Workplace Health & Safety Compliance Explained

Workplace health and safety compliance is the set of legal duties, written programs, and day-to-day practices employers use to prevent occupational injury and illness and to prove, to a regulator, that they are meeting the standard the law expects. Occupational health is the clinical half of that work. It answers the question of what is occupational health in practice, and how a worker's fitness for the job gets protected. Compliance is the regulatory paperwork that surrounds it. In the United States that standard is set by the Occupational Safety and Health Administration; in the United Kingdom it is enforced by the Health and Safety Executive; in most other jurisdictions an equivalent authority does the same job. The compliance surface for a typical employer covers four things a reader can act on today: a written emergency action plan, safety data sheets for every hazardous chemical on site, a personal protective equipment program, and a working incident reporting process.

This guide explains occupational health as a field, walks through each of those four compliance pillars, and closes with the piece hiring teams tend to forget: safety records start at onboarding, so screening and role fit at the point of hire matter more than most compliance programs admit. Fabric is an AI interview platform focused on Round 1 of hiring, not an EHS tool, but the roles a company hires into are the roles that create the safety risk profile it will later have to manage.

→ See the Labor Law & Compliance pillar

What is occupational health?

Occupational health is the branch of public health concerned with preventing work-related injury and illness and with keeping workers physically, mentally, and socially well enough to do their jobs. It sits at the intersection of medicine, occupational hygiene, ergonomics, safety engineering, and employment law. In practice it covers pre-employment medicals, workplace hazard assessments, health surveillance for exposed workers, return-to-work planning after injury, and the design of controls that reduce exposure in the first place.

The field is often searched for as "occasional health," a common misspelling; the correct term is occupational health. Its practitioners include occupational physicians, occupational health nurses, industrial hygienists, safety engineers, and ergonomists, working either inside the employer or through a contracted provider. The World Health Organization defines occupational health as the promotion and maintenance of the highest degree of physical, mental, and social well-being of workers in all occupations, and roughly two billion working people worldwide fall under some form of occupational health coverage.

What workplace health and safety compliance actually covers

Compliance is not a single document. It is a stack of written programs, records, training, and evidence that together demonstrate an employer is doing what the law requires. The stack usually contains:

A written health and safety policy stating who owns what.
A risk assessment for every significant hazard on site, kept current after any material change.
A written emergency action plan and periodic drills.
Safety data sheets and hazard communication for every hazardous chemical.
A personal protective equipment program: assessment, selection, provision, training, and replacement.
An incident reporting and investigation process, with a record of every injury, illness, and near miss.
Training records tied to job role, refreshed on schedule.
Health surveillance where exposure warrants it (noise, respirable dust, vibration, ionising radiation, and similar).

A recruiter, HR generalist, or line manager does not need to be an EHS specialist to understand the shape of this. They do need to know which programs the business has, where the records live, and who to escalate to when an incident happens.

Emergency action plans: what a compliant plan contains

An emergency action plan is the written procedure that tells employees how to respond to fire, chemical release, medical emergency, active threat, severe weather, and any other event that could injure people or damage the workplace. Under OSHA 29 CFR 1910.38, an employer with more than 10 employees must have the plan in writing and available to workers; smaller employers may communicate it orally.

A compliant plan covers, at minimum:

Procedures for reporting a fire or other emergency.
Procedures for emergency evacuation, including evacuation type and exit route assignments.
Procedures for employees who remain to operate critical operations before they evacuate.
Procedures to account for all employees after evacuation.
Procedures for employees performing rescue or medical duties.
The name or job title of every employee who may be contacted for more information about the plan.

Post the plan where employees can find it, walk through it with every new hire, and run a drill at least annually. A plan that lives in a binder no one has opened is not a plan; it is documentation waiting to fail its first real test.

What is a Safety Data Sheet (SDS)?

A safety data sheet is a standardised document that tells anyone handling a hazardous chemical what it is, how it can hurt them, and what to do if something goes wrong. It replaced the older "material safety data sheet" (MSDS) format under OSHA's Hazard Communication Standard, which was aligned to the Globally Harmonized System (GHS) of Classification and Labelling of Chemicals.

Every SDS has 16 standardised sections in a fixed order, from identification of the substance and its supplier through hazard identification, first-aid measures, fire-fighting, accidental release, handling and storage, exposure controls and PPE, physical and chemical properties, stability, toxicology, ecological information, disposal, transport, and regulatory information. The consistency of the format is the point: a warehouse supervisor should be able to open any SDS from any manufacturer and find the same information in the same place.

Employers are required to maintain an SDS for every hazardous chemical known to be present in the workplace, keep them accessible to employees during every work shift, and train workers on how to read and use them. OSHA's Hazard Communication Standard, 29 CFR 1910.1200, is the source regulation in the United States.

What is personal protective equipment (PPE)?

Personal protective equipment, or PPE, is anything an employee wears or uses to reduce exposure to a workplace hazard that engineering or administrative controls could not eliminate. It includes head protection, eye and face protection, hearing protection, respiratory protection, hand and arm protection, foot protection, fall protection harnesses, and hi-vis clothing. It is the last line of defence in the standard "hierarchy of controls," which is why a compliance programme leans on it only after elimination, substitution, engineering controls, and administrative controls have been considered first.

A defensible PPE programme has four parts:

A written hazard assessment that identifies which body parts are at risk and from what.
Selection of PPE that is fit for the identified hazard, sized correctly, and certified to the relevant standard.
Training on when to wear it, how to fit it, how to maintain it, and what its limits are.
Records that show the assessment was done, the PPE was issued, and the training happened.

PPE that is issued but not worn correctly protects nobody, and a regulator will treat "issued and ignored" as a failure of the programme rather than a failure of the individual. The employer owns the PPE outcome, not the employee.

Incident reporting and the critical incident technique

Incident reporting is the process of recording every workplace injury, illness, near miss, and dangerous occurrence so the employer can investigate, learn, and prevent a recurrence. The written record is the incident report; it is the primary artefact a regulator, insurer, or plaintiff's lawyer will ask for after an event, and its absence is often more damaging than its contents.

A useful incident report captures at least: who was involved, where and when the event happened, what was being done at the time, what actually occurred, the immediate action taken (first aid, evacuation, isolation of the hazard), the injury or damage sustained, contributing factors, and the corrective action agreed with a named owner and due date. Serious events (fatalities, in-patient hospitalisations, amputations, loss of an eye in the US, or the "RIDDOR" list in the UK) trigger a separate reporting duty to the regulator on a defined timeline.

The critical incident technique

The critical incident technique is a qualitative analysis method that treats each recorded incident as a data point about how the work is actually done, not how it was designed to be done. Developed by John Flanagan in 1954 for aviation human-factors research, it asks investigators to collect first-hand descriptions of specific events, classify the behaviours and conditions that led to each one, and use the pattern across many events to identify systemic weaknesses. In an occupational-health setting it is one of the most useful tools for turning a stack of near-miss reports into a shortlist of concrete controls to change, rather than filing them as noise.

Health and Safety Executive: meaning, remit, and where it applies

The Health and Safety Executive, or HSE, is the United Kingdom's national regulator for workplace health and safety. Its statutory remit under the Health and Safety at Work etc. Act 1974 is to enforce that legislation and its subordinate regulations, to inspect workplaces, to investigate serious incidents, to prosecute breaches, and to publish guidance that employers can rely on. It is roughly the UK counterpart to OSHA in the United States, though its enforcement powers and inspection cadence differ.

The HSE publishes annual workplace injury statistics for Great Britain, which are the standard reference for anyone building a UK-facing safety case. Employers operating in Great Britain are subject to HSE regulation directly; employers based elsewhere but with UK sites or workers should treat HSE guidance as the operative standard for those locations, rather than assuming a home-country programme translates automatically.

A practical compliance checklist for employers

Treat this as a quarterly review, not a one-time exercise:

Written health and safety policy, signed at the top of the business, dated within the last 12 months.
Current risk assessment for every significant hazard, reviewed after any material change to the work.
Written emergency action plan posted where employees can find it, with a drill in the last 12 months.
Complete SDS library for every hazardous chemical on site, accessible during every work shift.
Documented PPE hazard assessment, current PPE issued, training records on file.
Working incident report process with a named owner, corrective actions tracked to closure.
Statutory reporting register: nothing overdue to OSHA (US), HSE (UK), or the equivalent local regulator.
Training matrix by role, refreshers scheduled, expiring certifications flagged.
Health surveillance in place for any role with exposure that requires it (noise, respirable dust, vibration, ionising radiation, others).
A clear escalation path from line manager to safety lead to executive owner.

If a line above cannot be evidenced with a document in the last 12 months, that is where the next quarter's work sits.

Where hiring and safety compliance meet

Safety records start at the point of hire. The role a company recruits into defines the risk profile it will later have to manage, and the person hired into that role either raises or lowers the odds of an incident from day one. For enterprises doing bulk hiring, screening at scale is where role fit either catches physical demands, exposure history, and prior training, or misses them; when it misses them, the compliance programme picks up the cost downstream.

Fabric is an AI interview platform that runs Round 1 for tech and non-tech roles. It screens resumes, checks eligibility parameters such as budget, location, and years of experience, and runs a conversational AI interview so a human recruiter or panel gets a smaller, verified shortlist to work through. It does not sit inside the EHS stack, and it does not make hiring decisions on its own: the recruiter or panel using Fabric remains responsible for who gets hired. It shortens the earliest stage of the funnel so the roles that carry a workplace safety burden reach a real human faster, with the right screening already done.

See how Fabric runs Round 1

Screening eats 80% of time-to-hire. Get it back.

See Fabric run resume screening, eligibility checks, and Round 1 interviews on a live role.

Book a 30-minute walkthrough

FAQ

What do people in occupational health do?

Occupational health professionals assess workplace hazards, run pre-employment and periodic medical screenings, manage return-to-work after injury, and advise employers on controls that reduce exposure to physical, chemical, biological, and psychosocial risks.

What is an example of occupational health?

A construction firm running mandatory hearing tests for site workers, providing certified PPE, and investigating every reported near miss is a working example of an occupational health program in practice.

What are the 5 steps in occupational health and safety?

A common five-step cycle is identify hazards, assess the risk, control the risk with elimination or substitution or engineering or administrative or PPE controls, record what was done, and review after any incident or change to the work.

What is an occupational health assessment?

It is a structured medical review, done by an occupational health clinician, that evaluates whether an employee is fit for a specific role given its physical and psychological demands and any existing health conditions.

What industries benefit the most from occupational health services?

Construction, manufacturing, mining, oil and gas, transport, healthcare, and warehousing see the highest return because their injury rates and regulatory exposure are the largest, but any workplace with repeated physical or psychosocial risk benefits.

What is an incident report?

An incident report is the written record of any workplace injury, illness, near miss, or dangerous occurrence, capturing what happened, who was involved, immediate action taken, and the corrective action agreed. It is the primary evidence a regulator will ask for after an event.

Workplace Health & Safety Compliance: A Practical Guide