<!-- Bizible Script --> <script type="text/javascript" class="optanon-category-C0004" src="//cdn.bizible.com/scripts/bizible.js" ></script> <!-- End Bizible Script -->
MY Compliance Management

Why Every UK Business Needs an EHS Legal Register, and How to Maintain One 

Picture this: an unannounced Health and Safety Executive (HSE) inspector arrives at your premises. Your operations manager is asked to produce your current list of applicable EHS legislation: the laws your business is actually required to comply with. Can your team do that confidently, in under five minutes? 

If the honest answer is no, you are not alone. Keeping on top of Environmental, Health and Safety (EHS) legal obligations is one of the most demanding aspects of running a compliant UK business. Legislation changes, new duties emerge, and the consequences of falling behind are significant: unlimited fines, prosecution and reputational damage. 

An EHS legal register is the practical tool that makes ongoing compliance manageable. This guide explains what it is, why it matters, and how the right software makes maintaining it far simpler. 

8 minutes

Written by The Access Group.

What is an EHS legal register? 

An EHS legal register is a documented record of all the Environmental, Health and Safety (EHS) legislation, regulations, and standards that apply to your organisation. It gives you a structured reference point for: 

  • identifying your legal obligations 
  • monitoring ongoing compliance 
  • demonstrating due diligence during regulatory inspections or audits 

In short, it is the foundation of any effective EHS compliance programme: the document that tells you what the law requires of your business, right now. 

Why does UK law require businesses to stay on top of EHS compliance? 

UK EHS legislation is broad, specific, and regularly updated. The three key pieces of legislation your legal register must cover are: 

  • Health and Safety at Work Act 1974 (HSWA): the overarching UK law placing a duty on employers to ensure, so far as is reasonably practicable, the health, safety and welfare of all employees and the public affected by their work. 
  • Environmental Protection Act 1990 (EPA): the primary UK statute governing pollution control, waste management, and statutory nuisances. It establishes the duty of care for waste and assigns responsibilities to businesses, local authorities, and individuals. 
  • Environment Act 2021: the most significant piece of UK environmental legislation since Brexit. It introduced legally binding environmental targets, established the Office for Environmental Protection (OEP), the independent body responsible for holding public authorities to account on environmental law, and placed new duties on businesses relating to biodiversity net gain, water quality, and waste management. 

Penalties for non-compliance are serious. Under the Health and Safety at Work Act, convictions can result in unlimited fines and up to two years’ imprisonment. Under the Environmental Protection Act, businesses found in breach face prosecution with unlimited fines and potential custodial sentences. A legal register helps ensure obligations under all three Acts, and any sector-specific regulations that apply to your organisation, are identified and tracked. 

What happens when the HSE or Environment Agency inspects your business? 

Both the Health and Safety Executive (HSE), the UK's national workplace safety regulator, and the Environment Agency (EA), the public body responsible for protecting and improving the environment in England, conduct compliance inspections. Critically, these visits are predominantly unannounced. 

The HSE’s current inspection strategy includes a focus on occupational health risks, with Fee for Intervention (FFI) charges of £183 per hour applied where a material breach is identified. The Environment Agency conducts thousands of inspections each year, including 4,545 in the 2024/25 period

A well-maintained legal register is one of the clearest signals to an inspector that your organisation takes compliance seriously. It demonstrates: 

  • You know which laws apply to your business 
  • You are actively monitoring compliance against them 
  • You have a system for identifying and responding to legislative changes 

"When an HSE inspector arrives unannounced, the first thing they want to see is evidence that you know what your obligations are, not a scramble to find paperwork. Organisations that maintain a live, accurate legal register can respond with confidence in minutes. Those that don’t are already on the back foot before the conversation has started." 

TBA

How does a legal register reduce compliance risk? 

Non-compliance with EHS legislation causes two categories of harm: the direct consequences (fines, prosecution, operational shutdown) and the indirect ones (reputational damage, loss of contracts, reduced stakeholder confidence). A legal register addresses both by making risk visible before it becomes a problem. 

By mapping applicable legislation against your operations, a legal register helps you identify gaps in controls, prioritise remedial action, and build a documented audit trail that demonstrates proactive management, which courts and regulators do take into account. 

Why do investors, clients and employees care about your legal register? 

EHS compliance is increasingly a commercial requirement, not just a regulatory one. Many large organisations require their supply chain to demonstrate compliance as a condition of contract. Investors apply ESG criteria to procurement and investment decisions. Employees, particularly in safety-critical environments, make decisions about where to work based on an employer's safety record. 

A maintained legal register is a tangible demonstration of your commitment to responsible operations, which you can evidence during due diligence, tender processes, or staff consultations. 

How do businesses keep pace with changes to EHS legislation? 

UK EHS law is not static. New regulations, statutory instruments, and enforcement guidance are issued regularly. The Environment Act 2021 alone introduced a multi-year programme of secondary legislation that is still being implemented. Without a system for monitoring legislative change, organisations routinely discover they are non-compliant only after the fact, when an incident occurs or an inspector arrives. 

Manual tracking, which relies on a team member to monitor government publications, update a spreadsheet, and notify colleagues, is error-prone and resource-intensive. The more practical solution is an EHS compliance management system that monitors legislative change automatically and updates your register accordingly. 

What are the challenges of maintaining a legal register manually? 

Maintaining a legal register by hand presents several common problems: 

Complexity

UK EHS law spans dozens of Acts, hundreds of statutory instruments, and sector-specific codes of practice. Interpreting what applies to your business requires genuine expertise.

Frequency of change

Legislation is updated throughout the year. Manual processes struggle to keep pace, particularly in organisations without a dedicated EHS function.

Human error

Manual updates are time-consuming and subject to oversight. A missed amendment can create a compliance gap that goes undetected until it causes a problem.

Accessibility

A static register, whether on paper or in a shared spreadsheet, is often inaccessible to the people who need it at the point they need it.

How does EHS compliance software solve these problems? 

A comprehensive EHS software is designed specifically to address the practical challenges of maintaining a legal register at scale. Key capabilities include: 

✓ Automatic legislative updates: the platform monitors changes to UK EHS legislation and updates your register accordingly, removing the need for manual tracking. 

✓ Centralised access: all team members can access the current legal register from any device, ensuring compliance is a shared responsibility rather than siloed in one person or department. 

✓ Enhanced accuracy: by automating many aspects of legal register maintenance, the platform reduces the risk of human error. Notifications and alerts ensure no critical compliance obligation is overlooked. 

✓ Alerts and notifications: configurable alerts ensure that responsible individuals are notified when compliance obligations change or deadlines approach. 

✓ Integration with broader compliance workflows: the platform connects the legal register to incident reporting, audit management, and training records, creating a joined-up compliance ecosystem. 

✓ Audit-ready reporting: compliance reports can be generated quickly, supporting a professional and consistent response to inspections or board-level reviews. 

✓ Cost-effectiveness: the long-term reduction in compliance risk and staff time typically outweighs the cost of the platform. A single avoidable enforcement notice or FFI charge from the HSE could far exceed a year's subscription. 

See your potential savings with MY Compliance Management 

You already know what non-compliance can cost. The question is what the right software would save you. 

Our ROI calculator gives you a personalised estimate based on your organisation's size, compliance admin time, and incident history. It is free and takes under two minutes.