GDPR Data processing modelInternal Register of Minor Workplace Incidents Not Requiring Statutory Reporting

PrivateHealthHuman resourcesPublic

This processing activity involves the internal recording and retention of minor workplace incidents or near-misses that do not meet the threshold for statutory reporting under RIDDOR (Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013), but are maintained for purposes of health and safety monitoring, occupational health follow-up, and risk prevention. The register helps employers and safety professionals identify trends, improve workplace safety, and monitor recurrent minor injuries. It may also be used in liaison with occupational health services for preventive interventions or ergonomic assessments. This processing is typically conducted by the Health and Safety team or designated officers within the employer organisation and may involve consultation with employee representatives or health professionals.

Purposes (2)

A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable

Legal obligation

If the processing supports legal duties under the Health and Safety at Work etc. Act 1974, or anticipates RIDDOR thresholds, even if not triggered.

internal monitoring

Where internal monitoring is undertaken voluntarily to prevent harm or support workplace wellbeing.

Legitimate interest

Legitimate interest must be balanced with employees' rights.

Data categories (1)

Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)

Minor accidents

Data details

Name and address of third parties involved outside the establishmentrequired

Detailed circumstances of the accident

required

Location and nature of lesionsoptionalsensitive data

Name and surname of witnesses or first notified personrequired

Victim's first and last namerequired

Data conservation rules

Active base:

5 years after year-end

Destruction

Data subject (3)

A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process

Healthcare Professionals
Other
Employees

Created at:07/08/2023

Updated on:06/14/2025

Nb using:7

GDPR Data processing modelInternal Register of Minor Workplace Incidents Not Requiring Statutory Reporting

Purposes (2)

Data categories (1)

Minor accidents

Data subject (3)

Access the full processing template