Central ops team multi-site fitness: your RIDDOR obligations

Your central operations manager gets a call at 08:17 on a Monday morning. A member at your Coventry site has fractured their wrist after a cable snapped on a functional trainer. The site manager has already called an ambulance. Now your ops manager is being asked a simple question by the duty manager on the phone: when was that cable last inspected, and where is the record?

If your answer is 'I will need to check the system', you are in a manageable position. If your answer is 'I am not sure which site logged it, or whether they logged it at all', you have a RIDDOR problem.

For a central ops team running a multi-site fitness estate, that second answer is more common than it should be. This article explains what the law actually requires of you, what an HSE inspector will look for when they walk into any one of your sites, and how to build a compliance posture that holds across every location you operate.

---

What RIDDOR requires from a multi-site operator

RIDDOR — the Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 — places a legal duty on the 'responsible person' to report specified incidents to the HSE. In a multi-site fitness business, working out who the responsible person is at each location is the first compliance task your central ops team must resolve.

For most corporate gym operators, the employer is the responsible person. That means the legal duty sits with the organisation, not with the individual site manager. Your central ops team therefore carries collective accountability for every reportable incident across the estate, regardless of which site it happened at.

The categories you must report include:

• Fractures (other than fingers, thumbs and toes)
• Amputations, crush injuries, and loss of sight
• Any injury requiring hospital admission for more than 24 hours
• Dangerous occurrences — including the collapse or failure of load-bearing equipment
• Any death on the premises

For fitness facilities specifically, equipment failure resulting in injury is the most common reportable category. A cable snap, a treadmill belt failure at speed, a resistance-stack pin shearing — all of these can trigger a RIDDOR report. You have ten days from the incident to submit the report online via the HSE portal. For fatalities or specified injuries, the deadline is ten days but the HSE expects immediate notification by phone for the most serious cases.

If you operate under a leisure management contract on behalf of a local authority or trust, the contractual responsible person may differ from the legal employer. Check your contract before an incident occurs, not after.

---

What an HSE inspector will actually examine across your estate

An HSE inspection of a multi-site fitness operator is different from a single-site visit in one important respect: the inspector can ask for evidence from any site, and often will.

When HSE inspectors arrive at a gym — whether following a complaint, a notified incident, or a routine programmed inspection — they are looking for a coherent management system, not just paperwork at the site in front of them. For a central ops team, this means your compliance evidence needs to be accessible, consistent, and attributable.

The inspection will typically cover the following areas:

1. RIDDOR records — dates, nature of injury, equipment involved, actions taken post-incident
2. Equipment inspection and maintenance logs — including Planned Preventive Maintenance (PPM) schedules and evidence they have been carried out
3. Risk assessments — current, site-specific, and reviewed after any material change to the facility
4. Defect reporting records — the trail showing that when a fault was identified, it was acted on, and how quickly
5. Engineer visit records — who attended, what was done, what parts were replaced, and any safety-critical findings
6. Staff training records — induction, first aid, equipment safety
7. Accident book and incident reports — the full record, not a summary

For a central ops team managing ten sites, the question an inspector will pose is whether a defect raised at site three on a Tuesday was still outstanding at site three when the incident occurred the following Friday. If your defect log and your maintenance log are held in separate spreadsheets at site level, answering that question accurately takes time you may not have.

Inspectors are also increasingly asking about digital audit trails. A ring binder of paper forms is not automatically insufficient, but it is harder to interrogate under time pressure, easier to lose, and cannot demonstrate real-time visibility across multiple locations.

---

The specific risks that multiply as you add sites

A single-site operator with poor records faces a localised compliance risk. A central ops team running a multi-site fitness estate faces that risk multiplied by every location, with the added complication that the central team may not have direct visibility of what is — or is not — being logged at each site.

Three patterns consistently create compliance exposure for multi-site operators:

Inconsistent defect reporting across sites. One site manager logs every fault on the day it is reported. Another waits until they have three faults worth reporting. A third uses a WhatsApp message to the area manager instead of the formal system. When an inspector asks for the defect history on a specific piece of equipment, the picture is fragmentary.

Delayed or unconfirmed engineer visits. A reactive repair call is raised, a contractor attends, but the job closure note never makes it back into a central system. From a compliance standpoint, the repair may as well not have happened. This is particularly common where a Partner Engineer network is being used informally rather than through a managed platform that captures job completion records automatically.

RIDDOR reports missed because accountability is unclear. Site managers assume the central ops team filed the report. The central ops team assumed the site manager did. Nobody filed it. This is a straightforward legal breach, and it carries a fine of up to £20,000 in a magistrates' court — or an unlimited fine if the case is referred to the Crown Court.

---

What ukactive and CIMSPA expect from operators at this scale

HSE sets the legal floor. ukactive and CIMSPA both publish operational guidance that goes further, and both are referenced by procurement bodies and local authorities when awarding or renewing leisure management contracts.

ukactive's Operator Quality Mark and its affiliated inspection programmes expect members to demonstrate documented maintenance schedules, equipment age registers, and incident management processes that are consistent across a multi-site estate. If you are operating under a local authority contract and that authority is an ukactive member, your compliance with these standards may be contractually required.

CIMSPA's professional standards for facility managers include specific expectations around health and safety record keeping, risk assessment review cycles, and the professional competence of staff conducting equipment checks. For a central ops team, this means the person signing off a risk assessment at site level should hold an appropriate qualification — and your central team should be able to evidence that across every site.

Neither body has enforcement powers in the way the HSE does, but both are increasingly used as reference frameworks in contract tender documents. Poor compliance against their standards can cost you a contract renewal before any HSE action is ever taken.

---

The financial cost of a missed RIDDOR log

The direct costs of a RIDDOR failure are well-documented, but multi-site operators sometimes underestimate how quickly they compound.

Consider the following realistic sequence:

• A treadmill belt failure injures a member at your Leeds site. The injury meets the RIDDOR threshold.
• The site manager submits a local incident report but does not recognise the injury as RIDDOR-reportable. No report is filed with the HSE within ten days.
• The member's solicitor writes to you four months later. In preparing your defence, your legal team requests the maintenance and defect log for that treadmill.
• The log shows an outstanding defect note raised six weeks before the incident. There is no record of a repair being carried out or an engineer attending.
• The HSE is notified by the solicitor and opens an investigation.

At this point you are facing: a fine for the RIDDOR non-reporting breach, potential enforcement action for the underlying maintenance failure, a personal injury claim with an aggravated position because of the evidence gap, and — if you hold a local authority contract — a formal breach notice from the procuring body.

The financial exposure across those four categories for a mid-size multi-site operator is realistically in the range of £50,000 to £200,000, depending on severity. The administrative cost of a central ops team fielding that investigation while trying to keep ten sites running is significant on top of that.

---

Building a compliance architecture that works at scale

For a central ops team managing a multi-site fitness estate, the answer is not more paper. It is a single system of record that captures defect reports, engineer visits, RIDDOR-threshold incidents, and maintenance completions in one place — visible in real time across every site.

The practical steps look like this:

1. Define the responsible person at every site and ensure that definition is documented, understood by site managers, and reviewed when staffing changes occur.
2. Standardise your defect reporting process so that every site uses the same method, and defects are visible centrally within the same working day they are raised.
3. Connect your engineer network to your records system so that job completion — including safety-critical findings — flows back into the central log automatically rather than relying on a phone call or a PDF.
4. Set a RIDDOR review trigger at site level: any incident involving a member injury should prompt a mandatory check against the RIDDOR categories before the shift ends.
5. Audit your records quarterly against the inspection framework above — not annually, and not only when a renewal is approaching.
6. Retain records for the required period — a minimum of three years for RIDDOR reports, and longer for any incident that results in civil litigation.

Platforms such as GymAxis are built specifically for this operating model. The service-desk and equipment downtime tracking functions create a timestamped, attributable record of every defect, every engineer visit, and every job closure across your entire estate. When an inspector asks for the maintenance history on a specific treadmill at a specific site, that record is available in seconds, not hours.

The Partner Engineer network within GymAxis adds a further layer: because vetted field engineers are dispatched and their job records captured through the same platform, the completion evidence exists in your compliance record automatically. There is no gap between 'engineer attended' and 'record updated'.

---

What to do before your next HSE inspection

You do not know when the next inspection will be. It could follow a member complaint, a notified incident, or a routine programme visit. The preparation is the same regardless.

Work through the following checklist for every site in your estate:

• Are current risk assessments held centrally and dated within the last 12 months, or since any material change to the facility?
• Is there a complete maintenance log for every item of cardiovascular and resistance equipment, including engineer visit records?
• Can you produce a defect-to-resolution timeline for any piece of equipment within five minutes?
• Are RIDDOR-reportable incidents clearly flagged in your records, with submission confirmation from the HSE portal?
• Do your site managers know the RIDDOR threshold without having to look it up?
• Is your accident book (or its digital equivalent) accessible centrally, or only at site level?

If the answer to any of those questions is 'not for every site', that is where your central ops team should focus before anything else.

Compliance at scale is not a burden that sits alongside operations. It is what good operations look like.

---

To see how GymAxis helps central ops teams maintain compliant, auditable records across every site, book a demo at https://gymaxisai.com/demo-request.