Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
If you run a small business, you’ll probably hear the word “RIDDOR” sooner or later - often after something has already gone wrong.
Maybe an employee has had an accident, a customer slips on your premises, or a near-miss rattles your team. At that point, you’re not just thinking about first aid and getting everyone safe - you’re also thinking: do we have to report this?
This guide breaks it down in plain English, from a business owner’s perspective, so you can understand what RIDDOR stands for, when you need to report incidents, and how to set up a simple internal process that keeps your business compliant and protected.
What Does RIDDOR Stand For (And Why Does It Matter For Your Business)?
RIDDOR stands for the Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013.
In practical terms, RIDDOR is a UK legal reporting regime. It requires certain work-related incidents to be formally reported to the relevant enforcing authority (usually the Health and Safety Executive (HSE), but sometimes your local authority).
Why it matters is simple: when an incident meets the RIDDOR criteria, reporting isn’t optional. Missing a reportable event can create serious risk for your business, including:
- Regulatory enforcement (investigations, improvement notices, prohibition notices).
- Fines and prosecution in serious cases.
- Insurance issues if your procedures and records are weak or inconsistent.
- Employment and dispute risk if your internal handling of incidents isn’t fair or properly documented.
It can feel like “just admin”, but RIDDOR reporting is often the start of a bigger compliance story - and getting it right from day one can save you a lot of stress later.
If you’re building or reviewing your wider compliance approach, it also helps to view RIDDOR as one part of your overall Health and Safety obligations.
Who Has To Report Under RIDDOR (And Who Actually Files The Report)?
A really common misunderstanding is that the injured person is responsible for reporting. In most business scenarios, that’s not how RIDDOR works.
Typically, the duty to report sits with the “responsible person”, such as:
- an employer (for incidents involving employees at work);
- someone in control of work premises (for incidents on those premises); or
- a person responsible for work activities (including contractors in some arrangements).
As a small business owner, that often means it’s your responsibility - even if you delegate the practical task to a manager.
What If A Contractor Or Agency Worker Is Involved?
These situations can get messy quickly. For example, if you have contractors working on-site, you may assume their own company will handle any reporting. But depending on who controls the work and the premises, your business may still have reporting duties - or at least a duty to cooperate and keep records.
This is why having your working arrangements clearly documented matters. Your Employment Contract (for employees) and any contractor agreements (for self-employed contractors) should clearly cover health and safety responsibilities, reporting lines, and site rules.
Does RIDDOR Apply If A Customer Or Visitor Is Injured?
Sometimes, yes. RIDDOR isn’t limited to employees.
If a non-worker (like a customer, delivery driver, or visitor) is injured on your premises and is taken directly from the scene to hospital for treatment, it can be reportable if the accident arises out of (or is connected with) your work activity.
In other words: you can’t assume “it’s not our employee, so it’s not our problem”.
What Incidents Are Reportable? (Injuries, Diseases And Dangerous Occurrences)
Once you know what RIDDOR stands for, the next big question is what actually triggers the reporting requirement.
RIDDOR reportable events generally fall into these buckets:
- work-related fatalities;
- specified injuries to workers;
- over-7-day incapacitation of a worker;
- work-related diseases (diagnosed conditions linked to certain work activities);
- dangerous occurrences (serious “near miss” events); and
- certain injuries to non-workers (e.g. customers) where they are taken directly from the scene to hospital for treatment.
Because this is a high-stakes area, it’s worth creating a simple internal checklist so your team knows what to flag to management immediately.
Specified Injuries (Workers)
RIDDOR includes a category of “specified injuries” to workers (these replaced what older guidance called “major injuries”). These are serious injuries such as certain fractures, amputations, and injuries leading to permanent loss or reduction of sight, among others.
For a small business, the best way to treat this is: if it looks serious, assume it might be reportable and check straight away. It’s often safer to confirm early than to realise later you missed a deadline.
Over-7-Day Incapacitation
Even if the injury doesn’t look “major”, it can still be reportable if it stops a worker from doing their normal work duties for more than 7 consecutive days (not counting the day of the accident, but counting weekends and rest days).
This catches many small businesses out because the incident can seem minor at first - then the person is still off work (or cannot do normal duties) beyond a week.
Practical tip: diarise this as soon as an injury happens. If you’re tracking sickness absence anyway, you’ll be in a much better position to identify when RIDDOR reporting becomes required.
Dangerous Occurrences (Serious Near Misses)
RIDDOR isn’t just about injuries. Some near misses must be reported because they indicate a serious risk that could have caused death or serious harm.
Examples can include structural collapses, certain electrical incidents, lifting equipment failures, and accidental releases of dangerous substances (among others).
If you’re thinking “we had a lucky escape”, that’s often a sign you should check whether the event falls into the dangerous occurrence list.
Work-Related Diseases
RIDDOR can also apply when a worker is diagnosed with a reportable disease linked to their work (for example, certain occupational lung diseases, some infections linked to specific work activities, or conditions caused by exposure to specific hazards).
For small businesses, the important takeaway is that RIDDOR can be triggered long after the original exposure, so having strong records and policies can make a real difference.
When Do You Need To Report (And What Are The Deadlines)?
RIDDOR reports are time-sensitive. If you’re not sure whether something is reportable, it’s still worth checking quickly - because waiting too long can create avoidable compliance risk.
Deadlines vary depending on what happened, but commonly:
- Fatalities and specified injuries should be reported without delay (and in any event within 10 days of the incident).
- Over-7-day incapacitation must be reported within 15 days of the accident.
- Dangerous occurrences should be reported without delay (and in any event within 10 days).
Even where a report must be made later (for example, because you only learn after several days that an employee will be off for more than 7 days), you should still record the incident internally from day one.
This is where a good internal process helps. Many businesses include an incident reporting workflow inside their Staff Handbook, so managers and team members know exactly what to do, who to notify, and how quickly.
How Do You Make A RIDDOR Report (And What Records Should You Keep)?
In most cases, you’ll make a RIDDOR report through the HSE’s reporting system (usually online). The report will ask for factual information about what happened, including:
- who was injured (or affected);
- where and when the incident happened;
- what happened (a factual description);
- the nature of the injury or incident category; and
- your business details and contact details.
The key here is to stick to clear, objective facts. Avoid speculation, blame, or assumptions about fault. If you later find out additional details during an internal investigation, you can record those internally and take corrective steps.
Keeping Records: Accident Book And Beyond
Even when an incident is not reportable under RIDDOR, you should still keep proper internal records. This can include:
- your accident book entry (if applicable);
- first aid records;
- witness statements;
- photos or CCTV footage where appropriate; and
- your investigation notes and any corrective actions.
If you use CCTV as part of your evidence gathering, make sure you’re also thinking about privacy compliance - especially if the footage captures employees or members of the public. It’s worth checking your approach against the general rules around workplace cameras so you’re not creating a new compliance issue while trying to solve another one.
RIDDOR Reporting And Personal Data
RIDDOR reports can involve personal data (for example, information about an injured worker’s health). That doesn’t stop you reporting - you may have a legal obligation - but it does mean you should handle the information carefully:
- limit who internally can access the details;
- store reports securely;
- avoid oversharing by email or group chats; and
- ensure your internal privacy documentation is up to date.
Many businesses reflect this in their Privacy Policy and internal data handling practices, so you’re not scrambling when a real incident happens.
How Do You Stay Compliant As A Small Business? (Practical Steps That Actually Work)
RIDDOR compliance is much easier when you plan for it before there’s an incident.
Here are practical steps that help small businesses manage reporting obligations without turning it into a bureaucratic nightmare.
1. Create A Clear Incident Response Process
You want your team to know what to do in the first 30 minutes after an incident - because that’s when mistakes happen.
A workable process often includes:
- make the area safe and get first aid / emergency help;
- notify a nominated person (owner/manager/HR);
- record key facts immediately (time, location, what happened);
- preserve evidence (where appropriate);
- decide whether it’s RIDDOR reportable (and report within required timeframes); and
- run an investigation and implement corrective actions.
This kind of process often sits neatly inside a broader Workplace Policy suite, so it’s consistent with how you handle other compliance issues.
2. Train Managers On “Reportable Or Not?” Triage
Most RIDDOR failures aren’t because a business is trying to hide something - they happen because nobody realised a threshold had been met.
For example:
- a worker is “fine” on day one, then develops symptoms later;
- a minor injury becomes an over-7-day absence; or
- a serious near miss is brushed off because no one got hurt.
A short manager briefing on what RIDDOR stands for and the main trigger categories is often enough to prevent this.
3. Don’t Skip The Investigation (Even If You’ve Already Reported)
Reporting is not the same as investigating.
A RIDDOR report tells the regulator something happened. Your internal investigation should focus on:
- what caused it (root cause, not just the obvious trigger);
- what controls failed (training, equipment, supervision, maintenance); and
- what you’ll change so it doesn’t happen again.
From a business risk perspective, this is where you reduce the chances of repeat incidents, staff grievances, and enforcement action down the line.
4. Make Sure Your Documentation Matches How You Actually Operate
Policies that sit in a drawer won’t help you when the HSE asks questions.
It’s better to have a short, realistic procedure your team follows than a long document nobody reads. If you employ staff, it also helps to ensure your Employment Contract and internal rules clearly set expectations around reporting hazards, cooperating with investigations, and following safety instructions.
5. Get Advice If You’re Unsure
Some incidents sit in a grey zone - especially where multiple businesses are involved (shared premises, contractors, agency staff), or where there’s an underlying health issue.
This article is a general guide, but getting tailored advice can be the difference between confidently doing the right thing and accidentally creating risk through inaction (or overreaction).
Key Takeaways
- RIDDOR stands for the Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013, and it can apply to employers and those in control of work premises.
- RIDDOR isn’t only about injuries - it can also cover dangerous occurrences (near misses) and certain work-related diseases.
- Some “minor” incidents become reportable later, particularly if they lead to more than 7 days off work or incapacity from normal duties.
- Build a simple internal process for incident response, evidence capture, and decision-making on whether reporting is required.
- Keep good records and handle injury/health information carefully, as it may involve personal data.
- Strong documentation (policies, handbook rules, and contracts) can help you stay compliant and reduce risk when something goes wrong.
If you’d like help putting the right health and safety processes, workplace policies, and documentation in place, you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.


