COSHH Certificates: What the Law Requires

The Short Answer

There is no such thing as a legally required COSHH certificate.

What the law requires is training. COSHH regulation 12(1) says every employer whose work is liable to expose an employee to a substance hazardous to health "shall provide that employee with suitable and sufficient information, instruction and training." It does not say the training must be certificated, externally delivered, accredited, or renewed on any fixed cycle — because it says nothing about certificates at all.

That is not an interpretation. Search the whole of the COSHH Regulations 2002 for the word "certificate" and you get five hits, split across two separate exemption provisions: three in regulation 15, "Exemption Certificates" — the mechanism by which HSE exempts someone from a requirement — and two in regulation 16, which lets the Secretary of State for Defence exempt Her Majesty's Forces and visiting forces from the Regulations on national-security grounds. Neither provision creates a training certificate — they are both about exempting someone from a requirement, not evidencing that they met one. "Accredited" and "refresher" return nothing.

A certificate is still a useful thing to have. It is just evidence of something you did, not the thing the law asks for.

Why Everything You Read Says Otherwise

Search "COSHH certificate" and the first page is training providers. That is not a conspiracy — it is what happens when the only organisations with a commercial reason to publish on a topic are the ones selling the answer. A course page that concluded "you probably don't need to buy this" would be an odd piece of marketing.

So the phrasing drifts. "COSHH training is a legal requirement" (true) becomes "you need a COSHH certificate" (not in the Regulations) becomes "your certificate expires after three years" (nowhere in the Regulations, and worth understanding properly — see below).

None of that makes certificated training a bad purchase. It makes it a purchase you should go into knowing what the duty actually is, so you can judge whether a given course discharges it.

What Regulation 12 Actually Requires

Three things, and they are more demanding than "send everyone on a course" in one respect and less demanding in another.

It must be suitable and sufficient for your substances. Regulation 12(2) lists what the information has to cover: the names of the substances the employee is liable to be exposed to and the risks they present, any relevant workplace exposure limit, access to the safety data sheets, the significant findings of your risk assessment, the precautions and actions the employee should take, the results of any exposure monitoring — with immediate notification if a limit is exceeded — and the collective results of any health surveillance.

Read that list against a generic online COSHH awareness course. The course can cover hazard pictograms and the general principles perfectly well. It cannot tell your cleaner the findings of your assessment, or that the product you switched to last month is a respiratory sensitiser. The generic half is buyable; the specific half is yours. That is the single most useful thing to understand about COSHH training.

It must be adapted when the work changes. Regulation 12(3) requires the training to be:

"(a) adapted to take account of significant changes in the type of work carried out or methods of work used by the employer; and (b) provided in a manner appropriate to the level, type and duration of exposure identified by the risk assessment."

Note what the trigger is. Not the passage of time — a significant change in the work. New product, new process, new equipment, a change to the controls.

It extends beyond your own employees. Regulation 12(4) is easy to miss:

"Every employer shall ensure that any person (whether or not his employee) who carries out work in connection with the employer's duties under these Regulations has suitable and sufficient information, instruction and training."

If a contractor is doing work connected to your COSHH duties — servicing your extraction, handling your chemical waste, carrying out your assessments — this catches them.

Sitting above all of it is section 2(2)(c) of the Health and Safety at Work etc. Act 1974, which makes it an employer's duty to provide "such information, instruction, training and supervision as is necessary to ensure, so far as is reasonably practicable, the health and safety at work of his employees." Same shape: an outcome, not a document.

"Does a COSHH Certificate Expire?"

The three-year figure you will see quoted is a training-industry convention, not a statutory interval. Regulation 12 sets no repeat period for training at all — the word "refresher" does not appear anywhere in the instrument. (COSHH does set fixed intervals elsewhere, for other duties: regulation 9(2)(a) requires local exhaust ventilation to be thoroughly examined and tested "at least once every 14 months", or at the shorter interval in Schedule 4 for the processes listed there. Training is not one of them.)

What that means in practice is more useful, not less. If your work has not changed in three years, nothing in regulation 12 obliges you to re-run the course on the anniversary. If your work changed last Tuesday, regulation 12(3)(a) bit last Tuesday and a valid-until-2029 certificate on the wall does not help you.

A periodic refresh is still sensible — knowledge decays, and a fixed cycle is easier to run than a judgement call. Just hold it as your policy rather than as a legal deadline, and make sure the change-driven trigger is the one that actually drives retraining. Our guide to COSHH training obligations goes through how the two work together.

So What Is a Certificate Actually For?

Three real jobs, none of which is "satisfying regulation 12".

Evidence that training happened. An inspector asking how you discharged regulation 12 wants to see what was covered, by whom, when, and for which employees. A certificate is a convenient piece of that record. A signed attendance sheet against a written outline does the same job.
Getting through someone else's prequalification. Principal contractors and procurement portals routinely ask for training certificates. That is a commercial requirement, and it is a perfectly good reason to buy one — it just is not a COSHH requirement.
Buying the generic half. If nobody in your business can competently explain hazard classification, exposure routes and control principles, a course is a reasonable way to import that. HSE's own guidance is relaxed about the format — INDG345 lists classroom, distance learning, computer-based, group and individual work alongside "coaching or on-the-job training", and says plainly: "Don't forget that though there are many external trainers who can help you, much effective training can be done 'in-house'."

One thing INDG345 is not relaxed about: "You must provide training during working hours and not at the expense of your employees."

What to Ask a Provider

If you do buy a course, these are the questions that separate one that helps you comply from one that sells you a PDF.

Does the course cover our substances, or substances in general? Generic is fine as a foundation. It cannot be the whole of your regulation 12(2) obligation.
What does the certificate actually say was covered? A syllabus you can file next to your assessments is worth more than a title and a date.
Who awards it, and is that a regulated qualification or the provider's own certificate? Both are legitimate. They are not the same thing, and providers do not always make the distinction obvious.
What is the stated validity, and on what basis? If the answer is "three years because that's standard", you now know what that means.
How do we record the site-specific top-up? The bit only you can deliver — your assessments, your products, your controls — still has to happen and still has to be evidenced.
Does it cover the people we actually need it to? Including anyone caught by regulation 12(4).

For working out who needs what in the first place, our COSHH training needs assessor walks through the roles and exposures before you start shopping. And for the induction case specifically, COSHH training for new starters covers what has to be in place before someone first handles a substance.

The Part Only You Can Deliver

Whatever you buy, the site-specific layer stays with you:

Which hazardous substances this person will actually encounter, by name
The relevant findings of the assessment that covers their task
The controls they must use, and why those controls are the ones chosen
Where the safety data sheets are and how to read the sections that matter — our guide to reading an SDS is a reasonable handout
What to do if something goes wrong: spill, splash, exposure, first aid
Any monitoring or health surveillance they are subject to, and their right to the results

Half an hour of that, recorded, is worth more to an inspector than a wall of certificates with no link to your actual substances.

Quick Checklist

Training covers the specific substances in your assessments, not just generic COSHH awareness
The regulation 12(2) content list has been worked through — names, risks, WELs, SDS access, assessment findings, precautions, monitoring, surveillance results
Retraining is triggered by changes to work or substances, not only by a date
Contractors doing work connected to your COSHH duties are covered
Training records link a named person to a dated session and a written outline
Any purchased certificate's scope is understood — what it covers and what it leaves to you
Training is delivered in working hours at the employer's expense

Keeping Training Attached to the Substance

The reason training records go stale is rarely neglect. It is that they live in one place and the substance list lives in another, so when a product changes nobody joins it up to "who now needs retraining?"

COSHHmate is being built so that link is automatic: assessments hang off the substance register, and a change to a substance surfaces the assessments — and the people — it affects. Pricing will be a flat monthly fee with no per-user charges. If you would rather find out about a training gap before an inspector does, join the waitlist.

Sources

This is general guidance based on the published text of the COSHH Regulations 2002 and the Health and Safety at Work etc. Act 1974, which extend to England, Wales and Scotland; Northern Ireland has its own equivalent provisions enforced by HSENI. Whether a particular course discharges your regulation 12 duty depends on your substances and your assessment — check it against both. Not legal advice.