Many business owners treat a risk assessment as a one-off task. They complete it, file it, and forget it. That is where problems begin.
A risk assessment is a living document, not a certificate. In fact, there is no fixed review period for a UK risk assessment, which surprises many employers. The law asks you to keep it current, and this guide explains what that means in practice.
Why Do Risk Assessments Need Reviewing?
Workplaces rarely stand still. Staff change, equipment ages, and layouts shift. A document written two years ago may no longer match the room it describes.
An outdated assessment gives false comfort. It suggests hazards are controlled when they may not be. That gap is exactly where accidents and enforcement action arise.
Regular review keeps the paperwork honest. It forces a fresh look at what has changed and what new risks have crept in. The aim is a plan that reflects the workplace as it is today.
There is a cultural benefit as well. A team that sees safety revisited takes it more seriously. A dusty document, by contrast, signals that nobody is really watching.
Reviews also catch drift. Small workarounds and shortcuts build up quietly over months. A fresh read spots them before they become the new normal.
When Should You Review a Risk Assessment?
There is no calendar rule, but there are clear triggers. Review the assessment whenever one of these happens.
- After an incident. Any accident or near-miss demands a fresh look.
- New equipment. Machinery or tools introduce new hazards.
- New staff or tasks. Different people and jobs change the risk picture.
- A layout change. An office refurbishment or move alters the space.
- A legal update. New regulations can change your duties.
- Reason to doubt it. If you suspect it is out of date, check it.
Many firms also set an annual reminder as good practice. That habit catches the small changes that never quite prompt a formal review.
What Does the Law Actually Say?
The duty sits in the Management of Health and Safety at Work Regulations 1999. Under regulation 3, employers must assess risks and review that assessment when it may no longer be valid. It sets no fixed interval.
The regulator takes the same line. Guidance from the HSE says to review when things change, not on a set date. The responsibility is to stay current, however often that requires.
So “how often” is really “whenever it matters.” A stable, low-risk office may go a long time between changes. A busy site with new kit may need reviews far more frequently.
This flexible approach is deliberate. A fixed annual rule would let a major change sit unaddressed for months. Tying reviews to real events keeps the assessment closer to the truth.
It does put the onus on you, though. You cannot simply wait for a reminder to appear. Spotting the trigger is part of the duty itself.
How Do You Keep Reviews Manageable?
Reviews need not be a burden. A simple routine keeps them light and consistent.
- Set a reminder: an annual check date as a backstop.
- Log every change: note new equipment, staff, or layouts as they happen.
- Involve your team: the people doing the work spot hazards first.
- Record the review: date it and note what changed.
- Act on findings: update controls, do not just re-file the paper.
Keeping a short change log makes each review quick. You are updating a live record, not starting from scratch every time.
Software can help, but it is not essential. A simple shared spreadsheet works for many small firms. The habit of logging changes matters far more than the tool you use.
What Happens If You Skip Reviews?
The risks are practical and legal. An out-of-date assessment can leave real hazards uncontrolled, which puts people at risk. That is the first and most important concern.
There is a legal exposure too. If an inspector finds an assessment that ignores obvious changes, enforcement can follow. After an accident, an outdated document offers little defence.
Firms that expand often feel this most. A business moving to a new London borough or larger unit inherits fresh risks with the new space. A prompt review turns that change into a controlled one.
What to Remember
- UK law sets no fixed review date for a risk assessment.
- Review whenever the workplace or the law changes.
- Incidents, new equipment, and layout changes are key triggers.
- Regulation 3 of the 1999 Regulations requires you to stay current.
- Keep a change log so reviews stay quick and consistent.
- A stale assessment is both a safety risk and a legal one.
Keeping Your Assessment Alive
A risk assessment works only while it reflects reality. Treat it as a living record, review it when things change, and log what you do. Build the habit into your normal routine rather than leaving it to chance. That simple discipline protects both your staff and your business.
Frequently Asked Questions
Is There a Legal Deadline to Review a Risk Assessment?
No. UK law sets no fixed review date. You must review whenever the assessment may no longer be valid, such as after a change or an incident.
How Often Do Most Businesses Review Theirs?
Many set an annual reminder as good practice. That is a backstop, not a legal rule. Real reviews should follow actual changes in the workplace.
Who Is Responsible for the Review?
The employer or responsible person holds the duty. They can delegate the work but not the accountability. Involving frontline staff makes the review far more accurate.
Do Small Businesses Need to Review Assessments Too?
Yes. The duty applies regardless of size. Smaller firms may review less often, but the same triggers and legal responsibilities still apply.
