Occupational health guide

Health surveillance and exposure monitoring: two different checks that protect workers

Exposure monitoring measures whether people are exposed to a hazard and whether controls work. Health surveillance looks for early signs of work-related ill health in people who remain exposed after controls. HSE says COSHH exposure monitoring has nothing to do with the state of a worker’s health, and the purpose, professional input and records differ.

	Exposure monitoring	Health surveillance
What is checked?	The exposure, or how well control measures perform	The worker's health in relation to an occupational risk
Example	Air sampling for a dust during a task	Planned respiratory assessment for at-risk workers
Who interprets it?	A competent person for the exposure measurement	A competent occupational health professional, or responsible person in a scheme
Employer receives	Exposure findings and control recommendations	A health record plus fitness and restriction information; clinical detail stays with the professional
If concerning	Review process, equipment, controls and exposed group	Protect the worker, get professional advice, review controls and others at risk

Neither replaces prevention. A normal health check does not prove the process is safe; a low air-sampling result does not show that no worker has developed symptoms. A risk assessment should first identify hazards, who is exposed, the route and duration, and what can be eliminated or controlled. HSE: monitoring exposure; HSE: health surveillance overview.

Begin with the risk assessment and controls

Map the task, not the job title, because two “operatives” may have very different exposure. For COSHH, consider inhalation, skin and ingestion routes, people other than the main operator, and the effect of existing controls. Then improve control: remove or replace the hazardous step, enclose the process, capture contamination with local exhaust ventilation, and maintain, supervise and provide suitable protection. Health surveillance is not permission to leave a preventable exposure in place until someone becomes ill. HSE: COSHH assessment; HSE: control measures.

When does health surveillance become necessary?

HSE describes a decision framework: an identifiable disease or effect linked to the exposure; a likelihood of that effect under the actual conditions; valid techniques to detect early signs; and a technique low-risk to workers. Noise, vibration and hazardous substances are among the exposures that can require it. Do not infer a duty solely because a safety data sheet lists a hazard, and do not dismiss the need because no one has reported symptoms yet. HSE: types of health surveillance; HSE: COSHH health surveillance.

Medical surveillance is a narrower term

Some high-hazard regimes require medical surveillance by an appointed doctor or under specific legal arrangements. HSE cites examples involving asbestos, lead, ionising radiation and compressed air. A generic occupational health appointment is not automatically the statutory medical surveillance required for such work; get advice on the exact regulation.

When is exposure monitoring useful or required?

Monitoring under COSHH measures whether control is adequate: whether exposure is below a workplace exposure limit, known as a WEL, where one exists, whether control equipment works, or whether contamination is spreading. A WEL is a benchmark for airborne concentration over a stated period, not a permission to expose people up to that level regardless of other duties. Choose the measurement to match the decision, and ask the competent sampler what the results represent, what they do not, the uncertainty and what action follows. HSE: workplace exposure limits.

Keep the right records in the right hands

HSE distinguishes an employer-held health record, covering identity, workplace, hazards exposed to, and fitness information relevant to continued exposure, from the confidential medical record held by the occupational health professional. The health record should not contain confidential medical information unless the worker consents in writing. This matters for software: a manager may need to see that surveillance is current and a restriction applies, not a diagnosis or raw clinical results on a dashboard. Set access by role. HSE: record keeping.

How long should records be kept?

There is no single period for every record. HSE says the relevant regulations set it. Under COSHH the example is at least 40 years, and where none is specified, keep the health record at least while the worker is employed. Exposure-monitoring records are a different category with their own retention; do not apply the COSHH health-record period universally.

Common mistakes

Calling a general medical “health surveillance”. The test must fit an occupational risk and lead to protective action.
Treating exposure sampling as a health check. Air sampling reflects exposure in the sampled conditions, not whether a worker has an early disease.
Using a normal result to justify weak controls. One result may miss the highest-risk task or a future failure.
Collecting raw medical data in a shared platform. Keep clinical detail with the OH provider unless the worker consents.
Testing without acting, or choosing a universal annual interval. Findings must be interpreted and acted on; frequency follows the hazard, regulation and competent advice.

FAQs

If air sampling is below a workplace exposure limit, do we still need health surveillance?

Possibly, because the two decisions are separate. A result must be interpreted for the conditions sampled and the control duties; health surveillance depends on residual risk, the kind of effect and whether valid early detection is possible. Review the actual work with competent advice, not one number.

Does every worker who handles a hazardous substance need a medical test?

No. HSE's criteria depend on the disease or effect, likelihood under the actual conditions, valid detection and remaining risk after controls. A safety data sheet alone is not the decision; some higher-hazard work may require specific medical surveillance.

Can a manager conduct skin checks?

Some simple screening may be done by a trained, trusted responsible person within a properly designed scheme, with positive findings referred to an occupational health professional. They must not make clinical judgements, so ask the OH professional what is appropriate.

Can an employer see the test results?

The employer needs the health record and advice on fitness, restrictions and controls. Confidential medical records belong with the occupational health professional; access requires the worker's written consent. Design permissions around that distinction.

Is the health record always kept for 40 years?

No. HSE gives 40 years as the COSHH example and says the applicable regulation sets the period; where none is stated, keep the health record at least while employing the worker. Confirm the regime for the hazard before setting retention.

Where Complys fits

Complys can help track exposure, training, control and health-record due dates against a role, with access set so a manager sees what is current and what is restricted, not clinical detail. It is not a clinical health-surveillance service or a confidential medical-record platform; keep clinical notes with your occupational health provider.

Health surveillance tracking →COSHH assessments →