HSE does not ask if the risk assessment existed. It asks what it covered, and when you wrote it.

Conducting and recording risk assessments under MHSWR 1999 Regulation 3(1). Employers with five or more employees must record significant findings and review assessments when circumstances change.

immut hashes the risk assessment document on creation and anchors the hash to the XRP Ledger timestamp. If an incident occurs and the document is later queried, or if a revised version is produced after the incident, the original timestamp is independently verifiable on a public blockchain without involving immut. Inspectors and courts can see that the assessment predated the accident, not that it was produced to explain it.

Wm Morrison Supermarkets fined £3.5M after conviction for failing to carry out a suitable and sufficient risk assessment for a vulnerable employee under MHSWR 1999 Reg 3 (Cirencester Crown Court, March 2023). BAM Nuttall fined £2.345M after HSE found it failed to carry out any assessment of the risks involved (Leeds, June 2024).

Preparing Risk Assessment Method Statements (RAMS) and Construction Phase Plans under CDM 2015. The Construction Phase Plan must be suitably developed prior to commencement of construction.

immut timestamps the RAMS document when it is finalised and approved, before mobilisation. If a construction incident triggers investigation, the timestamp proves the method statement was in place before work started, not prepared retrospectively. Each subsequent revision is individually timestamped, showing the sequence of changes.

BAM Nuttall fined £2.345M after HSE found the firm failed to plan the work and carried out no risk assessment before a fatality at Knostrop Weir, Leeds (June 2024). Samworth Brothers fined £1.28M after no risk assessment or method existed for a loading bay procedure (November 2024).

Providing and recording health and safety training under MHSWR 1999 Regulation 13, particularly on first employment and on exposure to new or increased risk. Toolbox talk records and induction sign-off sheets are the evidence base.

immut timestamps the completed training record or toolbox talk attendance sheet at the point it is signed off. If an employee claims they were never briefed, or if a fatality prompts investigation into pre-task briefings, the blockchain timestamp shows exactly when each document was created, not when it was uploaded to a server after the fact.

Failure to demonstrate pre-task worker briefing is a standard element of HSE enforcement action. The HSE completed 246 criminal prosecutions in 2024/25 with a 96% conviction rate and over £33M awarded in fines.

Arranging and retaining thorough examination reports for lifting equipment under LOLER 1998, and periodic inspection records for work equipment under PUWER 1998, at defined intervals.

immut timestamps the thorough examination report on the day it is issued. After a lifting accident, investigators ask whether the last inspection record is genuine or backdated. An immut-timestamped report carries independent, court-ready proof of exactly when that document entered the world, without relying on the employer's own IT system timestamps, which are controllable.

National Grid Gas fined £4M after HSE investigation found records for 769 buildings were missing, meaning gas risers went uninspected for years (Liverpool Crown Court, February 2021). The prosecution turned solely on a records failure. No physical accident was the trigger.

Issuing, authorising, and signing permits to work for hot work, confined space entry, electrical isolation, and high-risk maintenance tasks before the activity begins.

immut timestamps each stage of the permit: issue, authorisation signature, and cancellation. If a serious incident triggers prosecution and the PTW is disputed (was it signed before or after the incident?), the blockchain record is independently verifiable by any court without relying on the employer's document management system.

Tata Chemicals Europe fined £1.125M after HSE found the company failed to implement a robust permit-to-work system (Chester Crown Court, June 2024). A retrospectively completed permit to work is a criminal failure of the safe system of work, not a procedural irregularity.

Assessing health risks from hazardous substances before work begins, as required by COSHH Regulation 6, and reviewing assessments if circumstances change.

immut timestamps the COSHH assessment on creation and on each subsequent review. In an occupational disease or injury claim where causation and timing of exposure are contested, the timestamp provides independent proof that the assessment predated the worker's exposure period. This independent proof is not available from document management systems whose server logs are under employer control.

COSHH Regulation 19 provides for unlimited fines on indictment. Exposure without a suitable prior assessment is both a criminal and civil liability. The HSE completed 246 criminal prosecutions in 2024/25 with a 96% conviction rate and over £33M awarded in fines.

Creating an internal incident report at the time of occurrence and filing a RIDDOR notification to HSE within the statutory window: without delay for fatalities, within 15 days for over-seven-day injuries.

immut timestamps the internal incident report at the moment it is first created. This provides independent proof of when the document entered existence, separate from any subsequent edits. If HSE investigates the timeliness of notification or the accuracy of the original incident record, the blockchain timestamp anchors the first version's creation to a specific point in time.

Failure to report under RIDDOR 2013 Regulation 14 carries up to two years' imprisonment and an unlimited fine. A gap between the internal incident record and the RIDDOR submission date is a standard line of HSE investigation.

Pre-qualifying contractors and retaining competence assessments, pre-qualification questionnaires (PQQs), and induction records under CDM 2015 and PAS 91:2013, for the duration of the project and beyond.

immut timestamps the completed PQQ, competence certificate, or induction record at the point it is accepted. If a contractor-related incident triggers investigation and the client's competence records are queried (were they collected before or after engagement?), the blockchain timestamp answers the question without ambiguity.

CDM 2015 duty-holder prosecutions carry unlimited fines. Failure to take reasonable steps to ensure only competent contractors are appointed is a principal contractor and client duty under CDM 2015 Regulations 4 and 8.