Blastack

Compliance

Read receipts for documents issued to staff: what the law expects and how you prove it

Handing a document to the workforce is easy. Proving two years later that it was handed over, to whom, and when, is where it gets complicated. This guide separates what the rules actually ask for from what has simply become habit, and sets out what a receipt needs to contain to be worth anything.

·8 min read

Which documents usually need a record

Not everything you publish needs a read receipt, and confusing the two is the fastest way to get people pressing the button without reading. These are the usual cases.

  • The itemised pay statement, the payslip.
  • Information about the risks of the job and the protective measures in place, and the issue of personal protective equipment.
  • Safety procedures and method statements, particularly when they change.
  • Internal policies the company wants to be able to evidence: code of conduct, use of digital equipment, the anti-harassment policy, the whistleblowing policy.
  • The working-time calendar and the rotas, where your collective agreement gives them contractual force.
  • Individual letters with an effect attached: changes of role, of site or of hours.

Everything else, the company news, the photo from the shutdown, the notice that the canteen is opening at a different time, needs no receipt. And it should not have one: a channel where everything asks for confirmation ends up with people clicking without reading, which is the exact opposite of what you set out to do.

What the rules that always get quoted actually say

Here they are as they stand, without interpretation. What your company specifically has to do, given your agreement and your activity, is for your employment solicitor to say.

Employment Rights Act 1996, section 8

Gives every employee the right to be given, at or before the time at which any payment of wages or salary is made, a written itemised pay statement showing the gross amount, the amounts of any variable and fixed deductions and the purposes for which they are made, and the net amount payable.

Management of Health and Safety at Work Regulations 1999, regulation 10

Requires employers to provide employees with comprehensible and relevant information on the risks identified by the risk assessment, the preventive and protective measures, and the emergency procedures, before they start work and whenever the information changes.

Management of Health and Safety at Work Regulations 1999, regulation 13

Requires employees to be provided with adequate health and safety training on being recruited, and on being exposed to new or increased risks because of a change of role, new work equipment or new technology. The training must be repeated periodically where appropriate and take place during working hours.

UK GDPR, Article 5(2)

Sets out the accountability principle: the controller is responsible for, and must be able to demonstrate compliance with, the principles in Article 5.

What a receipt needs to contain to serve as evidence

A useful receipt identifies four things unambiguously. If one is missing, the evidence is arguable.

  1. 01

    Who

    The individual person, not the role and not the shift. 'The afternoon shift received the procedure' evidences nothing about the person who was off sick that week.

  2. 02

    What, and which version of it

    The exact document. If the procedure was revised in March, a January receipt evidences the January version. Without version control, a file with the same name may have changed three times.

  3. 03

    When

    Date and time, and not changeable afterwards. A date written by hand on a sheet of paper is precisely what the other side is going to dispute.

  4. 04

    That it was a deliberate act

    That the person did something: pressed a confirm button, signed. Opening a file is not confirming receipt, and logging opens as though they were is building weak evidence and intrusive monitoring at the same time.

Why the signing sheet falls over

The signing sheet works right up until somebody needs it. The day it is needed, the usual problems turn up.

  • The people who were off sick, on leave or at another site that day are missing, and nobody did a second pass.
  • The night shift signed a different sheet, which is in a different drawer, or signed nothing at all.
  • There are illegible signatures and blank rows nobody can explain.
  • The sheet evidences that something was signed, but not which version of the document was on the table.
  • It is in a folder on site, and the person asking for it is at head office.

The underlying failure is that paper cannot tell you who is missing. And that is exactly what the person managing this needs: not the list of who signed, but the short list of who has not yet.

How it is done digitally, and what to check before you trust it

In a tool with read receipts, the loop is simple: you upload the document, mark which group of people it goes to, and require confirmation. Each person opens it on their phone and presses the button. What is left behind is a record with name, document, version, date and time.

What to ask before you take this as done, with us or with anybody else:

  • Can you see the list of who is missing, filtered by site and by role? That is ninety per cent of the value.
  • What happens when the document is replaced with a new version? Do the receipts reset, or do they stay pointing at the old version?
  • Can a receipt be deleted? And is there a record of who deleted it?
  • How long is the record kept, and what happens when the person leaves the company?
  • Can the record be taken out of the tool the day you have to show it to somebody outside the company?

What a read receipt does not prove

It is worth being clear about this internally before somebody else points it out. A receipt evidences that the document was made available to a person and that the person confirmed it. It does not evidence that they read it, that they understood it, or that they are trained.

Which is why, in health and safety, the receipt sits alongside the training rather than replacing it. And why there is no sense in asking for confirmation of forty documents at once: what you get is a run of automatic confirmations that weakens the ones that mattered.

There is a data question too: the receipt log is named, with date and time, and the employee representatives should know it exists, what it is used for and how long it is kept. Showing them beforehand is worth far more than justifying it afterwards.

How this is run in practice, month by month

  1. 01

    A short list of documents that carry a receipt

    Write down which document types require confirmation. Five or six, not twenty. Everything else gets published without one.

  2. 02

    A deadline, stated in the document itself

    'Confirm by Friday the 12th'. Without a deadline, the outstanding list never drops below twenty per cent.

  3. 03

    A second pass, with names on it

    After three days, each site supervisor looks at who is missing on their site and sorts it at handover. Not the company-wide list: their own, short and actionable.

  4. 04

    Close it out at the safety committee

    Outstanding receipts get reviewed where the rest of health and safety gets reviewed, not in a stray email. That is how it stops being the comms department's problem.

To finish

The evidence gets built before you need it

Nobody sets this up with a tribunal in mind. You set it up because the day it is needed, an inspection, an accident, an argument about what was communicated and when, the answer has to already exist. It cannot be manufactured backwards.

In Blastack, the documents module covers the middle of this: folders, a read receipt logged with name, date and time, and a counter for how many people have confirmed against the active headcount. It is the only place in the product where the data is named rather than aggregated, and that is deliberate: it is the evidence that replaces the signing sheet on the changing-room wall. What we do not have today is a screen listing by name who is still missing, an export of the log, or any way to limit a folder to one site or one department: a folder is visible to the whole workforce. You ask for the dump and we provide it.