A consistent pattern emerges following several multi-million pound HSE prosecutions over the last 18 months and that is that catastrophic outcomes rarely stem from a single mistake. They expose weaknesses that build over time – risks that have become normalised, inconsistent training, warning signs not properly addressed, and decisions made by people without the necessary support or expertise. 

– Huws Gray Limited – fined £2.2m (March 2026) after a worker was killed in a conveyor crush; the company had identified that employees were accessing the danger zone but reportedly relied on warning signs rather than physical safeguarding to prevent access.

– Cambridgeshire County Council – fined £6m (2025) for missing basic safety controls and adequate risk assessments.

– British Airways – fined £3.2m (2025) following serious employee falls linked to inadequate measures to prevent falls from height.

Different sectors, each with the same root cause: a known risk with insufficient controls.

The HSE expects robust risk assessments, effective planning, consistent training, proactive responses to warnings, and access to competent advice.

Shared for general information purposes only and does not constitute legal advice. It is recommended that specific professional advice is sought before acting on any of the information given. Please contact us for specific advice on your circumstances.

Cyber Essentials certification is a UK government backed security standard that demonstrates an organisation has implemented the key technical controls needed to protect against the most common cyber threats.

Get the Regulatory Brief

This field is for validation purposes and should be left unchanged.
Name(Required)
A PRACTICAL GUIDE FOR BUSINESSES AND INDIVIDUALS WHEN THE REGULATOR CALLS

This field is for validation purposes and should be left unchanged.
Name(Required)

This field is for validation purposes and should be left unchanged.
Name(Required)