The Difference Between Having a Risk Assessment and Being Covered By One
Here’s a myth worth killing: the law doesn’t say your staff have to read every leisure centre risk assessment in the building. It says they have to understand the risks and controls that apply to their role — and be able to prove it. A sign-off isn’t a lesser substitute for that. Done properly, it’s the strongest evidence you’ve got. The trouble is most sign-offs prove nothing, because the document being signed is generic, months out of date, and sitting in an office folder nobody carries around. Fix that — the right risk assessment, current, assigned to the person it actually applies to, signed off on the phone in their pocket the moment they read it — and the sign-off stops being a box-tick. It becomes exactly the proof the law is asking for.
That distinction is worth sitting with, because it isn’t semantics. It’s the difference between passing an inspection and actually being safe. Most GMs I speak to have never had it explained to them properly — and it changes how you should be judging your own systems.
What Leisure Centre Risk Assessment Software Is Actually Meant to Prove
Under the Management of Health and Safety at Work Regulations 1999, employers have to give staff comprehensible information on the risks they face and the measures in place to control them — specific to their role, not a generic pack everyone signs on induction day and never sees again. Under Section 7 of the Health and Safety at Work Act 1974, staff then have a duty to co-operate — which in practice means engaging with the training and instruction they’ve actually been given.
That’s exactly what a proper sign-off is for. Not a formality — the mechanism itself. The moment someone acknowledges a risk assessment that’s current, relevant to their role, and in front of them when it matters, that acknowledgement is the evidence the law is asking for. That’s what any decent leisure centre risk assessment software should be built to protect — not just storage, a sign-off that actually means something.
Most systems, digital or paper, let that mechanism go stale. A PDF in a shared drive gathering signatures from people signing off a role they’ve since moved on from is no better than the folder in the office.
Where the Gap Actually Opens Up
I asked a duty manager last month how many of her staff had read the pool plant risk assessment. “All of them,” she said — everyone had signed it. When? March. It was July. Nobody had opened it since, because nobody had a reason to. The paper copy sat in a folder in the office, and the office is a two-minute walk from the plant room when you’re mid-shift.
That’s the real gap — not whether the document exists, but whether it’s current, on the person, and signed off for real.
It gets worse after an incident. Picture this: something goes wrong — a near miss, an actual accident — and the risk assessment gets updated the next day with a new control measure. Under the old system, that update sits in the same folder nobody’s opened since March. Nobody’s told. Nobody’s asked to read it again. The staff on shift that afternoon are still working off the version that failed to prevent the problem in the first place, because updating the document isn’t the same as updating the people who rely on it.
On OpsPal, that update triggers an in-app notification the moment it’s made, and if it’s still unread it shows up in their weekly reminder too. Staff aren’t left hunting through a rewritten document to work out what’s different, either — the before/after change screen shows exactly what’s changed, removed content in red, new content in green, at a glance. They read the change, not the whole document again, and sign off on that specific update. That’s the difference between a risk assessment that actually improves after something happens, and one that quietly gets rewritten while everyone keeps doing what they were doing before.
Multiply that across every risk assessment in the building, every site you run. Inspectors don’t usually ask “do you have a risk assessment for this” — they ask the person standing in front of them to explain it. A document proves you did something once. A member of staff who can talk you through the current control measures proves you’re managing the risk today. That’s the moment centres get caught out — not because the paperwork’s missing, but because nobody’s actually looked at it since it was signed, updated or not.
What “Covered” Actually Looks Like
OpsPal’s leisure centre risk assessment software exists because of exactly this gap. Risk assessments sit centrally, on whatever device someone’s holding, so a lifeguard standing by the plant room can pull up the current version — not the one from March — in seconds. Reviews are colour-tagged, amber at 30 days out and red once overdue, so nothing quietly goes stale.
The sign-off happens the moment someone actually reads the version that applies to their role — a digital acknowledgement, timestamped, tied to who needs to know what, not a blanket signature that could mean anything from last week to last year, on a document that might not even be theirs to read.
When DLR Leisure went through Ireland Active’s Gold Standard assessment across three sites, that’s exactly what got them through. When the assessor asked how they knew staff had read the safeguarding policy, they could show — in seconds — exactly who’d read it and when. That instant proof turned 180 hours of accreditation scramble into business as usual.
This isn’t risk management and compliance becoming more automated. It’s the same document existing somewhere it actually gets seen — and proving, on demand, that it has.
What This Means for You on Monday
Monday Morning Action: Pick one risk assessment at your site — the one you’d bet money hasn’t been opened since it was last updated. Ask three staff who are supposed to have read it what the top control measure is. If they hesitate, you’ve found your gap. Not a paperwork gap. An understanding gap.
That gap doesn’t show up on a spreadsheet. It shows up the day someone asks the wrong question at the wrong moment — an assessor, or worse, an incident that proves the point for them. Better to find it yourself, on a quiet Monday, than have someone else find it for you.
Sources
- Management of Health and Safety at Work Regulations 1999 — guidance, Health and Safety Executive (updated 2025): https://www.hse.gov.uk/simple-health-safety/risk/index.htm
- Health and Safety at Work etc. Act 1974, Section 7, legislation.gov.uk: https://www.legislation.gov.uk/ukpga/1974/37/section/7/enacted?view=extent
- DLR Leisure case study, OpsPal (November 2025): https://opspal.co.uk/case-study/leisure-accreditation-software/
