Gym health and safety record keeping: the RIDDOR gap hiding in plain sight

It is 5:45 on a Wednesday evening in Leeds. The gym floor is full — the after-work crowd, the regulars who have blocked out the slot in their calendars for two years. A member is mid-set on a functional trainer when the left cable stack jams under load, the pulley system locks, and the weight stack drops hard enough to shake the frame.

Nobody is injured. The machine is out of use. The duty manager puts a cone in front of it, writes a note in the paper fault log, and moves on because the queue at the reception desk is three people deep.

Five days later, a new member catches the cable housing as they walk past. The frayed edge of the cable opening cuts their forearm. It needs three stitches.

At that point, the operator has a potential RIDDOR reportable incident, a machine that was known to be in a dangerous state, and a paper record that contains a single line: 'cable machine fault — left side. 14/05.'

That gap — between what happened and what was recorded — is where enforcement action begins.

Why record keeping is the compliance problem most operators underestimate

There is a widespread belief in the fitness sector that health and safety compliance is mostly about physical safety: guards on weights, wet-floor signs, first-aid kits. Record keeping gets treated as the administrative tail of the real work.

The HSE sees it differently. When an inspector arrives following a reported incident, they are not primarily checking whether the gym floor is tidy. They are asking whether the operator knew about the hazard, when they knew, what they did about it, and whether they can prove all of that.

If the answer to any of those questions is 'we have a note somewhere', the operator is in trouble.

Gym health and safety record keeping is not a secondary task. It is the evidentiary foundation that determines whether you can demonstrate compliance or whether you appear to have been negligent.

What RIDDOR actually requires gyms to record

The Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 (RIDDOR) place specific duties on employers and those in control of premises — which includes gym operators.

The records you are legally required to keep include:

1. Over-seven-day injuries — where an employee is incapacitated for more than seven consecutive days (excluding the day of the incident).
2. Specified injuries to workers — fractures, amputations, loss of consciousness, and similar serious outcomes.
3. Injuries to non-workers — members or visitors who are taken from the premises to hospital for treatment.
4. Dangerous occurrences — defined near-misses listed in Schedule 2 of the Regulations, some of which are relevant to heavy equipment.
5. Occupational diseases — less common in gyms but relevant for staff in certain roles.

For each reportable event, you must retain a record for at least three years. That record must include: the date, time and place of the incident; the personal details of the person involved; a brief description of what happened; and, where applicable, the nature of the injury.

What RIDDOR does not specify is the format. Paper is technically compliant. The problem is that paper records almost never contain enough context to demonstrate that appropriate action was taken before and after the event.

The four record types that protect you in an investigation

Beyond the RIDDOR minimum, a structurally sound gym health and safety record keeping system covers four interconnected layers:

• Fault and defect logs — every reported equipment fault, timestamped, with status updates showing when it was actioned, by whom, and what the outcome was. A fault logged but not actioned is evidence of negligence, not diligence.
• Preventative maintenance records — scheduled service intervals, engineer visit notes, parts replaced, and sign-off dates. These demonstrate that your approach to equipment safety is proactive, not reactive.
• Risk assessments and review dates — static documents that are never reviewed are treated by HSE inspectors with scepticism. A risk assessment for a cable machine that has not been updated since the equipment was installed several years ago will not help you.
• Incident and near-miss reports — this includes events that did not result in injury. The Leeds scenario above — the initial cable jam — is exactly the kind of near-miss that should generate a formal record, not just a cone and a handwritten note.

The practical problem for most operators is that these four record types sit in different places: a spreadsheet, a paper logbook, a shared drive folder, and someone's email inbox. When an incident occurs, assembling a coherent evidence trail from those sources under pressure is extremely difficult.

The specific risk during peak hours

Peak-hour failures create a compounding record-keeping problem that quiet-period faults do not.

When the functional trainer in Leeds jams at 5:45 pm, the duty manager is simultaneously dealing with a busy floor, a member who may be shaken, and other staff who need direction. The window in which a proper contemporaneous record should be created — immediately after the event, with accurate time and detail — is exactly the window in which the manager is least able to do it.

This is not a training failure. It is a system design failure. If creating a detailed incident record requires navigating a paper logbook or opening a laptop in the back office, it will not happen in the moment. It will happen later, from memory, with less precision.

In an HSE investigation, the timing and accuracy of records matters. A note created two hours after an event, or reconstructed the following morning, will look different from a contemporaneous record — and inspectors are trained to notice the difference.

The answer is not to train staff harder. It is to make the right record the easiest record to create, in the moment, from wherever they are standing.

Common gaps that become enforcement risks

Based on the pattern of HSE improvement notices and enforcement actions in the leisure sector, the record-keeping gaps that create the most risk are predictable:

• No escalation trail — a fault is logged, but there is no record of it being assigned to anyone or followed up. The cable machine example is typical: the first note exists, but nothing shows who was responsible for the next step.
• Incomplete near-miss recording — operators record injuries but not the precursor events. An HSE inspector who finds an injury report with no prior near-miss records for the same piece of equipment will question whether the operator had a genuine reporting culture.
• PPM records that stop short — engineer visit notes that confirm a service was carried out but do not record what was checked, what condition items were found in, or whether any follow-up was recommended.
• Risk assessments with no review dates — or with review dates that have passed without a new review being completed.
• Incident reports that describe what happened but not the response — documenting the injury without documenting the immediate corrective action, the medium-term repair, and the preventative measure is a half-completed record.

How a digital operations platform closes the gap

The structural fix for gym health and safety record keeping is not more paperwork. It is replacing the friction that prevents good records from being created in real time.

Pulse Fitness is built around that principle. When a duty manager at a busy gym spots a fault during a peak session, they can log it from a mobile device in under a minute — timestamped, geolocated to the specific piece of equipment, and immediately visible to whoever is responsible for follow-up. That record does not live in an inbox or a shared drive. It lives in a permanent, auditable log attached to the equipment's full maintenance history.

When an engineer from the Pulse Fitness Partner Engineer network responds to that fault, their visit notes, parts replaced, and sign-off are added to the same record. The fault-to-resolution timeline is complete and retrievable.

If the fault should have triggered a near-miss report under RIDDOR, the platform prompts the correct workflow. If an incident escalates to a formal report, the full context — prior faults, maintenance history, response timeline — is already assembled.

For operators managing multiple sites, this matters even more. A regional manager can see the fault and incident status across every location without making phone calls or waiting for weekly reports. Compliance is not something that has to be reconstructed before an inspection. It is live.

You can see how it works at https://pulsefitness.ai.

Building a record-keeping culture that holds under scrutiny

Systems matter, but so does the operational culture around them. A few practical steps that operators often overlook:

• Set a standing rule that any fault reported verbally must be logged digitally within ten minutes. Verbal reports do not exist in an investigation.
• Review near-miss records at the same frequency you review injury records. If your near-miss log is empty, it is almost certainly incomplete, not because nothing is happening, but because reporting is not embedded in daily practice.
• Treat equipment defect records as live documents, not closed files. A fault that is logged and then repaired should show the full sequence: reported, assigned, responded to, resolved, signed off.
• Schedule a quarterly review of your risk assessments, timed to coincide with your PPM intervals. If your engineer has found deterioration that was not anticipated in the risk assessment, update it.
• Make sure your induction for new staff specifically covers record-keeping obligations, not just physical safety procedures. A new duty manager who does not know how to log a fault correctly is a compliance liability from day one.

Gym health and safety record keeping is not the most visible part of running a gym. It does not drive revenue directly or show up in member experience surveys. But it is the difference between an incident that is managed and an incident that becomes an enforcement case — and in the fitness sector, those two outcomes are closer together than most operators realise.

---

Book a Pulse Fitness demo and see how the platform handles fault logging, RIDDOR workflows, and equipment history in one place: https://pulsefitness.ai/demo-request