The safety file looked fine on paper. It always does, right up until the point an inspector starts reading it properly.

HSA prosecution records are public. Most safety managers never look at them. That is a mistake, because the patterns in those cases are worth more than any generic compliance checklist. Real employers, real sites, real failures, and a paper trail that shows exactly where the system broke down.

The Pattern Nobody Wants to Admit

Prosecutions cluster around a handful of recurring failures. Not exotic scenarios. Manual handling. Falls from height. Unguarded machinery. Exposure to hazardous substances. The same categories appear year after year because the underlying problem is not ignorance of the hazard. It is documentation that describes a control without checking whether the control actually works.

A risk assessment that says "workers will use the correct PPE" is not a control. It is a wish. An HSA inspector asking to see training records, inspection logs, and supervisor sign-offs is checking whether that wish ever became a system. When those records are missing, incomplete, or photocopied from a template with the original company name still visible, the prosecution case writes itself.

The [machinery-related cases]((/articles/workplace/the-machinery-trap-how-150-000-in-fines-could-have-been-prevention-costs/) that reach court follow this arc almost without variation. Employer has a Safety Statement. Safety Statement mentions machinery hazards. Nobody checked whether guards were in place last Tuesday. Someone gets hurt. The document becomes evidence of what the employer knew and failed to act on.

What the Safety Statement Is Actually For

Under the Safety, Health and Welfare at Work Act 2005, a Safety Statement is a living management document. The HSA treats it that way during inspections. Employers often do not.

A Safety Statement written in 2019 and untouched since is a liability document, not a protection. It tells an inspector that risk assessment happened once and then stopped. Changes in staff, equipment, processes, or premises since that date are unaddressed. Any incident connected to those changes is now very difficult to defend.

The practical fix is a review schedule with a named person and a sign-off date. Not aspirational language about "periodic review." An actual calendar entry, an actual person, an actual record that the review happened. Four lines of meeting notes beats a 40-page document with no evidence anyone read it.

Where Risk Assessments Actually Break Down

Generic risk assessments are the single most common documentation failure in HSA enforcement cases. A risk assessment that could apply to any warehouse, any farm, any factory, anywhere in Ireland tells an inspector that nobody thought specifically about this workplace and these workers.

The test is straightforward. Take your risk assessment for a specific task and ask: does this document describe something that is true of my site today? Does it name the actual equipment? Does it reflect the actual layout? Does it account for the workers who actually do this job, including new starters and contractors?

If the answer to any of those is no, the document is decorative.

HSA inspectors conducting investigations after a serious incident will cross-reference the risk assessment against the physical reality of the site. Gaps are not just noted, they are used to establish that the employer was aware of the hazard in principle but did not translate that awareness into effective controls. That is the evidential gap that turns an incident into a conviction.

Training Records and the Competence Gap

Courts have repeatedly found against employers where training records existed but could not demonstrate that the relevant worker received relevant training before the relevant task. The distinction matters. "All staff complete manual handling training" is not the same as evidence that a specific worker completed training before operating a specific piece of equipment.

Manual handling prosecutions illustrate this neatly. The employer has a training programme. The programme is delivered. But the records are held in a spreadsheet that does not link to job roles, and the new starter who was injured three weeks into the job had not yet been scheduled. The programme existed. The control failed.

Training records need to show who was trained, on what, by whom, and when. They need to be cross-referenced against the workforce. Any gap between "employees who should have this training" and "employees with a record of completing it" is a gap an inspector will find.

The Contractor Problem

Subcontractors and agency workers appear in a disproportionate number of HSA prosecution cases. The reason is straightforward. The host employer's safety management system was built around direct employees and nobody thought carefully enough about how it extended to people arriving from outside.

Site inductions that take six minutes. Method statements signed without being read. PPE policies that assume workers arrive equipped. These are the failure points. The legal position is clear: if workers are on your site or under your direction, they are covered by your duty of care regardless of who pays their wages.

A competent contractor management process has three components. Selection that checks competence before work starts. Integration that brings contractors into the site safety system, not just hands them a document to sign. Monitoring that checks whether the work is being carried out as agreed. Most employers do the first in a cursory way and skip the other two entirely.

What to Check Before the Inspector Does

Walk your own site with the specific intent of finding what your documentation says is happening versus what is actually happening. Look at the physical controls. Look at the records. Ask a worker to describe how they do a task and compare it to your safe work procedure.

Four questions worth asking:

Is your Safety Statement dated and reviewed? If the last review date is more than 12 months ago, that is the first thing to fix.

Do your risk assessments describe your actual workplace? If a paragraph could apply to any business in your sector, it is not specific enough.

Can you produce a training record for every worker against every relevant task? If not, find the gaps before someone else does.

Does your contractor management leave written evidence? Induction records, method statement approvals, monitoring notes. If it is not written down, it did not happen.

The Turn

None of this is about satisfying an inspector. It is about whether the controls you believe are in place are actually working. The prosecution cases show employers who thought they had a system. The paperwork existed. The system did not.

Your documentation is only as good as the reality it describes.