Generic vs Specific Risk Assessments: What Does Irish Law Actually Require?

Many Irish contractors rely on generic risk assessments. This guide explains what Irish law actually requires, when a generic assessment is acceptable, and...

# Generic vs Specific Risk Assessments: What Does Irish Law Actually Require? --- One of the most common questions that construction contractors ask about risk assessments is whether a generic risk assessment is sufficient, or whether Irish law requires a site-specific assessment for every project. The answer is nuanced, and getting it wrong can leave contractors exposed to enforcement action by the HSA and, more importantly, to the risk of a serious accident that a properly conducted assessment would have prevented. This article explains what Irish law requires in relation to risk assessments, the difference between generic and specific assessments, when each is appropriate, and the circumstances in which a generic assessment will not satisfy the legal requirement. --- ## The Legal Requirement for Risk Assessment The obligation to carry out risk assessments in Ireland arises from Section 19 of the Safety, Health and Welfare at Work Act 2005. Section 19 requires every employer to identify the hazards in the place of work under their control, assess the risks presented by those hazards, and be in possession of a written assessment (known as a safety statement) of the risks to the safety, health, and welfare of employees while at work. The risk assessment must be appropriate to the nature of the work and must be reviewed whenever there is reason to believe it is no longer valid or when there has been a significant change in the matters to which it relates. The Construction Regulations 2013 add further requirements for construction projects, including the obligation on the PSCS to prepare a Construction Phase Safety and Health Plan that addresses the specific hazards and risks on the project. --- ## What Is a Generic Risk Assessment? A generic risk assessment is a pre-prepared assessment that addresses the hazards and risks associated with a type of work or activity in general terms, without reference to a specific site or project. Generic risk assessments are widely used in the construction industry, particularly by contractors who carry out the same types of work repeatedly. For example, a roofing contractor might have a generic risk assessment for flat roof waterproofing that covers the general hazards of working at height, handling hot bitumen, and using gas equipment. This assessment can be used as a starting point for any flat roof waterproofing project. Generic risk assessments are not inherently inadequate. They can be a useful and efficient tool for managing well-understood, routine risks. The problem arises when they are used without modification for situations where the specific conditions on a particular site introduce hazards or risks that the generic assessment does not address. --- ## What Is a Site-Specific Risk Assessment? A site-specific risk assessment is an assessment that has been prepared for a particular site or project, taking into account the specific conditions, hazards, and risks present at that location. A site-specific assessment will typically be based on a generic assessment for the type of work involved, but will be modified to address any additional hazards or risks identified during a site visit or review of site information. For example, a site-specific risk assessment for flat roof waterproofing at a particular location might address additional hazards such as: - The presence of fragile rooflights that are not present on a standard flat roof - The proximity of overhead power lines - The need to work over occupied premises - Restricted access that prevents the use of standard edge protection These site-specific hazards would not be addressed in a generic assessment and could lead to a serious accident if they were overlooked. --- ## When Is a Generic Risk Assessment Acceptable? A generic risk assessment is acceptable where: - The work is routine and well-understood - The hazards and risks are consistent across different sites - The control measures are standard and well-established - There are no site-specific factors that introduce additional hazards or modify the level of risk In practice, a generic risk assessment is most appropriate for low-risk, routine tasks that are carried out in a controlled environment. For example, a generic risk assessment for office-based administrative work is likely to be adequate for most offices, because the hazards (manual handling, display screen equipment, slips and trips) are broadly consistent across different office environments. In construction, generic risk assessments are more commonly appropriate for tasks that are carried out in a controlled workshop or yard environment, rather than on site. For on-site construction work, the variability of site conditions means that a generic assessment will rarely be fully adequate without some degree of site-specific modification. --- ## When Is a Site-Specific Risk Assessment Required? A site-specific risk assessment is required whenever the specific conditions on a site introduce hazards or risks that are not addressed in the generic assessment. This includes situations where: - The site has unusual ground conditions, such as contaminated land, unstable ground, or a high water table - There are existing services (electricity, gas, water, telecommunications) in the area where work will be carried out - The site is in a confined or restricted location that affects the way the work can be carried out - There are members of the public or other workers in the vicinity who could be affected by the work - The work involves demolition or alteration of an existing structure whose condition is not fully known - The site has specific environmental constraints, such as proximity to a watercourse or a protected structure - The work is being carried out in adverse weather conditions that affect the level of risk The HSA's guidance on risk assessment makes clear that a risk assessment must be appropriate to the nature of the work and the specific conditions in which it is carried out. A generic assessment that does not address site-specific hazards is not appropriate and does not satisfy the legal requirement. --- ## The "Suitable and Sufficient" Standard Irish law requires risk assessments to be "suitable and sufficient." This standard, which is derived from EU Directive 89/391/EEC (the Framework Directive), means that the assessment must: - Identify all significant hazards - Evaluate the risks arising from those hazards - Identify the control measures needed to reduce the risks to an acceptable level - Be proportionate to the nature and degree of the risks involved A generic risk assessment that identifies the main hazards associated with a type of work but fails to identify a significant site-specific hazard is not suitable and sufficient. It does not matter that the generic assessment was carefully prepared and covers the hazards that are present on most sites; if it misses a significant hazard that is present on this particular site, it fails the legal standard. --- ## The Role of the Method Statement In construction, risk assessments are often accompanied by method statements (also known as safe systems of work). A method statement describes how a task will be carried out safely, step by step. Together, the risk assessment and method statement form what is commonly known as a RAMS (Risk Assessment and Method Statement). The same principles apply to method statements as to risk assessments. A generic method statement can be used as a starting point, but it must be reviewed and modified to address any site-specific factors before work begins. A method statement that describes how a task will be carried out in general terms, without reference to the specific conditions on the site, is unlikely to be adequate for a complex or high-risk task. --- ## Practical Guidance for Contractors The following approach is recommended for contractors who use generic risk assessments. **Start with a good generic assessment.** Prepare a comprehensive generic risk assessment for each type of work you carry out regularly. The assessment should cover all the hazards that are commonly encountered in that type of work and should describe the standard control measures that you implement. **Review the generic assessment before each project.** Before starting work on a new site, review the generic assessment and consider whether there are any site-specific factors that introduce additional hazards or modify the level of risk. A brief site visit or review of site information is usually sufficient to identify the main site-specific factors. **Modify the assessment to address site-specific factors.** Where site-specific factors are identified, modify the generic assessment to address them. The modification does not need to be extensive; it may be sufficient to add a note or an additional row to the assessment identifying the site-specific hazard and the additional control measures that will be implemented. **Document the review.** Keep a record of the review process, including the date of the review, the name of the person who carried it out, and the site-specific factors that were identified. This record demonstrates that the assessment was genuinely reviewed before work began and was not simply used off the shelf without consideration. **Communicate the assessment to workers.** Workers must be made aware of the risk assessment and the control measures that apply to their work. A risk assessment that exists on paper but has never been communicated to the workers who are expected to follow it is of limited value. --- ## What the HSA Looks For When HSA inspectors review risk assessments on construction sites, they are looking for evidence that the assessment is specific to the work being carried out and the conditions on the site. Red flags that will attract scrutiny include: - Assessments that are clearly generic and have not been modified for the specific site - Assessments that do not address hazards that are visibly present on the site - Assessments that are undated or have not been reviewed for an extended period - Assessments that workers are not aware of or cannot locate on site An improvement notice requiring the preparation of a suitable and sufficient risk assessment is one of the most common enforcement actions taken by the HSA on construction sites. --- If you need help reviewing your risk assessments to ensure they meet the legal standard, or if you need site-specific risk assessments prepared for a particular project, Safety Check can assist. [Contact us](/contact) for practical advice.