COSHH Risk Assessment: the complete guide for UK small businesses
What the law requires, how to do one step by step, and a free tool that generates HSE-ready assessments for you.
What is a COSHH risk assessment?
A COSHH risk assessment is a documented evaluation of how hazardous substances in your workplace could harm health, and what you do to prevent it. It is a legal requirement under the Control of Substances Hazardous to Health Regulations 2002 (COSHH) for any business that uses — or could produce — hazardous substances.
“Hazardous substances” covers more than chemicals: fumes, dusts, vapours, biological agents and by-products all count. Typical small businesses affected include hairdressers, garages, cleaners, cafés, farms, workshops and builders.
How to do a COSHH risk assessment: 6 steps
- 1
Identify the hazardous substances
Walk your site: cleaning products, paints, solvents, dusts, fumes. Check labels for hazard pictograms and collect the safety data sheet (SDS) for each product from your supplier.
- 2
Assess the risk
For each substance, note how it is used, who is exposed, how often, and what could go wrong (spills, splashes, inhalation, skin contact).
- 3
Decide on control measures
Follow the hierarchy: eliminate or substitute first, then engineering controls (ventilation, enclosed systems), then PPE as the last line of defence.
- 4
Record your findings
Write the assessment down — the HSE expects documented, task-specific assessments, not a generic template copied across the business.
- 5
Communicate and train
Every employee exposed to the substance must know the findings. This is where printed or QR-linked sheets at the point of use matter.
- 6
Review
Review whenever the process, substance or legislation changes — and at least every couple of years. Missed review dates are the most common compliance failure.
Common questions
Do I legally need a COSHH risk assessment?
Yes. Under the Control of Substances Hazardous to Health Regulations 2002 (COSHH), if your business uses or produces hazardous substances you must assess the risks to health and record the measures you take. The HSE can ask to see your assessments during an inspection.
Who can carry out a COSHH assessment?
A "competent person" — someone with the skills, knowledge and experience to do it. In a small business this is often the owner or manager. Many small businesses use an H&S consultant for this role.
How often must COSHH assessments be reviewed?
There is no fixed statutory interval, but assessments must be kept up to date: review when the process, substance, or control measures change, and periodically as good practice (commonly every 1–2 years).
Is a COSHH assessment the same as an SDS?
No. The SDS is provided by the manufacturer and describes the substance. The COSHH risk assessment is yours: it applies the substance's hazards to your actual workplace, tasks and people.
How much does a COSHH assessment cost?
Doing it yourself costs nothing but time. UK consultancies often charge £100–£500+ per assessment; enterprise COSHH software runs into hundreds or thousands per year. SDS Flow includes a guided COSHH assessment tool free with every account.
Do yours in minutes — free
SDS Flow's guided assessment tool walks you through every required COSHH field and produces an HSE-ready PDF. Included free with every account, alongside SDS management with dynamic QR codes.