A Small Business Health & Safety Compliance Checklist

For a small business owner, health and safety can sometimes feel like an endless collection of documents and deadlines.

A checklist won’t replace competent advice or a risk assessment specific to your business.

It can, however, help you ask a useful question:

Is the administrative side of our health and safety system actually under control?

Here is a practical starting point.

Risk management

Check that your business has a process for identifying and assessing relevant workplace risks.

Where five or more people are employed, significant findings of risk assessments must be recorded. HSE guidance also emphasises reviewing risk profiles as organisations and circumstances change.

From an administrative perspective, ask:

☐ Can we locate our current assessments?
☐ Do we know which version is current?
☐ Are resulting actions tracked?
☐ Can we identify assessments requiring review?

Health & safety documentation

Ask:

☐ Are current policies and procedures easy to find?
☐ Are documents clearly named?
☐ Is there basic version control?
☐ Are superseded documents separated from current ones?
☐ Does each important document have an owner?

Training

Ask:

☐ Do we know what training each role requires?
☐ Can we identify who has completed it?
☐ Are certificates stored consistently?
☐ Can we identify upcoming expiry dates?
☐ Is there a process for arranging renewals?

A simple training matrix can provide much of this visibility.

Actions

Ask:

☐ Are actions from assessments and inspections recorded centrally?
☐ Does each action have an owner?
☐ Does each have a target date?
☐ Can management see overdue actions?
☐ Is completion evidence retained where appropriate?

Inspections and maintenance

Where relevant to your organisation:

☐ Are inspection records organised?
☐ Are certificates retrievable?
☐ Are upcoming dates visible?
☐ Are remedial actions recorded?

Incidents

Ask:

☐ Is there a clear process for recording accidents and incidents?
☐ Is sensitive information appropriately controlled?
☐ Do the relevant people know when an event needs escalating for competent review or statutory reporting?

Compliance calendar

Ask:

☐ Are recurring compliance tasks recorded somewhere centrally?
☐ Do tasks have owners?
☐ Are reminders issued before deadlines rather than after them?
☐ Can someone else understand the system if the usual administrator is absent?

That final question is surprisingly important.

A compliance system shouldn’t exist solely inside one employee’s head.

Records management

Ask:

☐ Do we know why important records are retained?
☐ Do we have appropriate retention periods?
☐ Is personal information removed when no longer needed?
☐ Are archived records distinguishable from current records?

The ICO recommends documenting standard retention periods where appropriate and reviewing information rather than retaining personal data indefinitely.

Management visibility

Finally:

☐ Can management quickly see what is overdue?
☐ Can they see what’s due soon?
☐ Can they see outstanding actions?
☐ Can important evidence be retrieved without searching through dozens of folders?

If several answers are no, your organisation may have an administrative gap rather than simply a documentation gap.

How Blackcrest can help

Blackcrest Compliance provides outsourced compliance administration to help SMEs create structure around their existing health and safety responsibilities.

We can support document control, registers, action tracking, training records, review schedules, compliance calendars and reporting.

Your business remains responsible for its health and safety duties; Blackcrest provides the administrative infrastructure that helps keep those duties visible and organised.