COSHH Regulations Explained: A Practical UK Guide (2026)

Quick Answer

COSHH stands for the Control of Substances Hazardous to Health Regulations 2002. It's the UK law that requires employers to assess and control the risks from hazardous substances in the workplace — chemicals, dusts, fumes, gases, and biological agents. Employers must identify hazardous substances, carry out a COSHH assessment, implement controls following the hierarchy of risk control, provide information and training to workers, and monitor exposure where necessary. COSHH applies to almost every UK workplace, from offices using cleaning products to manufacturing plants handling industrial chemicals.

If your workplace uses any chemicals, generates dust or fumes, or exposes workers to biological agents, COSHH applies. This guide explains what the regulations require, how to comply, and where the most common failures happen.

What does COSHH stand for?

COSHH stands for Control of Substances Hazardous to Health. The current regulations are the Control of Substances Hazardous to Health Regulations 2002 (often abbreviated as COSHH 2002 or CoSHH), which replaced earlier versions dating back to 1988.

The regulations are made under the Health and Safety at Work etc. Act 1974 and are enforced in the UK by the Health and Safety Executive (HSE) and local authorities depending on the workplace.

What does COSHH cover?

COSHH covers any substance that is hazardous to health, including:

  • Chemicals — cleaning products, paints, solvents, fuels, adhesives, laboratory reagents
  • Products containing chemicals — most workplace materials with safety data sheets
  • Fumes — welding fumes, soldering, vehicle exhausts in enclosed spaces
  • Dusts — wood dust, flour dust, silica dust, metal dust
  • Vapours — from solvents, fuels, paint thinners
  • Mists — from sprays, machining coolant, chemical cleaning
  • Nanotechnology — emerging substances at nano-scale
  • Gases — in industrial use, healthcare, laboratories
  • Asphyxiating gases — nitrogen, argon in confined spaces
  • Biological agents — bacteria, viruses, fungi (where these are the result of work, e.g. healthcare, sewage work, agriculture)
  • Germs that cause disease at work

What COSHH does NOT cover

Some hazardous substances have their own dedicated regulations and fall outside COSHH:

  • Asbestos — covered by the Control of Asbestos Regulations 2012. For asbestos-specific worker training see Asbestos Awareness; for duty-holders, Managing Asbestos
  • Lead — covered by the Control of Lead at Work Regulations 2002
  • Radioactive substances — covered by the Ionising Radiations Regulations 2017
  • Substances hazardous only because of explosive/flammable properties or high/low temperature — fire and DSEAR regulations apply instead. Where flammable or explosive atmospheres are part of the workplace risk picture, our DSEAR Awareness course covers the parallel regulatory regime that sits alongside COSHH

Who does COSHH apply to?

COSHH applies to virtually every UK workplace. The duty falls primarily on the employer, but workers and contractors also have duties:

  • Employers — must assess risks, control exposure, provide information and training
  • Self-employed people — same duties as employers, applied to themselves and any workers
  • Workers — must follow controls, use PPE provided, report defects
  • Contractors and visitors — must be informed of risks and given appropriate controls

There's no minimum employer size — even sole traders using cleaning chemicals at a client's premises have COSHH duties.

The 8 main duties under COSHH

DutyWhat it requires
1. Assess the risksIdentify hazardous substances used or generated, who's exposed, how, and at what level. This is the COSHH assessment.
2. Decide what precautions are neededApply the hierarchy of control. Eliminate, substitute, engineer, administrate, then PPE — in that order.
3. Prevent or adequately control exposureImplement the controls identified. Adequate control means below relevant Workplace Exposure Limits (WELs) where they apply.
4. Ensure controls are used and maintainedEngineering controls (extraction, ventilation) require regular thorough examination and testing — typically every 14 months.
5. Monitor exposureWhere adequate control can't be confirmed without measurement, exposure must be monitored — typically by an occupational hygienist.
6. Health surveillanceFor specific exposures (e.g. respiratory sensitisers, skin sensitisers), health surveillance is required by occupational health professionals.
7. Provide information, instruction and trainingWorkers must understand what they're handling, the risks, the controls, and what to do in emergencies.
8. Plan for emergenciesSpills, leaks, accidents — procedures, equipment and training for foreseeable emergencies. Practical spill response is most often where this duty is weakest in audit; our Spill Kits and Chemical Control course covers the operational training that supports this duty.

How to do a COSHH assessment

The COSHH assessment is the cornerstone of compliance. The 7-step approach:

  1. Gather information — list all hazardous substances used or generated. Collect safety data sheets from suppliers.
  2. Identify the hazards — read the safety data sheets. Identify acute hazards (immediate harm), chronic hazards (long-term harm), and routes of exposure (inhalation, skin contact, ingestion).
  3. Evaluate the risks — consider how the substance is actually used in your workplace. Volumes, exposure duration, who's exposed, what existing controls are in place.
  4. Decide on controls — apply the hierarchy of control. Eliminate, substitute, engineer, administrate, PPE.
  5. Record findings — written record required for employers with five or more employees. Best practice for any size.
  6. Implement and review — put the controls into practice. Schedule reviews — annually as a minimum, more often where exposure or substances change.
  7. Communicate to workers — workers exposed need to understand the substance, the controls, and emergency procedures.

Producing a robust COSHH assessment is a discipline in itself, separate from the general principles of risk assessment. The person doing the work needs to be able to read a safety data sheet competently, understand exposure pathways, evaluate whether existing controls are actually adequate against the substance's properties, and document the outcome in a way that survives audit and feeds into worker training. Our COSHH Assessors Training course covers this in-house competence specifically. Most employers running structured COSHH compliance settle on a model where one or two trained assessors handle the assessment work, supported by wider COSHH Awareness training across the workforce who actually handle the substances.

The hierarchy of control under COSHH

COSHH explicitly requires controls to follow the hierarchy of risk control:

  1. Eliminate — don't use the hazardous substance at all (change the process)
  2. Substitute — replace with a less hazardous alternative (different chemical, different form — e.g. pellets instead of powder)
  3. Engineering controls — local exhaust ventilation (LEV), enclosure, automation, segregation
  4. Administrative controls — procedures, work rotation to limit exposure time, training, signage
  5. Personal Protective Equipment — respiratory protection, gloves, eye protection, protective clothing

The HSE has been clear that PPE-only solutions rarely demonstrate adequate control. A COSHH assessment that identifies a hazard and concludes "we'll issue gloves and masks" is usually inadequate — engineering controls should normally be considered first.

Workplace Exposure Limits (WELs)

For many hazardous substances, the HSE publishes Workplace Exposure Limits (WELs) in document EH40. WELs set a maximum legal concentration in workplace air — exposure above the WEL is unlawful regardless of how the substance is being controlled.

WELs come in two types:

  • Long-term limit (8-hour TWA) — average exposure over an 8-hour working day
  • Short-term limit (15-minute reference) — peak exposure over a 15-minute period

Where a WEL exists, achieving exposure below it is a minimum legal requirement. Not all substances have WELs — for those, "adequate control" is determined by professional judgement.

Common COSHH compliance failures

1. No COSHH assessments — or generic ones

The most common failure. Either no assessment exists, or the assessment is a generic template that doesn't reflect actual workplace use.

2. Treating safety data sheets as the assessment

Safety data sheets describe the substance generically. A COSHH assessment must apply that information to your specific workplace — how the substance is actually used, by whom, in what volumes.

3. Defaulting to PPE

Issuing gloves and masks without considering whether engineering controls (extraction, enclosure) would prevent exposure in the first place. Inspectors will challenge this.

4. LEV systems unmaintained

Local exhaust ventilation requires thorough examination and testing every 14 months. A faded sticker on the side of an extraction unit is a common audit finding.

5. No training

Workers using hazardous substances without information about what they're handling. The "right to know" is fundamental to COSHH compliance.

Frequently asked questions

What does COSHH stand for?

COSHH stands for Control of Substances Hazardous to Health Regulations 2002. It's the UK law governing workplace exposure to hazardous substances.

Do COSHH regulations apply to all UK workplaces?

Almost all. Any workplace using hazardous chemicals (including cleaning products), generating dusts, fumes, or biological agents falls under COSHH. There's no minimum employer size.

How often should COSHH assessments be reviewed?

At least annually, and additionally when substances or processes change, when exposure may have increased, after incidents, or when health surveillance reveals problems.

Who can carry out a COSHH assessment?

Any competent person with sufficient knowledge of the substances, the workplace, and risk assessment principles. For complex substances or exposures, occupational hygiene specialists may be needed.

Is COSHH training a legal requirement?

Yes. COSHH explicitly requires employers to provide information, instruction and training to workers exposed to hazardous substances.

What's the difference between a COSHH assessment and a safety data sheet?

A safety data sheet (SDS) describes the substance generically — its hazards, properties, and recommended controls. A COSHH assessment applies that information to your specific workplace use — how it's actually handled, by whom, in what volumes, with what existing controls.

Where to learn more

Anyone responsible for handling, supervising or assessing hazardous substances should have appropriate training. KeyOstas offers options at every level:

For consultancy support on COSHH assessments, see our Risk Assessment & Management consultancy. Or call us on +44 (0) 3300 569534.