As HVNL reform discussions continue to focus on stronger, more practical safety assurance, one issue stands out for operators of every size: evidence retention. Many businesses have written procedures, inductions and forms, but when a regulator, investigator or insurer asks what actually occurred on a particular task, the record can be fragmented or missing. That is a compliance weakness in its own right.
Under the HVNL, the ability to demonstrate reasonably practicable steps matters. It is not enough to say that a business expects safe scheduling, lawful loading, defect reporting or fatigue compliance. The business needs to be able to show how those expectations were communicated, monitored, escalated and reviewed. That depends on records.
Evidence retention is broader than storing signed policies. It includes dispatch instructions, route approvals, fit-for-duty checks, subcontractor onboarding records, maintenance decisions, loading photos where appropriate, mass verification records, corrective actions, training completion, incident reviews and proof that identified issues were followed through. If these sit across disconnected systems, private messages or personal devices, the organisation may struggle to reconstruct events when it matters most.
Why is this becoming more important now? Because reform pressure is pushing the industry toward more mature assurance. Regulators increasingly expect businesses to know not only what their procedures say, but whether those procedures operated in practice. A business with weak records may find it difficult to prove that a breach was genuinely unforeseeable, or that management took active steps to prevent recurrence.
Operators should start with a simple question: if there were a serious incident or major roadside intervention tomorrow, what evidence could we confidently produce within 24 hours? The answer often reveals major gaps. Common weak points include undocumented verbal instructions, inconsistent retention periods, missing version control, subcontractor records that sit outside the principal’s visibility, and corrective actions that are noted but never closed out.
A sensible improvement plan does not need to be complicated. Define the minimum records required for key risk controls. Set clear ownership for capturing and retaining them. Keep them accessible, searchable and protected from ad hoc deletion. Make sure changes to routes, schedules, vehicle status and delivery requirements are captured in a business-controlled system rather than informal messaging threads.
Leaders should also receive reporting on evidence quality, not just safety outcomes. If records are incomplete, late or inconsistent, that is an early warning that the control environment may not be functioning as intended.
The direction of travel is clear. In HVNL compliance, what cannot be shown can be hard to defend. Businesses that tighten evidence retention now will be better placed to manage risk, respond to scrutiny and demonstrate real due diligence.
If your team needs stronger habits around what to record, why it matters and how it supports CoR duties, COR’s CoR training programs can help build practical legal awareness across operations, scheduling, safety and management roles.