How to Set Up a Health Surveillance Programme: A Practical Guide for Employers

Setting up a health surveillance programme means translating workplace risks into an ongoing process: identifying who needs checks, arranging initial assessments, managing recalls and acting on results. For employers and occupational health teams, the difficult part is keeping that process reliable as workers, exposures and clinical needs change.

Start with the exposure register, not the appointment calendar. A fully booked clinic can still leave the wrong people under surveillance and the right people outside it.

What is a health surveillance programme?

A health surveillance programme is a planned scheme of repeated checks to detect work-related ill health and inform protective action. It connects identified hazards with appropriate checks, clinical review, employer action and continuing oversight. It is distinct from general wellbeing screening or a one-off fitness assessment. HSE's overview sets out that distinction.

The operational test is straightforward: for each worker included, can you explain why surveillance is needed, what is due and who owns the next action?

1. Establish when surveillance is required

Use the workplace risk assessment and relevant hazard-specific requirements to determine the need. Surveillance supports exposure control; it does not compensate for inadequate controls. Findings should feed back into the risk assessment, as explained in HSE's risk management guidance.

For example, HSE's COSHH guidance identifies three conditions: a disease is associated with the substance, detection can help reduce further harm, and workplace conditions make the disease likely. The presence of a hazardous substance alone does not settle the decision.

Noise and hand-arm vibration have their own surveillance requirements. Certain work involving asbestos, lead or ionising radiation requires statutory medical surveillance with specific medical arrangements. Check the applicable regime rather than applying a generic questionnaire to every hazard. The HSE overview explains the appointed-doctor requirement and its asbestos exception.

These HSE references concern Great Britain. For operations in Northern Ireland, check the corresponding HSENI guidance and legislation.

2. Identify workers by exposure

Create a register linking each worker to the relevant hazard and surveillance requirement. Record the work involved, site, exposure start date where known, risk assessment reference and reason for inclusion.

Job titles are a starting point. Two maintenance engineers may use different equipment or spend very different amounts of time on exposed tasks. Check actual activities with supervisors and workers, including occasional duties and cover arrangements.

One worker may need several health surveillance programmes. Keep each requirement distinct so a completed hearing check cannot conceal overdue vibration surveillance.

Agree who updates the register after recruitment, transfers, changed processes and departures. For agency workers or contractors, establish the arrangements with the other organisation and verify coverage. Do not assume inclusion in somebody else's contract means surveillance has happened.

3. Agree ownership and the clinical protocol

Name an employer lead for the programme, an operational owner for scheduling and a competent OH lead for clinical oversight. Document who receives outcomes, implements recommendations and escalates unresolved work. HSE's scheme setup guidance supports this allocation of responsibilities.

For each hazard, agree:

• entry criteria and the initial assessment;
• routine intervals and reasons for earlier review;
• questionnaires, tests and practitioner competencies;
• escalation routes, reporting arrangements and action deadlines.

Consult workers and their representatives. Explain the purpose, confidentiality arrangements and how to report symptoms between checks. Plan access for shift workers, remote sites and people who need language or accessibility support.

4. Arrange baseline or initial assessments

Establish the starting information required by the relevant protocol. For hearing surveillance, HSE recommends obtaining a baseline before noise exposure where possible, including for workers changing jobs. Surveillance can also start for people already exposed. See its hearing surveillance guidance.

Distinguish a pre-exposure baseline from the first assessment your service happens to hold. If a worker has used noisy equipment for years, today's audiogram is not evidence of their hearing before that exposure.

Arrange access to relevant earlier records through appropriate clinical channels. Where records are unavailable, document the gap for clinical review. A change of provider should not automatically restart the worker's history or postpone an assessment already due.

5. Manage recurring surveillance and recall

Set the next due date from the applicable protocol and clinical advice. Annual checks are not a universal rule. HSE's hearing guidance, for example, describes checks usually annually for the first two years and then three-yearly, with more frequent checks where indicated.

Maintain separate dates for the surveillance requirement and the booked appointment. Moving an appointment should not silently move the deadline or erase the fact that surveillance became overdue.

Use a regular review of workers due soon, overdue, awaiting review or missing an outcome. Assign responsibility for invitations, reminders, non-attendance and escalation. Agree how managers and OH will address continuing exposure when a required assessment remains outstanding.

Keep urgent or symptom-triggered review separate from routine recall. A worker reporting a new concern should have a route to assessment without waiting for the next scheduled round.

6. Connect questionnaires to clinical assessment

Use instruments appropriate to the hazard and assessment stage. A questionnaire can identify information requiring further assessment; submission alone does not establish fitness.

For hand-arm vibration, HSE describes basic surveillance using regular symptom questionnaires, with positive responses referred to an OH provider. Arrange that review explicitly, including who checks responses and how quickly concerns are escalated.

Where tests or examinations are indicated, ensure competent delivery and interpretation, with relevant previous findings available. Record incomplete or unreliable assessments as such rather than treating attendance as a usable result.

Our article on health surveillance forms covers the records used within these stages. The programme needs to specify what happens after each is completed.

7. Turn outcomes into action

Separate the clinical findings, advice on fitness for the relevant work or exposure, and the action the employer must take. Avoid a general “fit” label that loses restrictions, review dates or the scope of the advice.

An outcome might support continuing routine surveillance, require further assessment or recommend changes to exposure. OH provides the clinical interpretation and advice; the employer implements workplace measures and confirms they have been addressed. HSE's COSHH guidance emphasises interpretation and action after checks.

For example, where advice recommends restricting exposure pending review, record the manager responsible, the implementation deadline and confirmation of the change. Keep the clinical review open until its own outcome is recorded.

Sending a report and implementing its recommendations are separate events. Track both.

8. Maintain auditable records

Keep the employer's health record distinct from confidential medical records. HSE says health records include worker details, workplace, hazards and fitness to continue exposure. Clinical notes and test results remain in medical confidence with the OH professional. Its record-keeping guidance also explains access and retention requirements.

Apply the retention period for the relevant regime. HSE gives 40 years for COSHH health records; that is not a universal retention rule for every surveillance document.

For an auditable operational history, retain assessment dates, authorised outcomes, recall decisions and completed actions, with who recorded or changed them and when. Preserve the context of earlier decisions when a worker changes role.

Agree record transfer arrangements before changing providers. The handover needs to cover pending reviews and recalls as well as historical documents.

9. Report across the workforce and review the programme

Report against the population requiring surveillance, not just people invited to a clinic. Otherwise, workers omitted from scheduling disappear from the performance measure too.

Useful operational measures include:

• workers requiring each type of surveillance;
• assessments due, completed and overdue within a defined period;
• results awaiting interpretation and follow-up awaiting action;
• time taken to implement recommendations.

Define “complete” before comparing sites. A submitted questionnaire, an attended appointment and an authorised outcome measure different things.

Ask OH to review grouped findings for patterns that may warrant investigation of exposure controls. Protect confidentiality, particularly in small teams where aggregated results can identify individuals. Treat changes in workforce composition or testing practice as possible explanations before concluding that a trend reflects changing health risk.

Where health surveillance software supports the process

Software can connect programme membership, scheduling, questionnaires, review tasks, outcomes and reporting. Its value depends on an agreed process: automation needs a clear owner, a defined trigger and an exception route.

Our health surveillance software guide explores system capabilities and evaluation in more detail. Occentra's health surveillance solution page describes how this work fits within the wider platform.

Frequently asked questions

Is a health surveillance program different from a programme?

In this context, they describe the same thing. “Program” is the usual US spelling; “programme” is standard UK usage. A document's spelling does not establish which country's requirements it follows.

Does every employee need health surveillance?

No. Inclusion depends on relevant exposure, risk assessment and applicable requirements. A workforce-wide wellbeing check does not replace hazard-specific surveillance for workers who need it.

Can we combine different checks in one appointment?

Yes, where clinically and practically appropriate. Keep each hazard's assessment, outcome and recall requirement identifiable. Combining appointments should not delay a check that is due sooner.

What happens when a worker changes role?

Review their surveillance requirements against the new exposure profile. Record additions or reasons for ending active membership, preserve history and seek OH advice on any continuing follow-up. Do not delete an outstanding action merely because the worker has moved department.

The revealing test of a programme is what happens when the expected sequence breaks: a missed appointment, a changed role or a result needing review. Each should leave somebody responsible for the next step.