When Health & Safety Becomes An HR Case

How should health and safety and HR work together on case management?

Treat them as one evidential chain rather than two filing systems. Work-related stress is a risk that employers must assess under health and safety law, and HSE inspections increasingly test whether that assessment is applied and reviewed rather than simply written down. Most of the evidence that a risk was known is sitting in individual HR records: absence notes, grievances, rota data, return-to-work conversations. The problems for organisations arise because they don’t have a linked record or nobody reviews case data for patterns.

An employee goes off sick with stress. Six weeks later, they raise a grievance about their line manager. Three months after that, a second grievance about the same manager arrives from a different team member. In another system entirely there is a risk assessment from eighteen months ago that flagged workload issues in that department, and it was never reviewed.

Four pieces of information. Four owners. Nothing linking them together. That is the normal state of affairs in most large organisations, and it has become a liability.

The HSE has put work-related stress at the centre of its strategy, and inspection activity reflects that. Of more than 13,200 inspections completed in 2024/25, over 7,000 focused on work-related health risks. Inspections are not just checking if a stress policy exists, they are making sure that the policy is applied, monitored and reviewed in practice.

HR and Health and Safety have significant overlaps, and HR professionals need to understand the compliance implications, the legal duties involved, and where the evidence for meeting them belongs.

Where Health & Safety Ends And HR Begins

On paper, the split is clear. Health and safety owns the physical environment, risk assessments and incident reporting. HR owns people, policy and processes. In practice, the same situation can impact both departments, possibly months apart.

The HSE's most recent figures put 1.9 million working people in Great Britain with a work-related illness, of whom 964,000 had work-related stress, depression or anxiety. Illness and injury together accounted for 40.1 million working days lost in the 2024/5 year.

A more revealing number comes from the same dataset. In 2024/25, 59,219 injuries to employees were reported under RIDDOR, while the Labour Force Survey put self-reported workplace injuries at 680,000. Formal safety reporting captures a fraction of what happens at work. The rest surfaces through HR: an absence, a grievance, a drop in performance or even a resignation.

The HSE's six Management Standards for work-related stress clarify where there are overlaps. They cover demands, control, support, relationships, role and change, which in practice means workload, line manager support, handling unacceptable behaviour and how change is communicated. Almost all of that is HR’s territory, and so most of the evidence about it will be found in HR systems.

Stress Is A Compliance Issue

In the eyes of the HSE, work-related stress has moved from the wellbeing agenda to the compliance agenda. Organisations need to be able to produce a stress risk assessment that was suitable, acted on and reviewed.

What the regulations require

Regulation 3 of the Management of Health and Safety at Work Regulations 1999 requires every employer to make a suitable and sufficient assessment of the risks to employees at work, to review it when there is reason to suspect it is no longer valid, and, where there are five or more employees, to record the significant findings. This sits under the general duty in section 2 of the Health and Safety at Work etc. Act 1974.

The HSE is explicit that this covers stress. Its guidance states that employers have a legal duty to protect employees from stress at work by doing a risk assessment and acting on it, and that following the Management Standards approach properly is considered suitable and sufficient.

Multiple records make the assessment unverifiable

A stress risk assessment for a department will typically conclude that workload is being managed and support is in place. The evidence for or against that conclusion is absence data, grievance volumes, exit interviews and return-to-work notes. However, none of that evidence is kept with the risk assessment because it is held in a different system.

So when they are challenged, an organisation can produce the assessment but not the proof that it was ever more than a tick-box document. Case management systems earn their place here, not by storing cases more tidily, but by making it easy to find the link between a recorded risk and what then happened to the people exposed.

Where Policy And Practice Diverge

A case management system is not a substitute for a risk assessment. Where a hazard has never been assessed and no rule exists, there is nothing for HR to log and nothing to spot.

However, a company’s legal duty does not stop at creating a rule. On fatigue, for example, the HSE is explicit that complying with the Working Time Regulations alone is insufficient to manage the risk, and that an employer should set a policy limiting working hours, overtime and shift-swapping, then implement, monitor and enforce it, including by recording hours worked. That’s where HR comes in: a rule nobody checks is a rule in name only, and the checking is what leaves a trail of records.

What HR case records can show

Three patterns are worth watching, and all of them are about adherence rather than prevention.

Conduct cases clustered around one rule. A safety rule people are not following usually surfaces first as disciplinaries. Three or four cases for the same breach at the same site is a signal about the control rather than the individuals. If you just treat it as a performance problem you will discipline four people but nothing will change.

Grievances clustered in one team. Repeat complaints about workload, rotas or pressure in a single department are the evidence for or against that department’s stress risk assessment. They are also, in most organisations, the only evidence that exists.

Concerns raised and closed without a decision. A concern logged with no record of what was considered or who decided what to do next is a common gap in enforcement narratives. It is also the easiest of the three to fix.

Unfortunately, it’s not always straightforward to find the patterns. A disciplinary logged as “misconduct” with the detail buried in free text cannot be counted, so the cluster stays invisible however many times it recurs. Spotting it depends on the case record capturing which rule was breached and where, and on somebody running that report on a schedule rather than when an inspector asks.

Obviously, none of this prevents a first incident, but it does tell you whether a control you have already put in place is real, and gives you something to show when a regulator or a tribunal asks what you knew and when.

Building One Evidential Picture

Joining all the information together is an operational problem before it becomes a technology problem, but technology makes it sustainable.

Shared triage at intake. Every incident report gets checked for an HR dimension, and every HR case gets checked for a safety dimension. Fatigue grievances are the obvious example, but so are an assault on a public-facing worker and a near miss involving someone on a phased return.

Linked records rather than duplicated ones. One employee should resolve to one thread across case types. Copying a grievance note into an incident file creates a second version that can easily go out of date. Linking the two cases is the answer.

Permissions that let you share the pattern without sharing the file. This is what usually blocks integration, and reasonably so. Occupational health information should not be visible to everyone with a safety remit. Case-level access control lets a manager see that a rest requirement or an adjustment applies and what to do about it, without the medical detail behind it.

Reading HR data the way safety data is read. Health and safety habitually examines near misses, repeat locations and root causes. HR often just closes cases and records an outcome. The same type of analysis applied to grievances and absence would flag a department with rising case volumes well before a case escalates.

Five questions to test your own setup

• Can you list every open case involving one employee, across HR and safety, in under a minute?
• If an inspector asked for the evidence behind your stress risk assessment, where would it come from?
• Who reviews grievance and absence data for departmental patterns, and how often?
• When an incident is logged, is anyone asked whether it needs an HR case to be opened?
• Does your audit trail show when a concern was first raised and what happened next?

How To Link Case Records

Workpro HR Case Management software links case records across case types, so a grievance, an absence and an incident involving the same person or team sit in one retrievable thread. Case-level access control and a full audit trail keep sensitive health information restricted while the pattern stays visible to the people who need it.

Configurable case types let fatigue, violence at work or stress-related grievances run in tailored workflows rather than being forced into a generic template. The reporting tools are built for the pattern question rather than the individual case question, which is what turns a case archive into something you can act on and, when asked, defend.

The organisations that come unstuck on this rarely lack rules. They have the policy, the risk assessment and the procedure but they are not able to produce evidence that any of it transferred into the rota, the shift pattern and the workload, because that evidence is scattered across systems nobody reads together.

The useful question is narrower than whether HR and health and safety talk to each other. If somebody asked today which department has the highest absence, the most grievances and the most reported incidents, and whether those are the same department, how long would it take to find out, and would the answer come from one place or four?