practical mindset is especially important where legal duties overlap. A serious incident may trigger internal investigation, insurer scrutiny, contractual consequences, and in some cases RIDDOR reporting obligations. On complex projects, it may also raise questions under CDM 2015 and, for relevant developments, the Building Safety Act. Good compliance systems therefore need to be live, connected, and capable of showing who knew what, when, and what action followed.

The fresh perspective is simple: documents should follow control, not replace it. When that principle is understood, compliance becomes more efficient, more defensible, and far more effective at preventing harm.

Empower compliance with smart solutions

Modern compliance management is increasingly digital for a reason. Construction and manufacturing environments change quickly, and static folders do not keep pace with changing risks, shifting responsibilities, or inspection demands. Smart systems help organisations standardise what matters while still adapting to site-specific realities.

Used properly, digital tools can support compliance by helping teams to:

• Assign dutyholders and track accountability across projects and sites
• Produce and update risk assessments, method statements, and construction phase plans consistently
• Schedule inspections, maintenance, and statutory examinations before deadlines are missed
• Capture incidents, near misses, and corrective actions in real time
• Maintain an auditable record for HSE inspections, client reviews, and internal assurance

For construction teams, this means better control of CDM appointments, F10 notifications, permit systems, and contractor coordination. For manufacturers, it means stronger oversight of PUWER inspections, COSHH registers, LOLER examinations, and training records. In both sectors, the value lies in consistency and visibility.

LifeSafety.ai is designed to support that practical approach. Our platform helps teams move beyond fragmented spreadsheets and disconnected templates by bringing core compliance activities into one structured workflow. Whether you need support with risk assessments, CDM compliance, COSHH assessments, or safety audits, the aim is the same: make compliance easier to manage and harder to overlook.

That matters because the best compliance systems do not just help you pass an inspection. They help you prevent the incident that would have triggered it.

Frequently asked questions