Is your organisation’s legal compliance register genuinely helping you manage your responsibilities, or has it become another spreadsheet that only gets opened before an ISO audit?
For many businesses, identifying applicable legislation can feel like a daunting task. Keeping up with changes, understanding how requirements affect day-to-day operations and demonstrating compliance can be even more challenging.
Whether you operate a manufacturing facility, engineering company, construction business or office-based organisation, understanding your legal responsibilities is essential.
But having a legal compliance register is only the beginning.
The real question is: Can you demonstrate that your organisation is meeting the legal requirements that apply to it?
What Is a Legal Compliance Register?
A legal compliance register is a structured record of legislation and other relevant requirements applicable to an organisation’s activities.
It helps businesses identify their obligations, understand how those obligations affect operations, assign responsibilities and monitor compliance.
For organisations operating ISO 14001 Environmental Management Systems or ISO 45001 Occupational Health and Safety Management Systems, identifying and evaluating applicable legal requirements is an important part of maintaining an effective management system.
The publication of ISO 14001:2026 in April 2026 also provides an opportunity for businesses to review their environmental management arrangements and ensure they remain appropriate. https://www.iso.org/standard/14001
Importantly, maintaining a spreadsheet called a legal register is not, in itself, a universal legal requirement. What matters is that businesses understand and fulfil their actual legal duties and, where relevant, meet the requirements of their management system standards.
How to Review Your Legal Compliance Register
Here are seven practical questions every organisation should consider.
1. Does It Reflect Your Current Business Activities?
Businesses rarely stand still.
Perhaps you’ve opened additional premises, recruited more employees, introduced new equipment or expanded into another industry.
Changes like these can introduce additional legal responsibilities.
For example, an engineering company moving into manufacturing may need to review its arrangements for machinery safety, hazardous substances, waste management and environmental controls.
Your legal register should reflect what your organisation actually does today, rather than what it was doing several years ago.
2. Are You Monitoring Legislative Changes?
Legislation and regulatory requirements evolve, and businesses need a reliable process for identifying changes that may affect them.
In Scotland, for example, the Environmental Authorisations (Scotland) Regulations framework changed the way certain environmental activities are authorised from 1 November 2025. Depending on their activities and existing permissions, some businesses may need to review their authorisation arrangements.
SEPA provides guidance on the framework and the activities it covers. https://beta.sepa.scot/regulation/authorisations-and-compliance/
This is why periodically reviewing applicable legislation is so important.
3. Have You Identified Who Is Responsible?
Identifying a legal requirement is one thing. Ensuring someone takes responsibility for it is another.
Each applicable obligation should have a clearly identified responsible person or function.
For example, who ensures that statutory equipment examinations are completed, waste contractors are appropriately authorised or relevant employee training remains current?
Clear accountability helps prevent important requirements from being overlooked.
4. Can You Demonstrate Compliance?
One of the biggest weaknesses in legal register management is assuming that identifying legislation automatically demonstrates compliance.
It doesn’t.
Businesses should be able to provide appropriate evidence showing how requirements are being met.
Depending on the activity, this might include inspection records, risk assessments, training documentation, permits, waste transfer notes or maintenance records.
For example, SEPA’s guidance explains that businesses producing waste have responsibilities concerning its transfer to authorised parties and the accompanying documentation. https://beta.sepa.scot/topics/waste/duty-of-care/
Evidence matters just as much as documentation.
5. Are You Evaluating Compliance Regularly?
A legal register should be a working management tool.
Organisations operating ISO 14001 or ISO 45001 management systems need arrangements for evaluating compliance with applicable legal and other requirements.
This means periodically checking whether those requirements are actually being met, recording the results and addressing identified gaps.
The frequency and depth of evaluations should reflect the organisation’s activities, associated risks and relevant statutory requirements.
The HSE similarly emphasises the importance of monitoring performance and reviewing whether health and safety arrangements are effective. https://www.hse.gov.uk/leadership/plan-do-check-act/index.htm
6. Are Findings Being Followed Through?
What happens when a compliance evaluation identifies a problem?
Perhaps an inspection is overdue, an operational procedure requires updating or a contractor’s documentation is incomplete.
Identifying the issue is only part of the process.
There should also be a clear action plan, assigned responsibilities, realistic timescales and evidence that corrective actions have been completed.
An action tracker can be an effective way of ensuring issues are addressed rather than forgotten.
7. Are Your Legal Responsibilities Changing as Your Business Grows?
Business growth often brings new compliance considerations.
Additional employees, new premises, international contracts, changes in equipment or new operational activities can all affect applicable requirements.
For organisations working across Scotland, England and other jurisdictions, it is especially important to identify which legal requirements apply to each location and activity.
A legal register that was appropriate two years ago may no longer reflect your organisation’s current responsibilities.
How QHSE Aberdeen Can Help
At QHSE Aberdeen, we understand that keeping up with legal requirements can be time-consuming, particularly for SMEs without a dedicated QHSE department.
Our experienced Advisors help organisations identify applicable legislation, develop and maintain legal registers, evaluate compliance and address identified gaps.
We also offer clients access to a complimentary SharePoint-based legal register portal, allowing them to view and update relevant information while working collaboratively with our Advisors.
There is no requirement to adopt our platform. We’re equally happy to work within a client’s existing system.
Whether you require a one-off legal compliance review, support maintaining your ISO management systems or ongoing fractional QHSE assistance, we can tailor our services to suit your business.
When Did You Last Review Your Legal Compliance?
With 2027 approaching, now is an excellent opportunity to review your legal register, address outstanding actions and ensure your management systems remain appropriate for the year ahead.
Don’t wait until your next external audit to discover a gap.
Also, internal auditor training can help employees develop their management system evaluation skills.
QHSE Aberdeen can help you understand your compliance obligations and put practical arrangements in place to manage them.
Contact us for an informal discussion about your legal register or compliance requirements.
QHSE Aberdeen Limited
📧 info@qhseaberdeen.com
📞 01224 737277
🌐 www.qhseaberdeen.com
