Post-Merger Integration: 11 Health and Safety Moves for the First 100 Days

In 2023, 2,218 people in Great Britain died from mesothelioma caused by asbestos exposure that happened decades earlier (HSE statistics). Most of the employers involved had long since been sold, merged or renamed. The liability did not disappear with the old name above the door. It followed the business.

Buying a company means buying its health and safety liabilities, including claims that have not surfaced yet. Due diligence tells you what the seller knows about. Integration is where you find out what nobody knew, and where you decide whether those liabilities stay contained or spread into the rest of your group.

That matters for the sectors consolidating fastest right now. Insurance brokers are running buy-and-build strategies across dozens of small offices. Law firms are merging to gain scale. Software and AI groups are acquiring teams across several countries at once. Multi-academy trusts are absorbing new schools. In every case, the deal team moves on after completion, and health and safety integration is left to whoever has time.

This guide sets out 11 moves across three checkpoints: Day 1, Day 30 and Day 100. Each comes with an owner and the evidence that proves it is done.

---

Before You Start: What You Actually Inherited

How the deal was structured decides which liabilities are now yours.

Share purchase: you bought the company itself. It keeps all of its history, including every past breach, every incident, and every employee who may develop a work-related illness years from now. Nothing transfers because nothing needed to: the employer is the same legal entity, with new owners.

Asset purchase or business transfer: the seller's company normally keeps its own liabilities, but employees move under the Transfer of Undertakings (Protection of Employment) Regulations 2006. Regulation 4 transfers the seller's rights, powers, duties and liabilities in connection with those employment contracts. Courts have confirmed this can include personal injury claims arising before the transfer, together with the benefit of the seller's employers' liability insurance for those claims.

International deals: across the EU, the Acquired Rights Directive (2001/23/EC) produces a similar result, implemented locally through laws such as Section 613a of the German Civil Code (BGB) and Ireland's S.I. No. 131 of 2003. Outside Europe the rules vary widely, which is why a multi-country deal needs international health and safety consultants who know each regime.

For the pre-completion side of the story, see our guides to health and safety due diligence in M&A: 6 red flags and the 8 checks investors make before they invest.

---

Day 1: Stop Anything Getting Worse

Move 1: Confirm Who Holds the Legal Duty Today

On completion day, someone must be accountable for health and safety in the acquired business. That means a named director, a named competent person, and a clear line between the two. In share deals the seller's directors may resign at completion, taking the only people who understood the arrangements with them.

Owner: acquiring group's COO or integration lead. Evidence of done: a signed appointment letter and an updated health and safety policy statement naming the new responsible people.

Move 2: Secure Employers' Liability Insurance, Past and Present

Employers' liability insurance is compulsory for most UK employers under the Employers' Liability (Compulsory Insurance) Act 1969. Integration creates two risks: a gap in cover if the target is moved onto group policies too quickly, and lost history if nobody records which insurers covered which years.

Old policies matter because employers' liability claims for disease are made against the policy in force when the exposure happened, not when the claim arrives. The Employers' Liability Tracing Office exists precisely because claimants often cannot find that information years later.

Owner: group risk or insurance manager, with your broker. Evidence of done: confirmed continuity of cover and a schedule of historic insurers by year for every acquired entity.

Move 3: Preserve Every Record, Before Systems Are Switched Off

When IT systems, shared drives and email accounts are consolidated, health and safety records are among the first things lost. They are also the records you will need most when a claim arrives. Preserve accident books, RIDDOR reports, risk assessments, asbestos registers, health surveillance records and training records in full.

Owner: integration lead with IT and legal. Evidence of done: a records inventory and a retention decision for each record type, signed off before any system is decommissioned.

Sector note (software and AI): acquisitions of software and AI and data businesses often move fastest on systems integration. Records held in a founder's personal drive or an unofficial tool are easy to lose in week one.

---

Day 30: Find What Nobody Disclosed

Move 4: Map Every Location and Every Country

Due diligence usually lists the main offices. It rarely captures every coworking desk, satellite office, home worker or overseas contractor. Each one carries duties, and abroad each one sits under a different legal regime. A London-headquartered acquisition with staff in Dublin, Berlin and Lisbon has three additional sets of rules from the day you own it. Our location guides for Ireland and Germany set out the local baseline.

Owner: HR and facilities. Evidence of done: a single location register showing headcount, work pattern and governing jurisdiction for every person.

Move 5: Survey Older Buildings for Asbestos and Fire Safety

Asbestos was used widely in UK buildings until the end of 1999. Offices, schools and older professional premises built or refurbished before then may contain it. Under regulation 4 of the Control of Asbestos Regulations 2012, duty holders must manage it. You also need a current fire risk assessment for every premises.

Owner: facilities or estates lead. Evidence of done: an asbestos management plan or confirmation of a post-2000 build for each property, and an in-date fire risk assessment. See our asbestos management support.

Sector note (education): when a school joins a multi-academy trust, the trust usually inherits responsibility for the estate. Older school buildings are a known asbestos risk, and education estates need this move done early.

Move 6: Read the Claims and Incidents for Patterns That Predict Future Claims

The claims you can see are a forecast of the ones you cannot. Under the Limitation Act 1980, personal injury claims generally run for three years from the injury or from the date of knowledge, which for gradual conditions can be many years after the work that caused them. In office-based businesses, the patterns to look for are work-related stress, musculoskeletal disorders and display screen equipment problems.

Owner: HR, with your health and safety consultants. Evidence of done: a three-year trend summary of incidents, sickness absence linked to work, grievances mentioning workload, and open claims.

Sector note (legal): in law firm mergers, the combined business often inherits two very different workload cultures. HSE's work-related stress guidance is the benchmark an inspector or claimant's lawyer will use.

Move 7: Run One Gap Audit Against the Group Standard

Every acquired business believes its own arrangements are fine. Independent health and safety audits using one methodology across all entities show which ones really are, and give the board a comparable score for each.

Owner: group health and safety lead or external consultants. Evidence of done: one audit report per acquired entity, scored on the same scale, with a prioritised action plan.

---

Day 100: Make It One System

Move 8: Choose the Integration Model

Not every acquisition should be absorbed straight away. Choose one of three models deliberately:

Model	When it fits	Main risk
Absorb	Similar risks, same countries, small target	Losing local knowledge during the switch
Align	Different countries or service lines, same group standard	Two sets of documents drifting apart
Standalone	Very different risks or a planned resale	The group assumes it is covered when it is not

Owner: integration steering group. Evidence of done: a written decision for each acquired entity, with the reasons.

Sector note (insurance): in a broker buy-and-build, "align" is usually the right answer for the first year. It keeps local offices running while bringing every site onto one standard.

Move 9: Harmonise Policy, Consultation and Competence

New reporting lines mean new managers with health and safety responsibilities, sometimes in countries they have never worked in. Update the group policy to cover the acquired business, consult employees and their representatives as the law in each country requires, and check that every manager is competent for their new duties. If you hold ISO 45001, clause 8.1.3 (management of change) expects exactly this. See our ISO 45001 support.

Owner: HR and group health and safety lead. Evidence of done: an updated policy, consultation records, and training records for every manager whose role changed.

Move 10: Move Everyone Onto One Platform

Two businesses means two sets of spreadsheets, two incident processes and two definitions of "overdue". One health and safety management system running on shared software is the only reliable way to see the whole group's risk in one place.

Owner: group health and safety lead with IT. Evidence of done: all entities live on one platform, with risk assessments, DSE assessments, incidents and actions visible to group leadership.

Move 11: Give the Board a Liability Register

The final move turns everything you found into a single register the board can act on: known claims, likely future claims, buildings with unresolved risks, and jurisdictions with gaps. It also protects the deal itself. Warranty claims under a sale agreement, and claims under any warranty and indemnity insurance policy, normally have fixed notification windows. Liabilities found after those windows close are usually yours alone.

Owner: CFO and general counsel. Evidence of done: a board-approved liability register, cross-checked against the sale agreement's warranty claim deadlines.

---

Your Day 100 Sign-Off

Checkpoint	Moves	Signed off by
Day 1	Duty holder named, insurance secured, records preserved	Integration lead
Day 30	Locations mapped, buildings surveyed, claims patterns read, gap audit complete	Group health and safety lead
Day 100	Model chosen, policy and competence aligned, one platform live, liability register approved	Board

If any line in that table cannot be signed off, the acquired business is still operating on the seller's arrangements, and you are carrying the seller's risks under your own name. For a wider view of portfolio exposure, see investors and portfolio companies: 3 health and safety exposures.

---

How Arinite Supports Post-Merger Integration

Arinite has supported 1,500+ businesses across 50+ countries for 15+ years, protecting 100,000+ employees, with 95%+ client retention. Our qualified consultants work with acquirers, private equity portfolio teams and the businesses they buy, in the UK and internationally.

• Done For You: our health and safety consultants run the full 100-day programme, from Day 1 duty holder cover through to the board liability register, or act as the acquired business's outsourced competent person through health and safety outsourcing.
• Done With You: we run the Day 30 gap audits across every acquired entity and build the integration plan with your teams.
• DIY: you bring every entity onto our health and safety consultants and software platform, with expert support on call when something unexpected turns up.

For multi-country deals, our global health and safety consultants cover each jurisdiction in one programme, so a target with teams in five countries is integrated to one standard rather than five.

---

Frequently Asked Questions

Does a buyer inherit health and safety liabilities in a share purchase?

Yes. In a share purchase the company itself is unchanged, so it keeps all of its past liabilities, including claims for injuries or illnesses caused before the sale that have not yet been made.

Do personal injury liabilities transfer under TUPE?

Liabilities connected with the transferring employees' contracts pass to the new employer under regulation 4 of TUPE 2006. Case law has confirmed this can include personal injury claims from before the transfer, together with the benefit of the seller's employers' liability insurance for those claims.

Why can health and safety claims appear years after an acquisition?

Many work-related illnesses develop slowly, and the limitation period for personal injury claims can run from the date the person first knew about the injury and its cause. Asbestos-related disease can take decades to appear. Stress and musculoskeletal claims can also surface well after the work that caused them.

What is the Employers' Liability Tracing Office?

ELTO is an independent body that helps people identify the employers' liability insurer that covered a past employer. For acquirers, it is a reminder to keep clear records of historic insurers for every company they buy.

When should health and safety integration start?

Planning should start before completion, with Day 1 actions ready to go. The first 100 days are the critical period, because records, people and knowledge are most at risk of being lost while systems and structures change.

---

Know What You Bought Before It Finds You

Completion is not the end of the risk. It is the point at which the risk becomes yours. Book a free gap analysis with Arinite and we will review your acquired business against your group standard, in the UK and internationally, and show you what to prioritise in the first 100 days.

Request your free gap analysis