COSHH: A Comprehensive Guide to Managing Hazardous Substances in 2026

Could your current approach to chemical safety withstand a surprise HSE inspection tomorrow, or is your compliance hidden somewhere at the bottom of a dusty filing cabinet? Managing coshh requirements often feels like a relentless battle against a mountain of Safety Data Sheets and fragmented paper records. It’s understandable that many health and safety managers feel overwhelmed by the sheer volume of documentation required to keep their teams safe, especially when overseeing multiple sites or diverse teams.

You likely recognise that the old ways of tracking hazardous substances are no longer fit for a modern, fast-paced workplace. This guide will help you master the essentials of the Control of Substances Hazardous to Health Regulations 2002 whilst showing you how to transition from cumbersome manual processes to streamlined digital compliance. We’ll provide the clarity you need to ensure every staff member is protected and every risk is accounted for.

We will explore the critical 2026 updates to Workplace Exposure Limits, including new standards for silica and diesel engine exhaust emissions. By the end of this article, you’ll understand how to move towards a safer environment through an organised, efficient digital system that provides total oversight of your safety obligations.

What is COSHH? Understanding the UK Legal Framework

The Health and Safety Executive (HSE) enforces the Control of Substances Hazardous to Health Regulations 2002, which serves as the primary UK legislation for protecting workers from toxic materials. This framework isn’t just a set of guidelines; it’s a statutory requirement that places a clear duty of care on every employer across Great Britain. You’re legally obligated to prevent or adequately control exposure to substances that could cause ill health, ranging from mild skin irritation to life-changing respiratory diseases.

In 2026, the necessity for robust coshh management has never been clearer. Recent data from the HSE highlighted 138 workplace fatalities, a figure that underscores the severe risks associated with inadequate safety protocols. Beyond the moral imperative to keep staff safe, the financial risks of non-compliance are significant. For example, a skip manufacturer was recently fined £30,000 for failing to protect its workforce from carcinogenic welding fumes. Compliance is mandatory.

Your responsibilities also extend to the public and contractors who may be affected by your work. With the 2026 public consultation on reforms to the Great Britain Classification, Labelling and Packaging (CLP) Regulation currently underway, staying informed is vital. These shifting standards reflect a broader trend towards stricter oversight of chemical risks, making digital transparency a key advantage for modern businesses.

Which substances are covered by COSHH?

The scope of the regulations is broader than many realise. It includes common workplace chemicals like industrial bleach, cleaning agents, and solvent-based adhesives. However, it also covers substances that your business creates during daily operations. Dusts, vapours, and mists are often the most difficult to manage because they are invisible to the naked eye. For instance, the 2026 update to Workplace Exposure Limits (WELs) has reduced the limit for respirable crystalline silica to 0.05 mg/m³ and introduced a new limit for diesel engine exhaust emissions. Biological agents, such as bacteria or micro-organisms found in waste processing or healthcare, are also strictly regulated under this framework.

Exemptions: What COSHH does NOT cover

Whilst the regulations are broad, it’s important to understand that coshh doesn’t apply to every hazardous material. Some substances carry such unique risks that they are governed by their own specific UK legislation. Asbestos and lead are two primary examples; they require specialised monitoring and handling protocols that fall outside the standard 2002 Regulations. Similarly, radioactive materials and explosive substances are managed under separate statutory regimes. Materials that are hazardous only because of their physical properties, such as high pressure, extreme temperatures, or flammable characteristics, are also excluded, as these are typically covered by separate fire and equipment safety laws.

How to Carry Out a COSHH Risk Assessment

Conducting a risk assessment isn’t just about ticking boxes; it’s about building a clear picture of how substances behave in your specific environment. A structured, five-step approach ensures that no hazard is overlooked and that your control measures are proportionate to the actual risk. By following this methodical process, you move from reactive safety management to a proactive strategy that protects your workforce whilst ensuring full legal compliance.

Step 1: Identifying hazardous substances in your workplace

Start by auditing your entire inventory. You should check every product label for the standard red and white CLP hazard symbols, but don’t stop there. You must review the Safety Data Sheets (SDS) provided by your suppliers, as these contain the technical details necessary for a thorough coshh assessment. It’s also vital to identify substances that aren’t bought in a bottle but are created by your work processes. Wood dust from cutting, silica dust from masonry, or fumes from welding are often more dangerous than the chemicals you store. You can find detailed HSE guidance on hazardous substances to help you categorise these process-generated risks correctly.

Step 2: Assessing the risk to health

Once you’ve identified the substances, you need to determine how they could actually cause harm. Consider the routes of entry: can they be inhaled, swallowed, or absorbed through skin contact? You must also evaluate the frequency and duration of exposure for different groups of staff, including cleaners and maintenance teams who might be at higher risk. For those looking to streamline this complex data gathering, Mastering Health and Safety Risk Assessment Software provides a clear roadmap for choosing tools that automate these calculations.

After assessing the risks, you must evaluate your existing control measures and decide if further action is required. This involves applying the hierarchy of control, prioritising the elimination or substitution of hazardous materials over the use of Personal Protective Equipment (PPE). If your business employs five or more people, you’re legally required to record your findings. These records should be living documents, reviewed regularly and updated immediately if processes change or if new Workplace Exposure Limits are introduced. Transitioning to a digital system at be-safetech.com can make this ongoing review process far more manageable by providing automated reminders and centralised data storage. This ensures your coshh assessments remain accurate and accessible at all times.

Implementing Effective Control Measures and Monitoring

Once you’ve identified the risks within your workplace, the focus shifts to implementing robust control measures that reduce exposure to the lowest level reasonably practicable. This phase is about moving beyond theory and into practical, operational excellence. It’s not enough to simply identify a hazard; you must actively manage it through a structured approach that prioritises long-term safety over temporary fixes. Effective coshh management relies on a combination of physical barriers, procedural safeguards, and a well-trained workforce.

The Hierarchy of Control for hazardous substances

The most effective way to manage risk is to follow the hierarchy of control. This system forces you to consider the most reliable methods first, rather than jumping straight to the easiest option. PPE is often the default choice for many businesses, but it’s actually the least reliable because it depends entirely on the individual wearing it correctly every time.

• Elimination: The gold standard of safety. If you can remove a hazardous substance from your process entirely, you remove the risk to your employees and the administrative burden of tracking it.
• Substitution: If elimination isn’t possible, look for a safer alternative. This might involve swapping a solvent-based paint for a water-based one or using a pellet form of a chemical instead of a fine powder that creates dangerous dust.
• Engineering Controls: These are physical changes to the workplace, such as Local Exhaust Ventilation (LEV) or enclosing a process to prevent fumes from escaping.
• Administrative Controls: Implementing safe working procedures, reducing the number of employees in a high-risk area, and ensuring clear signage is in place.
• PPE: Masks, gloves, and goggles should be your last line of defence, used only when other measures cannot sufficiently control the risk.

Workplace Exposure Limits (WELs) and monitoring

In 2026, staying compliant requires a precise understanding of Workplace Exposure Limits. These are legal limits on the concentration of hazardous substances in the air, averaged over a specific period. The UK Health and Safety Executive (HSE) provides the definitive list of these limits in the EH40/2005 document. It’s critical to note that as of July 2026, the WEL for respirable crystalline silica has been reduced to 0.05 mg/m³; additionally, a new WEL of 0.05 mg/m³ for diesel engine exhaust emissions is now in effect.

To ensure you remain within these legal boundaries, you may need to organise regular air monitoring. This technical data provides the proof that your engineering controls, like LEV systems, are working effectively. Remember that LEV equipment must be thoroughly examined and tested by a competent person at least every 14 months to meet coshh requirements. For substances that can cause serious long-term health issues, such as certain isocyanates or carcinogenic fumes, you must also implement health surveillance. This involves regular medical checks for staff to catch early signs of work-related ill health. You’re legally required to keep these health records for 40 years, making a digital storage solution essential for maintaining a reliable, long-term audit trail.

Modernising Compliance: Moving from Paper to Digital COSHH

Many organisations still rely on ring binders and manual spreadsheets to track their coshh obligations. Whilst this might seem cost-effective initially, the hidden administrative burden is substantial. Searching for a specific Safety Data Sheet across multiple sites can take hours, and paper records are notoriously difficult to keep current as regulations evolve. This traditional approach often creates a false sense of security that quickly evaporates when faced with the rigour of a modern audit.

The pitfalls of paper safety management

Manual systems frequently fail at the most critical moments, such as during an unannounced HSE inspection. If you can’t produce a valid risk assessment or proof of training immediately, you risk significant fines or a Fee for Intervention charge. Paper lacks real-time visibility, meaning senior management often doesn’t know compliance is slipping until an incident occurs. For a deeper look at the current technology landscape, see The Ultimate Guide to Health and Safety Compliance Software.

Benefits of a cloud-based EHS platform

Moving to a cloud-based platform transforms coshh from a bureaucratic chore into a streamlined business process. Centralised storage ensures that every team member, regardless of their location, accesses the same updated SDS files and safety procedures. When a regulation changes or a new substance is introduced, you can update the procedure once and push it live across the entire organisation instantly. This eliminates the risk of staff following outdated guidance found in an old folder.

Automated reminders are another major advantage of digital transformation. Instead of manually tracking review dates for hundreds of assessments, a digital system alerts you when a review is due or when health surveillance is required for a specific staff member. This proactive approach ensures that compliance never falls through the cracks, providing peace of mind for those responsible for workplace safety.

Modern digital tools are designed with a mobile-first philosophy, putting safety information directly into the hands of site-based workers via their smartphones. This is particularly beneficial for a diverse, multicultural workforce. Digital platforms can offer visual aids and structured workflows that make safety instructions more accessible and easier to understand than dense, text-heavy paper documents. You can begin your transition to a more efficient, reliable safety system by exploring the digital tools available at be-safetech.com.

Achieving Total Oversight with Compliance Genie

Compliance Genie provides a unified environment where complex safety requirements become manageable, everyday tasks. By centralising your coshh data, the platform eliminates the fragmentation that often leads to compliance gaps. This isn’t just about storing documents; it’s about creating a living safety ecosystem that evolves alongside your business and the latest UK regulations. It offers a sense of total control that manual systems simply cannot match.

Digitising your COSHH workflow

The platform simplifies the creation of robust risk assessments through the use of intelligently designed, customisable templates. You can build comprehensive assessments in minutes, ensuring that every identified hazard is paired with the correct control measure from the hierarchy discussed earlier. One of the most powerful features is the ability to capture digital signatures directly on mobile devices. This provides undeniable proof that your staff have read and understood their safety briefs, which is a critical requirement during any legal enquiry or audit. To understand how these digital tools fit into the wider industry landscape, explore The Future of Safety Management Software.

Managing Safety Data Sheets (SDS) also becomes an effortless process. Instead of chasing suppliers for updates, you can maintain a digital inventory that’s accessible to every worker on-site. This mobile-first approach empowers your team by putting vital safety protocols in their pockets, ensuring they can check chemical handling procedures or emergency first aid measures instantly, regardless of their location.

Reporting and analytics for senior stakeholders

For health and safety managers, the ability to demonstrate compliance to senior stakeholders is vital for operational harmony. Compliance Genie allows you to generate instant, detailed reports that highlight your current safety status across multiple sites or departments. This level of transparency is essential for board meetings and is invaluable when preparing for a visit from the HSE. If your operations involve external teams, you can also track contractor compliance alongside your own workforce using Contractor Genie, ensuring that everyone on your site adheres to the same high standards.

Safety data is sensitive, and protecting it is a priority for any modern organisation. Compliance Genie is both ISO 9001 and ISO 27001 certified, providing the highest tier of data security and information management for UK businesses. This certification ensures that your coshh records, health surveillance data, and employee training logs are stored in a secure, encrypted environment. By moving away from manual filing and embracing an award-winning EHS platform, you gain more than just efficiency; you gain the peace of mind that comes with total operational oversight. You can see these features in action and start your journey towards streamlined safety management when you Book a demo of Compliance Genie today.

Future-Proofing Your Workplace Safety Strategy

Ensuring your workplace remains safe and compliant in 2026 requires more than just a passing knowledge of the law; it demands a structured approach to risk assessment and a commitment to maintaining rigorous control measures. By moving away from fragmented paper records, you eliminate the risk of missing critical updates to Workplace Exposure Limits or losing essential Safety Data Sheets. This transition ensures that your safety protocols are always current and accessible to those who need them most.

Embracing a digital-first strategy provides the total oversight needed to protect your workforce and your business reputation. Compliance Genie offers an award-winning, mobile-first solution designed specifically for real-world site use. As an ISO 9001 and 27001 certified platform, it ensures your sensitive safety data remains secure whilst giving your team instant access to life-saving protocols. It’s time to master your coshh obligations and replace administrative stress with operational clarity. You can Streamline your COSHH compliance with Compliance Genie and build a safer, more efficient future for your entire organisation. You have the tools to make workplace safety a seamless part of your daily operations.

Frequently Asked Questions

What does COSHH stand for and who does it apply to?

COSHH stands for the Control of Substances Hazardous to Health. These regulations apply to almost every employer in the UK, as most workplaces use or produce substances that could cause harm. Whether you run a small cleaning company or a large manufacturing plant, you have a legal duty to protect your staff and anyone else who might be affected by your work activities.

Is a COSHH assessment a legal requirement for small businesses?

Yes, it is a mandatory requirement for all employers. All businesses, regardless of their size, must identify hazards and assess the risks to their workforce. If your business employs five or more people, you’re legally required to record the significant findings of your assessment in writing. Even for smaller teams, having a clear record is considered best practice to demonstrate that you’ve met your legal duty of care.

How often should COSHH risk assessments be reviewed?

You should review your assessments regularly to ensure they remain effective and valid. There is no fixed legal expiry date, but you must update them if your processes change, if you introduce new chemicals, or if new legislation is released. For instance, the 2026 changes to Workplace Exposure Limits for silica and diesel exhaust mean many existing assessments will require an immediate review to remain compliant with current standards.

Can I use a manufacturer’s Safety Data Sheet as my COSHH assessment?

No, an SDS is not a substitute for a proper coshh assessment. Whilst the Safety Data Sheet provides essential technical information from the manufacturer, it doesn’t account for your specific workplace conditions. Your assessment must describe how the substance is used in your environment, who is exposed, and the specific control measures, such as ventilation or PPE, that you have implemented on-site.

What happens if my business fails to comply with COSHH regulations?

Failure to comply can lead to severe consequences from the Health and Safety Executive. Inspectors can issue improvement or prohibition notices, and serious breaches often result in prosecution with unlimited fines. Additionally, the HSE operates a Fee for Intervention scheme, where businesses found in material breach must pay for the inspector’s time spent identifying and resolving the issue, which can be a significant financial burden.

Do I need to provide COSHH training to all my employees?

You must provide information, instruction, and training to any employee who is likely to be exposed to hazardous substances during their work. This instruction should cover the nature of the risks, the correct use of control measures, and emergency procedures. Training isn’t a one-off event; you should provide refresher sessions whenever your safety protocols change or when new hazards are identified in your workplace.

What are the 9 COSHH hazard symbols and what do they mean?

These are standard CLP pictograms used to identify specific risks. They include symbols for explosive, flammable, and oxidising materials, as well as gases under pressure and corrosive substances. Other symbols warn of acute toxicity, long-term health hazards like carcinogens, general irritants, and substances that are hazardous to the aquatic environment. Each symbol serves as a vital visual warning for your team to recognise hazards instantly.

How long must I keep COSHH health surveillance records?

You are legally required to keep these records for at least 40 years from the date of the last entry. This exceptionally long period is necessary because many health conditions related to coshh, such as occupational asthma or certain cancers, may not manifest until many years after the initial exposure. Keeping secure digital records is the most reliable way to ensure this data remains accessible and protected over four decades.