Workplace Health Surveillance: When Must Employers Arrange It?

Employers must arrange workplace health surveillance when work exposes employees to particular health risks and the applicable regulations require checks for early signs of harm. The decision comes from the hazards, actual exposure and suitable detection methods, not the size of the workforce or a preference for annual medicals.

A general health check does not settle that duty. Employers need to know which workers require surveillance, what checks are appropriate and how the findings will change the way work is managed. Buying appointments without assigning responsibility for the results leaves a significant gap.

When Is Workplace Health Surveillance Required?

Health surveillance is required where the risk assessment and relevant legislation identify a need for systematic checks on employees’ health. Some hazards have specific requirements, so a broad workplace assessment alone may not give you the full answer.

The Risk Assessment Must Identify the Need

Regulation 6 of the Management of Health and Safety at Work Regulations 1999 requires employers to provide employees with health surveillance appropriate to the risks identified by their assessment. More specific duties sit within regulations covering hazardous substances, noise, vibration and certain other exposures.

The assessment should establish what people are exposed to, how exposure occurs, its duration and the health effects that could follow. It must consider existing controls and whether a residual risk remains. A substance inventory or equipment list is useful evidence, but neither describes exposure on its own.

The regulations discussed here apply in Great Britain; Northern Ireland has separate legislation. When reviewing the relevant health and safety legislation, distinguish legal requirements from guidance explaining how to meet them. An HSE recommendation may be highly relevant without making a particular testing interval a universal statutory requirement.

Do Not Wait for Symptoms or Failed Controls

Surveillance may be necessary before anyone reports a problem. Early occupational disease can develop without an employee recognising symptoms or connecting them with work. Waiting for sickness absence or complaints can mean missing the opportunity for earlier intervention.

Effective controls may reduce exposure without eliminating the need for surveillance. For example, work involving respiratory sensitisers can still require checks despite extraction and respiratory protection. Surveillance helps detect harm and evaluate controls; it cannot prevent exposure or justify leaving a known control failure unresolved.

Why a General Health Check Does Not Meet the Same Need

Health surveillance consists of planned, repeated checks linked to particular occupational risks. Its purpose is different from a wellbeing initiative, even when the same provider delivers both services.

Employers must arrange workplace health surveillance where risk assessments and relevant regulations indicate it is needed.

Further guidance can be found in the health and safety management duties.

Exposure-specific Checks Versus Wellbeing Screening

Blood pressure, cholesterol and lifestyle checks may benefit employees, but they do not establish whether work is damaging their skin, lungs or hearing. The check must be capable of identifying the relevant adverse effect.

Examples include skin surveillance for occupational dermatitis, suitable respiratory surveillance for exposure to asthma-causing substances and hearing checks for hazardous noise exposure. A package described simply as “occupational health checks” needs a clear scope before an employer can rely on it to meet hazard-specific duties.

Fitness Assessments and Other Health Checks Have Different Purposes

Fitness-for-work assessments consider whether someone can undertake particular duties safely. Sickness absence referrals support decisions about recovery, adjustments and return to work. Neither automatically provides the repeated, exposure-specific checks required for surveillance.

Other statutory arrangements also have their own purposes. Night workers, for example, must be offered health assessments under working time legislation. A pre-employment medical does not discharge ongoing surveillance duties, and ordinary desk-based work does not automatically require employees to join a surveillance programme.

Effective workplace health surveillance uses appropriate checks to identify early signs of work-related ill health.

Exposure Triggers Under COSHH, Noise and Vibration Rules

Health surveillance requirements differ between hazards. Apply the relevant legal test rather than assuming that every hazardous activity needs a medical examination, or that exposure below a limit removes every obligation.

Hazardous Substances and Detectable Health Effects

Under the Control of Substances Hazardous to Health Regulations 2002, known as COSHH, health surveillance is required where employees are exposed to substances hazardous to health and the relevant conditions are met. Outside the specified Schedule 6 circumstances, the criteria concern:

• An identifiable disease or adverse health effect known to be related to the exposure.
• A reasonable likelihood that it may occur under the particular working conditions.
• Valid techniques for detecting indications of that disease or effect, with the investigation presenting low risk to the employee.

COSHH health surveillance therefore needs a reasoned assessment of the work. Repeated wet work in cleaning or food preparation can create a dermatitis risk. Handling flour dust, wood dust or other respiratory sensitisers may create a risk of occupational asthma. The relevant checks could involve skin assessment or respiratory questionnaires and lung function testing, selected with competent advice.

Substance presence alone does not determine the programme. A sealed container in storage presents a different exposure situation from tipping powder into an open mixer. Consider safety data sheets, process information, exposure measurements where needed, cleaning methods and foreseeable maintenance work. Dermatitis assessments should include contact frequency and time spent with wet hands, not just products carrying hazard labels.

A measurement below a workplace exposure limit does not, by itself, establish that surveillance is unnecessary. Skin exposure may remain, and sensitising substances require particular care. The assessment must address the relevant route and health effect.

For example, a bakery moving from bagged flour to an enclosed delivery system should not automatically remove everyone from respiratory surveillance. Bakers may still dust benches, add minor ingredients by hand or clear spillages. Review those remaining tasks with occupational health and, where needed, an occupational hygienist before changing the programme. Record why each exposure group remains included or is excluded. If checks are reduced or stopped, employees still need instructions for reporting symptoms and managers need a trigger for reassessment when processes change.

COSHH also specifies substances and processes in Schedule 6 for which medical surveillance applies in the stated circumstances. These arrangements require an HSE-appointed doctor or an employment medical adviser. They should not be replaced by a general screening appointment or an informal supervisor check.

Noise Exposure and Hearing Surveillance

The Control of Noise at Work Regulations 2005 require suitable health surveillance where the assessment indicates a risk to health. Hearing surveillance should be provided for employees regularly exposed above the upper exposure action value of 85 dB(A), based on daily or, where appropriate, weekly personal exposure. It is also needed for employees at particular risk at lower exposures, for example because of existing hearing damage.

The lower exposure action value of 80 dB(A) triggers other duties, including information and training, but does not automatically mean every exposed employee needs the same hearing surveillance programme. Neither value is a boundary below which harm is impossible.

Peak sound pressure also matters, particularly with impact tools or explosive sounds. The lower and upper peak action values are 135 and 137 dB(C). Noise assessment should address both average exposure and relevant peaks, rather than relying on a single reading beside a machine. Hearing protector attenuation is not deducted when comparing exposure with the action values.

Noise health surveillance normally includes audiometry, with results assessed by appropriately qualified personnel. It requires suitable testing conditions, interpretation and referral arrangements. The employer needs actionable advice about exposure and hearing protection, not simply confirmation that a hearing test took place.

Hand-arm Vibration and Early Signs of Harm

Under the Control of Vibration at Work Regulations 2005, surveillance is required where employees are likely to be regularly exposed above the hand-arm vibration exposure action value of 2.5 m/s² A(8), or are otherwise at risk. A(8) expresses daily exposure normalised to an eight-hour reference period; it does not mean someone must use a vibrating tool for eight hours before action is needed.

Assess actual trigger time, the tools used, their condition, the material being worked and credible vibration data. Time booked to a maintenance job is rarely the same as time holding a running tool. Existing symptoms or individual susceptibility may justify surveillance below the action value.

Vibration health surveillance commonly follows a tiered approach, starting with initial and periodic questionnaires and progressing to clinical assessment where indicated. Tingling, numbness, finger blanching or reduced hand function need an appropriate referral. A completed questionnaire is not sufficient where an answer calls for further investigation.

Lead and asbestos have separate regulatory regimes, including their own medical surveillance requirements in defined circumstances. Do not extend COSHH rules or its recordkeeping arrangements to every occupational hazard without checking the applicable legislation.

Findings from workplace health surveillance should inform reviews of control measures while protecting workers’ medical confidentiality.

Choosing Who Needs Surveillance, Which Checks and How Often

The employer remains responsible for suitable arrangements, even when a provider manages appointments. Competent occupational health advice should determine the appropriate clinical methods, interpretation and referrals. There is no universal annual test package that covers every exposure.

Build the Programme Around Tasks and Exposure Groups

Identify employees by what they actually do, rather than relying on job titles or departmental lists. Workers with similar exposures can often be grouped for planning, but individual risks still need consideration.

• Include maintenance, cleaning and intermittent work that may involve higher exposure than routine production.
• Check workers who move between areas or cover other roles.
• Review new starters and employees changing duties before relevant exposure begins.
• Account for employees identified as particularly susceptible through appropriate occupational health advice.

A production surveillance list can look complete while omitting the cleaner who clears settled dust or the engineer who opens equipment during servicing. Check the roster against task assessments and working arrangements, not just the previous year’s appointment list.

Agency and contractor arrangements need explicit coordination. Establish who assesses exposure, who arranges checks and how restrictions reach the manager controlling the work. Employment status and control of the activity affect responsibilities; a contract clause should not be assumed to transfer every statutory duty.

Set Baselines, Review Intervals and Referral Routes

Baseline checks are often appropriate before or when relevant exposure starts. They provide a comparison for later results and may identify issues needing advice before duties are allocated. They are not a substitute for controlling the exposure from the outset.

Set periodic intervals according to the hazard, applicable requirements and occupational health advice. Review sooner after symptoms, abnormal findings or material changes in exposure. Some programmes use annual checks, but the frequency and type of assessment may differ between workers and stages of surveillance.

For some lower-level checks, such as suitable skin surveillance, a trained responsible person may carry out defined tasks under competent guidance. That person needs clear escalation criteria and must not diagnose disease. Clinical assessments belong with appropriate healthcare professionals, while statutory medical surveillance must use a doctor with the required appointment or authorisation.

Explain the purpose of checks, what employees must attend and how confidentiality works. Required surveillance must be provided without charge to employees, with attendance organised during working time. Give workers a clear route to report symptoms between appointments, and follow up missed checks rather than allowing them to disappear from the programme.

Missed appointments need a defined escalation process rather than repeated automated reminders. Establish whether shift patterns, language barriers, disability or concerns about confidentiality prevented attendance, and address those barriers. If an employee declines required surveillance, explain its purpose and seek occupational health and HR advice on the next steps. Assess whether continued exposure is appropriate while the issue remains unresolved; do not treat non-attendance as a normal result or assume that signing a waiver releases the employer from its legal duties.

Keeping Health Records Without Compromising Medical Confidentiality

The employer’s health record and the occupational health provider’s confidential clinical record serve different purposes. Managers need enough information to allocate work safely and demonstrate that surveillance is being managed. They do not routinely need diagnoses, consultation notes or full medical histories.

Record Outcomes and Restrictions, Not Full Clinical Details

Employee health records should identify the worker, relevant exposure or work history, surveillance dates and the conclusions needed to manage work safely. Depending on the circumstances, that may include fitness advice, restrictions, a review date or confirmation that further assessment is required.

Record a practical restriction clearly enough for the manager to apply it. “Avoid further exposure pending occupational health review” requires an immediate allocation decision; filing it against an appointment record is not implementation. Detailed clinical findings should remain within the provider’s confidential system, subject to the relevant professional and legal arrangements.

Health information is special category personal data under UK GDPR. Employers need an appropriate lawful basis, an applicable special category condition and any required safeguards under the Data Protection Act 2018. Employee consent is not automatically the correct basis for an employer meeting legal health and safety duties.

Restrict access by role, explain how information will be used and use secure transfer and storage arrangements. Disclosure of a clinical report by a healthcare professional raises separate confidentiality considerations; an employer’s lawful basis does not create unrestricted access to medical files.

Apply the Correct Retention and Handover Arrangements

COSHH health records subject to its retention requirement must normally be kept for at least 40 years from the date of the last entry. That period should not be applied automatically to every type of surveillance record. Check the relevant regulation, guidance and justified retention needs for each programme.

Provider changes need a planned handover. Agree secure continuity of clinical records through appropriate arrangements, while preserving the employer’s access to its own health records and management recommendations. Confirm how records will be retrieved if a provider stops trading.

An inherited spreadsheet containing names and appointment dates may omit the hazard being checked and outstanding referrals. Before relying on it, verify that records identify the correct employees, relevant exposures, outcomes and follow-up actions.

Turning Surveillance Findings into Better Exposure Controls

Surveillance only becomes useful when someone reviews the findings and acts. Reports can exist while referrals, work restrictions and equipment improvements remain unassigned. An attendance spreadsheet is not evidence that recommendations have been implemented.

Respond to Individual Findings Promptly

Where a check identifies a concern, follow the agreed occupational health referral route and implement any advised restrictions promptly. A supervisor should not decide that symptoms are insignificant or ask the worker to continue unchanged while waiting for a routine annual review.

Review the individual’s exposure, control measures and risk assessment. Where the applicable regulations require it, act on professional advice and consider suitable alternative work without the relevant exposure. Avoid making permanent capability decisions from a preliminary screening result; the worker may need further clinical assessment.

Consider employees with similar exposure as well. One work-related finding may justify reviewing their arrangements or bringing checks forward, even if they have not reported symptoms. Protect the affected employee’s confidentiality when communicating wider control changes.

Certain diagnosed occupational diseases can trigger reporting under the Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013, known as RIDDOR, where the specified work-related conditions are met. An abnormal screening result is not automatically reportable. Check the diagnosis and relevant activity against the reporting criteria, and document the decision.

Use Group Findings to Review the Risk Assessment

Appropriately anonymised group findings can help identify a pattern associated with a task, area or process. In small teams, even an unnamed report may identify an individual, so agree reporting formats with the provider before circulating results.

Use the findings to challenge workplace exposure controls. For example:

• Could a hazardous product or process be substituted?
• Is enclosure or local exhaust ventilation capturing contamination where it is generated?
• Have cleaning methods, maintenance standards or production demands increased exposure?
• Is protective equipment suitable, maintained and used correctly?

Assign each improvement to an owner, set a deadline and specify how completion will be verified. Purchasing an extraction unit does not demonstrate effective control until its performance and use have been checked.

A useful management dashboard separates attendance from completed follow-up. Track overdue checks, referrals awaiting assessment, restrictions awaiting implementation and control actions awaiting verification. Agree escalation times with the provider according to clinical urgency, rather than applying one administrative deadline to every finding. Senior managers should receive enough aggregated information to resolve delays without accessing clinical details. This distinction matters when a programme reports high attendance but workers continue in unsuitable tasks because recommendations are sitting unread in a shared inbox.

Apparently normal surveillance results do not prove that exposure is adequately controlled. Some effects take time to develop, and no detection method is perfect. Interpret health findings alongside exposure monitoring, equipment examinations and observations of how work is carried out.

Checking Your Arrangements with Competent Safety and Occupational Health Advice

A useful review follows the process from assessment to action. Can the employer explain why particular workers are included or excluded? Do checks match the hazards? Are referrals completed, restrictions applied and findings reflected in revised assessments?

An inherited programme deserves particular scrutiny after changes to products, machinery, working hours or contractors. Continuing last year’s appointments may preserve a service schedule while missing the risks created by today’s work.

Match the Adviser to the Gap

Different gaps require different expertise. Safety consultancy can review risk assessments, responsibilities and management arrangements. Occupational hygiene support can establish or clarify exposure through suitable measurement and technical assessment. Occupational health professionals select and deliver appropriate clinical surveillance, interpret findings and advise on fitness or referral.

An occupational health risk assessment should connect the work activity with potential health effects and the required response. Where exposure information is uncertain, clinical testing alone will not resolve that uncertainty. Hygiene and safety advice may be needed alongside the health programme.

Prepare task descriptions, substance inventories, safety data sheets, exposure measurements, existing assessments and the current surveillance schedule. Include suitably limited outcome records and an outstanding action list, rather than sending unrestricted medical information. Ask advisers to identify who owns each unresolved decision and what evidence is needed to close it.

If you are an employer or facilities manager unsure which surveillance obligations apply, Acorn Safety Services (Health & Safety) can review your workplace risk assessments and management arrangements, helping connect occupational health recommendations with exposure controls. Contact us to discuss the gaps, or request a free, no-obligation consultancy quote: Get a quote.