HSE issues first Prohibition Notice against occupational health provider

The Health and Safety Executive (HSE) has taken unprecedented enforcement action against an occupational health service provider, issuing its first ever Prohibition Notice in this context following serious deficiencies in health surveillance delivery.

According to the HSE press release, published on 3 July 2026, the regulator identified fundamental failings in the way an occupational health service provider was delivering health surveillance.

Inspectors found that surveillance was being carried out by personnel who were inadequately trained, unqualified and unsupervised. This created a risk that early indicators of occupational diseases such as asthma, dermatitis and noise-induced hearing loss would not be identified.

The HSE concluded that these failings presented a risk of serious personal injury and issued a Prohibition Notice to halt the activity. An Improvement Notice was also served, citing fundamentally unsuitable health surveillance arrangements, including inadequate governance, lack of quality assurance and absence of escalation procedures.

This is the first time the HSE has taken enforcement action of this type directly against an occupational health provider rather than an employer.

Regulatory significance

This case is significant on several levels.

• First, it reflects an expanding regulatory focus on occupational ill health, alongside traditional safety risks. Health surveillance is a legal requirement in certain circumstances and is intended to detect disease early and inform control measures.

• Second, it demonstrates that the HSE is prepared to enforce directly against service providers where their failings contribute to risk, rather than limiting enforcement to duty-holding employers.

• Third, the use of a Prohibition Notice in this context represents a notable development in enforcement practice. A Prohibition Notice is a strong intervention used where an inspector is of the opinion that activities involve a risk of serious personal injury.

In this case, the risk arose not from an immediately observable unsafe act but from systemic deficiencies in a supporting function.

Practical implications

For businesses, particularly those relying on outsourced occupational health services, the implications are clear:

1. Assurance of provider competence
   Organisations should not assume that contracting an external provider transfers responsibility. Dutyholders must ensure providers are competent, appropriately qualified and effectively governed.

2. Scrutiny of health surveillance systems
   Health surveillance programmes should be reviewed to confirm that they are suitable, proportionate and capable of identifying early signs of ill health.

3. Clinical governance and oversight
   The absence of clinical governance frameworks, quality assurance mechanisms and escalation procedures was a key enforcement trigger. These elements should be demonstrably in place.

4. Integration with risk control measures
   Health surveillance is not a standalone activity. Findings must inform workplace controls, risk assessments and exposure management.

5. Wider enforcement exposure
   This case reinforces that enforcement risk extends beyond visible hazards to organisational systems and processes that underpin health protection.

Enforcement practice

This case introduces an important and potentially far-reaching development in HSE enforcement practice.

Prohibition Notices are traditionally associated with situations where inspectors encounter an immediate and visible risk, such as unsafe work at height, unguarded machinery or uncontrolled exposure to hazardous substances.

What is notable here is that the HSE appears to have relied on an inferred risk of serious personal injury rather than directly observing harm or unsafe conduct in progress.

The failure identified was one step removed from the harm itself. The inspectors did not observe workers missing early signs of illness. Instead, they identified conditions - such as inadequate training, lack of competence and absence of supervision - under which such failures were reasonably foreseeable.

This suggests that indirectly observable risks, particularly those arising from systemic or governance failures, may now be sufficient to justify prohibition-level enforcement.

If this interpretation is sustained, it has wider implications beyond occupational health provision. For instance, it’s possible that similar reasoning could apply to:

• competency management systems

• safety-critical training arrangements

• maintenance regimes

• monitoring and inspection processes

In each case, the effectiveness of the control system may be subject to enforcement even where failure has not yet materialised in observable harm.

While it remains to be seen whether this marks a consistent shift in enforcement approach, the direction of travel is clear: HSE is increasingly willing to intervene where systems create a credible risk of serious harm, even if that risk is not immediately visible.

Further information: HSE press release at https://press.hse.gov.uk/2026/07/03/hse-takes-landmark-enforcement-action-against-occupational-health-service-provider/