How to prepare your health records for an HSE inspection

An inspection rarely turns on whether you hold records. It turns on whether you can show the thread running from the hazard, through the surveillance, to what you did about the result. That thread is what to prepare.

Know which records you must keep, and for how long

Health records for COSHH surveillance are kept for 40 years from the last entry. Other regimes carry their own requirements. Write down, per hazard, what you keep and for how long — and check that your provider's retention matches. If you have changed provider in that time, confirm the historical records actually came across.

Separate the health record from the medical record

The health record is the employer's: who was exposed, what surveillance was done, when, and the fitness outcome. The medical record is confidential to the clinician. Keeping them apart is not an administrative nicety — producing confidential clinical detail to an inspector is a problem in itself, and being unable to produce the health record is a different problem.

Check every exposed worker has a current entry

Run your surveillance list against your current headcount, including agency and contract staff where you control their exposure. Gaps usually appear in three places: recent starters who were never added, leavers whose records were closed early, and people who moved between roles and quietly dropped out of scope. Close those gaps before someone else finds them.

Show the link from risk assessment to surveillance

An inspector will want to see why these people are in surveillance and those people are not. Keep the risk assessment, the exposure data and the surveillance list where they can be read together. Being unable to explain the selection is a more serious finding than a missed appointment.

Evidence what you did when someone was flagged

Where surveillance identified early signs of harm, be able to show what followed: the review of the task, the change to controls, the restriction or the referral. This is the single most common weak point. An outcome recorded and not acted on reads as a control failure you already knew about.

Keep it somewhere you can produce it on the day

None of the above helps if it takes a fortnight to assemble. Know who holds each record, how to get it, and how quickly. A short internal note naming the system, the owner and the retrieval route turns an inspection from a scramble into a morning.