Sample policy · RIDDOR

RIDDOR reporting policy template

Statutory anchor: Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 (SI 2013/1471), made under the Health and Safety at Work etc. Act 1974. This policy also engages Regulation 12 (safe care and treatment) of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 (SI 2014/2936) and the CQC notification duties under the Care Quality Commission (Registration) Regulations 2009 where the same event is also notifiable to CQC, but its primary law is RIDDOR 2013. · primary source

Download the PDF

The PDF version of this template is the same content, formatted for adaptation in your document control system. The disclaimer above is repeated on the PDF cover.

Verivius pack version v1, 2026-06-10

1. What the regulation says

The verbatim duties below are drawn from the Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013, the primary law this policy is anchored to. Its full text is at the primary source URL below.

Where any person at work, as a result of a work-related accident, suffers [a specified injury listed in (a)-(h)], the responsible person must follow the reporting procedure.

Where any person at work is incapacitated for routine work for more than seven consecutive days (excluding the day of the accident) because of an injury resulting from an accident arising out of or in connection with that work, the responsible person must send a report to the relevant enforcing authority in an approved manner as soon as practicable and in any event within 15 days of the accident.

Where any person not at work, as a result of a work-related accident, suffers (a) an injury, and that person is taken from the site of the accident to a hospital for treatment in respect of that injury; or (b) a specified injury on hospital premises, the responsible person must follow the reporting procedure, subject to regulations 14 and 15.

Where any person dies as a result of a work-related accident, the responsible person must follow the reporting procedure.

Where an employee has suffered an injury reportable under regulation 4 which is a cause of his death within one year of the date of the accident, the employer must notify the relevant enforcing authority of the death in an approved manner without delay, whether or not the injury has been reported under regulation 4.

An entry in the record referred to in paragraph (1) must be kept for at least three years from the date on which it was made.

The responsible person must notify the relevant enforcing authority of the reportable incident by the quickest practicable means without delay, and send a report of that incident in an approved manner to the relevant enforcing authority within 10 days of the incident.

The full text of the regulation is at https://www.legislation.gov.uk/uksi/2013/1471/contents. Where this policy and the regulation diverge, the regulation wins.

2. Plain-English summary

RIDDOR creates a duty to report certain work-related events to the relevant enforcing authority (the Health and Safety Executive for most providers; specific bodies for offshore and rail). The reportable categories are deaths from a work-related accident (RIDDOR Regulation 6), specified non-fatal injuries to workers (RIDDOR Regulation 4), non-fatal injuries to non-workers including patients that result in hospital treatment from a work-related accident (RIDDOR Regulation 5), dangerous occurrences listed in Schedule 2 (RIDDOR Regulation 7), occupational diseases (RIDDOR Regulation 8), and exposures to carcinogens, mutagens and biological agents (RIDDOR Regulation 9). The "work-related" qualifier is load-bearing: a patient injury caused by patient frailty alone is not RIDDOR-reportable; a patient injury caused by a slippery floor, faulty equipment, or staff handling error is. Reports for fatalities and specified injuries must be made by the quickest practicable means without delay; the formal report follows within 10 days. The responsible person must also keep an internal record for at least 3 years.

3. Scope

This policy applies to all employees, contractors, agency workers, and visitors at . It covers work-related accidents involving workers and non-workers (patients, visitors, members of the public), occupational diseases, dangerous occurrences listed in RIDDOR Schedule 2, and exposures to carcinogens, mutagens, or biological agents. It covers every site, every patient-handling activity, every premises-and-equipment-related risk, and the cross-link from RIDDOR-reportable events to the platform's incident-reporting register.

(Tenant updates the angle-bracket placeholder.)

4. Roles and responsibilities

(Tenant updates the named role-holders.)

5. Procedure

The RIDDOR procedure operationalises the Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013.

  1. Recognise and report. When an accident or dangerous occurrence happens, the staff member ensures the immediate safety of any person involved, then raises the event to the Health and Safety Lead the same shift. Where the event is fatal or involves a specified injury, the Health and Safety Lead is notified immediately by phone.
  2. Log the event in the incident register. Every reportable event is also logged in the platform's incident reporting register so the audit trail runs through one place.
  3. Trigger assessment. The Health and Safety Lead applies the RIDDOR trigger map: is this a death (Reg 6), a specified injury to a worker (Reg 4), an over-7-day incapacity injury to a worker (Reg 7(a)), a non-worker injury from a work-related accident requiring hospital treatment (Reg 5), a dangerous occurrence in Schedule 2 (Reg 7), an occupational disease (Reg 8), or a carcinogen/mutagen/biological agent exposure (Reg 9). The "work-related" qualifier is checked first: patient injury caused by patient frailty alone is not RIDDOR; patient injury caused by slippery floor, faulty equipment, or staff handling error is.
  4. Immediate notification (where applicable). Fatalities, specified injuries, and dangerous occurrences must be notified to HSE by the quickest practicable means without delay (typically the HSE phone line for fatalities; HSE online form for the rest within the immediate window).
  5. Formal report. The formal report follows within 10 days of the incident for the categories notifiable under Reg 4 (worker specified injury), Reg 5 (non-worker injury), Reg 6 (death), and Reg 7 (dangerous occurrence). Within 15 days for the over-7-day worker incapacity reports under Reg 4. Within 10 days for occupational diseases under Reg 8.
  6. Use the HSE online portal. Reports are submitted through the HSE online reporting form (riddor.hse.gov.uk) or by phone for fatal and specified-injury events. The HSE reference number is captured against the platform's incident record.
  7. Cross-link to other obligations. RIDDOR-reportable events affecting service users may also meet a CQC statutory notification trigger under the Care Quality Commission (Registration) Regulations 2009. The Health and Safety Lead spawns the CQC notification where applicable.
  8. Cross-link to duty of candour. RIDDOR-reportable events affecting service users may also trigger the statutory duty of candour. A notifiable safety incident is a specific legal term under Regulation 20, and the threshold differs by provider type, so the service must apply the correct Regulation 20 definition for its provider type before opening a duty-of-candour record per the Reg 20 policy.
  9. Investigation and learning. Every RIDDOR-reportable event is investigated through the standard incident-investigation lifecycle. The investigation surfaces the work-related root cause, which produces improvement actions.
  10. Pattern review. The aggregate RIDDOR-reportable pattern is reviewed quarterly at the health and safety committee (or the clinical governance committee in providers without a separate H&S committee). HSE may inspect the RIDDOR records during a routine visit; the pattern review is the visible evidence that the team is reading its own data.

6. Training requirement

Training records held in the tenant's training matrix register.

7. Audit

Compliance with this policy is monitored by the Health and Safety Lead:

Audit findings recorded in the tenant's audit register; actions logged in the improvement-actions register.

8. Record-keeping

RIDDOR records are held for a minimum of 3 years from the date the entry was made per RIDDOR Reg 12(2). Most providers retain RIDDOR records for the same 8-year minimum as the related incident record under the NHS Code of Practice on Records Management. HSE may inspect the records at any reasonable time within the retention period.

The platform's incident record (which cross-links to the RIDDOR report) is held for the standard incident-retention period per the incident reporting policy.

Verivius preserves the per-record audit trail indefinitely while the workspace is active.

9. Related policies in this pack

10. Sources and further reading

This template is based on CQC's guidance for providers and managers, the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, and other topic-specific legislation and guidance listed below. It is a starting point for adaptation, not a substitute for legal, clinical, HR, safeguarding or specialist professional advice.

11. When to seek further advice

Seek specialist advice where the issue involves serious harm, safeguarding, deprivation of liberty, restraint, children, professional misconduct, controlled drugs, radiation, termination of pregnancy, infection outbreak, water safety, employment dismissal, DBS barring referral, or regulatory enforcement.

12. Document control

Version Date Author Changes
v1 2026-05-19 Verivius (sample) Initial sample template.
v1.1 2026-06-01 Verivius (sample) Filled out Sections 3 to 8 with concrete content. Section 4 names the Health and Safety Lead role with the RIDDOR-trigger and HSE filing responsibilities. Section 5 expanded to a 10-step procedure covering recognise, log, trigger assessment, immediate notification for fatalities and specified injuries, formal report, HSE portal use, cross-link to CQC notification, cross-link to duty of candour, investigation, pattern review. Section 6 names training tiers. Section 7 names the audit cadence. Section 8 references the RIDDOR Reg 12(2) 3-year minimum plus NHS Code of Practice on Records Management.
v1 (2026-06-10) 2026-06-10 Verivius (sample) Re-conformed to the current Verivius policy standard, preserving the original content. Disclaimer and footer updated to the current wording; header block, Policy owner / Applies to line, verbatim RIDDOR 2013 blockquotes, plain-English summary, Sources and further reading, and When to seek further advice added. Duty-of-candour cross-link corrected to apply the correct Regulation 20 definition for the provider type rather than a universal moderate-harm threshold.

This sample policy template was issued by Verivius. It is a template, not a substitute for legal advice or the tenant's own policy-development process. Where this template and live law or regulator guidance diverge, the live source wins.

Related Verivius content

Want help adapting this to your service?

A Verivius consultant can read your adapted policy against the live regulation and your service shape. The work fits inside a Mock Inspection engagement or a shorter consulting brief. A 20-minute conversation is the fastest way to find out whether the fit is right.

Get started free

Free to start, no card. A 14-day trial when you subscribe.

Last reviewed 10 June 2026