Gym health and safety record keeping: what an HSE inspector checks
Gym health and safety record keeping: what an HSE inspector checks
A member trips over a loose floor mat near the free-weight racks on a Tuesday morning. The injury is minor — a bruised knee, no hospital visit. Your duty manager fills in an incident form, files it in a ring binder behind the reception desk, and the day moves on. Six weeks later, the same member makes a formal complaint. The HSE receives a notification. An inspector arrives.
The first thing that inspector asks for is your incident record. Not a summary. Not a verbal account. The actual contemporaneous log — time-stamped, signed, with supporting maintenance history for the area in question.
If that log is incomplete, inconsistent with your other records, or simply cannot be located, the conversation changes immediately. This article is about making sure that does not happen to you.
---
What the law actually requires from gym operators
The Health and Safety at Work etc. Act 1974 places a duty of care on every employer, including gym and leisure operators, to ensure the safety of both employees and members as far as is reasonably practicable. That duty is not met by good intentions — it is evidenced by records.
The Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 (RIDDOR) add a specific reporting layer. As a gym operator, you are a 'responsible person' under RIDDOR. That means you must:
- Report certain injuries to the HSE within defined timeframes.
- Record every reportable incident, including the date, time, location, nature of injury, and the circumstances.
- Retain those records for a minimum of three years.
- Make records available to the HSE on request — which in practice means immediately during an inspection.
Industry bodies including ukactive and CIMSPA both reference these statutory obligations in their own operator standards. CIMSPA's professional framework expects registered facilities to maintain demonstrable safety management systems — not just policies pinned to a notice board.
---
What an HSE inspector will actually look at
Inspectors do not arrive and ask whether you take health and safety seriously. They ask to see evidence. In a gym context, that evidence falls into four categories:
Incident and near-miss logs. Every injury, near-miss, and dangerous occurrence should be recorded on the day it happens. The inspector will check whether entries are contemporaneous (not written retrospectively), whether they include enough detail to understand the cause, and whether any RIDDOR-reportable incidents were reported within the correct window.
Equipment maintenance records. If a member is injured on a piece of equipment, the first question is whether that equipment was being properly maintained. Your preventative maintenance (PPM) schedule, engineer visit reports, and any recorded faults or out-of-service periods form a direct line of defence. A gap in those records is a red flag.
Risk assessments. The inspector will want to see that your risk assessments are not generic templates downloaded from the internet. They should be specific to your facility, your equipment, and your member population — including peak-hour conditions, induction procedures for new members, and supervised versus unsupervised areas.
Staff training records. Who delivered first aid when the incident occurred? When did that person last recertify? Who conducted the induction for the injured member? These questions require training logs with dates and staff names.
---
The record-keeping gaps that cause the most problems
In practice, most gym operators do not fail on policy — they fail on execution. Here are the most common gaps that create problems during an inspection:
- Incident forms completed hours or days after the event. Courts and regulators treat post-event records with scepticism. A log written three hours after an incident, on a form that shows a different time, undermines everything else you produce.
- Equipment fault logs that do not connect to incident logs. If a treadmill belt was reported as worn on a Monday and a member fell on that treadmill on a Thursday, your records need to show what you did between Monday and Thursday. If there is no action log, the silence speaks for itself.
- Risk assessments dated more than twelve months ago. A risk assessment for a piece of equipment you no longer own, or that does not reflect a reconfigured gym floor, is not a defence — it is evidence of negligence.
- Near-miss records that simply do not exist. Most operators record injuries. Far fewer record near-misses. The HSE expects both, because near-misses are the leading indicator of a future incident.
- No audit trail for corrective actions. Noting a fault is the beginning of the process, not the end. The record must show that someone was assigned responsibility, that a resolution was confirmed, and that the equipment was returned to service only after a sign-off.
What poor records cost in practice
The financial consequences of inadequate gym health and safety record keeping operate on two tracks.
The first is enforcement. The HSE can issue Improvement Notices requiring remedial action within a defined timescale, Prohibition Notices that close equipment or areas immediately, and — in serious cases — prosecute under the Health and Safety at Work Act. Fines for corporate defendants in the fitness sector have reached five and six figures for failures that, in documentary terms, amounted to missing logs and outdated risk assessments.
The second track is civil liability. When a member brings a personal injury claim, the first thing their solicitor requests is your incident log, your maintenance history, and your risk assessments. If those records are incomplete, your insurer's position weakens significantly. Settlements that might have been contested become much harder to defend. In some cases, insurers have declined to cover claims where operators could not demonstrate that reasonable precautions were documented at the time.
There is a third cost that is harder to quantify but very real: reputational damage. An HSE investigation is a matter of public record. For a multi-site operator, a prosecution in one location affects member confidence across the entire estate.
---
Building a record-keeping system that survives scrutiny
A compliant record-keeping system does not need to be complicated, but it does need to be consistent and centrally accessible. Here is a practical framework:
- Standardise your incident forms. Every form must capture: date, time, exact location, member or staff status of the person involved, nature of the incident, names and signatures of all witnesses, immediate action taken, and whether the incident is RIDDOR-reportable.
- Create a direct link between incident records and equipment records. When an incident involves a specific piece of equipment, the incident log should reference the asset ID of that equipment, and the equipment's maintenance log should reference the incident. This cross-referencing is what an inspector looks for.
- Set a review schedule for risk assessments. At minimum, annually. Also triggered by: a new piece of equipment arriving, a layout change, a significant incident, or a change in the way you operate (for example, extending unmanned hours).
- Record near-misses as formally as injuries. Build a culture where near-misses are reported without blame, because they are your early-warning system.
- Assign and track corrective actions. Every identified fault or risk must have a named owner, a target resolution date, and a signed-off close date. An open action with no update is an inspector's concern.
- Keep records in a format that can be produced immediately. A ring binder that nobody can find is not a record-keeping system. Records need to be searchable, retrievable, and capable of being exported in a usable format at short notice.
How digital operations platforms change your compliance position
Many of the record-keeping gaps described above are not the result of careless operators — they are the result of paper-based or fragmented systems that make consistent documentation genuinely difficult. When your incident forms are in one place, your maintenance logs are in another, and your risk assessments live in a folder that was last updated by someone who left the business, the connections between records that an inspector needs to see simply do not exist.
A digital operations platform centralises all of this. Incident logs are created in real time, on a mobile device, at the point of the incident. Equipment assets carry a full digital history — PPM visits, reported faults, out-of-service periods, engineer sign-offs — that is automatically linked to any incident involving that asset. Risk assessments are stored against specific locations and equipment types, with review-date alerts that ensure nothing drifts out of date.
For multi-site operators, the benefit is even more significant. A compliance manager overseeing ten sites cannot physically verify that every incident form is being completed correctly at every location. A centralised platform gives them visibility across the estate in real time, with dashboards that flag open corrective actions, overdue reviews, and locations where near-miss reporting has gone quiet — which is itself a warning sign.
GymAxis is built specifically for gym and leisure operators. Its equipment-tracking module maintains a full asset history for every item on your floor — treadmills, free weights, resistance machines, and group-exercise kit — while its service-desk function logs faults, dispatches field engineers through its Partner Engineer network, and records resolution sign-offs. Every entry is time-stamped and auditable. When an inspector asks for the maintenance history of a specific piece of equipment, you can produce it in seconds.
That is not a luxury. Given what inadequate records cost, it is the baseline your operation should be working to.
---
The practical steps to take this week
If you are reading this and recognising gaps in your current record-keeping, here is where to start:
- Pull your last three RIDDOR-reportable incidents and check whether the records meet the standard described above. If they do not, note the gaps and address them prospectively.
- Ask your duty managers where incident forms are stored and how quickly they could be produced if requested today.
- Review the date on your most recent risk assessments for your cardiovascular equipment, free-weight areas, and any high-use group-exercise spaces.
- Check your equipment maintenance logs for the past six months and confirm that every recorded fault has a documented resolution and sign-off.
- If you manage multiple sites, ask each site to confirm who is responsible for health and safety record keeping and when they last reviewed their own records.
---
If you would like to see how GymAxis handles equipment asset history, incident logging, and compliance record keeping in a single platform, book a demo at https://gymaxisai.com/demo-request.
Frequently asked questions
What records must a UK gym keep under RIDDOR?
Under RIDDOR 2013, a UK gym operator must record the date, time, location, nature of any reportable injury or dangerous occurrence, the circumstances, and the action taken. Records must be retained for at least three years and must be produced to the HSE on request. Near-misses, while not always RIDDOR-reportable, should also be logged as part of a complete health and safety record-keeping system.
How long does a gym have to report a RIDDOR incident to the HSE?
Most RIDDOR-reportable incidents — including accidents causing a specified injury to a worker or a member of the public who is taken from the scene to hospital — must be reported to the HSE without delay, and in most cases within ten days. Over-seven-day incapacitation injuries must be reported within fifteen days of the accident.
What does an HSE inspector look for in a gym health and safety inspection?
An HSE inspector will typically request: contemporaneous incident and near-miss logs, equipment maintenance and fault records cross-referenced to any relevant incidents, current dated risk assessments specific to the facility and its equipment, and staff training records including first-aid certification. Gaps in any of these areas — particularly records that cannot be located quickly — are treated as evidence of an inadequate safety management system.
How do industry bodies like ukactive and CIMSPA relate to HSE compliance for gyms?
ukactive and CIMSPA are UK fitness industry bodies that set professional and operational standards for affiliated operators and registered facilities. Both reference statutory health and safety obligations — including the Health and Safety at Work Act 1974 and RIDDOR 2013 — within their own frameworks. Compliance with HSE requirements is a baseline expectation for operators seeking or holding ukactive membership or CIMSPA-registered facility status.