HSE Guidance and AI: Workplace Safety Compliance With Cited Answers

The Health and Safety Executive (HSE) publishes a large body of free guidance explaining what employers in Great Britain must do. Used well, HSE guidance and AI make a strong pair: you ask a precise question, the tool finds the relevant HSE passage and shows it to you as a citation. Used badly, a chatbot answering from memory can blur the law, guidance and good practice. This guide explains how health and safety managers and HR teams can use AI on official HSE material, which duties it covers well, and where its limits are.

Why HSE questions suit AI, and why a generic chatbot is not enough

Most health and safety questions in a business are not exotic. A line manager wants to know whether a fractured wrist must be reported under RIDDOR. An office manager asks whether the risk assessment has to be written down. HR wants to know who counts as a competent person. HSE has answered nearly all of these questions somewhere, across regulations, Approved Codes of Practice, guidance booklets and web pages.

A general assistant will produce a smooth answer to each of them. But it may confuse what the law requires with what HSE recommends, apply rules from the wrong part of the UK, or describe an older version of a regulation. In health and safety, that kind of slip can mean an unreported incident or a control that was never put in place. The fix is to make the AI answer only from official documents and cite them. Our guide to reducing AI hallucinations explains why grounded answers are so much more reliable.

Employer duties an AI assistant should be able to explain

Start by listing the duties you expect the tool to handle. For most employers in Great Britain, the familiar foundations are these.

• The general duty. The Health and Safety at Work etc. Act 1974 requires employers to ensure, so far as is reasonably practicable, the health, safety and welfare at work of their employees, and to protect others affected by their work.
• Risk assessment. The Management of Health and Safety at Work Regulations 1999 require a suitable and sufficient risk assessment. Employers with five or more employees must record the significant findings.
• A health and safety policy. Employers with five or more employees must have a written policy setting out their arrangements.
• Competent help. Employers must appoint one or more competent people to help them meet their duties.
• Consultation. Workers must be consulted on health and safety, either directly or through representatives.
• Reporting under RIDDOR. Certain injuries, occupational diseases and dangerous occurrences must be reported to HSE under the Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013.
• Hazardous substances. COSHH (Control of Substances Hazardous to Health Regulations 2002) requires assessment and control of exposure.
• First aid, insurance and the law poster. Adequate first aid provision, Employers' Liability Compulsory Insurance for most employers, and the HSE law poster displayed or the leaflet given to workers.

Each line hides detail: thresholds, exemptions, sector rules. A useful AI assistant takes a specific question, retrieves the passage that answers it, and quotes it so you can confirm.

How to use AI on official HSE guidance, step by step

The method that works is retrieval-augmented generation (RAG): the system searches a defined collection of documents, then writes an answer using only the passages it found, with numbered citations. The quality of the answers depends on the quality of that collection.

1. Use official sources. HSE guidance pages and booklets from hse.gov.uk, the relevant regulations and ACOPs. Keep consultancy summaries out of the core collection.
2. Keep it focused. A collection on risk assessment, RIDDOR and COSHH answers office and light industrial questions better than everything HSE has ever published.
3. Record dates and versions. Keep the edition or revision date in each document, so the citation tells you how current the source is.
4. Ask specific questions. Name the sector, the event and the duty. 'Is a broken finger reportable under RIDDOR for an employee?' beats 'explain RIDDOR'.
5. Read the cited passage. Before you act, open it and follow it to the full HSE page.
6. Keep a short note. What you asked, what was cited and what you decided is good evidence that you took reasonable steps.

You do not have to build any of this yourself. On Kopik, the base UK workplace health and safety: HSE guidance for employers already indexes official HSE material and answers with the passages it used. You can also create a private base from your own documents (your policy, risk assessments, method statements) and query it in the same way, so answers reflect both HSE guidance and your own arrangements.

Example questions to test on day one

Good test questions have a clear answer in official material, so you can see straight away whether the right passage was retrieved.

When the answer comes back, the citation should point to the regulation or guidance you expected. If it does not, or if the tool says the documents do not cover the question, you have learned something: the source is missing, and you should go to HSE's RIDDOR guidance or the relevant regulation directly.

The limits of AI for health and safety compliance

• It cannot inspect your workplace. A risk assessment is done by looking at the work, talking to the people doing it and checking controls. AI can explain the duty, not judge your loading bay.
• It is not a competent person. The law expects competent help with the right training and experience. AI can support that person, not replace them.
• Currency matters. Regulations, ACOPs and guidance are revised. Check the date of the cited document.
• Scope gaps. Sector rules (construction under CDM 2015, for example), local authority enforced premises and Northern Ireland may not be covered by a given base.
• Personal data. Incident details often include health data, which is special category data under UK GDPR. Do not paste names or medical details into an AI tool unless your data protection policy allows it.

Rolling it out sensibly

Pick one recurring area, often RIDDOR reporting or risk assessment questions from line managers, and test the tool against 20 to 30 questions your team has already answered correctly. Where it fails, the cause is usually a missing or outdated source, which you can fix. Then agree who uses it and for what: managers to find the right guidance, the health and safety lead to approve anything that changes a procedure or a record.

If your team already works in an AI assistant such as Claude or Cursor, Kopik bases can be connected through MCP so the same cited answers appear inside the tools people use daily. Our explainer on the Model Context Protocol shows how that connection works.