COSHH risk assessments: a practical guide for hospitality
General information for UK hospitality operators, not legal advice. If something here is wrong or out of date, the editorial policy explains how to report it.
COSHH risk assessments are a legal requirement for every hazardous substance on site. Here is how to manage that without drowning in paperwork.
The Control of Substances Hazardous to Health Regulations 2002 require an employer to complete COSHH risk assessments for every substance that could harm health before it is used, not after an incident prompts a review, as HSE guidance sets out. For a typical pub, restaurant or hotel kitchen, that duty covers every bottle of descaler, sanitiser, oven cleaner and degreaser on the premises, and it does not lapse because the product came from a reputable supplier with a safety data sheet in a folder somewhere.
Most hospitality operators are not trying to avoid the rules. They are trying to run a service, manage a kitchen team, and keep guests happy, and COSHH paperwork sits low on the list of things that feel urgent until an inspector asks for it or a member of staff has a reaction to a chemical. The gap between knowing you should have a proper system and actually having one is where most of the risk sits, both for staff health and for the business.
What COSHH risk assessments actually require
The regulations set out a straightforward sequence: identify the hazardous substances in use, assess the risk they pose, decide how exposure will be controlled, and record the outcome. HSE guidance on COSHH breaks this into practical steps that apply directly to a commercial kitchen or bar: know what you have, know what it can do, decide how you will stop it doing it, and write that decision down. The written record is not a bureaucratic add-on. It is the evidence that the assessment happened and that staff were told the outcome, which matters both for insurance and for any inspection.
A hazardous substance in this context is broader than most managers assume. It covers obvious things like oven cleaner and drain unblocker, but also everyday sanitiser, descaling solution, and even some food-contact cleaning products if used incorrectly or mixed. The full text of the COSHH Regulations 2002 defines the categories precisely, but the working rule for a kitchen manager is simpler: if it has a hazard warning on the label, it needs an entry.
Building a substance register that holds up
A workable register lists every hazardous product on site, where it is stored, who uses it, and what protective equipment is required. Each entry should link to the manufacturer's safety data sheet, which sets out the specific hazards, first aid measures and storage conditions for that product. Without the safety data sheet attached, an assessment is just a guess dressed up as a document.
The register needs to reflect reality, not a snapshot from when it was first created. New suppliers change formulations, seasonal deep-clean products get introduced temporarily, and staff sometimes bring in their own cleaning products from habit. Any of these can leave a gap between what is on the register and what is actually under the sink. A register that is checked only once a year drifts quickly in a busy kitchen.
Risk assessment beyond chemicals
COSHH covers substances specifically, but hospitality venues carry a wider set of physical hazards that need the same structured approach: manual handling of kegs and stock, slips on wet kitchen floors, burns from fryers and grills, and knife handling in a cramped prep area. HSE's five steps to risk assessment apply equally here, using the same logic of identifying the hazard, deciding who might be harmed, evaluating the risk, recording the findings and reviewing them periodically.
Slips and trips deserve particular attention because they account for a large share of reportable injuries in catering settings, driven by spilled liquids, uneven flooring and poor footwear choice. HSE guidance for catering and hospitality sets out sector-specific control measures, including floor surface standards, cleaning schedules timed around service, and appropriate footwear policies. A serious slip that causes a fracture or requires more than seven days off work is likely reportable under RIDDOR, and operators who are unsure whether a specific incident meets that threshold can check quickly using a free RIDDOR reportability checker rather than guessing.
Getting control measures right, not just documented
| Risk level | Typical control measure | Review frequency |
|---|---|---|
| Low | Standard PPE, existing training covers use | Annual, or on product change |
| Medium | Specific PPE, restricted access, signage | Every 6 months, or after an incident |
| High | Locked storage, named authorised users, ventilation | Quarterly, or immediately after any near miss |
A risk rating only means something if the control measure attached to it is actually followed on the floor. Locking a high-risk chemical in a cupboard achieves nothing if the key sits in a drawer everyone can open, and PPE requirements written into an assessment but never issued to staff leave the business no better protected than having no assessment at all. The rating exists to drive a proportionate response, not to fill a column in a spreadsheet.
Training staff so the paperwork means something
A COSHH register and a set of risk assessments only reduce harm if the people using the substances know what is in the folder. New starters need to be shown the register, told which products they will handle, and briefed on the PPE and storage requirements before their first shift behind the pass or in the wash-up. This is not a one-off induction task either, because staff turnover in hospitality is high and knowledge does not transfer automatically between shifts.
Building this briefing into a structured onboarding and training programme, alongside food safety and manual handling, keeps it consistent rather than dependent on whichever manager happens to be on duty when a new starter arrives. A training software platform that tracks completion by individual member of staff gives a manager a clear answer, on demand, to the question of who has actually been briefed on which substances.
What an inspector expects to see
Both Environmental Health Officers and HSE inspectors increasingly expect digital records that can be produced quickly, with timestamps and a visible history of reviews, rather than a paper folder that has not been opened since the last inspection. Being able to pull up the current register, the relevant safety data sheet and the linked risk assessment on a tablet during a visit demonstrates that the system is live and used, not archived.
What inspectors are actually testing is whether the paperwork reflects current practice. A register with the right products, current safety data sheets, and review dates that make sense against the calendar tells a very different story from one where every assessment is dated the same day two years ago. The gap between those two scenarios is usually not extra effort, it is a system that prompts reviews rather than relying on someone remembering.
Getting the underlying culture right matters as much as the documents themselves, and that overlaps closely with wider food safety practice. A venue that takes cleaning schedule verification seriously tends to keep its COSHH register current too, because the same discipline of checking rather than assuming applies to both. The same is true of fire risk assessments, which sit alongside COSHH as a legal duty that cannot be filed away and forgotten; the piece on fire risk assessments in hospitality covers the parallel requirement in more detail.
Keeping the system current without it becoming a burden
The realistic goal is not perfection on day one, it is a system that stays accurate with minimal ongoing effort. That means a register that flags when a review date is approaching, a straightforward way to add a new product the moment it arrives on site, and a record that any manager can search during an inspection without needing to phone someone. Paper folders fail at exactly this point, because updating them requires someone to remember, find the folder, and physically write the change.
Building COSHH compliance into daily operations, rather than treating it as a separate annual task, is what actually protects staff and satisfies inspectors. A COSHH and risk assessment system that centralises the register, links safety data sheets, and tracks review dates turns this from an occasional scramble into routine housekeeping.
Where Zynthio fits
Zynthio's COSHH and risk assessment tools keep the substance register, safety data sheets and review dates in one searchable place, which is the record an HSE-compliant COSHH and risk assessment system is built to maintain.
Frequently asked questions
Does every cleaning chemical need its own COSHH assessment?
Yes, in practice. The Control of Substances Hazardous to Health Regulations 2002 require an assessment for each substance that could harm health, covering how it is used, stored and controlled. A generic statement covering all your chemicals will not stand up if an inspector asks about a specific product.
How often should COSHH assessments be reviewed?
There is no fixed legal interval, but HSE guidance says review when circumstances change: a new product, a different supplier, an incident, or at least annually as good practice. Recording a review date on each assessment makes it easy to show this happened, rather than relying on memory.
Who is responsible for COSHH compliance in a hospitality business?
The employer holds the legal duty, but day-to-day responsibility is usually delegated to a manager who buys chemicals, briefs staff and keeps the register current. Whoever it is needs authority to stop use of a product until a safety data sheet and assessment exist for it.
Is a COSHH assessment the same as a general risk assessment?
No. COSHH assessments deal specifically with hazardous substances, while a general risk assessment covers wider workplace hazards such as slips, manual handling and hot surfaces. Most hospitality venues need both, and they should reference each other where a substance also creates a physical hazard.
What happens if an EHO or HSE inspector finds no COSHH records?
Missing records can lead to an improvement notice requiring action within a set period, and repeated or serious failures can result in prosecution under the Health and Safety at Work etc. Act. Even where no immediate harm has occurred, absent paperwork signals weak control of a legal duty.