Construction Compliance FAQ

There is no law that makes CSCS cards a legal requirement. However, most principal contractors and major clients require them as a condition of site access under the Build UK standard. In practice, a worker without a valid CSCS card will be turned away from the vast majority of UK construction sites. Read our full CSCS card guide.

Each colour represents a different qualification level. Red is for trainees and apprentices. Blue is for skilled workers who hold an NVQ Level 2. Gold is for advanced craft and supervisory roles with NVQ Level 3. Black is for managers with NVQ Level 6 or 7. White is for professionally qualified persons such as architects and engineers. Green is a labourer card for those who have passed the CITB Health, Safety and Environment test. See all card types explained.

There are four methods. Visual inspection checks the photo, expiry date, and hologram. The CSCS Smart Check app verifies the card against the CSCS database in real time using the card number. The CSCS website allows individual lookups. Automated API verification, used by platforms like AttendIQ, checks cards in bulk and flags expiries before they happen. Read the full verification guide.

The worker should not continue working until their card is renewed, as most site rules require a valid card for access. The principal contractor is responsible for checking and enforcing this. CSCS allows a grace period for renewal applications already in progress, but the worker must be able to show proof of application. Automated expiry alerts at 90, 30, and 7 days help prevent this situation. Read the full expiry guide.

Legally, yes, because CSCS is not a statutory requirement. In practice, almost never. Most principal contractors mandate CSCS cards in their site rules, and major clients like Tier 1 contractors require them contractually. Some sites allow a temporary visitor pass for short-duration visits, but this is not standard for working operatives.

Most CSCS cards are valid for five years from the date of issue. The Academically Qualified Person (AQP) card and some provisional cards may have shorter validity periods. Workers must renew before expiry to maintain continuous site access. The renewal process requires a valid CITB Health, Safety and Environment test within the previous two years.

CSCS Smart Check is a free mobile app provided by CSCS that allows anyone to verify a card's validity in real time. You enter the card number and the worker's date of birth, and the app confirms whether the card is currently valid, what occupation it covers, and its expiry date. It is the recommended verification method for site managers doing manual checks. Read our Smart Check guide.

The principal contractor is responsible for ensuring all workers on site hold the appropriate CSCS card for their role. In practice, this responsibility is often delegated to site managers or gatehouse staff. Subcontractors also have a duty to ensure their own workers hold valid cards before sending them to site.

Yes. Under CDM 2015 Regulation 13, principal contractors must provide site-specific inductions to every worker before they start work. The Health and Safety at Work etc. Act 1974 also requires employers to provide information, instruction, and training. Failing to induct workers is a common finding during HSE inspections and can result in enforcement action. Read our site induction guide.

CDM 2015 does not prescribe a fixed list, but HSE guidance (L153) expects inductions to cover: site-specific hazards and risks, emergency procedures and muster points, welfare facility locations, site rules, reporting procedures for accidents and near misses, first aid arrangements, and any permits to work in operation. The induction should be proportionate to the risks on that specific site. Read the full CDM 2015 guide.

Yes. There is no legal requirement for inductions to be delivered face to face. Digital inductions are accepted by HSE provided they cover the required content, include a method to confirm understanding (such as a quiz), and generate a signed record. Many contractors now use digital inductions so workers can complete them before arriving on site, reducing gatehouse delays. See how AttendIQ digital inductions work.

There is no set duration. It depends on the complexity and risk profile of the site. A simple refurbishment might require a 15-minute induction. A major civils project with confined spaces, deep excavations, and live services could require 45 minutes or more. The key is that workers understand the content, not that a time target is met.

Yes. Every worker who enters the site must receive a site-specific induction from the principal contractor, regardless of who employs them. Subcontractors may also provide their own company-level induction covering general policies, but this does not replace the site-specific induction required by CDM 2015.

There is no specific statutory retention period for induction records. However, HSE recommends keeping them for the duration of the project plus six years (the limitation period for civil claims). For projects involving asbestos or other hazardous substances, records should be kept for 40 years. Digital records make long-term retention straightforward.

CDM 2015 does not explicitly require an attendance register, but Regulation 25 of the Regulatory Reform (Fire Safety) Order 2005 requires a record of persons on site for emergency evacuation purposes. HSE also expects principal contractors to know who is on site at any time. In practice, maintaining a site attendance register is a de facto requirement for compliance.

Digital sign-in systems using QR codes, NFC, or biometric clock-in are the most reliable method. They produce timestamped, tamper-proof records and give you a real-time headcount for emergency muster. Paper sign-in sheets are still used on smaller sites but are prone to errors, illegible handwriting, and buddy signing.

Yes. Mobile apps are widely used for construction site sign-in. Workers scan a QR code or tap an NFC tag on arrival, and the system records their attendance with a timestamp and GPS location. Apps like AttendIQ also combine sign-in with compliance checks, blocking workers who have expired competencies or incomplete inductions. See AttendIQ features.

HSE expects you to be able to identify every person on site at any given time, including their name, employer, and time of arrival and departure. During an inspection, an HSE inspector may ask for the current site register and may cross-reference it against the workers they observe on site. Accurate, real-time records demonstrate good management. Read our HSE inspection guide.

Biometric clock-in uses fingerprint scanning or facial recognition to verify a worker's identity at the point of sign-in. This prevents buddy clocking, where one worker signs in on behalf of another. The biometric data is typically converted to an encrypted template rather than storing the actual image. Systems must comply with UK GDPR requirements for processing biometric data.

A digital muster roll is a real-time list of everyone currently on site, generated automatically from clock-in and clock-out data. During an emergency evacuation, it replaces the paper roll call and tells you instantly who is accounted for and who is missing. Some systems can also send push notifications to all on-site workers when an evacuation is triggered.

HSE inspections can be proactive (planned inspections targeting high-risk sectors) or reactive (triggered by a complaint, a RIDDOR report, or an incident). Construction is a priority sector for HSE, so proactive inspections are common. Poor accident records, complaints from workers, or reports from neighbouring properties can all trigger a visit. HSE does not need to give advance notice. Read the full HSE inspection guide.

Inspectors typically ask for the construction phase plan, site attendance records, induction records, CSCS cards for workers on site, risk assessments and method statements, permits to work, COSHH assessments, plant inspection records, welfare arrangements evidence, and the health and safety file. Having these accessible digitally speeds up the process significantly. See the full document checklist.

Following the 2016 sentencing guidelines, fines increased substantially. For large organisations, fines for health and safety offences causing death can exceed one million pounds. The average fine for a construction health and safety prosecution was over 100,000 pounds in recent years. Improvement notices and prohibition notices carry additional costs from work stoppages and remediation.

The Construction (Design and Management) Regulations 2015 are the main set of regulations for managing health, safety, and welfare on construction projects in Great Britain. CDM 2015 applies to all construction work, regardless of size. It places duties on clients, principal designers, principal contractors, contractors, designers, and workers. Read the full CDM 2015 guide.

The principal contractor must plan, manage, monitor, and coordinate health and safety during the construction phase. Key duties include: preparing the construction phase plan, organising cooperation between contractors, ensuring site inductions, preventing unauthorised access, providing welfare facilities, consulting and engaging with workers, and liaising with the principal designer. Read the full CDM 2015 guide.

Retention periods vary by record type. Accident books and RIDDOR reports: three years. Risk assessments: the life of the activity plus a reasonable period. COSHH health surveillance and asbestos exposure records: 40 years. Training records: the duration of employment plus six years. Fire safety records: indefinitely while the building is in use. Read the full records retention guide.

RIDDOR is the Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013. You must report to HSE: deaths, specified injuries (fractures, amputations, loss of sight), over-seven-day incapacitation injuries, occupational diseases, dangerous occurrences (near misses such as scaffold collapse), and gas incidents. Reports must be made without delay for deaths and specified injuries, and within 15 days for over-seven-day injuries. Read the full RIDDOR guide.

The Building Safety Act 2022 introduced a new regulatory framework for building safety in England, primarily targeting higher-risk buildings (residential buildings over 18 metres or seven storeys). It establishes the Building Safety Regulator within HSE, introduces the golden thread of information, and creates new duties for dutyholders during design and construction. Read the full Building Safety Act guide.

Under the Immigration, Asylum and Nationality Act 2006, every employer must check that each worker has the right to work in the UK before employment begins. This applies to all workers regardless of nationality. The check involves seeing original documents, checking they are genuine, and keeping a dated copy for the duration of employment plus two years. Read the full right to work guide.

The civil penalty is up to 60,000 pounds per illegal worker for a first offence, increasing for repeat offences. If an employer knowingly employs someone without the right to work, criminal sanctions apply, including an unlimited fine and up to five years in prison. Conducting compliant right to work checks before employment starts provides a statutory excuse that protects against civil penalties. Read the full penalties breakdown.

For workers with a permanent right to work (such as British or Irish citizens), a single check before employment starts is sufficient. For workers with a time-limited right to work (such as visa holders), follow-up checks must be conducted before their permission expires. The Home Office recommends setting calendar reminders for expiry dates. Automated systems can track these dates and alert you in advance.

Yes. The legal obligation to conduct right to work checks sits with the employer, which is the subcontractor for their own workers. However, principal contractors have a duty of care and may face reputational and contractual risk if illegal workers are found on their sites. Many principal contractors therefore require subcontractors to provide evidence that checks have been completed.

Acceptable documents are listed in the Home Office's right to work checklist. List A (permanent right) includes a UK or Irish passport, or a certificate of registration as a British citizen. List B (time-limited right) includes a passport with a valid visa, a biometric residence permit, or an immigration status document. Since April 2022, biometric residence card and permit holders must be checked using the Home Office online service rather than physical documents.

Construction workforce management software is a platform that helps contractors manage site attendance, worker competencies, inductions, compliance records, and timesheets in one place. It replaces paper sign-in sheets, spreadsheet trackers, and filing cabinets with digital records that are searchable, auditable, and accessible in real time. See what AttendIQ includes.

Prices vary significantly. Hardware-based systems with turnstiles and biometric readers can cost tens of thousands of pounds for installation plus ongoing fees. Software-only platforms like AttendIQ start from around 4.50 pounds per worker per month with no hardware required. The cost should be weighed against the risk: a single HSE improvement notice averages over 100,000 pounds in total costs. See AttendIQ pricing.

Spreadsheets can work for very small operations with one or two sites and a handful of workers. Beyond that, they become unreliable. Spreadsheets cannot send expiry alerts, enforce access rules at the gate, generate real-time muster lists, or provide an audit trail that satisfies HSE. The risk of human error, version conflicts, and missing data increases with every site and subcontractor you add.

A worker competency passport is a digital record that follows a worker across sites and employers. It contains their qualifications, certifications, training records, CSCS card details, induction completions, and right to work status. Unlike paper records held by individual employers, a digital passport means the worker does not need to re-prove their competencies every time they move to a new site or subcontractor.

Supply chain compliance visibility means a principal contractor can see the compliance status of workers employed by their subcontractors. In AttendIQ, subcontractor companies are invited to the platform for free. They manage their own workers, and the principal contractor can see whether those workers meet the site's access rules without needing to manage the subcontractor's data directly. Learn more about supply chain visibility.

Paper-based compliance relies on manual checks, physical filing, and human memory for expiry dates. AttendIQ digitises the entire process: attendance is recorded automatically, competencies are verified against live databases, inductions are completed on a phone, expiry alerts fire automatically, and access rules are enforced at the gate. The result is fewer compliance gaps, faster HSE response times, and a complete audit trail. See how AttendIQ works.

The Working Time Regulations 1998 (which implement the EU Working Time Directive, retained in UK law) limit the average working week to 48 hours, calculated over a 17-week reference period. Construction workers are also entitled to a minimum 11 consecutive hours of rest per day, a 20-minute break when working more than six hours, and at least one day off per week. Employers must keep records of hours worked.

Yes. Workers can voluntarily sign a written opt-out agreement to work more than 48 hours per week on average. The opt-out must be genuinely voluntary, and the worker can cancel it with seven days' notice (or longer if agreed, up to three months). Employers must keep records of workers who have opted out. Night workers cannot opt out of the night work limits.

Under the Working Time Regulations, construction workers are entitled to: 11 consecutive hours of rest in each 24-hour period, a 20-minute uninterrupted rest break during any shift longer than six hours, and 24 consecutive hours of uninterrupted rest per week (or 48 hours per fortnight). Young workers aged 16 to 17 have enhanced rest entitlements, including 12 hours daily rest and 48 hours weekly rest.

Fatigue monitoring combines working time data with operational awareness. Digital attendance systems can flag workers exceeding safe hours, track consecutive days worked, and alert supervisors when rest period breaches are detected. Some contractors use toolbox talks on fatigue awareness, supervisor observation checklists, and worker self-declaration. Construction fatigue is a contributing factor in many site accidents.

AttendIQ Essential starts at 4.50 pounds per worker per month and AttendIQ Complete is 6.50 pounds per worker per month, both on annual billing. There is no setup fee, no training fee, and no hardware to buy. Subcontractor companies are invited for free, and their workers are included in the principal contractor's licence. See full pricing details.

Most customers are live within a day. There is no hardware to install and no IT project required. You set up your site hierarchy, invite subcontractors, configure access rules, and start recording attendance immediately. AttendIQ provides onboarding support to help you import existing worker data and configure your compliance rules. Book a demo to see it in action.

No. AttendIQ is a software-only platform. Workers sign in using their own smartphones via QR code, NFC tap, or the mobile app. There are no turnstiles, kiosks, or biometric readers to buy, install, or maintain. This makes it ideal for multi-site operations and sites where infrastructure changes frequently.

Yes. AttendIQ is designed for UK GDPR compliance from the ground up. All data is stored in the UK, access is controlled by role-based permissions with row-level security, and all processing activities are documented. AttendIQ provides tools for handling subject access requests and data deletion requests. Special category data such as medical information is encrypted at the column level. Read our privacy policy.

Yes. When a principal contractor uses AttendIQ, they can invite their subcontractor companies at no additional cost. Subcontractors manage their own workers, upload competencies, and complete inductions through the platform. This means the principal contractor gets full supply chain visibility without asking subcontractors to pay for another piece of software. See how subcontractor pricing works.