How often should risk assessments be reviewed?
Updated · UK law and HSE guidance
Short answer
UK law does not set a universal annual review interval. Review a risk assessment when there is reason to suspect it is no longer valid or after a significant change, and amend it where needed. A planned review date is useful, but higher-risk or fast-changing work should be checked more frequently.
| Fixed legal interval | None for general workplace risk assessments |
|---|---|
| Legal trigger 1 | Reason to suspect the assessment is no longer valid |
| Legal trigger 2 | Significant change in the matters assessed |
| Other practical triggers | Accident, near miss, worker concern or ineffective control |
| Required response | Make changes where the review shows they are needed |
The legal test is event-based
Regulation 3 of the Management Regulations requires review if there is reason to suspect an assessment is no longer valid or a significant change has occurred. It does not prescribe a twelve-month cycle. Relevant changes can include new equipment, substances, premises, staff, processes, workloads or working methods. Review should happen early enough for controls to be ready before changed work begins.
- Review after evidence that a control has failed
- Review after accidents, near misses or occupational ill health
- Review when guidance, product information or legal requirements change
Use planned dates as a backstop
A scheduled review helps catch gradual changes and forgotten actions, but its frequency should reflect risk. A stable, low-risk office task may justify a longer interval than high-hazard construction, rapidly changing production or work involving vulnerable people. Explain the chosen interval rather than treating “annual” as an automatic legal requirement. Some specialist regimes or equipment inspections have separate prescribed frequencies.
- Set the next review date and responsible person
- Check action completion and whether residual risk remains tolerable
- Consult workers about workarounds and emerging problems
What a review should achieve
A review is more than changing the date. Revisit hazards, affected groups, risk estimates, the hierarchy of control and outstanding actions. Observe whether the written controls match practice. Where changes are required, update the assessment and communicate them to affected people. Keep the superseded version where useful for the audit trail. Record who completed and approved the review. SitePaper can generate and update a structured risk-assessment record.
- Record what prompted the review
- Document decisions, including why existing controls remain adequate
- Rebrief workers on material changes
Sources
This guide summarises UK law and HSE guidance for small businesses. It is not legal advice; check the sources and your own circumstances.