The General Application Regulations 2007: What Irish Employers Must Do
Picture this: it’s Sunday evening and you’re suddenly wondering whether your workplace actually ticks the right boxes come Monday morning. You’ve heard about the safety health and welfare at work general application regulations 2007, but between running a team and keeping operations moving, the details have never quite made it to the top of your to-do list.
Here’s the thing. The Safety, Health and Welfare at Work (General Application) Regulations 2007 are not just background legislation. They are a detailed, practical rulebook covering 14 separate parts of workplace life, from how you set up a workstation to how you report a serious accident. The Health and Safety Authority enforces them, and gaps in compliance can carry real consequences.
This guide is not a dry legislative summary. It is a walkthrough of what these regulations actually mean for your workplace, your people, and your processes. By the time you reach the end, you will know which parts apply to your sector, what your specific obligations look like in practice, and where to focus your energy first. Let’s get into it.
What Are the General Application Regulations 2007?
The Safety, Health and Welfare at Work (General Application) Regulations 2007 (S.I. No. 299 of 2007) came into force on 1 November 2007. They are made under the Safety, Health and Welfare at Work Act 2005, which is the parent legislation setting the broad framework for health and safety in the workplace in Ireland. If you want the full picture of how that parent Act works, our plain-English guide to the Safety, Health and Welfare at Work Act 2005 is a useful starting point before working through what the Regulations require.
Think of the relationship this way: the 2005 Act establishes the principles; the General Application Regulations translate those principles into specific, enforceable duties. Across 14 Parts, they cover everything from workplace design, work equipment, PPE, and manual handling, through to display screen equipment, noise, vibration, vulnerable workers, and accident reporting.
One important housekeeping point: the Regulations were substantively updated in 2023. If your compliance policies were last reviewed against an older version of the text, you are working from an outdated baseline and need to reconcile against the revised version now.
Enforcement sits with the Health and Safety Authority (HSA). Breaches can result in improvement notices, prohibition notices, or prosecution. This is not a paperwork exercise.
This guide works through each Part on a practical level: what you need to have in place, what records you need to keep, and where the common gaps are.
Who Do the Regulations Apply To, and Who Is Excluded?
The Regulations cast a wider net than most employers expect. If you run an office, a retail outlet, a hotel, a clinic, or a warehouse, these rules apply to you, not just to factories and building sites. That assumption, that this is “industrial” legislation, is one of the more costly misconceptions in Irish workplace compliance.
Who is covered?
Scope extends well beyond your directly employed staff. If you have agency workers on your premises, you carry obligations towards them as a host employer. If self-employed contractors work on your site, you have duties towards them too. Employers who supply or hire out work equipment also carry compliance obligations in relation to that equipment, a point that often catches businesses off guard.
Critically, you cannot hand responsibility for agency workers to the staffing agency and consider the matter closed. The Regulations place specific duties on the host employer, and the HSA has real enforcement powers it uses across all sectors, not only in high-risk industries.
Who is excluded?
A defined set of sectors falls outside the Regulations’ scope because separate, sector-specific rules apply to them. These include:
- Means of transport on public roads
- Temporary and mobile work sites governed by the Construction Regulations
- Extractive industries
- Fishing vessels
- Agricultural and forestry land
If your operations fall into one of these categories, check which dedicated regime applies rather than treating the General Application Regulations as your primary reference.
Why this matters before you do anything else
Confirming scope and identifying the relevant Parts is the essential first step, as covered above.
What Does ‘So Far As Is Reasonably Practicable’ Actually Mean?
That standard is ‘so far as is reasonably practicable’, and it appears constantly throughout the legislation. It is not a get-out clause. It is a proportionality test.
What the test actually requires is that you weigh the risk of harm against the cost, time, and effort of controlling it. If a control measure would cost you vastly more than the risk warrants, you may not be legally required to implement it. However, the burden of proving that disproportion rests with you, not the HSA. If an inspector arrives and you have not implemented a control, you must be able to justify why.
In practice, this standard closes off most of the excuses employers reach for. A small office cannot decline to carry out DSE assessments on cost grounds; the risk to screen workers is real and the cost of assessment is minimal. A manufacturer cannot defer manual handling training because production is busy; the obligation exists independently of your schedule.
The HSA and Irish courts interpret this standard strictly. Employers have been found in breach for failing to implement controls that were readily available and inexpensive, even where no incident had actually occurred. Low cost and easy availability create a strong presumption that implementation is practicable.
Documentation is what makes the standard defensible. Record your risk assessment process, the hazards you identified, the controls you chose, and, critically, your reasoning for any controls you did not implement. That written rationale is what transforms ‘reasonably practicable’ from vague legal language into an auditable compliance position you can stand over during an HSA investigation.
Part 2: Getting Your Physical Workplace Right
Part 2, Chapter 1 of the General Application Regulations covers the built environment: structural stability, ventilation, temperature, lighting, floors, walls, traffic routes, and welfare facilities. These are not aspirational standards; they are enforceable duties under Irish health and safety law.
Temperature is one of the most commonly misunderstood obligations here. There is no single prescribed minimum or maximum. What the Regulations require is a reasonable room temperature during working hours, plus an explicit duty to provide and maintain heating equipment. In practice, this means your risk assessment should document how thermal comfort is managed across different areas of your site, particularly where conditions vary between offices, warehouses, or outdoor-adjacent spaces.
Lighting must be sufficient for the specific work being carried out. Natural light should be used where practicable, and emergency lighting is mandatory wherever its failure would create a risk to worker safety.
Welfare facilities are where HSA inspectors frequently find gaps. Sufficient toilets, washing facilities with hot and cold running water, rest areas, and dedicated facilities for pregnant workers and nursing mothers are all statutory requirements. If these are missing or inadequate, that is a compliance failure, not a minor oversight. A well-structured health and safety group can help ensure welfare standards are reviewed regularly and before they become inspection findings.
Chapter 2 of Part 2 shifts to work equipment. Every piece of equipment must be suitable for its intended use, properly maintained, and accompanied by adequate training and written instructions before any employee uses it.
Part 2: Personal Protective Equipment Obligations
PPE sits at the bottom of the hierarchy of controls, not the top. Before you issue a single pair of gloves or a hi-vis vest, the Regulations require you to assess whether the risk can be eliminated at source, then reduced through engineering or administrative controls. Reaching straight for PPE without working through that process is a compliance failure, regardless of how much equipment you provide.
Where PPE genuinely is the right control, your obligations go well beyond ordering a job lot of hard hats. You must carry out a PPE assessment specific to the risk, select equipment appropriate to that risk, provide it free of charge, and ensure it fits the individual employee. A box of medium-sized gloves left in a cupboard for anyone to grab does not satisfy the Regulations. If you want to understand who bears legal responsibility for PPE in the workplace, the answer is more layered than most employers expect.
Your operational obligations continue after the equipment is issued. You must:
- Provide adequate, dedicated storage for PPE when it is not in use
- Replace damaged or defective equipment promptly
- Keep records of what has been issued to each individual employee
Employees carry a duty to use PPE correctly and report defects. However, the employer remains responsible for enforcing that duty and for ensuring that training on correct use has been provided and documented. A verbal walkthrough does not constitute training for these purposes.
One final point worth flagging: if your PPE policy was last reviewed before the 2023 amendments, check it against the current text of the Regulations rather than older HSA guidance, which may no longer reflect the current requirements.
Part 2: Manual Handling, Training Is Not Enough on Its Own
Manual handling sits in the same chapter as PPE but carries a distinct three-step duty: avoid the need for manual handling where possible, assess the risk where avoidance is not feasible, and then reduce that risk to the lowest level reasonably practicable. Training is only step three. Employers who jump straight to booking a manual handling course without first asking whether the task can be redesigned, mechanised, or eliminated are not compliant, regardless of how good the training is. The HSA is explicit on this: training alone will not reduce injury rates.
The TILE framework is your assessment structure
When a manual handling risk cannot be eliminated, your risk assessment must address four factors: the Task, the Individual capability of the employee, the Load, and the Environment in which the handling takes place. A written statement confirming that “manual handling training is provided” is not a risk assessment. It is a record of one control measure, and an incomplete one at that. Each assessable task needs its own documented entry against all four TILE factors.
Training records and refresh intervals
The Regulations do not set a fixed refresh period, but HSA guidance and best practice point to a maximum interval of three years between refresher sessions. Newly recruited employees must be trained before they carry out any manual handling tasks, not during their first week if it happens to fit the schedule. Our plain-English guide to health and safety training obligations covers the broader training framework in more detail.
Sector exposure and record-keeping
Healthcare, warehousing, retail, and hospitality face the highest volume of manual handling claims and HSA enforcement attention. Generic assessments do not cut it in these sectors; inspectors expect task-specific and site-specific documentation. Training records for every relevant employee are among the most commonly checked items during an inspection, and digital records that can be filtered and produced quickly are considerably more defensible than paper files searched under pressure.
Part 2: Display Screen Equipment and Your DSE Obligations
Screen-based work carries its own distinct obligations under the Regulations, and they catch more employers off guard than manual handling does.
Who counts as a DSE user? Any employee who habitually uses a screen as a significant part of their normal work. In practice, that means most office-based staff, remote workers, and hybrid workers on laptops or desktops at home. If someone uses a screen daily, for continuous periods of more than an hour, they almost certainly qualify.
The workstation analysis is the core duty under Regulation 72. You must assess each DSE user’s setup individually, covering the screen, keyboard, desk, chair, lighting, and software. A self-completed online questionnaire does not satisfy this obligation on its own; the HSA is explicit that the employer must be actively engaged in completing a physical risk assessment of the individual workstation. Results must be recorded in writing and shared with the employee. If the workstation or work pattern changes significantly, the assessment needs to be reviewed. This overview of how screen use affects health is worth sharing with employees as part of that process.
Eye tests and eyewear are a financial obligation many employers miss. DSE users are entitled to an eye and eyesight test at the employer’s expense. If corrective spectacles are required specifically for screen work, the employer must cover that cost too.
Rest breaks must interrupt prolonged screen use throughout the day. A lunch break does not satisfy this duty if the employee is otherwise screen-based for seven hours.
The biggest compliance gap right now is home workers. Employers who ran workstation assessments for office staff before 2020 and stopped there have almost certainly left remote workers uncovered. That population needs its own individual assessments.
Part 3 and Part 4: Electricity at Work and Working at Height
Electrical Safety (Part 3)
All electrical systems must be constructed, maintained, and operated to prevent danger. The baseline rule on live electrical work is straightforward: no employee should work on live equipment unless absolutely unavoidable, and even then, specific precautions must be documented before work begins. Isolate first; work live only as a last resort.
For portable appliances, the Regulations do not set fixed PAT testing intervals. Instead, they require a risk-based approach: frequency should reflect how equipment is used, where it is used, and how often. A floor polisher in a busy hotel needs more frequent checks than a desk lamp in a private office. Whatever interval you choose, document your reasoning. That record is what you rely on if something goes wrong.
Working at Height (Part 4)
Work at height remains one of the leading causes of workplace fatalities in Ireland, which is why Part 4 embeds a strict hierarchy of control. First, ask whether the task can be done without working at height at all. If not, use an existing safe place of work. If neither option is available, provide collective protection such as guardrails or platforms before falling back on individual measures like harnesses.
Ladders sit at the bottom of that hierarchy. Their use must be justified by a risk assessment, and “it was quicker” is not a justification the HSA will accept.
Your obligations extend to contractors on your site. Anyone working at height on your premises must use inspected, fit-for-purpose equipment and be a competent person. You cannot outsource that duty along with the job. Our guide to working safely at height covers the practical controls in more detail.
Noise, Vibration, and Other Physical Agents: Are You Within Limits?
Parts 5 and 6 of the General Application Regulations cover physical agents, and many employers outside heavy industry underestimate how relevant they are. Open-plan offices, busy kitchens, and distribution yards can all generate exposure levels that trigger legal obligations.
Noise thresholds you need to know
The Regulations set lower and upper exposure action values for noise averaged over a working day. At the lower value, you must provide information and training and make hearing protection available. At the upper value, wearing hearing protection becomes mandatory and you must designate hearing protection zones. These are not escalating recommendations; they are distinct, enforceable duties at each threshold.
Hand-arm vibration (HAV)
If employees regularly use power tools such as grinders, drills, or chainsaws, HAV obligations apply. The Regulations set an exposure action value, and exceeding it triggers mandatory health surveillance, which goes significantly further than a training requirement. Prolonged HAV exposure can cause hand-arm vibration syndrome, a disabling and irreversible condition, so the stakes of non-compliance are serious.
Whole-body vibration (WBV)
Employees who drive forklift trucks, operate heavy plant, or work with agricultural machinery may be subject to WBV obligations. Above defined trigger values set out in the Regulations, exposure records and health surveillance requirements apply.
Measurement, not guesswork
Noise and vibration exposure must be assessed through measurement. Documented risk assessments using manufacturer tool data or industry reference figures provide a starting point, but periodic direct monitoring is recommended to confirm that control measures remain effective and that exposure levels have not crept upward.
Vulnerable Workers: Specific Obligations That Many Employers Overlook
Physical agent exposures get a lot of attention during inspections, but vulnerable worker obligations are where many employers quietly fall short, often without realising it.
The Regulations set out legally enforceable protections for four specific categories: children and young persons (under 18), pregnant employees, postnatal employees, and breastfeeding employees. These are not aspirational guidelines; they carry the same enforcement weight as any other part of the legislation.
The dedicated risk assessment requirement is the most commonly missed obligation. When you employ a young person, or when an employee notifies you of her pregnancy or that she is breastfeeding, you must carry out a specific vulnerability risk assessment for that individual. Your standard workplace risk assessment does not satisfy this duty. A separate, documented assessment is required, and it must be completed promptly after notification, not at the next scheduled review cycle.
Where that assessment identifies a risk that cannot be eliminated for a pregnant or breastfeeding employee, the Regulations set out a clear hierarchy of what you must do next:
- Temporarily adjust her working conditions or hours to remove the risk
- If adjustment is not possible, offer suitable alternative work
- If no suitable alternative exists, she is entitled to health and safety leave, paid at her normal rate
That hierarchy is not discretionary. Employers cannot skip straight to leave without first genuinely exploring the earlier steps.
Night work restrictions apply to both pregnant employees and young persons. If you run shift patterns, audit those arrangements as soon as a relevant employee is identified, not retrospectively.
The HSA consistently cites failure to carry out vulnerability risk assessments as one of the most common breaches found during inspections involving pregnant workers. A documented, individual assessment on file is your primary line of defence.
Accident Reporting, First Aid, and Your Notification Obligations
Vulnerable worker obligations sit at the protective end of the Regulations; Parts 12 and 13 deal with what happens when something goes wrong.
Part 12 requires employers to provide an adequate number of trained first aiders proportionate to the size and nature of the business, maintain properly stocked first aid kits, and make sure every employee knows how to access help when they need it. There is no single prescribed ratio, so your first aider numbers should reflect your workforce size, the risks present on site, and your working hours.
Part 13 moves from response to reporting. Certain accidents, dangerous occurrences, and occupational illnesses must be notified to the HSA through its official online reporting system. This is a statutory obligation, not a box-ticking exercise.
Incidents that trigger notification include:
- Any accident leaving an employee incapacitated for more than three consecutive days, excluding the day of the accident itself
- Fatalities involving any person on site
- Specified injuries as defined in the Regulations
- Dangerous occurrences appearing on the statutory defined list
Beyond the notification threshold, you must also maintain internal records of all accidents and near misses, including those that never reach the three-day mark. HSA inspectors review these records during workplace inspections, and a blank near-miss log is itself a red flag.
The HSA reporting system requires specific data: the nature of the injury, the activity being carried out, the location, and the contributing factors. Capturing this information accurately at the time of the incident, rather than reconstructing it days later, is what makes external notification straightforward. A standardised internal reporting process is the practical fix here, and it pays dividends every time an inspection call comes in.
Managing Compliance Across All 14 Parts Without Losing the Thread
Accident reporting sits at the end of the Regulations, but the real compliance challenge sits above all 14 Parts: keeping everything together.
Most Irish employers understand their individual obligations well enough. Where things break down is coordination. DSE assessment records are in one folder, manual handling training certificates are in someone’s inbox, PPE issue logs are on a spreadsheet nobody has updated since last year, and contractor induction records are wherever the site manager keeps them. When an HSA inspector arrives, that fragmentation becomes very visible, very quickly.
The root cause of most compliance failures is not ignorance of the law. It is the absence of a single place where all records live, can be searched, and can be produced on request.
A centralised, digitised health and safety management system changes that entirely, as noted earlier: when all records are held in one platform with a clear audit trail, demonstrating compliance becomes straightforward rather than stressful.
Our Health and Safety App is built specifically for this challenge. It allows Irish businesses to digitise their H&S processes, assign compliance tasks to the right people, track completion, and maintain records across every relevant chapter of the General Application Regulations in one place.
For businesses with contractors on-site, the Contractor Genie adds a focused layer of contractor compliance management. It ensures that people working on your premises hold current certifications, have completed relevant inductions, and that their site visits are tracked and documented, directly supporting your host employer obligations under the Regulations.
Together, they turn 14 Parts of overlapping obligations into one manageable, auditable system.
Your Monday Morning Checklist: Where to Start
Now that you have a clear picture of what the Regulations require, here is where to begin putting it into practice.
Confirm your scope first — then identify which of the 14 Parts carry the highest risk for your specific workforce. A logistics company needs to prioritise manual handling, noise, and vibration. A professional services firm needs to focus on DSE and vulnerable workers.
Review your risk assessments. Generic, undated documents will not satisfy the HSA. You need specific, current assessments for DSE users, manual handling tasks, any vulnerable workers, and noise or vibration exposure where relevant. If an assessment has not been reviewed since a role, location, or working pattern changed, it needs updating now.
Audit your training records. Pull together evidence that every employee required to have manual handling, DSE, PPE, or work at height training has completed it. Gaps in records are treated the same as gaps in training during an inspection.
Check your contractor management process. Host employer obligations do not disappear because someone is agency staff or an external contractor. Confirm that inductions, competence verification, and site visit records are documented and accessible, not sitting in a site manager’s inbox.
Consolidate your records. If your compliance documentation is spread across spreadsheets, paper files, and email threads, that fragmentation is itself a risk. A centralised digital system makes the next HSA inspection considerably less stressful and gives you confidence that nothing has been missed across all the obligations this legislation imposes.
Conclusion
The General Application Regulations 2007 place real, enforceable obligations on Irish employers across 14 distinct parts. Compliance is not a one-time exercise; it requires current risk assessments, documented training, proper contractor oversight, and records that hold up under inspection.
The employers who manage this well share one trait: they treat the regulations as an operational framework, not a filing exercise. They know which parts apply to their workforce, they keep documentation current, and they review their systems when anything changes.
If this post has done one thing, it should have shown you where your gaps are most likely to be hiding.
Now act on it. Pick the highest-risk area for your workforce, review your documentation this week, and build a compliance process that works consistently, not just when an inspection is imminent. Your workforce deserves that standard. The law requires it.