EU safety services do not transfer the employer's duty
EU Framework Directive 89/391/EEC says using competent external protective or preventive services does not discharge the employer's responsibility. A service engagement therefore needs a task-and-evidence record that preserves what the service performs, what the employer decides, and how national implementation applies.
Editorial figure by Safety Operations Standard. Source context: EU Framework Directive 89/391/EEC.
Define the service task without transferring the duty
The direct answer is to document the external assignment and the retained employer decision separately. For each undertaking and establishment, record the legal entity, site, worker populations, activities, hazards, applicable national measures, designated internal workers, reason external competence is needed, service provider, named qualified personnel, capabilities, resources, task scope, deliverables, access to relevant information, response time, coordination rule, contract period, and accountable employer owner.
The service may measure exposure, advise on controls, conduct an assessment, provide occupational-health support, inspect equipment, deliver training, or assist an investigation. Its completed task can establish that specified work occurred and evidence was returned. It does not by itself establish that the employer evaluated the result, selected and implemented necessary measures, consulted workers as required, supplied adequate organization and means, or verified continuing protection under the applicable national framework.
Give the service the facts needed for competent work
Article 7 says an employer using external services must inform them of factors known or suspected to affect workers' safety and health and provide access to specified information. A controlled handoff should identify the task and work area, processes and materials, workers and other persons present, known hazards, prior assessments and incidents, operating states, equipment, schedules, changes, emergency arrangements, controls, monitoring data, confidential limits, missing facts, source and version, sender, receipt, questions, and updates.
A generic site brief can be inadequate where exposure varies by shift, task, maintenance state, contractor activity, product, weather, or location. Preserve what the external professional actually received and the cutoff used for an opinion. If the employer later discovers a material fact, issue a dated supplement and assess affected advice rather than silently updating the shared folder. The external report should likewise retain assumptions, method, competence, limitations, observations, recommendations, urgency, and unresolved information.
Route advice into an employer-owned action record
For every consequential finding, create an employer action record with the source report, affected workers and work, hazard, risk basis, immediate protection, option considered, selected measure, hierarchy rationale where applicable, consultation, decision authority, owner, resources, deadline, interim condition, implementation evidence, communication and training, verification method, result, exception, and review date. If advice is not accepted or is narrowed, retain the accountable reason and escalation rather than making the recommendation disappear.
This boundary is different from contractor prequalification or site work authorization. The external party here performs a protective or preventive service for the employer; the affected record is the employer's retained safety-and-health response to that service's evidence. A contract renewal, invoice approval, report delivery, or recommendation closure is not a control-effectiveness result. Dashboards should separately report service work due, information gaps, high-priority findings, employer decisions pending, measures implemented, verification overdue, and unresolved disagreements.
Test an external assessment through changed conditions
Use a representative site that engages an external hygienist or safety specialist for a defined task. Include two shifts, contractors, a maintenance state, incomplete substance information, and a process change after sampling. Have the service issue a qualified report, let the employer choose interim and permanent measures, challenge one recommendation, communicate with workers, implement the action, and repeat verification. Reviewers should reproduce the information cutoff, professional work, retained employer decisions, national-law mapping, and evidence without converting the service's completion into duty transfer.
The official EUR-Lex record supports the attributed Framework Directive provisions about employer responsibility, designated workers, external services, information, capability, means, sufficiency, and coordination. It does not resolve national transposition, later amendments or related instruments, sector rules, collective arrangements, professional competence, a particular risk assessment, employer compliance, causation, liability, enforcement, or worker outcome. Employers and qualified safety, occupational-health, worker-representation, operational, human-resources, compliance, and legal owners should use current applicable national law and facts.
Enterprise buyer test
Translate this change into the exact population, record type, workflow stage, decision owner, effective date, and evidence that could be affected. Ask current or prospective providers to demonstrate the named workflow with representative data and an exception—not a polished feature tour. Record what official documentation establishes, what a provider states, what the team observes, and what remains unresolved.
A defensible review also identifies the dependency outside the product. Authority interpretation, policy configuration, data quality, integrations, human judgment, approval rights, release governance, training, and retained evidence may remain customer or service responsibilities. The evaluation should preserve those boundaries instead of treating a technology claim as the complete operating model.
What we will watch next
Safety Operations Standard will watch the named source and affected market records for later evidence that changes status, scope, availability, implementation timing, workflow consequence, or the limits of the initial report. A later announcement does not silently overwrite this dated account; the change ledger preserves the sequence.