Gym health and safety record keeping: RIDDOR, HSE, and the peak-hour test

It is 4:15 pm on a Wednesday at a mid-size independent gym in Birmingham's Jewellery Quarter. The afternoon rush is building — office workers ducking in before the evening crowd, personal trainers running back-to-back sessions, the free-weights area already three-deep. A member loading a cable-and-pulley station hears a loud crack. The weight stack drops unevenly. The member is knocked sideways, hits the floor, and does not get up under their own power.

By 4:20 pm your duty manager is on the floor. By 4:35 pm an ambulance has been called. By 5:00 pm the member is on their way to hospital with a suspected fractured wrist.

What happens next depends almost entirely on your health and safety record keeping.

If your maintenance log is up to date, timestamped, and shows the cable machine was last serviced twelve days ago with no reported faults, you are in a defensible position. If your log is a spreadsheet last touched six weeks ago, missing a fault report submitted by a trainer three days prior, you have a serious problem — one that may end up in front of the HSE and, depending on the severity of the injury, in a RIDDOR report.

This article walks through what gym operators in the UK actually need to do to keep health and safety records that stand up, what RIDDOR requires of you, and where most gyms quietly fall short until a moment like the one above forces the issue.

---

What RIDDOR actually requires from a gym operator

RIDDOR — the Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 — places specific legal duties on you as an employer and, in some cases, as a person in control of premises.

The incidents you are required to report to the HSE include:

1. Deaths of employees or members of the public that arise from a work-related accident on your premises.
2. Specified injuries to employees — fractures (other than to fingers, thumbs, or toes), amputations, any injury likely to lead to permanent loss of sight, crush injuries to the head or torso, and several others listed in the Schedule 1 definitions.
3. Over-seven-day incapacitation — where an employee cannot carry out their normal work duties for more than seven consecutive days as a result of a workplace accident.
4. Non-fatal injuries to non-employees (i.e. members and visitors) that require the injured person to be taken from the scene directly to a hospital for treatment.
5. Dangerous occurrences — specific near-miss events listed in Schedule 2, some of which are relevant to fitness equipment and electrical systems.

For the cable-machine scenario above, the member's suspected fractured wrist, combined with the ambulance journey, triggers category four. You are required to notify the HSE, and you have ten days to submit a formal report via the RIDDOR online portal.

What most operators underestimate is what the HSE may ask for once that report is filed: your maintenance records for the machine, your fault-reporting log, any risk assessments relating to that piece of equipment, and evidence of staff training on inspection protocols. If those records do not exist, are incomplete, or contradict each other, the investigation becomes considerably more difficult to navigate.

---

The five records every gym must be able to produce on demand

HSE guidance does not prescribe a single format for health and safety record keeping in gyms, but it is consistent about the types of evidence an operator should be able to produce. Based on the current guidance and common inspection findings, you need to be able to show:

• A current risk assessment for each piece of equipment or equipment class, reviewed at appropriate intervals and signed by a competent person.
• A planned preventative maintenance (PPM) log showing scheduled service dates, the engineer who completed each visit, the work carried out, and any faults found or parts replaced.
• A fault-reporting record capturing every reported issue — from members, from staff, from engineers — with a date and time stamp, a description of the fault, and the action taken.
• An accident and incident log recording every injury, near-miss, or dangerous occurrence on the gym floor, including the initial response and any follow-up actions.
• Equipment quarantine and reinstatement records showing that a machine reported as unsafe was taken out of service and only returned to use once inspected and cleared.

Each of these records needs to be timestamped, attributable to a named person, and retained for a defined period. For injury records involving members or employees, GDPR and Limitation Act considerations mean you should be retaining records for a minimum of three years for adults and until the child's 21st birthday for under-18s. Your legal adviser may recommend longer retention periods depending on the nature of the incident.

---

Where peak-hour failures expose record-keeping gaps

Peak hours compress every decision. At 4:15 pm on a Wednesday, your duty manager is not sitting at a desk with time to document things methodically. They are managing an injured person, speaking to paramedics, keeping other members away from the area, and fielding questions from staff — all simultaneously.

This is where gyms without a structured record-keeping system generate their biggest compliance exposure. The sequence typically looks like this:

1. The incident happens. Immediate response is appropriate and professional.
2. The accident log entry is written up from memory two hours later, when the manager finally has a quiet moment.
3. The machine's fault history is not checked until the following morning, at which point someone finds a handwritten note from a trainer saying the cable felt loose — dated three days earlier.
4. That note was never formally logged. It exists on a Post-it stuck to the duty manager's desk.
5. The RIDDOR report is filed, but the fault history submitted to the HSE does not mention the earlier note because the person filing the report did not know it existed.

This is not dishonesty. It is the predictable result of a record-keeping system that relies on paper, memory, and individual initiative rather than a structured process. But from an HSE perspective, it can look like something worse.

A digital fault-reporting workflow — where any staff member can log a fault against a specific asset in under sixty seconds, and where that log is timestamped, attributed, and visible to the duty manager in real time — does not eliminate the incident. It does, however, mean that the three-day-old fault report is part of the official record, and that the gym's response to it (or lack of one) is visible and auditable.

---

How to structure a defensible audit trail for gym equipment

The goal of good health and safety record keeping is not to accumulate paperwork. It is to create a clear, consistent, and honest account of what you knew, when you knew it, and what you did about it.

A defensible audit trail for a single piece of equipment should be able to answer the following questions at any point in time:

1. When was this machine last subject to a full preventative maintenance visit?
2. What faults or anomalies were recorded at or since that visit?
3. What action was taken in response to each recorded fault, and when?
4. Was the machine ever taken out of service as a result of a fault, and when was it reinstated?
5. Who is the competent person responsible for signing off reinstatement?
6. Is there a current risk assessment for this equipment class, and when was it last reviewed?

If you can answer all six questions with timestamps and named individuals, you are in a strong position. If any of those questions produce a blank or a vague answer, that is the gap an HSE inspector — or a claimant's solicitor — will go to first.

For a multi-machine gym floor, maintaining this level of record keeping manually across treadmills, cable stations, resistance machines, free-weight racks, rowing machines, and spin bikes is genuinely difficult. It requires either a disciplined paper-based system (which is harder to search and easier to lose) or a digital platform that attaches records to individual assets rather than to a general maintenance folder.

---

RIDDOR thresholds and the grey zone most gym managers do not know about

One of the most common sources of RIDDOR non-compliance in gyms is not deliberate underreporting — it is uncertainty about what is actually reportable.

The threshold for reporting non-employee injuries is specifically tied to whether the person was taken from the scene to hospital for treatment. A member who drives themselves to A&E the following morning does not trigger the same duty as a member taken by ambulance immediately after the incident. A member who is assessed at the scene by a paramedic but not transported does not necessarily require a RIDDOR report, though the incident should still be recorded in your accident log.

The nuances that trip operators up most frequently include:

• Physiotherapy and follow-up appointments — if the initial treatment did not require hospital transport from the scene, a subsequent physiotherapy referral does not retroactively trigger a RIDDOR duty, though you should take legal advice on any injury that results in ongoing treatment.
• Near-misses involving equipment failure — even where no injury occurs, certain dangerous occurrences involving lifting equipment, structural collapse, or electrical failure are reportable under Schedule 2. A weight stack dropping unexpectedly, even without contact, may fall into this category.
• Employee injuries during set-up or cleaning — if a staff member is injured moving equipment before opening, that is a workplace accident and subject to the employee injury thresholds, not the non-employee threshold.

The safest approach is to record everything in your accident log, assess against the RIDDOR thresholds with input from your health and safety adviser, and report where there is genuine doubt. Under-reporting is an offence. Over-recording internally costs you nothing.

---

Turning your maintenance platform into a compliance asset

Gym operators who treat health and safety record keeping as a standalone compliance task tend to create fragmented records: a maintenance log here, an accident book there, a folder of risk assessments somewhere on a shared drive that was last updated eighteen months ago. When an incident happens, piecing those records together under time pressure is stressful and unreliable.

Operators who connect their maintenance records, fault reporting, and incident logging to a single platform have a material advantage in two ways.

First, the records are complete. A fault report lodged by a trainer at 1:30 pm on a Monday is visible to the duty manager at 4:15 pm on a Wednesday without anyone having to search for it. The machine's full service history is attached to the asset record, not buried in a supplier's email thread.

Second, the records are consistent. When the HSE asks for the maintenance history of a specific cable machine, you are not producing three separate documents from three different systems with slightly different dates. You are producing a single, timestamped audit trail that tells a coherent story.

Pulse Fitness gives gym operators exactly this kind of asset-level record keeping — equipment downtime tracking, fault logging, PPM scheduling, and service-desk ticketing all tied to individual machines. When an incident happens, the record is already there. You are not building it retrospectively from memory.

---

The HSE inspection that does not announce itself

HSE inspections of fitness facilities are not always triggered by a RIDDOR report. They can follow a member complaint, a tip-off from a local authority, or a proactive inspection programme. An inspector can arrive without notice and ask to see your records immediately.

The standard of record keeping that protects you in those moments is the same standard that protects you after a RIDDOR-reportable incident: timestamped, attributable, complete, and consistent.

If your current system makes you uncertain about whether you could produce those records today — for any machine on your gym floor — that uncertainty is worth addressing before the next peak-hour shift, not after it.

---

See how Pulse Fitness supports gym health and safety record keeping from fault report to RIDDOR audit trail — book a demo at https://pulsefitness.ai/demo-request.