A roadworks company in Northern Ireland was fined £1.2 million after a worker was killed. The company had a safety statement. They had a site supervisor. None of it mattered, because the system of work was fundamentally broken.
This is how million-euro penalties happen. Not through malice. Through the slow accumulation of shortcuts that nobody ever formally decided to take.
The Pattern Behind the Big Numbers
Look at every major HSA prosecution from the last five years and the same categories keep appearing. Falls from height. Unguarded machinery. Vehicles reversing without adequate systems. Workers operating equipment they were never properly trained on. The specific incident varies. The underlying failures are almost identical.
This is not bad luck. It is a predictable consequence of treating safety as a documentation exercise rather than an operational one. A laminated safety statement on the site cabin wall does not stop a worker falling three metres through a fragile roof. A toolbox talk that nobody attended does not constitute adequate training. The HSA knows this. Courts know this. Insurance companies know this. The companies paying seven-figure fines apparently did not.
The fine is rarely the worst part. A €1.2 million penalty is survivable for a large contractor. The reputational damage, the loss of public contracts, the impact on the people who worked alongside whoever was injured or killed, those costs do not appear on a balance sheet.
Where the Money Actually Goes Wrong
Falls from Height
This category accounts for more prosecutions than any other in Irish construction. The specific failures cluster around three points: inadequate edge protection, fragile roof materials with no secondary netting or catch platform, and workers accessing elevated areas without a formal safe system of work.
The regulation is not ambiguous. The Safety, Health and Welfare at Work (Construction) Regulations 2013 require that any work at height above two metres have collective protection measures in place before anyone goes up. Inspectors find sites where this simply has not been done. Not because the contractor was unaware of the rule, but because the job was supposed to take 20 minutes and nobody wanted to rig edge protection for a 20-minute job. Then it takes longer, conditions change, and someone falls.
Check this immediately: Can every person on your site who works at height name the specific control measures in place for their task today? If they cannot, the controls either do not exist or have not been communicated.
Machinery Without Guards
Unguarded or improperly guarded machinery triggers some of the highest fines per incident. The mechanical engineering failures that lead to a €400k prosecution are rarely exotic. A removed interlock. A guard that was damaged and never replaced. A nip point accessible during routine maintenance.
The machinery itself is often legally compliant when purchased. It becomes non-compliant through daily use, modification, and the gradual normalisation of workarounds. Someone removes a guard because it slows production. Nobody puts it back. Six months later, an inspector arrives or a worker loses fingers, whichever comes first.
Check this immediately: Walk your production floor or site looking only at machinery guarding. Do not look at anything else. Count how many guards are missing, damaged, or bypassed. If the number is above zero, you have an immediate prosecution risk.
Vehicle and Pedestrian Segregation
Reversing vehicles kill people on Irish sites every year. Telehandlers, dumper trucks, forklifts, plant of every description. The common factor is almost never brake failure or mechanical fault. It is a system of work that allows pedestrians and moving vehicles to occupy the same space at the same time without formal controls.
HSA inspectors look for segregation plans. They want to see physical barriers, designated pedestrian routes, banksmen procedures, and evidence that drivers are trained on the specific vehicles they operate. Finding none of these on an active site is not unusual. Finding all of them functioning correctly is rarer than it should be.
Check this immediately: Can you produce a site traffic management plan right now? Does it reflect the current site layout, or was it drawn up during planning and never updated?
Training That Exists Only on Paper
A certificate of attendance at a manual handling course does not demonstrate competence. A CSCS card does not mean a worker has been assessed for the specific tasks they perform on your site. Site-specific induction records that list every worker as having attended, including people who started last Tuesday, are a red flag to any competent inspector.
The prosecution pattern here is consistent: a worker is injured performing a task they were allegedly trained for, investigation reveals the training was generic or never verified, and the employer cannot demonstrate that the specific risk was ever assessed and communicated.
Check this immediately: Pull the training records for your five highest-risk activities. For each one, identify who conducted the training, when it was last reviewed, and how competence was assessed. If any answer is unclear, you have a gap.
What a Useful Pre-Audit Actually Looks Like
Forget the 47-page audit template. The questions that matter are shorter.
Ask your workers, not your managers, what they do when they find a piece of broken equipment. If the answer involves continuing to use it or leaving it for someone else, your reporting culture is broken.
Walk the highest-risk area of your site or facility and count the number of things that could injure someone in the next 10 minutes. Be honest. Anything above zero requires immediate action, not a committee meeting.
Review your last five near-miss reports. If they are all minor slips and nobody has reported anything involving machinery, vehicles, or height, your near-miss culture is suppressing information rather than capturing it.
Check your contractor management process. When a subcontractor arrives on your site, what controls are in place before they start work? If the answer is a signature on a form, you are carrying their safety failures as your own liability.
The Turn
None of this requires a consultant, a new software system, or a two-day offsite. The companies that attract massive fines are not ignorant of the regulations. They are companies that allowed the gap between their documented safety system and their operational reality to grow until an inspector or an incident made it visible.
The audit that matters is the one you do honestly, on a Tuesday afternoon, without telling anyone you are doing it.
That gap is where the €1.2 million lives.