Managing hazardous substances in the workplace is one of the most serious responsibilities an employer holds. At the heart of this responsibility sits a robust system of documentation — records that not only demonstrate workplace safety compliance but also protect employees from genuine harm. When it comes to COSHH regulations, how you store and manage your assessment records can be just as important as conducting the assessments themselves.
What to know
- Proper storage and management of COSHH assessments are essential legal obligations that ensure employee safety and regulatory compliance.
- UK legislation requires employers with five or more staff to document risk assessments and adhere to specific, legally defined retention periods for health and incident records.
- Readily accessible safety documentation is crucial during emergencies, as it provides first responders with immediate hazard information and handling procedures.
- Employers must implement organized systems—whether digital, paper-based, or hybrid—to ensure records are secure, searchable, and protected from unauthorized alteration.
- COSHH assessments must be treated as living documents that are regularly reviewed and updated whenever substances, working methods, or the workforce change.
- Maintaining a clear audit trail of both current and superseded records is vital to protect the business against future insurance claims or legal inquiries related to occupational exposure.
Why proper storage of COSHH assessment records protects your workplace
A COSHH risk assessment is only as useful as its accessibility. If a health and safety incident occurs and your documentation cannot be located promptly, you risk both regulatory consequences and, more critically, a failure to protect your workforce. Proper record storage is not simply an administrative formality — it is a cornerstone of your legal duty of care as an employer.

Legal obligations for retaining hazardous substance documentation
Under UK health and safety legislation, businesses employing five or more people are required to document their risk assessments and retain them beyond their active use. For health surveillance records connected to hazardous substance exposure, the retention period extends considerably longer than for general risk assessment documentation. Incident records compiled under RIDDOR reporting requirements must be kept for a minimum of three years. Employers’ liability insurance certificates carry one of the longest retention obligations of any workplace document. These are not arbitrary timelines — they reflect the potential long-term consequences of occupational exposure to hazardous materials, where symptoms or claims may arise years after the initial exposure.
Alongside retention periods, the law requires that your health and safety records are organised, secure, and readily accessible. Failing to meet this standard can attract intervention from the Health and Safety Executive, which has the authority to recover its investigative costs from non-compliant businesses at an hourly rate. The financial and reputational risks of poor statutory record keeping are therefore very real.

How accessible records support incident response and employee safety
When an incident involving a hazardous substance occurs, time matters. Having your safety data sheets and COSHH assessments immediately to hand allows supervisors and first responders to act with confidence. Each safety data sheet covers essential information including hazard classification, safe handling procedures, and emergency response guidance — making it a vital reference in a crisis. Beyond emergencies, accessible records support ongoing hazardous substance management by ensuring all employees and their supervisors are working from current, accurate information. Employers are legally required to provide workers with access to COSHH assessments and the relevant training that stems from them.
Practical systems for organising and updating your COSHH documentation
Knowing what records to keep is one thing; building a system that makes those records genuinely useful is another. The most effective approaches to occupational health and safety documentation combine clarity of structure with a reliable process for review.

Digital versus paper-based record management approaches
Both digital and paper-based systems are legally acceptable for storing health and safety records in the UK, provided they meet security and data protection requirements. Digital systems offer clear advantages in terms of searchability and version control — particularly helpful when managing a large inventory of substances, each requiring its own chemical hazard control documentation. Paper records, meanwhile, remain a practical fallback in environments where digital access is limited or where printed copies need to be posted at the point of use. Many workplaces use a hybrid approach, maintaining digital master copies while keeping printed summaries accessible on the shop floor or in storage areas. Whatever system you choose, the priority is that records relating to due diligence evidence — such as training logs, inspection reports, and assessment sign-offs — are protected from loss or unauthorised alteration.
Setting review schedules to keep assessments current and compliant
A COSHH assessment is not a document you produce once and file away. Safety policy review and the updating of assessments must happen regularly, and particularly whenever there is a change in substances used, working methods, or workforce. Scheduling formal reviews — at least annually for most assessments — ensures your documentation reflects current practice rather than outdated procedures. Linking your review schedule to work equipment inspections and training records retention reviews creates a coherent safety management calendar, reducing the risk of any one area being overlooked. When reviews are completed, the superseded versions should be retained alongside the current records for the appropriate period, providing a clear audit trail that supports your position in the event of any legal or insurance query related to employers liability insurance or workplace incidents.
