Skip to main content
    UK Regional Hub

    UK HSE Software Guide — RIDDOR, COSHH, CDM & ISO 45001

    UK HSE compliance has its own framework — RIDDOR for incidents, COSHH for chemicals, CDM for construction, DSEAR for explosive atmospheres, and HSE inspections to back it all up. The right software handles UK-specific reporting formats out of the box, not as a 'we can configure that for you' afterthought.

    ByThe QHSE Standard Editorial Team·Independent QHSE / EHS / ESG software analysts·

    Key UK Regulations

    RIDDOR (2013)

    Reporting of Injuries, Diseases and Dangerous Occurrences Regulations — mandates reporting of specified workplace incidents to HSE within 10-15 days. Platforms must produce HSE-format submissions.

    COSHH (2002)

    Control of Substances Hazardous to Health — requires written risk assessments, control hierarchies, exposure monitoring, and health surveillance for hazardous substances.

    CDM 2015

    Construction (Design and Management) Regulations — places duties on clients, principal designers, principal contractors, contractors, and workers throughout construction projects.

    DSEAR (2002)

    Dangerous Substances and Explosive Atmospheres Regulations — requires hazardous area classification, ATEX equipment compliance, and explosion risk assessments.

    Health and Safety at Work Act 1974

    Foundation legislation placing general duties on employers, employees, and the self-employed. Enforced by HSE and local authorities.

    Working Time Regulations 1998

    Limits weekly working time and mandates rest breaks. Increasingly relevant for fatigue risk management programs.

    What to Look for in UK EHS Software

    RIDDOR-format reporting

    Your platform should generate HSE-ready RIDDOR submissions automatically — incident category mapping, F2508 form fields, and submission timestamps all handled.

    COSHH risk assessment templates

    Pre-built COSHH assessment forms with hazard identification, exposure routes, control hierarchy, and review schedule. Saves weeks of consultant time.

    CDM principal contractor support

    If you operate as principal contractor, the platform must handle pre-construction information, Construction Phase Plan tracking, F10 notifications, and CDM client duties evidence.

    UK data residency

    Post-Brexit, UK GDPR governs personal data. EU-hosted platforms are still acceptable with appropriate transfer mechanisms, but UK-residency simplifies compliance.

    HSE inspection readiness

    Strong document control, training records, and audit trail are non-negotiable when an HSE inspector visits. Look for inspection-mode reporting.

    Avetta / SafeContractor / FPAL integration

    If you bid for UK contractor work, prequalification responses through these platforms are mandatory. Better software auto-populates evidence.

    Software That Fits UK Operations

    Need UK-specific QHSE software?

    Take our 60-second quiz — we'll match you with 3 platforms that meet UK regulatory requirements.

    Get Matched

    Frequently Asked Questions

    Do US-built EHS platforms meet UK HSE requirements?
    They can, but it requires configuration. Most US platforms don't ship with RIDDOR submission formats, COSHH templates, or CDM-specific workflows out of the box. Plan 4-8 weeks of UK-specific configuration with US-only platforms, or pick a UK/EMEA-native vendor.
    Is ISO 45001 mandatory in the UK?
    No — UK law does not require ISO 45001 certification. However, many tier-1 customers, government tenders, and infrastructure programs (Network Rail, Highways England, Crossrail) require it. See our ISO 45001 software guide for details.
    What's the deadline to report a RIDDOR incident?
    Specified injuries: within 10 days. Over-7-day incapacitation: within 15 days. Dangerous occurrences and diseases: as specified per category. Software with built-in RIDDOR workflows ensures deadlines aren't missed.
    Are paper-based COSHH assessments still acceptable?
    Legally yes, practically no. HSE inspectors increasingly expect digital systems with version history, review schedules, and documented worker acknowledgement. Paper systems pass inspection but fail prequalification audits.
    How does CDM affect software choice for construction firms?
    Principal contractors need software that handles Construction Phase Plans, pre-construction information, F10 notifications, daily site briefings, and contractor competency tracking. Look at construction-specialist platforms or general EHS platforms with proven UK construction deployments.
    Does the platform need to be UK-hosted?
    No, but post-Brexit cross-border data transfers require UK-EU adequacy decisions or appropriate safeguards (SCCs/IDTAs). EU-hosted is straightforward; US-hosted requires more documentation. UK-hosted is simplest.