Cleaning Risk Assessment Template UK | Priority First

Mo Hassan

Priority First Team

October 9, 2026

•

15 min

Last updated: 9 October 2026

A cleaning risk assessment template is a structured document that identifies hazards in cleaning activities — chemical exposure, slips, manual handling, equipment use — and sets out the control measures needed to reduce them to an acceptable level. Priority First notes that UK law requires every employer to carry out this assessment, and employers with five or more staff must record it in writing under the Management of Health and Safety at Work Regulations 1999.

Key Takeaways

A cleaning risk assessment is a legal requirement under the Management of Health and Safety at Work Regulations 1999, not an optional good-practice document.
Handling, lifting or carrying caused 30% of RIDDOR-reportable injuries, and slips, trips and falls on the same level caused a further 17%, according to CHAS, citing HSE statistics (2026).
The total estimated annual cost of workplace injuries and ill health in Great Britain reached £22.9 billion in 2023/24, split between £16.4 billion in ill health and £6.5 billion in injury costs, per CHAS, citing HSE statistics (2026).
The HSE recovers its costs at £188 per hour when an inspection finds a material breach, with unlimited fines possible for COSHH documentation failures, according to C&A Commercial Group London (2026).
Priority First's operational data across its largest managed portfolio shows 152 photographed checkpoints logged from zero before onboarding, demonstrating how documented, evidenced processes replace assumption-based compliance.

What Is a Cleaning Risk Assessment and Why Is It Legally Required?

A cleaning risk assessment is a documented process that identifies hazards arising from cleaning tasks, evaluates who might be harmed and how, and records the measures put in place to control that harm. It is legally required because the Health and Safety at Work etc. Act 1974 places a general duty on every employer to ensure, so far as reasonably practicable, the health, safety and welfare of employees and anyone affected by their work.

Priority First points out that this general duty is made specific by the Management of Health and Safety at Work Regulations 1999, which requires every employer to make a "suitable and sufficient assessment" of risks to employees and others. Cleaning sits squarely within this duty because it routinely involves hazardous substances, wet floors, powered equipment and, in commercial settings, work carried out while the public or other staff are present.

The scale of the problem makes the legal requirement more than a paperwork exercise. 680,000 working people sustained a non-fatal injury at work in 2026/25, with 59,219 RIDDOR-reportable injuries and 4.4 million working days lost, according to CHAS, citing HSE statistics (2026). Cleaning-adjacent causes — manual handling and slips — account for a disproportionate share of those incidents, which is precisely why a dedicated, cleaning-specific risk assessment matters rather than a generic workplace one.

For Soft FM providers managing cleaning across multiple client sites, the legal requirement extends beyond a single employer's own staff. Priority First's facilities management teams treat the risk assessment as the foundation document that every other compliance record — permits, inductions, COSHH sheets — sits on top of, because a weak assessment at the base undermines everything built above it.

Which UK Regulations Apply to Cleaning Risk Assessments?

Several pieces of UK legislation apply directly to cleaning risk assessments, and each covers a different layer of the hazard. The core framework runs from general workplace duties through to substance-specific rules, and a compliant template must reflect all of them.

The relevant regulations include:

The Health and Safety at Work etc. Act 1974 — the founding statute imposing the general duty of care on employers.
The Management of Health and Safety at Work Regulations 1999 — this requires a "suitable and sufficient" risk assessment, and written records for employers of five or more.
The Control of Substances Hazardous to Health Regulations 2002 (COSHH) — governs the assessment and control of hazardous substances, which covers the vast majority of commercial cleaning chemicals including disinfectants, descalers and solvent-based degreasers.
The Provision and Use of Work Equipment Regulations 1998 (PUWER) — applies to cleaning machinery such as floor scrubbers, carpet extractors and pressure washers.
The Personal Protective Equipment at Work Regulations 1992 — Priority First notes this requires suitable PPE where risks cannot be controlled by other means.
The Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 (RIDDOR) — sets out when cleaning-related injuries must be reported to the HSE.

COSHH is the regulation most specific to cleaning, because almost every cleaning task involves a hazardous substance of some description. The HSE's official guidance on carrying out a COSHH risk assessment sets out the process: identify the substance, assess exposure routes, decide on controls, and record the outcome. Failure to document this properly carries real financial exposure — if an HSE inspection finds a material breach, the HSE recovers its costs at £188 per hour, alongside unlimited fines for non-compliance with COSHH documentation requirements, according to C&A Commercial Group London (2026).

Who Is Legally Responsible for Carrying Out and Reviewing a Cleaning Risk Assessment?

The employer holds ultimate legal responsibility for ensuring a suitable cleaning risk assessment exists, is accurate and is reviewed when circumstances change. This duty cannot be delegated away entirely, even where cleaning is outsourced to a contractor.

In practice, responsibility splits across three parties on a typical commercial site. The client or building owner is responsible for the overall site risk profile and must share relevant site information with any contractor. The cleaning contractor — whether an in-house team or an outsourced Soft FM provider — is responsible for the task-level assessment of its own cleaning operations. A competent person, meaning someone with sufficient training, knowledge and experience to identify hazards and judge adequate controls, must either carry out or directly oversee the assessment itself.

For multi-site or multi-contractor arrangements, confusion over who "owns" the assessment is a recurring failure point. Priority First's facilities management service addresses this by positioning a single accountable partner across both security and cleaning operations, so the risk assessment, the site induction and the permit-to-work system reference each other rather than existing as disconnected documents held by different suppliers.

Reviews should be triggered by specific events, not left to an arbitrary calendar date. A change of cleaning chemical, a new piece of equipment, an incident or near-miss, or a change to the building layout should each prompt an immediate review, regardless of when the last scheduled review took place.

What Sections Should a Cleaning Risk Assessment Template Include?

A cleaning risk assessment template should include seven core sections, each capturing a distinct piece of information the HSE expects to see during an inspection. Missing any one of these sections is the most common reason a document is judged "not suitable and sufficient" when challenged.

The essential sections are:

Site and task details — location, date, assessor name and the specific cleaning activity covered (e.g. washroom cleaning, floor care, window cleaning).
Hazard identification — every chemical, physical and ergonomic hazard associated with the task.
Who might be harmed — cleaning operatives, building occupants, visitors, and anyone else who could be affected.
Risk rating — likelihood and severity scored before and after controls are applied.
Control measures — the specific actions, PPE and procedures that reduce the risk.
Responsible person — who implements and monitors each control.
Review date and sign-off — when the assessment was last checked and by whom.

The HSE's simplified guidance on managing risks and risk assessment at work frames this as a five-step process: identify hazards, decide who might be harmed and how, evaluate the risk and decide on precautions, record the findings, and review the assessment. A good template follows that structure column by column, so completing the document also walks the assessor through the correct legal process.

A separate COSHH assessment sheet should sit alongside the general risk assessment for every chemical product in use, cross-referenced by product name and safety data sheet reference.

How Do You Identify Hazards Specific to Cleaning Activities?

Identifying cleaning hazards means systematically working through each task — not the building as a whole — and listing what could realistically cause harm during that specific activity. Generic, building-wide hazard lists tend to miss the task-specific detail an inspector or client auditor will look for.

The main hazard categories in commercial cleaning are:

Chemical hazards — disinfectants, bleach-based products, descalers and solvents, each with different exposure risks (inhalation, skin contact, eye contact).
Slip and trip hazards — wet floors during and immediately after mopping, trailing cables from vacuum cleaners and floor machines.
Manual handling hazards — lifting cleaning equipment, moving furniture to clean behind it, carrying waste sacks.
Equipment hazards — rotary floor machines, pressure washers, steam cleaners and powered access equipment used for high-level cleaning.
Biological hazards — cleaning washrooms, waste areas and, in healthcare settings, clinical waste or bodily fluids.
Lone working and out-of-hours hazards — night cleaning shifts with reduced supervision and fewer people on site to assist in an emergency.

Slip hazards deserve particular attention given how dominant they are in the injury data. Slips, trips and falls are responsible for 31% of non-fatal workplace injuries and cost UK businesses over £512 million each year, according to iHasco (2026). In sectors handling food, the picture is starker still: slips and trips injuries comprise 35% of 'major' injuries in the food and drink industries, representing around 1,300 injuries per year, of which about 80% are slips and 20% trips, according to the Health and Safety Executive (HSE) (2026). The HSE further notes that 90% of slips occur when the floor is wet with water or contaminated with food product, which points directly at the moment a cleaning task itself creates the hazard it is meant to remove.

Risk scoring works by multiplying the likelihood of harm occurring against the severity of that harm if it does, producing a single number that ranks hazards by priority. Most UK templates use a simple 1–5 scale for each factor, giving a maximum risk score of 25.

Risk Score Band	Likelihood × Severity	Typical Action Required
Low (1–4)	Unlikely, minor harm	Monitor; no immediate action needed
Medium (5–12)	Possible, moderate harm	Controls required within a defined timeframe
High (15–20)	Likely, serious harm	Controls required before work proceeds
Extreme (25)	Almost certain, severe or fatal harm	Stop task; senior management sign-off required

A compliant template scores risk twice: once before controls are applied (inherent risk) and again after controls are applied (residual risk). The gap between the two numbers demonstrates that the controls actually reduce exposure, which is exactly what an HSE inspector or client auditor will check first.

The injury data shows why manual handling and slip-related tasks should routinely score in the medium-to-high band before controls. Handling, lifting or carrying caused 30% of RIDDOR-reportable injuries; slips, trips and falls on the same level caused 17%; falls from height caused 8%, according to CHAS, citing HSE statistics (2026). A floor-cleaning task on a busy reception area, for instance, should never be scored "low" purely because the task itself seems routine.

Control measures are the specific, practical actions a cleaning risk assessment commits to, and the HSE expects them to follow a recognised hierarchy rather than defaulting straight to PPE. The hierarchy runs from elimination and substitution at the top, through engineering and administrative controls, down to personal protective equipment as the last line of defence.

Common controls for cleaning tasks include:

Substitution — replacing a hazardous chemical with a lower-risk alternative where the same cleaning standard can be achieved.
Signage and barriers — "wet floor" signs and physical barriers during and after mopping or floor polishing.
Dilution control systems — automated dosing to prevent over-concentration of chemicals and reduce handling of neat product.
Training and competence — COSHH awareness training, safe lifting technique, and equipment-specific induction before first use.
PPE — gloves, eye protection and, where ventilation is poor, respiratory protection appropriate to the substance in use.
Lone working procedures — check-in systems and emergency contact protocols for out-of-hours or night cleaning.

The HSE's own evidence shows that targeted controls work. Slip prevention can be managed effectively and can cut injuries by 50% or more, significantly reducing costs, according to the Health and Safety Executive (HSE) (2026) — a figure that justifies the time spent getting the control measures column right rather than treating it as a box-ticking formality.

Priority First's own evidenced-patrol approach illustrates the same principle applied to security and facilities oversight rather than cleaning chemistry. Across its largest managed portfolio, Priority First recorded 152 photographed checkpoints, up from zero before onboarding, with every checkpoint completion carrying a photograph, GPS location and timestamp, in line with the HSE's expectation that controls be verifiable rather than assumed — and demonstrating, additionally, how a documented evidence trail turns a paper commitment into a provable one. The same discipline applies to a cleaning risk assessment: a control measure that cannot be checked or evidenced on site is barely a control at all.

In Practice: Documentation as the Difference Between Assumed and Proven Compliance

A mixed-use development in West London, running retail, residential and public areas across a single site, had reached the point where officers reported rounds as complete, but no one could verify which plant room had actually been checked overnight. Priority First mapped 152 checkpoints across the site, built photo, GPS and timestamp evidence into every patrol completion, and had the system live within weeks. The same logic transfers directly to cleaning compliance: a schedule marked "complete" without verification is a claim, not a record, and the gap between the two is exactly where HSE inspections and client audits find fault.

How Often Should a Cleaning Risk Assessment Be Reviewed or Updated?

A cleaning risk assessment should be reviewed at least annually as a baseline, but the real trigger for review is change, not the calendar. The HSE's five-step guidance treats review as an ongoing obligation tied to events, not a once-a-year formality to be completed and filed away.

Events that should trigger an immediate review include:

A change of cleaning chemical or supplier.
Introduction of new equipment, such as a different floor machine or access platform.
An accident, incident or near-miss connected to cleaning activity.
A change to the building layout, occupancy pattern or opening hours.
Feedback from a RIDDOR report or an HSE inspection.
A new cleaning contractor or significant staff turnover on an existing contract.

For Soft FM providers managing cleaning across several client sites, review cycles need to be tracked site by site rather than applied as a single blanket policy, since each building's chemical inventory, equipment and occupancy pattern differs.

Common Mistakes Businesses Make When Completing Cleaning Risk Assessments

The most frequent mistake is copying a generic workplace risk assessment template and applying it to cleaning without adjusting it for task-specific hazards. A document that lists "slips and trips" as a single generic line, rather than identifying the specific moment during mopping or floor polishing when the risk peaks, will not satisfy a competent inspector.

Other recurring errors include:

Treating COSHH as separate paperwork rather than cross-referencing it to the main risk assessment, leaving a gap an inspector will find immediately.
Scoring risk only once, before controls, so there is no evidence the controls actually reduce exposure.
Leaving the review date blank or stale, which signals the document has not been actively managed.
Failing to name a responsible person for each control measure, leaving accountability unclear if something goes wrong.
Not involving the cleaning operatives themselves in the assessment, despite them having the clearest practical knowledge of the task's real hazards.
Assuming a contractor's generic assessment covers site-specific conditions without checking it against the actual building, equipment and occupancy pattern.

Given that the total estimated annual cost of workplace injuries and ill health in Great Britain was £22.9 billion in 2023/24 (£16.4 billion from ill health and £6.5 billion from injury), according to CHAS, citing HSE statistics (2026), these are not low-stakes administrative errors — they represent the gap between a defensible safety system and a costly one.

Your Cleaning Risk Assessment Checklist

Confirm a competent person has been named to carry out or oversee the assessment.
List every cleaning chemical in use and cross-reference it to a COSHH data sheet.
Score each hazard twice: inherent risk before controls, residual risk after.
Name a responsible person against every control measure, not just against the task.
Add wet-floor signage and barrier procedures explicitly, given how dominant slip injuries are in the data.
Record lone working procedures for any out-of-hours or night cleaning shift.
Set a review trigger list covering chemical changes, new equipment, incidents and layout changes.
Keep signed, dated records of every assessment and review, ready to produce at inspection or client audit.

FAQ

What is a cleaning risk assessment template?

A cleaning risk assessment template is a structured document, usually in table form, used to identify hazards in cleaning tasks, score the associated risk, and record the control measures put in place. It typically covers chemical, slip, manual handling and equipment hazards, with columns for likelihood, severity and responsible person.

Is a risk assessment a legal requirement for cleaning businesses?

Yes, every employer has a legal duty under the Management of Health and Safety at Work Regulations 1999 to carry out a "suitable and sufficient" risk assessment. Employers with five or more employees must record the significant findings in writing, and cleaning tasks almost always fall within scope due to chemical and manual handling hazards.

What is the difference between a COSHH assessment and a general cleaning risk assessment?

A COSHH assessment, governed by the Control of Substances Hazardous to Health Regulations 2002, focuses specifically on hazardous substances such as cleaning chemicals, their exposure routes and control measures. A general cleaning risk assessment is broader, covering physical hazards like slips, manual handling and equipment alongside chemical risks, with the COSHH assessment typically referenced within it.

Do small cleaning businesses with fewer than five employees need a written risk assessment?

Businesses with fewer than five employees must still carry out a suitable and sufficient risk assessment, but they are not legally required to record it in writing. In practice, most insurers, clients and principal contractors expect a written record regardless, so maintaining one is strongly advisable even below the legal threshold.

How often should a cleaning risk assessment be reviewed?

A cleaning risk assessment should be reviewed at least annually, but any significant change should trigger an immediate review regardless of the scheduled date. Triggers include a new chemical, new equipment, an accident or near-miss, or a change to the building's layout or occupancy.

What PPE should be included in a cleaning risk assessment?

PPE requirements depend on the specific chemicals and tasks involved, but commonly include gloves, eye protection, and in some cases respiratory protection where ventilation is limited. PPE should sit at the bottom of the control hierarchy, used only where elimination, substitution, engineering or administrative controls cannot adequately reduce the risk on their own.

How does a cleaning risk assessment differ for office spaces versus healthcare settings?

Office cleaning risk assessments typically focus on general chemical hazards, slip risks from mopped floors, and manual handling of waste and equipment. Healthcare settings add biological hazards such as clinical waste and bodily fluids, stricter infection control protocols, and often additional training requirements that an office-based assessment would not need to cover.

Where can you find a free downloadable cleaning risk assessment template in the UK?

The HSE publishes free risk assessment templates and guidance, including its simplified five-step guidance and COSHH-specific assessment tools, both accessible directly from hse.gov.uk. Soft FM providers such as Priority First also structure bespoke templates for client sites as part of wider facilities management and building audit services.

Managing Cleaning Compliance Through Priority First

Cleaning risk assessments rarely sit in isolation on a well-run site — they connect to permit-to-work systems, contractor inductions, chemical storage audits and the wider building compliance file, and a gap in one tends to surface as a gap in all of them. Priority First's facilities management teams build cleaning compliance into the same accountable structure used across security and building operations, so a client has one partner responsible for the paperwork and the practical delivery rather than a patchwork of disconnected suppliers.

Priority First's building audit and risk assessment work follows the same evidenced-record principle demonstrated across its security operations, where every checkpoint completion requires a photograph, GPS location and timestamp rather than a signature on a sheet — turning "the cleaning was done" from an assertion into a provable record a client can actually check.

If your organisation needs a cleaning risk assessment structured against current HSE and COSHH requirements, or wants cleaning compliance managed alongside security and building operations under one accountable partner, get in touch with Priority First's facilities management team to discuss a site review.

Explore Priority First services

Facilities Management Corporate Security Manned Guarding

Written by

Mo Hassan — Founder & Managing Director, Priority First

Mo Hassan leads Priority First, a UK building-management and security-services company operating across prime central London and nationwide. Mo writes on physical security, construction-site protection, CCTV, and building operations.

Over a decade in premium building management and security operations

Specialises in Building management, Security operations, Construction site security

Add priorityfirst.co.uk as a preferred source on Google