Legal Duties for Employee Health Screening

Employers in England and Wales have a range of legal obligations when it comes to health screening in the workplace. These duties arise from health and safety law, equality and discrimination protections, data protection rules and statutory health surveillance requirements. Conducting health checks in a compliant way protects employees from harm, minimises legal risk and helps employers demonstrate that they have met their legal duties. This article explains the law, outlines when screening is required, and provides practical guidance on how employers should approach health assessments and monitoring.

What Is Health Screening in Employment?

“Health screening” in the workplace covers a range of assessments employers may undertake to understand and protect the health of employees. It includes pre‑employment health assessments, ongoing health surveillance for roles with exposure risks, and fitness for work checks. Some screening is a legal requirement when specific hazards are present. Other assessments may be recommended to ensure compliance with equality duties and safe working conditions.

Health checks often involve occupational health professionals, and screening outcomes should focus on identifying fitness for specific tasks and whether adjustments or controls are needed. Individual medical details are typically treated as confidential and shared only as necessary in line with data protection law.

1. Legal Framework Governing Health Screening

Health and Safety at Work etc. Act 1974

Under Section 2 of the Health and Safety at Work etc. Act 1974, employers must take reasonable steps to ensure the health, safety and welfare of their employees at work. This general duty underpins the need for health risk assessments and, where appropriate, health monitoring or screening to protect workers from foreseeable hazards.

Management of Health and Safety at Work Regulations 1999

These regulations require employers to carry out suitable and sufficient risk assessments of the workplace and implement measures to control identified risks. When control measures alone are insufficient to prevent harm, health surveillance becomes part of a compliant risk management strategy.

Control of Substances Hazardous to Health (COSHH) and Specific Regulations

Certain regulations such as COSHH and others relating to noise, vibration and biological agents require health surveillance where employees are exposed to specific hazards. Surveillance helps detect early signs of work‑related ill health.

Equality Act 2010 and Disability Discrimination

Employers must avoid unlawful discrimination against employees and applicants with health conditions or disabilities. Under the Equality Act 2010, it is generally unlawful to ask questions about health or disability before making a conditional job offer, unless specific exceptions apply. After a conditional offer, relevant health screening can be conducted to check whether reasonable adjustments are needed or to ensure safety at work.

2. When Health Screening Is Legally Required

Mandatory Health Surveillance

Health surveillance becomes a legal duty when employees are exposed to specific residual risks that cannot be eliminated through other controls, and where:

• The hazard is associated with a recognised disease or health effect;
• There is a significant likelihood that the disease or effect may occur in the workplace; and
• There are valid surveillance techniques available.

Examples include monitoring for skin disease in workers exposed to irritants, audiometry tests for employees exposed to high noise levels, and respiratory checks when workers face dust or chemical exposure.

Pre‑Employment and Fitness for Work Assessments

While screening is not automatically required for all roles, employers have a duty to ensure that a new employee is fit to perform the intrinsic duties of a job without undue risk to their health or safety. Pre‑employment health assessments (often requested after a conditional offer) can identify health conditions that require reasonable adjustments or restrictions.

Employers must not routinely ask about general health or medical history before offering a conditional appointment, as doing so can create a risk of discrimination unless it is genuinely necessary for safety reasons or statutory compliance.

3. Data Protection and Confidentiality

Employee health information is classed as special category personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Employers must therefore identify a lawful basis under Article 6 and a special category condition under Article 9 before processing health data. They must also meet appropriate safeguards and justify why the data is necessary.

Health screening results should be used only for legitimate purposes such as assessing fitness for work, making reasonable adjustments, or fulfilling statutory duties. Employers should ensure confidentiality, secure storage, and restricted access to sensitive health data.

4. Employee Rights and Obligations

Right to Privacy and Data Protection

Employees have the right to privacy and to have their personal data processed lawfully and transparently. Employers should explain why health information is collected, how it will be used, and how long it will be retained. Employees can exercise rights under GDPR, including access or correction of their health information where appropriate.

Duty to Co‑operate with Health Surveillance

Where health surveillance is legally required, employees also have a duty to co‑operate. Refusal to attend a required health surveillance appointment may undermine an employer's ability to fulfil its statutory health and safety duties.

5. Practical Steps for Compliance

Below is a step‑by‑step approach to ensure health screening duties are met:

Step 1: Identify Relevant Risks

Carry out a suitable and sufficient risk assessment to identify whether health screening or surveillance is necessary based on workplace hazards and exposure risks.

Step 2: Tailor Screening to Risks

Health surveillance should be proportionate and linked to specific hazards identified in the risk assessment. An occupational health professional can help determine suitable tests and frequencies.

Step 3: Ensure Legal Timing

Pre‑employment health assessments should only be requested after a conditional offer has been made unless specific statutory exceptions apply. Screening for surveillance can occur as part of ongoing risk control.

Step 4: Maintain Confidentiality

Implement procedures to protect confidential health information and limit access to authorised personnel. Process data only in line with GDPR and relevant data protection conditions.

Step 5: Act on Screening Results

Health screening is effective only if employers take appropriate action, such as implementing reasonable adjustments, revising control measures or restricting exposure to hazards identified.

Step 6: Record Keeping

Keep clear records of risk assessments, surveillance results, screening decisions and follow‑up actions. Accurate records support compliance and defence against legal challenges.

6. Common Legal Risks and How to Avoid Them

Asking Irrelevant Health Questions

Employers risk unlawful discrimination and data protection breaches if they ask general health questions before a conditional offer, or collect more information than necessary without lawful justification.

Neglecting Required Health Surveillance

Failing to implement legally required surveillance for hazardous exposures can breach health and safety duties and increase the risk of work‑related illness, enforcement notices or civil claims.

Poor Handling of Health Data

Inadequate confidentiality or data protection measures may result in GDPR enforcement action or claims for compensation if health information is misused or insecure.

Common Questions from our Readers

Is health screening always required by law?
No. Health surveillance is only a legal requirement where specific occupational risks remain after control measures are implemented. Pre‑employment screening is required to assess fitness for role and support reasonable adjustments, but broad medical history questioning is restricted before a job offer.

Can employers access full medical records?
No. Employers are entitled only to the minimum health information necessary to meet legal duties and maintain safety at work. Full medical records and unrelated health details are generally private and protected.

Who should conduct health surveillance?
Surveillance should be carried out or advised by appropriately qualified professionals, such as occupational health specialists, especially where statutory health monitoring is required.

Conclusion

Employers in England and Wales have clear legal duties when it comes to health screening. These arise from health and safety law, risk assessments, equality obligations and data protection requirements. Screening must be relevant to specific risks, carried out at the right stage (such as after a conditional offer for pre‑employment checks), and supported by strong confidentiality and data protection practices. Acting on results, providing reasonable adjustments and maintaining records are critical for compliance. Taking a structured, lawful approach protects employee health, supports workplace safety and reduces the risk of legal claims.